WO2016063717A1 - Dispositif d'entrée sans clé - Google Patents

Dispositif d'entrée sans clé Download PDF

Info

Publication number
WO2016063717A1
WO2016063717A1 PCT/JP2015/078286 JP2015078286W WO2016063717A1 WO 2016063717 A1 WO2016063717 A1 WO 2016063717A1 JP 2015078286 W JP2015078286 W JP 2015078286W WO 2016063717 A1 WO2016063717 A1 WO 2016063717A1
Authority
WO
WIPO (PCT)
Prior art keywords
vehicle
portable device
resonance circuit
signal
request signal
Prior art date
Application number
PCT/JP2015/078286
Other languages
English (en)
Japanese (ja)
Inventor
宮澤　明
Original Assignee
アルプス電気株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by アルプス電気株式会社 filed Critical アルプス電気株式会社
Publication of WO2016063717A1 publication Critical patent/WO2016063717A1/fr

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R25/00—Fittings or systems for preventing or indicating unauthorised use or theft of vehicles
    • B60R25/20—Means to switch the anti-theft system on or off
    • B60R25/24—Means to switch the anti-theft system on or off using electronic identifiers containing a code not memorised by the user
    • E—FIXED CONSTRUCTIONS
    • E05—LOCKS; KEYS; WINDOW OR DOOR FITTINGS; SAFES
    • E05B—LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
    • E05B49/00—Electric permutation locks; Circuits therefor ; Mechanical aspects of electronic locks; Mechanical keys therefor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04B—TRANSMISSION
    • H04B1/00—Details of transmission systems, not covered by a single one of groups H04B3/00 - H04B13/00; Details of transmission systems not characterised by the medium used for transmission
    • H04B1/38—Transceivers, i.e. devices in which transmitter and receiver form a structural unit and in which at least one part is used for functions of transmitting and receiving
    • H04B1/3827—Portable transceivers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04B—TRANSMISSION
    • H04B1/00—Details of transmission systems, not covered by a single one of groups H04B3/00 - H04B13/00; Details of transmission systems not characterised by the medium used for transmission
    • H04B1/38—Transceivers, i.e. devices in which transmitter and receiver form a structural unit and in which at least one part is used for functions of transmitting and receiving
    • H04B1/40—Circuits
    • H04B1/50—Circuits using different frequencies for the two directions of communication

