WO2009014257A1

WO2009014257A1 - Car data communication system and car

Info

Publication number: WO2009014257A1
Application number: PCT/JP2008/063720
Authority: WO
Inventors: Yutaka Taga; Masatoshi Takahara; Keisuke Kimura
Original assignee: Toyota Jidosha Kabushiki Kaisha
Priority date: 2007-07-24
Filing date: 2008-07-24
Publication date: 2009-01-29
Also published as: JP2009033264A

Abstract

A car (10) is provided with a car control unit (18) for controlling operations of the car, a car memory unit (20) for storing information of the car control unit, a removable car operation member (22), a car identification unit (28) for identifying an operation member, and a car permission unit (26) for permitting an operation of the car. Further, the car includes a communication means (42) that is set at the outside of the car and can communicate with a car memory unit. In addition, the communication means is provided with a communication means identification unit (46) for identifying an operation member, and the car (10) is provided with a communication permission unit (16) for permitting an access by data communication to the car memory unit by the communication means in the case where the operation member (22) is identified in the communication means identification unit (46).

Description

Description Vehicle data communication system and vehicle [Technical Field]

The present invention relates to data communication between a vehicle and an external system. [Background]

In recent years, with the enhancement of functions of vehicles and various in-vehicle devices, a program for controlling the vehicle is stored in a memory which is an information storage means of the vehicle. The vehicle controls engine operation control, navigation system, automatic parking control system, etc. by executing these control programs. In addition, information about the vehicle such as the body number and the car registration number may also be stored in the memory.

In addition, the navigation system memory that is part of the vehicle may store personal information such as behavior data, route search records, address books, and telephone numbers. Information on vehicles stored in memory and personal information of vehicle owners may be communicated with external information devices to retrieve information, update information, and delete information. If data communication can be performed freely, there is a problem that a third party can rewrite or retrieve information stored in memory without permission. In order to prevent unauthorized access by a third party, the following patent document techniques are known.

Patent Document 1 discloses a configuration in which a data communication signal is superimposed on a power line used when charging an electric vehicle to perform data communication between the vehicle and an external system. Patent Documents 2 and 3 disclose the configuration of a vehicle data communication system in which authentication information such as a user ID is required for data communication between the vehicle and an external information device. In this configuration, data communication between the vehicle and the external system is allowed only when the authentication information identification result is positive.

Patent Document 4 describes a vehicle communication system that allows data communication between a vehicle and an external system only when the authentication information that the vehicle user is nearby is recognized. The configuration is disclosed.

Patent Document 1: Japanese Patent Laid-Open No. 2003-23442

Patent Document 2: Japanese Patent Laid-Open No. 2002-44742

Patent Document 3: Japanese Patent Laid-Open No. 2006-665883

Patent Document 4: Japanese Patent Laid-Open No. 2004-44537

[Disclosure of the Invention]

[Problems to be solved by the invention]

In the prior art shown in the above-mentioned patent document, the communication between the vehicle and the external system can be performed by inputting authentication information. Since the authentication information is the user's ID, etc., if the user's ID is disclosed to a third party, data communication may be easily performed with the vehicle. As a result, vehicle-related information and personal information may be illegally viewed or rewritten illegally.

If authentication information is entered, overnight communication between the vehicle and the external system is possible, so there is a risk of accidental failure (data damage, etc.) due to accidental driving of the vehicle during data communication.

[Means for solving problems]

The present invention includes a vehicle control unit that controls the operation of the vehicle, a vehicle storage unit that stores information used for operation of the vehicle control unit, an operation member that is removable from the vehicle and is used for operating the vehicle, A vehicle identification unit that identifies an operation member; a vehicle permission unit that permits a predetermined operation in the vehicle when the operation member is identified by the vehicle identification unit; and a vehicle storage unit provided outside the vehicle. In a vehicle evening communication system comprising: a communication means capable of communicating with the communication means, the communication means includes a communication means identifying unit for identifying the operation member; and the vehicle is provided with an operation member identified by the communication means identifying unit. This is an overnight communication system that includes a communication permission unit that permits access by data communication to the vehicle storage unit by communication means.

In addition, it is preferable that the operation member has an identification information section for storing identification information, and the vehicle identification section and the communication means identification section identify the identification information in the identification information section. In addition, it is preferable that there are a plurality of operation members, and the identification information of at least one operation member is different from the identification information of other operation members.