Definitions

  • the present invention relates to a keyless entry device that locks or unlocks a vehicle door by performing wireless communication between a vehicle-side device and a portable device, and more particularly, a keyless entry device that can prevent a relay attack with a simple configuration. About.
  • door locks are provided on the doors of automobiles to prevent them from being stolen when the automobile is not in use, or from being damaged by internal devices.
  • the door lock is locked or unlocked by inserting a key for starting the engine into a key hole provided in the door.
  • the key is inserted into the key hole.
  • a request signal is transmitted from the vehicle-side device, and then an answer signal is transmitted from the portable device to the vehicle-side device, so that the door lock is unlocked / locked.
  • a keyless entry device is used.
  • a so-called passive keyless entry device that automatically unlocks and locks the door lock by touching the vehicle with the hand while holding the portable device without operating the switch of the portable device. Is used.
  • the operation of the passive keyless entry device includes an activation signal transmitted from the vehicle-side device when a person holding a portable device already registered in the vehicle-side device mounted on the vehicle is approaching the vehicle. After receiving the request signal which is a low frequency signal (LF), the portable device responds and transmits an answer signal which is a high frequency signal (RF) including a command signal. And if a vehicle side apparatus receives the answer signal, it will control the to-be-controlled device according to the command signal contained in an answer signal. The control is, for example, unlocking the door of the automobile or starting the engine of the automobile, so that the driver can drive the automobile.
  • LF low frequency signal
  • RF high frequency signal
  • an LF signal (several hundred KHz) with a narrow communication range is transmitted from the vehicle, while an RF signal (several hundred MHz) with a wide communication range is transmitted from the portable device. Is done.
  • the LF signal reaches only within a range of several meters from the vehicle, while the RF signal reaches a range of tens to hundreds of meters from the portable device.
  • a relay attack using a repeater may be performed that exploits the mechanism.
  • the relay attack prepares two unauthorized repeaters, and one repeater is arranged in the vicinity of the vehicle and receives a request signal from the vehicle. Based on this request signal, a false request signal is transmitted from the other repeater placed at an isolated position among the two repeaters, and an answer signal is transmitted to the vehicle from the portable device that has received the request signal. The vehicle receives this and the vehicle door is unlocked where the vehicle owner does not intend.
  • the transmission / reception frequency between the in-vehicle wireless device 902 and the wireless key 903 is notified by both messages, and dynamically changed and transmitted.
  • the in-vehicle wireless device 902 compares the RSSI value in each transmission / reception frequency signal with the threshold value, and if the RSSI value of the message in all transmission / reception frequency signals exceeds the threshold value, the relay amplifier 905 disguises the RSSI value. If the user 904 enters the vehicle vicinity area 907, the vehicle 901 is prepared for boarding, such as unlocking the door of the vehicle 901.
  • transmission / reception is performed while dynamically changing the frequency used for communication for each communication from among a plurality of frequencies by notifying the frequency to be changed by a message between the wireless key and the wireless device of the vehicle. Do. Therefore, in order to perform relay attack, the telegram is temporarily decoded at the time of relay amplification, the contents are analyzed and the changed frequency is grasped, and the frequency band in which the relay amplifier can be amplified is switched according to the changed frequency.
  • a configuration or a configuration capable of relaying and amplifying the entire frequency band that can be transmitted and received by the wireless key or the wireless device of the vehicle is required.
  • the wireless key system 900 described in Patent Document 1 before the transmission / reception between the in-vehicle wireless device 902 and the wireless key 903 for distance measurement is performed, notification that the transmission / reception frequency is changed is notified. is required. As a result, the wireless key system 900 has a problem that the communication time becomes long and the communication speed becomes slow.
  • the present invention has been made in view of such a technical background, and an object of the present invention is to provide a keyless entry device that is excellent in communication speed and can prevent a relay attack with a simple configuration.
  • a keyless entry device of the present invention includes a vehicle-side device that transmits a request signal, and a portable device that transmits an answer signal corresponding to the request signal when the request signal is received.
  • the vehicle-side device includes a first resonance circuit, a vehicle-side transmission unit that transmits the request signal via the first resonance circuit, and a vehicle-side reception that receives the answer signal.
  • a vehicle-side control unit that performs a predetermined in-vehicle control, and a vehicle-side oscillation circuit that generates a carrier signal for the request signal, and the portable device includes a second resonance circuit, and A portable device-side receiver that receives the request signal via a second resonance circuit; a portable device-side transmitter that transmits the answer signal; and the answer signal And the vehicle-side oscillation circuit can change the carrier frequency of the carrier signal, and the request signal includes a plurality of frames having different carrier frequencies.
  • the portable device side control unit measures the reception strength for each of the plurality of frames, causes the portable device side transmission unit to transmit the answer signal including information based on the measured reception strength, and performs the vehicle side control.
  • the unit has a feature of determining whether to perform predetermined control on the vehicle based on the answer signal.
  • the keyless entry device configured as described above includes a plurality of frames having different carrier frequencies in the request signal, it transmits or receives a signal having a carrier frequency different from the resonance frequency of the first resonance circuit or the second resonance circuit. As a result, the transmission / reception strength decreases due to the carrier frequency being out of the resonance frequency. Therefore, when transmission / reception is repeated by the relay attack, a difference in reception intensity between the frames appears more greatly. As a result, it can be easily determined that the relay attack is going to be performed. In addition, since it is not necessary to notify the portable device of changes in the carrier frequency in advance, the communication time can be shortened. Therefore, it is possible to provide a keyless entry device that is excellent in communication speed and can prevent a relay attack with a simple configuration.
  • the first resonance circuit and / or the second resonance circuit have a resonance frequency equal to any one of the different carrier frequencies.
  • the keyless entry device thus configured has the same resonance frequency of the first resonance circuit and / or the second resonance circuit as one of the different carrier frequencies, and this frequency is used as a reference so that other different carrier waves can be used.
  • the reference level can be set in a region where the reception intensity is high, so that it is possible to detect fraud even if the signal is far away.
  • the plurality of frames include a distance measurement frame and an illegal relay determination frame having different carrier frequencies, and the illegal relay determination frame of the distance measurement frame has a transmission strength with respect to the transmission strength of the distance measurement frame.
  • the keyless entry device configured in this way only needs to obtain the ratio of the reception strength in the fraud relay determination frame to the distance measurement frame in the request signal, it is possible to determine whether the fraud is simple or not. Obviously, the keyless entry device configured in this way only needs to obtain the ratio of the reception strength in the fraud relay determination frame to the distance measurement frame in the request signal, it is possible to determine whether the fraud is simple or not. Obviously, the keyless entry device configured in this way only needs to obtain the ratio of the reception strength in the fraud relay determination frame to the distance measurement frame in the request signal, it is possible to determine whether the fraud is simple or not. Become.
  • the first resonance circuit and the second resonance circuit can each change a resonance frequency, and at least one of the vehicle-side transmission unit and the portable device-side reception unit is The resonance frequency is changed according to the carrier frequency.
  • the vehicle-side transmitter and the portable device-side receiver since at least one of the vehicle-side transmitter and the portable device-side receiver has a resonance frequency that matches the reference carrier frequency, other different carrier frequencies The difference in the received intensity with the signal can be compared in a region where the received intensity is higher. For this reason, it is possible to detect fraud with a higher probability even for signals that are far away. Moreover, since the SN ratio of the transmission signal from the vehicle side transmission unit or the reception signal of the portable device side reception unit is also increased, the determination accuracy is increased.
  • the keyless entry device of the present invention includes a plurality of frames having different carrier frequencies in the request signal, a signal having a carrier frequency different from the resonance frequency of the first resonance circuit or the second resonance circuit is transmitted or received.
  • the transmission / reception strength decreases due to the carrier frequency deviating from the resonance frequency. Therefore, when transmission / reception is repeated by the relay attack, a difference in reception intensity between the frames appears more greatly. As a result, it can be easily determined that the relay attack is going to be performed.
  • the communication time can be shortened. Therefore, it is possible to provide a keyless entry device that is excellent in communication speed and can prevent a relay attack with a simple configuration.
  • FIG. 1 is a diagram showing a schematic configuration of the keyless entry device 100, and is a plan view when a vehicle user 55 having the vehicle-side device 10 and the portable device 20 are viewed from above.
  • the vehicle-side device 10 is mounted on a vehicle 50, and includes a vehicle-side device body 10a, a vehicle-side transmission antenna element 19a, and a vehicle-side reception antenna element 12a.
  • the vehicle-side transmitting antenna element 19a is composed of one antenna element arranged at a predetermined position in the vehicle 50, and one vehicle-side receiving antenna element 12a is in the vicinity of the vehicle-side device body 10a. Is arranged. However, the arrangement of the vehicle-side transmitting antenna element 19a and the vehicle-side receiving antenna element 12a mentioned here is an example, and other arrangements may be used.
  • At least one vehicle-side transmitting antenna element 19a is provided, and a plurality of vehicle-side transmitting antenna elements 19a may be provided.
  • the vehicle-side transmitting antenna element 19a and the vehicle-side receiving antenna element 12a described above are connected to the vehicle-side device body 10a through wiring not shown.
  • the portable device 20 is carried by the vehicle user 55 and is operated by the built-in battery 28.
  • the portable device 20 receives a request signal from the vehicle-side device 10 mounted on the vehicle 50, it transmits an answer signal corresponding to the request signal and wirelessly communicates with the vehicle-side device 10. It has a function to perform communication.
  • the portable device 20 is normally in a standby state so that the request signal can be received.
  • the keyless entry device 100 has a function of performing wireless communication between the vehicle-side device 10 and the portable device 20 by the vehicle user 55 operating the request switch of the portable device 20, and unlocking / locking the door lock. Have. In addition, authentication using data such as an ID code is performed by automatically touching the vehicle while holding the portable device without operating the switch of the portable device, and the door lock is automatically released. It also has a so-called passive function for locking and locking. This passive function transmits a distance measurement signal from the vehicle side device 10 together with an ID code, calculates a distance based on the reception strength of the distance measurement signal in the portable device 20, and places the distance information on the answer signal to the vehicle. It may be configured to send back to the side device 10 and lock and unlock the vehicle depending on whether or not the distance is within a predetermined distance range.
  • FIG. 2 is a block diagram showing a main configuration of each of the vehicle-side device 10 and the portable device 20 used in the keyless entry device 100.
  • the vehicle-side device 10 is composed of the vehicle-side transmitting antenna element 19a, the vehicle-side receiving antenna element 12a, and the vehicle-side device body 10a.
  • the vehicle-side device body 10a includes a vehicle-side transmission unit 11 (LF-TX), a vehicle-side reception unit 12 (RF-RX), a vehicle-side control unit 15 (CPU), and a vehicle-side oscillation circuit 16 (LF-OSC). ), A vehicle-side storage unit 17 (MEM), and a drive signal transmission unit 18 (DS-TX).
  • the vehicle side control unit 15 is located in the center and controls each unit connected to the vehicle side control unit 15.
  • the 1st resonance circuit 13 is provided in the inside of the vehicle side transmission part 11, and the 1st resonance circuit 13 is connected to the vehicle side transmission antenna element 19a.
  • the first resonance circuit 13 is integrated with the vehicle-side transmission antenna element 19a to form the vehicle-side transmission antenna 19, and forms a predetermined antenna impedance.
  • the configuration of the first resonance circuit 13 will be described later.
  • the vehicle-side receiving unit 12 has an input end connected to the vehicle-side receiving antenna element 12 a and an output end connected to the vehicle-side control unit 15.
  • the vehicle-side oscillation circuit 16 generates a request signal carrier wave signal LF, and an output terminal for outputting the carrier wave signal LF is connected to the vehicle-side controller 15.
  • the vehicle-side storage unit 17 stores a first ID assigned to the vehicle-side device 10 and a second ID assigned to the portable device 20 used together with the vehicle-side device 10. The end is connected to the vehicle-side control unit 15.
  • the drive signal transmission unit 18 has an input end connected to the vehicle-side control unit 15.
  • the carrier wave signal LF output from the vehicle-side oscillation circuit 16 is supplied to the vehicle-side control unit 15.
  • the vehicle-side control unit 15 reads the first ID from the vehicle-side storage unit 17, adds necessary information including the read first ID to the carrier signal LF, A request signal is formed according to the format. The request signal format will be described later.
  • the request signal is supplied to the vehicle-side transmission unit 11 under the control of the vehicle-side control unit 15.
  • the supplied request signal is amplified to a signal level suitable for transmission, and the amplified request signal is supplied to the first resonance circuit 13.
  • the request signal is wirelessly transmitted from the vehicle-side transmission antenna element 19a.
  • the vehicle-side receiving unit 12 receives an answer signal including the second ID and command signal of the portable device 20 wirelessly transmitted from the portable device 20 via the vehicle-side receiving antenna element 12a, and receives the received answer signal. Is amplified to a predetermined signal level by an amplifier circuit (not shown), and the amplified answer signal is supplied to the vehicle-side control unit 15.
  • the vehicle-side control unit 15 authenticates the second ID included in the answer signal using the second ID read from the vehicle-side storage unit 17, and when the authentication is established, the command included in the answer signal
  • a drive signal is formed from the signal, and this drive signal is supplied to the drive signal transmitter 18.
  • the drive signal transmission unit 18 drives the motor (not shown) that locks and unlocks the corresponding door lock or a controlled mechanism (not shown) such as an engine start circuit. A signal is transmitted and the controlled mechanism is controlled according to the drive signal.