In addition, it is preferable that the identification function of the vehicle identification unit is disabled when data communication is performed.

In addition, the vehicle is an electric vehicle having a battery, and it is preferable that a power line for supplying external power to the battery can be connected, and data communication can be performed between the vehicle and the external communication network via the power line. .

The present invention relates to a vehicle control unit that controls the operation of a vehicle, a vehicle storage unit that stores information used for operation of the vehicle control unit, and is accessible from an external communication network that is a communication network outside the vehicle, An operation member that is detachable from the vehicle and used for operation of the vehicle, a vehicle identification unit that identifies the operation member, and a vehicle that permits a predetermined operation in the vehicle when the operation member is identified by the vehicle identification unit A vehicle including: a permission unit; and a communication network identification unit that identifies an operation member via the vehicle external communication network, and the communication network identification unit when the operation member is identified by the communication network identification unit. A communication permission unit provided in a vehicle that permits access by data communication to the vehicle storage unit. Further, it is preferable that the operation member has an identification information section for storing identification information, and the vehicle identification section and the communication network identification section identify the identification information of the identification information section.

It is preferable that there are a plurality of operation members, and the identification information of at least one operation member is different from the identification information of other operation members.

[The invention's effect]

The present invention requires an operation member that is a physical object outside the vehicle for vehicle data communication. For this reason, the authentication information in a series of letters and numbers can be easily used once disclosed to a third party, whereas the operation part is disclosed even when the operation member is disclosed. A third party cannot use it without obtaining the material.

During vehicle data communication, the operating member is removed from the vehicle and used outside the vehicle. Since the operating members are necessary for the operation of the vehicle, the vehicle cannot be operated during data communication. As a result, accidental failures during vehicle data communication can be prevented.

[Brief description of drawings]

FIG. 1 is a diagram showing a vehicle data communication system according to the first embodiment and the second embodiment.

FIG. 2 is a flowchart of the first embodiment.

FIG. 3 is a flowchart of the second embodiment.

FIG. 4 is a diagram illustrating a vehicle data communication system according to the third embodiment.

FIG. 5 is a flowchart of the third embodiment.

[Explanation of symbols]

1 0 Vehicle, 1 2 Power line, 1 4 Connector, 1 6 Communication permission section, 1 8 Vehicle control section, 2 0 Vehicle storage section, 2 2 Operation member, 2 Identification information section, 2 6 Vehicle permission section, 2 8 Vehicle Identification unit, 3 0 Transmission unit of vehicle identification unit, 3 2 Reception unit of vehicle identification unit, 3 4 Battery, 3 6 Communication network identification unit, 4 0 House, 4 2 Communication means, 4 4 External communication network, 4 6 Communication means identification section, 4 8 Communication means identification section transmission section, 5 0 Communication means identification section reception section.

[Best Mode for Carrying Out the Invention]

Hereinafter, a first embodiment and a second embodiment will be described with reference to the drawings. In the first embodiment and the second embodiment, when the load is low on a flat road and the battery charge is high, the vehicle runs only in the morning (hereinafter referred to as EV driving), and the load is high on a slope. When the battery charge is low, a hybrid vehicle is used that runs with the engine and motor.

A first embodiment will be described with reference to FIGS. Figure 1 shows the data communication system for vehicle 10. The vehicle 10 of the present embodiment communicates via the power line 12 (PLC: Po It is possible to communicate information with the outside of the vehicle using wer Line Communication). Vehicle 10 is connected to power line 12 through connector 14. Data communication via the power line 12 from the outside of the vehicle to the inside of the vehicle consists of a connector 14, a communication permission unit 16 that permits data communication between the vehicle 10 and the outside of the vehicle, and controls the operation of the vehicle. Vehicle control unit 18 and vehicle storage unit 20 for storing information used for operation of vehicle control unit 18. In the present embodiment, the vehicle storage unit 20 functions as a part of the vehicle control unit 18.

The vehicle control unit 18 controls the operation of a motor / engine / power / navigation system (not shown) and a battery 34 described later. Information used for operation of the vehicle control unit 18 includes program information of the vehicle control system such as the engine and motor control, control parameter information, vehicle repair / maintenance information, and the like. In the car navigation system, there are map information, action data, route search records, addresses, and telephone numbers.