  • an LF or VLF carrier signal is used as the request signal
  • an RF (several hundred MHz) carrier signal is used as the answer signal.
  • the communication distance of the request signal that is, the detection area of the request signal is about 1 to 2 m from the vehicle-side transmission antenna element 19a
  • the communication distance of the answer signal that is, the detection area of the answer signal is the portable-device-side transmission antenna element. It is about 5 to 10 m from 21a.
  • the portable device 20 includes a portable device-side transmitter 21 (RF-TX) including a portable device-side transmitting antenna element 21a and a portable device-side receiving device including a portable device-side receiving antenna element 29a.
  • Unit 22 (LF-RX), portable device side control unit 25 (CPU), portable device side oscillation circuit 26 (RF-OSC), portable device side storage unit 27 (MEM), and battery 28 for power supply ( BAT).
  • the portable device side control unit 25 is located in the center and controls each unit connected to the portable device side control unit 25.
  • the portable device side transmission unit 21 has an input terminal connected to the portable device side control unit 25 and an output terminal connected to the portable device side transmission antenna element 21a.
  • the portable device side receiving unit 22 has an input end connected to the portable device side receiving antenna element 29 a and an output end connected to the portable device side control unit 25.
  • the output terminal of the portable device side oscillation circuit 26 is connected to the portable device side control unit 25.
  • the portable device storage unit 27 has an input / output terminal connected to the portable device control unit 25.
  • the battery 28 is connected to each part in the portable device 20 described above, and supplies power to the portable device-side transmitter 21, the portable device-side receiver 22, the portable device-side controller 25, and the like.
  • the portable device side oscillation circuit 26 oscillates a high frequency signal, and the oscillated high frequency signal is supplied to the portable device side control unit 25.
  • the portable device-side control unit 25 uses the high-frequency signal as a carrier wave and adds a necessary information signal such as a second ID or a command signal by applying modulation to form an answer signal.
  • This answer signal is supplied to the portable device-side transmitter 21.
  • the portable device-side storage unit 27 stores a first ID assigned to the vehicle-side device 10, a second ID assigned to the own portable device 20, and various command signals. Under the control of the machine control unit 25, the first ID or the second ID and various command signals are appropriately read out.
  • the portable device-side transmission unit 21 When the portable device-side transmission unit 21 is supplied with a high-frequency signal, ie, an answer signal, including the second ID or command signal from the portable device-side control unit 25, the answer signal is amplified to a signal level suitable for wireless transmission. Then, the amplified answer signal is wirelessly transmitted via the portable device-side transmitting antenna element 21a.
  • a high-frequency signal ie, an answer signal, including the second ID or command signal from the portable device-side control unit 25
  • the answer signal is amplified to a signal level suitable for wireless transmission. Then, the amplified answer signal is wirelessly transmitted via the portable device-side transmitting antenna element 21a.
  • the second resonance circuit 23 is provided inside the portable device side receiving unit 22, and the portable device side reception antenna element 29 a is connected to the second resonance circuit 23.
  • the second resonance circuit 23 is integrated with the portable device-side receiving antenna element 29a to form the portable device-side receiving antenna 29, and forms a predetermined antenna impedance.
  • the configuration of the second resonance circuit 23 will be described later.
  • the portable device side receiving unit 22 receives the request signal including the first ID wirelessly transmitted from the vehicle side device 10 via the portable device side reception antenna element 29a and the second resonance circuit 23, and receives the received request.
  • the signal is supplied to the portable device side control unit 25.
  • FIG. 3 is a block diagram when a relay attack is performed.
  • the relay attack prepares two unauthorized repeaters, a first repeater 60 and a second repeater 70, and the first repeater 60 is arranged in the vicinity of the vehicle 50, A request signal from the vehicle 50 is received. Based on this request signal, the second repeater 70 arranged at the isolated position transmits a false request signal, and the portable device 20 that has received the request transmits an answer signal to the vehicle, and the vehicle 50 receives it. Thus, the vehicle door is unlocked where the vehicle user 55 does not intend.
  • the relay attack in the communication between the original vehicle-side device 10 and the portable device 20, communication via the first repeater 60 and the second repeater 70 is added. .
  • the present invention uses the fact that the reception strength in the portable device 20 is reduced by adding the number of communications in such a relay attack and switching the carrier frequency of the request signal to determine whether or not a relay attack has been performed. Judgment.
  • FIG. 4 is a diagram showing the configuration of the LF transmission format of the request signal.
  • 4A shows the configuration of the conventional LF transmission format of the request signal
  • FIGS. 4B and 4C show the configuration of the LF transmission format of the request signal of the present invention.
  • FIG. 5A is a circuit diagram showing the first resonance circuit 13
  • FIG. 5B is a circuit diagram showing the second resonance circuit 23.
  • FIG. 6A is a graph showing the transmission antenna impedance of the vehicle-side transmission unit 11
  • FIG. 6B is a graph showing the reception antenna impedance of the portable device-side reception unit 22.
  • FIG. 7 is a graph showing reception strength or transmission strength. Of these, FIG. 7A shows a portable device in which the carrier frequency is switched when relay attack is not performed (normal time).
  • FIG. 20 is a graph showing a reception intensity (B2) at 20; Also, FIG. 7B shows the reception strength (in the first repeater 60 and the portable device 20 shown in FIG. 3 when the carrier wave frequency is switched when the relay attack is performed (in the case of fraud) ( D2, B2), and the transmission intensity E2 in the 2nd repeater 70 are graphs. In FIG. 7, signal attenuation due to distance is omitted for easy understanding.
  • the LF transmission format of the conventional request signal includes information including the first ID assigned to the vehicle-side device 10 and the second ID assigned to the portable device 20 described above.
  • the frame includes a frame and a distance measuring frame for measuring the distance between the vehicle-side device 10 and the portable device 20.
  • the carrier frequency of the information frame and the distance measurement frame is the same carrier frequency f1.
  • the portable device side control unit 25 measures the reception strength of the distance measurement frame, creates an answer signal based on the measured reception strength, and causes the portable device side transmission unit 21 to transmit the created answer signal.
  • the vehicle-side control unit 15 that has received the answer signal can measure the distance between the vehicle 50 and the portable device 20 shown in FIG. 1 based on the reception strength of the distance measurement frame in the portable device 20.
  • an illegal relay determination frame is added after the distance measurement frame of the LF transmission format of the conventional request signal. It has a configuration.
  • the carrier frequency of the fraud determination frame is a carrier frequency f2 different from the carrier frequency f1 of the distance measurement frame.
  • the portable device control unit 25 measures the reception strength for each of a plurality of frames, that is, the reception strength of the distance measurement frame and the reception strength of the fraud relay determination frame. Then, an answer signal is created based on the two measured received intensities, and the created answer signal is transmitted to the portable device-side transmitter 21. And the vehicle side control part 15 which received the answer signal determines whether predetermined