The vehicle 10 is identified with an operation member 22 that can be detached from the vehicle and is necessary for operation of the vehicle, a vehicle identification unit 28 that identifies the operation member, and an operation member 22 that is identified by the vehicle identification unit. A vehicle permission unit 26 that permits operation of the vehicle 10 when the vehicle is operated is provided. When the operation member 22 is not identified by the vehicle identification unit 28, the vehicle permission unit 26 is not permitted to operate the vehicle, and the vehicle 10 cannot be operated. On the other hand, when the operation member 2 2 is identified by the vehicle identification unit 28, the vehicle operation is permitted by the vehicle permission unit 26, and the vehicle control unit 18 is activated to control the operation of the vehicle 10. .

In this embodiment, the vehicle operation member 22 is a vehicle key required for the vehicle start-up operation, and the door is locked / unlocked based on the identification result of the identification information by wireless communication between the key and the vehicle 10. The key of the smart entry system that controls is used. Wireless communication between the key 22 and the vehicle 10 in the smart entry system is a vehicle including a key 2 2 having an identification information section 24 4 storing identification information, a transmission section 30 and a reception section 32. The following is done with the identification unit 28. As the identification information, vehicle-specific identification information is suitable.

The transmission unit 30 of the vehicle identification unit 28 outputs a request signal to the transmission unit 30 in order to confirm the position of the key 22 (or the owner of the vehicle). Transmitter 30 is a predetermined cycle (For example, every 0.3 seconds), a request signal is transmitted in and out of the vehicle, and a detection area for detecting the key 22 is formed. This detection area is formed in a range in which the vehicle owner can directly operate the vehicle 10, for example, in the range of the vehicle 10 to 0.7-1.0 meter.

The key 2 2 that has received the request signal from the transmission unit 30 within the detection area transmits the identification information of the identification information unit 24. The transmitted identification information is received by the receiving unit 32. The vehicle identification unit 28 identifies the received identification information. It is preferable that the identification information is encrypted when it is transmitted from the key 22 2 and is received by the receiving unit 32 and then decrypted and identified.

When the identification information can be identified by the vehicle identification section 28, the vehicle permission section 26 permits the vehicle operation control by the vehicle control section 18. On the other hand, when the vehicle information cannot be identified, the vehicle operation control by the vehicle control unit 18 is not permitted by the vehicle permission unit 26 and the vehicle 10 cannot be operated.

The vehicle 10 of this embodiment has a battery 34 that drives a motor (not shown), and the battery 34 is supplied with external power from a power line 12 connected via a connector 14.

Next, the external communication means 42 that performs data communication with the vehicle 10 will be described. In the present embodiment, a personal computer (hereinafter, P C) in the vehicle owner's house 40 is used as the communication means 42 outside the vehicle. One end of the power line 12 is connected to the vehicle 10 via the connector 14, and the other end of the power line 12 is connected to the PC 42 via the communication network 44 as an external vehicle communication network. The communication network 4 4 is constructed so that it can communicate with the power line 12 communication network, PC communication network, and other communication networks.

The PC 42 2 as a communication means has a communication means identification unit 46 that identifies the vehicle key 22. The communication means identification unit 46 identifies the key 22 as follows. The communication means identification unit 46 includes a transmission unit 48 and a reception unit 50 for wireless communication with the key 22. The transmission unit 48 of the communication means identification unit 46 outputs a request signal to the transmission unit 48 to confirm the position of the key 22. The transmitter 4 8 transmits a request signal at a predetermined cycle (for example, every 0.3 seconds), and a detection area for detecting the key 2 2 around the transmitter 4 8 is provided. Form. This detection area is formed within a range where the operator can move the key 22 without moving from the front of the PC 42, for example, within a range of 0.5 meter from the PC 42.

The key 2 2 that has received the request signal from the transmitter 48 in the detection area transmits the identification information of the identifier 2 4. The transmitted identification information is received by the receiving unit 50. The received identification information is communicated to the vehicle identification unit 28 of the vehicle via the communication network 44 as an external vehicle communication network and the power line 12. It is preferable that the identification information is encrypted when it is transmitted from the key 22 and decrypted after being received by the receiving unit 50. When the transmitted identification information is identified by the vehicle identification unit 28, the communication permission unit 16 permits the overnight communication, and the PC 42 and the information stored in the vehicle storage unit 20 and the data communication are transmitted. I can do it. On the other hand, if the transmitted identification information is not identified by the vehicle identification unit 28, the communication permission unit 16 does not permit the overnight communication, and the information and data of the vehicle storage unit 20 from the PC 4 2 Communication is not possible. Data communication between the vehicle storage unit 20 and PC 42 includes browsing, changing, deleting, downloading, etc. of stored information. During the data communication between the vehicle 10 and PC 42, the communication means identification unit 46 continues to identify the key as the operation member 22.

In the present embodiment, for data communication of the vehicle 10, the operation member 22 that is a physical object is required outside the vehicle, and in addition, identification information is required. Therefore, unauthorized access by a third party can be prevented.

Further, during data communication between the vehicle 10 and the PC 4 2, the key 2 2 is removed from the vehicle and is within a predetermined range from the PC 4 2, so the vehicle 10 cannot be operated. Therefore, it is possible to prevent accidental failures related to data communication (charger damage, data damage, etc.). FIG. 2 shows a flowchart of this embodiment having the above-described configuration. First, the vehicle 10 is downed to prevent operation of the vehicle 10 (step 1 0 0). Remove the key from the vehicle 10 as the operating member 2 2 to lower the shirt. Next, the vehicle 10 and the outside-vehicle communication network 44 are connected via the power line 12 (step 1002).

The communication means 4 2 having the communication means identification unit 4 6 is activated (step 1 0 4), and the key 2 2 removed in step 1 0 0 is identified by the communication means identification unit 4 6 (step 1 0 6 ). The communication means identification unit 46 includes a communication means identification unit (transmitting unit 48 and receiving unit 50) and a vehicle. The identification information in the identification information section 2 4 of the key 2 2 is extracted by wireless communication of the key 2 2 removed from both sides. The extracted identification information is transferred to the vehicle (step 10 8), and it is determined whether the identification information can be identified by the vehicle identification unit 28 (step 110).

If the identification information can be identified by the vehicle identification unit 28 (step 1 1 0: Y es), communication is permitted by the communication permission unit 16 (step 1 1 2), and the vehicle storage unit 2 0 and the outside of the vehicle Data communication with the PC 4 2 starts (Step 1 1 4). On the other hand, if the identification information cannot be identified by the vehicle identification unit 28 (step 1 1 0: No), communication is not permitted by the communication permission unit 16 (step 1 1 6), and the vehicle storage unit 2 Data communication between 0 and the PC 4 2 outside the vehicle ends (step 1 1 8).

Next, an embodiment in which a plurality of operation members 22 are exchangeable in the vehicle data communication system having the configuration of the first embodiment will be described as a second embodiment. As a second embodiment having a plurality of operation members 22, in this embodiment, two keys 22, a master key and a service key, are used as the operation members 22. The grid is the same as the key 22 in the first embodiment. On the other hand, the service key has a configuration in which only the identification information of the key 2 2 and the identification information unit 24 of the first embodiment is different.

FIG. 3 shows a flowchart of the second embodiment. Steps 2 0 0 to 2 0 8 are the same as steps 1 0 0 to 1 0 8 in the first embodiment. The identification information transferred to the vehicle side is determined whether or not the identification information can be identified by the vehicle identification unit 28 (step 2 1 0).

The vehicle identification unit 28 first determines whether the identification information of the service key can be identified (step 2 1 2). If the service key identification information can be determined (step 2 1 2: Y es), the data communication between the vehicle storage unit 20 and the PC 4 2 outside the vehicle uses the limited information stored in the vehicle storage unit 20. Data communication is permitted in the communication permission unit 16 so as to be the target (step 2 14), and data communication between the vehicle storage unit 20 and the PC 4 2 outside the vehicle starts (step 2 16). .

Here, the limited information stored in the vehicle storage unit 20 is the information used in the operation of the vehicle control unit 18, such as programs for vehicle control systems such as engines and motors, and vehicle repair / maintenance information. Information about the vehicle. On the other hand, as a service key, information that is not allowed for data communication is There is information about the individual who is the vehicle owner, such as a route search record, a route search record, an address, and a telephone number. In this way, for example, when lending a vehicle 10 to a third party for repair, it can be repaired by updating the information about the vehicle, and at the same time preventing unauthorized access to information about the individual of the vehicle owner. I can do it.