  • f2 is set to be lower than f1 (f1> f2), but the reception strength is measured at a frequency higher than f1 when the portable device 20 makes an unauthorized relay determination (f1 ⁇ f1).
  • f2) may be set as follows.
  • the LF transmission format of the request signal of the present invention may have a configuration in which a plurality of unauthorized relay determination frames are added instead of one as shown in FIG.
  • f1> f2> fN is set. Note that when the reception strength at the time of the unauthorized relay determination of the portable device 20 is performed at a frequency higher than f1, f1 ⁇ f2 ⁇ fN may be set.
  • the first resonance circuit 13 is configured by a series connection circuit in which one end of a capacitor C11 and one end of an inductor L11 included in the vehicle-side transmitting antenna element 19a are connected.
  • An antenna 19 including the first resonance circuit 13 is configured. Further, the other end of the capacitor C11 and the other end of the inductor L11 are connected to other portions of the vehicle-side transmission unit 11.
  • the first resonance circuit 13 has a resonance frequency equal to one of the different carrier frequencies of the carrier frequency f1 and the carrier frequency f2 of the distance measurement frame described above.
  • the resonance frequency of the first resonance circuit 13 is set to the carrier frequency f1 of the distance measurement frame, which is the same as the information frame.
  • the carrier frequency f1 is determined by the capacitance of the capacitor C11 and the inductance of the inductor L11.
  • the transmission antenna impedance of the first resonance circuit 13 between the other end of the capacitor C11 and the other end of the inductor L11, that is, the input end of the first resonance circuit 13, is a carrier frequency as shown in FIG. z1 at f1 and z12 at the carrier frequency f2.
  • the transmission antenna impedance z11 at the carrier frequency f1 is set to a predetermined impedance value, and is an optimum value in the frequency range before and after the carrier frequency f1. Therefore, the request signal can be transmitted most efficiently at the carrier frequency f1. Accordingly, the transmission intensity of the vehicle-side transmission unit 11 is maximum (A1) at the carrier frequency f1, as shown in FIG. As described above, the attenuation due to the distance is omitted in FIG.
  • the second resonance circuit 23 is configured by a circuit in which a capacitor C21 and an inductor L21 included in the portable device-side receiving antenna element 29a are connected in parallel. Further, both ends of each of the capacitor C21 and the inductor L21 are connected to other parts of the portable device side receiving unit 22.
  • An antenna 29 including the second resonance circuit 23 is configured. Similar to the first resonance circuit 13, the resonance frequency of the second resonance circuit 23 is set to the carrier frequency f 1 of the distance measurement frame of the request signal transmitted from the vehicle-side transmission unit 11. f1 is determined by the capacitance of the capacitor C21 and the inductance of the inductor L21.
  • the reception antenna impedance of the second resonance circuit 23 to which the portable device-side reception antenna element 29a is connected is shown in FIG.
  • the carrier frequency f1 is z21
  • the carrier frequency f2 is z22.
  • the receiving antenna impedance z21 at the carrier frequency f1 is set to a predetermined impedance value, and is an optimal value in the frequency range before and after the carrier frequency f1. Therefore, the request signal can be received most efficiently at the carrier frequency f1. Therefore, as shown in FIG. 7A, the reception intensity of the portable device side receiving unit 22 is maximum (B1) at the carrier frequency f1.
  • the LF transmission format of the request signal of the present invention has a configuration in which an illegal relay determination frame is added after the distance measurement frame shown in FIG.
  • the carrier frequency of the distance measurement frame is f1
  • the carrier frequency of the unauthorized relay determination frame is f2 different from f1 (f1> f2).
  • the transmission antenna impedance z12 of the vehicle-side transmission unit 11 is as shown in FIG. , Becomes larger than the transmission antenna impedance z11 when the carrier frequency is f1 (z12> z11).
  • the reception antenna impedance z22 of the portable device-side receiver 22 is smaller than the transmission antenna impedance z21 when the carrier frequency is f1, as shown in FIG. 6B. (Z22 ⁇ z21)
  • the transmission intensity of the vehicle side transmission unit 11 is transmitted as shown in FIG. 7 (a). It decreases from A1 to A2 as the antenna impedance changes.
  • the reception intensity B1 at f1 of the portable device side receiving unit 22 becomes the maximum value when the resonance frequency of the second resonance circuit 23 is set to f1.
  • the reception antenna impedance of the mobile device side receiving unit 22 is received by the mobile device side receiving unit 22 when the frequency becomes f2, that is, when z21 changes to z22 as shown in FIG.
  • the intensity decreases at a rate of z22 / z21 as the receiving antenna impedance changes.
  • the first repeater 60 and the second repeater are provided between the vehicle-side device 10 and the portable device 20. 70 will enter.
  • the transmission / reception strength drop caused by the change in the transmission antenna impedance and the change in the reception antenna impedance occurs twice more than in the normal case where no relay attack is performed.
  • the transmission intensity A2 of the vehicle-side transmission unit 11 at the carrier frequency f2 of the vehicle-side device 10 decreases to the reception intensity D2 at the time of reception by the first repeater 60, It decreases to the reception strength E2 at the time of transmission of the second repeater 70, and decreases to the reception strength B2 at the time of reception of the portable device side receiving unit 22.
  • the reception intensity B2 in the portable device-side receiving unit 22 decreases more than usual.
  • the transmission format of the request signal is such that one unauthorized relay determination frame is added after the distance measurement frame of the carrier frequency f1.
  • a plurality of fraudulent relay determination frames may be added after the distance measurement frame of the carrier frequency f1.
  • the keyless entry device 100 since the keyless entry device 100 according to the first embodiment of the present invention includes a plurality of frames having different carrier frequencies in the request signal, it differs from the resonance frequency of the first resonance circuit 13 or the second resonance circuit 23. A signal having a carrier frequency is transmitted or received, and the transmission / reception strength is reduced due to the carrier frequency being out of the resonance frequency. Therefore, when transmission / reception is repeated by the relay attack, a difference in reception intensity between the frames appears more greatly. As a result, it can be easily determined that the relay attack is going to be performed. Further, since it is not necessary to notify the portable device 20 of the change in the carrier frequency in advance, the communication time can be shortened. Therefore, it is possible to provide the keyless entry device 100 that has an excellent communication speed and can prevent a relay attack with a simple configuration.
  • the reception intensity with signals of other different carrier frequencies can be compared in a region where the reception intensity is high, so that it is possible to detect fraud even with signals that are far apart.
  • the operation of the keyless entry device 200 according to the second embodiment of the present invention will be described with reference to FIGS.
  • the difference between the keyless entry device 100 and the keyless entry device 200 is that the resonance frequency of each of the first resonance circuit 13 and the second resonance circuit 23 of the keyless entry device 100 is fixed, whereas the keyless entry device 200.
  • the only difference is that the resonance frequency of each of the first resonance circuit 14 and the second resonance circuit 24 is variable. Therefore, all other configurations are the same. Therefore, description of items other than those related to the first resonance circuit 14 and the second resonance circuit 24 is omitted.
  • FIG. 8A is a circuit diagram of the first resonance circuit 14 whose resonance frequency can be varied
  • FIG. 8B is a circuit diagram of the second resonance circuit 24 whose resonance frequency can be varied
  • FIG. 9A is a graph showing the transmission antenna impedance of the vehicle-side transmission unit 11 when the resonance frequency is changed