If the service key identification information cannot be determined (step 2 12: No), it is determined whether the master key identification information can be identified (step 2 18). When the master key identification information can be identified (step 2 18: Y e s), the vehicle identification means requests input of a password via PC 42 (step 2 20). It is determined whether or not the password entered from PC 42 is the same as the password set in the vehicle identification means (step 2 2 2). The password is set in advance in the vehicle storage unit 20 by the vehicle owner. Here, if the entered password is different from the set password (Step 2 2 2: No), communication is permitted only with limited information in the vehicle storage unit 20 by the communication permission unit 16. (Step 2 1 4). As a result, even if the vehicle 10 is lent to a third party, unauthorized access to information relating to the vehicle owner's individual can be prevented if the set password cannot be entered.

On the other hand, if the password entered from PC 42 matches the preset password (step 2 2 2: Y es), communication is performed so that all information in the vehicle storage unit 20 becomes the target of data communication. Data communication is permitted by the permission unit 16 (step 2 2 4), and data communication outside the vehicle storage unit 20 is started (step S 2 26). When the identification information transferred to the vehicle side is not identified by the vehicle identification unit 28 (step 2 10: No), or the identification information identified by the vehicle identification unit 28 is If it is different from any of the identification information of the master key (step 2 1 8: No), communication is not permitted by the communication permission unit 16 (step 2 2 8), the vehicle and the PC 4 2 outside the vehicle. The communication ends (step 2 3 0).

In addition, when performing communication using either one of the two keys 2 2 (mass key and service key), the transmitting unit 3 0 and the receiving unit 3 2 of the vehicle identification unit 2 8 Disable the wireless communication function. As a result, the vehicle identification unit 28 cannot identify the key as the operation member 22, so that a third party operates the vehicle 10 or the vehicle owner mistakenly It is possible to prevent the vehicle from operating.

A vehicle data communication system according to the third embodiment will be described with reference to FIGS. The vehicle 10 of the third embodiment uses a vehicle driven by an engine as an internal combustion engine. In addition to the configuration of the vehicle of the first embodiment, the vehicle 10 of the present embodiment identifies the identification information of the key 22 from the data transmitted from the off-vehicle communication network 4 4 to the vehicle 10. A communication network identification unit 36 is provided. In other words, data communication from the outside of the vehicle to the inside of the vehicle via the communication network outside the vehicle 4 4 includes the connector 14, the communication network identification unit 3 6 for identifying identification information, and the data between the vehicle 10 and the outside of the vehicle. This is done through a communication permission unit 16 that permits communication, a vehicle control unit 18 that controls the operation of the vehicle, and a vehicle storage unit 20 that stores information used for operation of the vehicle control unit 18.

Here, the configurations of the keys as the vehicle identification unit 28, the vehicle permission unit 26, and the operation member 22 are the same as those in the first embodiment. In addition, a communication network 44 as an off-vehicle communication network is used.

The identification information transmitted from the communication network 44 is acquired by the communication network identification unit 36 from the data communicated from outside the vehicle to the vehicle. The identification information transmitted from the communication network 44 is encrypted, and is obtained by being decrypted by the communication network identification unit 36. This can prevent situations where identification information is easily obtained by a third party. The communication network identification unit 36 transmits the acquired identification information to the vehicle identification unit 28 and identifies it in the vehicle identification unit 28. When the identification information is identified by the vehicle identification unit 28, the result is transferred to the communication network identification unit 36, and data communication is permitted by the communication permission unit 16 and the communication network outside the vehicle 4 4 It is possible to communicate with the information in the vehicle storage unit 20 overnight. On the other hand, when the transmitted identification information is not identified by the vehicle identification unit 28, the result is transferred to the communication network identification unit 36, and the communication permission unit 16 is not permitted to communicate data. It is not possible to perform data communication with the information in the vehicle storage unit 20 from the communication network 44.

FIG. 5 shows a flowchart of the third embodiment. First, the key as the operation member 22 is removed from the vehicle 10 and the vehicle 10 is shut down (step 3 0 0). Next, the vehicle 10 is connected to the communication network 4 4 (step 3 0 2). Communication network as an external communication network 44 It is communicated to the separate unit 36 (step 3 04). Identification information is acquired by the communication network identification unit 3 6 (step 3 0 6), and the acquired identification information is transferred to the vehicle identification unit 28 (step 3 0 8) and identified by the vehicle identification unit 2 8. It is determined whether the information can be identified (step 3 1 0).

If the identification information can be identified by the vehicle identification unit 28 (step 3 10: Y es), the result is transferred to the communication network identification unit 36, and then the communication permission unit 16 permits communication. (Step 3 1 2), data communication between the vehicle storage unit 20 and the PC 4 2 outside the vehicle starts (Step 3 1 4). On the other hand, when the identification information cannot be identified by the vehicle identification unit 28 (step 3 10: No), the result is transferred to the communication network identification unit 36 and then communicated by the communication permission unit 16. Is not permitted (step 3 1 6), and the overnight communication between the vehicle storage unit 20 and the PC 4 2 outside the vehicle ends (step 3 18).

In the above-described embodiment, the smart entry system key is used as the operation member including the identification information unit, but other means may be used. For example, a key (immobilizer) in which an electronic chip storing unique identification information is embedded may be used as the operation member. When the immobilizer is used, the operation member can be identified by the physical combination of the key and the keyhole and the identification information. Further, the operation member is not limited to the key having the identification information as long as the identification result of the operation member can be answered from the vehicle side. For example, identification may be performed according to the shape of the operation member, or a shift lever having identification information may be used.

Claims

The scope of the claims

1. a vehicle control unit for controlling the operation of the vehicle;

A vehicle storage unit for storing information used for operation of the vehicle control unit;

An operation member that can be removed from the vehicle and used to operate the vehicle;

A vehicle identification unit for identifying the operation member;

A vehicle permission unit that permits a predetermined operation in the vehicle when the operation member is identified by the vehicle identification unit;

A vehicle having

A communication means provided outside the vehicle and capable of communicating with the vehicle storage unit;

In a vehicle data communication system comprising:

The communication means includes a communication means identification unit for identifying the operation member,

The vehicle includes a communication permission unit that permits access by data communication to the vehicle storage unit by the communication unit when the operation member is identified by the communication unit identification unit. system.

2. The vehicle data communication system according to claim 1,

The operation member has an identification information section for storing identification information,

The vehicle identification unit and the communication means identification unit are vehicle data communication systems for identifying the identification information of an identification information unit.

3. In the vehicle data communication system according to claim 2,

There are a plurality of the operation members,

A vehicle data communication system in which identification information of at least one operation member is different from identification information of another operation member.

4. In the vehicle data communication system according to any one of claims 1 to 3,

A vehicle overnight communication system in which the identification function of the vehicle identification unit is disabled when data communication is performed.

5. In the vehicle data communication system according to any one of claims 1 to 4,

The vehicle is an electric vehicle having a battery,

A power line for supplying external power to the battery is connectable,

A vehicle data communication system in which data communication is possible between a vehicle and an external communication network via a power line.

6. a vehicle control unit for controlling the operation of the vehicle;

Storing information used for operation of the vehicle control unit, accessible from an external vehicle communication network that is a communication network outside the vehicle;

A vehicle identification unit for identifying the operation member;

A vehicle permission unit that permits a predetermined operation in the vehicle when an operation member is identified by the vehicle identification unit;

In a vehicle equipped with

The army is

A communication network identification unit for identifying the operation member via the communication network outside the vehicle, and data communication from the communication network outside the vehicle to the vehicle storage unit when the operation member is identified in the communication network identification unit A communication permission unit provided in a vehicle that permits access by

A vehicle comprising:

7. In the vehicle according to claim 6,

The vehicle identification unit and the communication network identification unit are vehicles that identify identification information of the identification information unit.

8. In the vehicle according to claim 7,

There are a plurality of the operation members,

A vehicle in which identification information of at least one operation member is different from identification information of other operation members.

9. In the vehicle according to any one of claims 6 to 8,

A vehicle in which the identification function of the vehicle identification unit is disabled when data communication is performed.

1 0. In the vehicle according to any one of claims 6 to 9,

The vehicle is an electric vehicle having a battery,

A power line for supplying external power to the battery can be connected,

A vehicle capable of data communication between a vehicle and an external vehicle communication network via a power line.