  • FIG. 9B is a graph of the portable device-side reception unit 22 when the resonance frequency is changed. It is a graph which shows a receiving antenna impedance.
  • FIG. 10 is a graph showing the reception intensity when only the resonance frequency of the second resonance circuit 24 is changed, for example.
  • FIG. 10A shows the case where the relay attack is not performed (normal time). ) Is a graph showing the reception intensity B2 in the portable device 20 when the carrier frequency is switched.
  • FIG. 10A shows the case where the relay attack is not performed (normal time).
  • 10B shows the reception strength (D2, B2) at the first repeater 60 and the portable device 20 when the carrier frequency is switched when a relay attack is performed (when illegal), 4 is a graph showing transmission intensity E2 in the second repeater 70.
  • signal attenuation due to distance is omitted for easy understanding.
  • the first resonance circuit 14 with variable resonance frequency shown in FIG. 8A has a capacitor C12 and a switch SW11 between both ends of the capacitor C11 with respect to the configuration of the first resonance circuit 13 shown in FIG. And the other configuration is the same as that of the first resonance circuit 13.
  • An antenna 19 including the first resonance circuit 14 is configured.
  • the resonance frequency when the switch SW11 is turned off is the same frequency as the carrier frequency of the request signal distance measurement frame f1, and the resonance frequency when the switch SW11 is turned on is f1.
  • the frequency is set to be the same frequency as f2, which is a lower carrier frequency of the fraud relay determination frame.
  • f2 is determined by the total capacitance of the capacitor C11 and the capacitor C12 and the inductance of the inductor L11.
  • the second resonance circuit 24 with variable resonance frequency shown in FIG. 8B has a capacitor C22 and a switch SW21 between both ends of the capacitor C21 with respect to the configuration of the second resonance circuit 23 shown in FIG.
  • the other configuration is the same as that of the second resonance circuit 23.
  • An antenna 29 including the second resonance circuit 23 is configured.
  • the resonance frequency when the switch SW21 is turned off becomes the same frequency as the carrier frequency of the request signal distance measurement frame f1, and the resonance frequency when the switch SW21 is turned on is f1.
  • the frequency is set to be the same frequency as f2, which is a lower carrier frequency of the fraud relay determination frame.
  • f2 is determined by the total capacitance of the capacitor C21 and the capacitor C22 and the inductance of the inductor L21.
  • the first resonance circuit 14 and the second resonance circuit 24 can change the resonance frequency, respectively, and at least one of the vehicle-side transmission unit 11 and the portable device-side reception unit 22 matches the carrier frequency.
  • the resonance frequency is changed. That is, when the carrier frequency is f1, the switches SW11 and SW21 are turned off so that the resonance frequencies of the first resonance circuit 14 and the second resonance circuit 24 are f1.
  • the switch SW11 or the switch SW21 is set to be turned on.
  • the resonance frequency of the first resonance circuit 14 can be simultaneously switched from f1 to f2.
  • the transmission antenna impedance changes from z11 to z12 as shown in FIG. 9A, but the resonance frequency of the first resonance circuit 14 is f2, z12 has the same predetermined impedance value as z11. Therefore, even if the resonance frequency of the first resonance circuit 14 is switched from f1 to f2, it is an optimum value in the frequency range around the carrier frequency f2. Therefore, the request signal can be transmitted most efficiently even at the carrier frequency f2.
  • the resonance frequency of the second resonance circuit 24 can be switched from f1 to f2 at the same time when the distance measurement frame is changed to the unauthorized relay determination frame. .
  • the reception antenna impedance is switched from the resonance frequency of the second resonance circuit 24 to f2.
  • the reception antenna impedance changes from z21 to z22 as shown in FIG. 9B, but since the resonance frequency of the second resonance circuit 24 is f2, z22 is the same impedance value as z21. become. Therefore, even if the resonance frequency of the second resonance circuit 24 is switched from f1 to f2, it is an optimum value in the frequency range before and after the carrier wave frequency f2. Therefore, the request signal can be received most efficiently even at the carrier frequency f2.
  • the resonance frequency of the first resonance circuit 14 of the vehicle-side transmitter 11 is set.
  • the resonance frequency of the second resonance circuit 24 of the portable device-side receiver 22 is changed from f1 to f2 while keeping f1.
  • the timing for switching the resonance frequency of the second resonance circuit 24 is determined in advance.
  • the resonance frequency of the second resonance circuit 24 of the portable device-side receiver 22 is switched to f2, as shown in FIG. 9B. Therefore, the reception antenna impedance z22 at this time is the same as z21 and remains a predetermined characteristic impedance. Therefore, the mobile device side receiving unit 22 can receive without reducing the reception intensity.
  • the first repeater 60 and the second repeater 70 are inserted between the vehicle-side device 10 and the portable device 20. As described above, a decrease in reception strength by the portable device side receiving unit 22 does not occur, but a decrease in transmission / reception strength by the first repeater 60 and the second repeater 70 occurs.
  • a relay attack is performed. If the antenna impedance of the resonance circuit in each of the first repeater 60 and the second repeater 70 is the same as that of the keyless entry device 100, the antenna impedance in which the resonance frequency of each resonance circuit is not changed.
  • the reception strength B2 at the mobile device side receiving unit 22 is smaller than the transmission strength E2 at the second repeater 70.
  • the transmission format of the request signal is one illegal relay determination frame as shown in FIG. 4B.
  • a plurality of frames may be used.
  • a plurality of connection circuits may be provided, and each switch may be switched in accordance with switching of the resonance frequency.
  • At least one of the vehicle-side transmitter 11 and the portable device-side receiver 22 has a resonance frequency that matches the reference carrier frequency.
  • a difference in reception intensity with signals of different carrier frequencies can be determined in a region where the reception intensity is high. For this reason, it is possible to detect fraud with a higher probability even for signals that are far away.
  • the SN ratio of the transmission signal from the vehicle-side transmission unit 11 or the reception signal of the portable device-side reception unit 22 is also increased, the determination accuracy is increased.
  • both the resonance frequencies of the second resonance circuit 24 of the portable device side receiving unit 22 and the first resonance circuit 14 of the vehicle side transmission unit 11 are changed, the effect is further increased.
  • the keyless entry device of the present invention since the keyless entry device of the present invention includes a plurality of frames having different carrier frequencies in the request signal, it transmits a signal having a carrier frequency different from the resonance frequency of the first resonance circuit or the second resonance circuit, or As a result of reception, the transmission / reception strength decreases due to the carrier frequency deviating from the resonance frequency. Therefore, when transmission / reception is repeated by the relay attack, a difference in reception intensity between the frames appears more greatly. As a result, it can be easily determined that the relay attack is going to be performed. In addition, since it is not necessary to notify the portable device of changes in the carrier frequency in advance, the communication time can be shortened. Therefore, it is possible to provide a keyless entry device that is excellent in communication speed and can prevent a relay attack with a simple configuration.
  • the present invention is not limited to the description of the above embodiment, and can be implemented with appropriate modifications in a mode in which the effect is exhibited.
  • Vehicle side apparatus 10 a Vehicle side apparatus main body 11 Vehicle side transmission part 12 Vehicle side receiving part 12a Vehicle side receiving antenna element 13 1st resonance circuit 14 1st resonance circuit 15 Vehicle side control part 16 Vehicle side oscillation circuit 17 Vehicle side memory

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mechanical Engineering (AREA)
  • Lock And Its Accessories (AREA)

Abstract

Le problème décrit par la présente invention est de proposer un dispositif d'entrée sans clé qui présente une excellente vitesse de communication et qui peut empêcher une attaque de relais avec une configuration simple. La solution selon l'invention porte sur un dispositif côté véhicule (10) présentant un émetteur côté véhicule (11) qui transmet un signal de requête, un récepteur côté véhicule (12) qui reçoit un signal de réponse, une unité de commande côté véhicule (15), et un oscillateur électronique côté véhicule (16). Une unité mobile (20) présente un récepteur côté unité mobile (22) qui reçoit le signal de requête, un émetteur côté d'unité mobile qui transmet le signal de réponse, et une unité de commande côté unité mobile (25). L'oscillateur électronique côté véhicule (16) peut faire varier la fréquence porteuse d'un signal de porteur, et le signal de requête contient une pluralité de trames, chacune d'elles présentant une fréquence porteuse différente. L'unité de commande côté unité mobile (15) mesure l'intensité de réception de chaque trame et amène l'émetteur côté unité mobile (21) à transmettre le signal de réponse contenant des informations sur la base de l'intensité de réception mesurée. L'unité de commande côté véhicule (25) détermine s'il faut ou non effectuer la commande prescrite par rapport au véhicule en fonction du signal de réponse.
PCT/JP2015/078286 2014-10-22 2015-10-06 Dispositif d'entrée sans clé WO2016063717A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2014215710 2014-10-22
JP2014-215710 2014-10-22

Publications (1)

Publication Number Publication Date
WO2016063717A1 true WO2016063717A1 (fr) 2016-04-28

Family

ID=55760761

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2015/078286 WO2016063717A1 (fr) 2014-10-22 2015-10-06 Dispositif d'entrée sans clé

Country Status (1)

Country Link
WO (1) WO2016063717A1 (fr)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2017218723A (ja) * 2016-06-02 2017-12-14 株式会社東海理化電機製作所 通信不正成立防止システム
CN111246423A (zh) * 2020-01-09 2020-06-05 联合汽车电子有限公司 无钥匙进入及启动系统中防止广播中继攻击的方法
JP2020120301A (ja) * 2019-01-25 2020-08-06 三菱電機株式会社 無線通信システム、及び無線通信方法
US12099082B2 (en) 2021-07-02 2024-09-24 Toyota Motor Engineering & Manufacturing North America, Inc. Systems and methods for conducting vehicle oscillator testing

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008240315A (ja) * 2007-03-27 2008-10-09 Matsushita Electric Ind Co Ltd 無線キーシステム、その制御方法、およびそのプログラム
JP2010011393A (ja) * 2008-06-30 2010-01-14 Toyota Boshoku Corp 車載用無線装置
JP2012123527A (ja) * 2010-12-07 2012-06-28 Tokai Rika Co Ltd 通信不正成立防止システム
JP5218916B2 (ja) * 2009-03-16 2013-06-26 トヨタ自動車株式会社 通信システム
JP2014180900A (ja) * 2013-03-18 2014-09-29 Nippon Soken Inc 車両システム、車載装置、及び携帯機

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008240315A (ja) * 2007-03-27 2008-10-09 Matsushita Electric Ind Co Ltd 無線キーシステム、その制御方法、およびそのプログラム
JP2010011393A (ja) * 2008-06-30 2010-01-14 Toyota Boshoku Corp 車載用無線装置
JP5218916B2 (ja) * 2009-03-16 2013-06-26 トヨタ自動車株式会社 通信システム
JP2012123527A (ja) * 2010-12-07 2012-06-28 Tokai Rika Co Ltd 通信不正成立防止システム
JP2014180900A (ja) * 2013-03-18 2014-09-29 Nippon Soken Inc 車両システム、車載装置、及び携帯機

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2017218723A (ja) * 2016-06-02 2017-12-14 株式会社東海理化電機製作所 通信不正成立防止システム
JP2020120301A (ja) * 2019-01-25 2020-08-06 三菱電機株式会社 無線通信システム、及び無線通信方法
CN111246423A (zh) * 2020-01-09 2020-06-05 联合汽车电子有限公司 无钥匙进入及启动系统中防止广播中继攻击的方法
CN111246423B (zh) * 2020-01-09 2024-06-04 联合汽车电子有限公司 无钥匙进入及启动系统中防止广播中继攻击的方法
US12099082B2 (en) 2021-07-02 2024-09-24 Toyota Motor Engineering & Manufacturing North America, Inc. Systems and methods for conducting vehicle oscillator testing

Similar Documents

Publication Publication Date Title
JP6137687B2 (ja) キーレスエントリーシステム
JP5400407B2 (ja) キーレスエントリー装置
US9600947B2 (en) Lock system, in particular for a motor vehicle
JP5341814B2 (ja) 無線通信正否判定システム
WO2017122493A1 (fr) Système de clé électronique, dispositif embarqué et clé électronique
US20140327517A1 (en) Remote control system, and method for automatically locking and/or unlocking at least one movable panel of a motor vehicle and/or for starting a motor vehicle engine using a remote control system
CN111315948B (zh) 遥控无钥匙进入系统
US20070030119A1 (en) Communication apparatus for vehicle
WO2016063717A1 (fr) Dispositif d'entrée sans clé
JP6308936B2 (ja) キーレスエントリー装置
JP2018107653A (ja) 車両用認証システム
WO2018127353A1 (fr) Systèmes d'entrée sans clé pour véhicules
JP5343552B2 (ja) キーレスエントリーシステム
JP2021135220A (ja) 測距装置
JP6234474B2 (ja) キーレスエントリシステム
KR20190121337A (ko) 자동차의 개방 가능 패널에의 사람 손의 존재의 검출
JP6597538B2 (ja) 車両用携帯機
JP6278410B2 (ja) 車載機器制御システム、車載制御装置、携帯機
JP2016056667A (ja) 電子キーシステム
JP6641508B1 (ja) 無線通信システム、及び無線通信方法
JP2018040133A (ja) 認証システム及び携帯機
JP2004040803A (ja) 個人的な携帯物を介して所定スペースへのアクセスを制御するための方法、及び該方法を実行するための携帯物
JP2006213289A (ja) 車載受信機
US20230286465A1 (en) Methods for using a surface acoustic wave resonator for automobile security
KR20190127835A (ko) 자동차에 대한 안전한 접근 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15851737

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

NENP Non-entry into the national phase

Ref country code: JP

122 Ep: pct application non-entry in european phase

Ref document number: 15851737

Country of ref document: EP

Kind code of ref document: A1