WO2018135096A1 - Control system, server device, control method, and computer program - Google Patents

Abstract

A control system provided with a terminal device, a server device, and a command reception unit provided in a vehicle, wherein the terminal device is provided with a command request unit that transmits, to the server device, a command transmission request message requesting transmission of a command to be executed in the vehicle, the server device is provided with a command control unit that transmits the command to the vehicle on the basis of the command transmission request message, and the command reception unit receives the command from the server device.

Description

Control system, server device, control method, and computer program

The present invention relates to a control system, a server device, a control method, and a computer program.
This application claims priority on January 19, 2017 based on Japanese Patent Application No. 2017-007571 filed in Japan, the contents of which are incorporated herein by reference.

Conventionally, an automobile has an ECU (Electronic Control Unit), and functions such as engine control are realized by the ECU. The ECU is a kind of computer and realizes a desired function by a computer program. For example, Non-Patent Document 1 discloses a security technique for an in-vehicle control system configured by connecting a plurality of ECUs to a CAN (Controller Area Network).

Improving safety when performing work such as car maintenance was an issue.

The present invention has been made in consideration of such circumstances, and can improve safety when performing maintenance work such as a vehicle such as an automobile, a control system, a server device, a control method, and It is an object to provide a computer program.

(1) One aspect of the present invention includes a terminal device, a server device, and a command reception unit provided in a vehicle, and the terminal device transmits a command transmission request message for requesting transmission of a command executed in the vehicle. A command request unit that transmits to the server device, the server device includes a command control unit that transmits the command to the vehicle based on the command transmission request message, and the command reception unit includes the server device. A control system that receives the command from
(2) According to one aspect of the present invention, in the control system according to (1), the server device authenticates an authentication request message received from the vehicle, and authentication identification information is sent to the vehicle that has passed the authentication. The control system includes a vehicle communication unit that transmits the authentication request message to the server device, and a vehicle notification unit that notifies the authentication identification information, and the terminal device. Includes a terminal input unit for inputting authentication identification information, the command request unit transmits the authentication identification information input by the terminal input unit to the server device, and the command control unit receives the command request unit from the command request unit. When the received authentication identification information matches the authentication identification information transmitted to the vehicle, the command based on the command transmission request message is transmitted to the vehicle. And, when said authentication identification information received from the command request unit does not match the authentication identification information transmitted to the vehicle does not transmit the commands based on the command transmission request message to the vehicle is a control system.
(3) According to one aspect of the present invention, in the control system according to (1), the server device authenticates the authentication request message received from the terminal device, and authenticates the terminal device that has passed the authentication. An authentication unit that transmits identification information, the command request unit transmits the authentication request message to the server device, the terminal device includes a terminal notification unit that reports the authentication identification information, and the control system includes: A vehicle input unit that inputs authentication identification information; and a vehicle communication unit that transmits the authentication identification information input by the vehicle input unit to the server device. The command control unit includes: When the received authentication identification information matches the authentication identification information transmitted to the terminal device, the command based on the command transmission request message is sent to the vehicle. And Shin, if the authentication identification information received from the vehicle does not match the transmitted authentication identification information to the terminal apparatus does not transmit the commands based on the command transmission request message to the vehicle is a control system.
(4) According to one aspect of the present invention, in the control system according to any one of (1) to (3), the server device includes vehicle identification information of the vehicle or user identification information received from the terminal device, or The control system includes a recording unit that records the command transmitted to the vehicle in association with both the vehicle identification information and the user identification information.
(5) One aspect of the present invention is the control system according to any one of (1) to (4), wherein the command control unit includes vehicle identification information or user identification information, or vehicle identification information and user identification information. A parameter table storing a parameter group used for generating the command in association with both, vehicle identification information of the vehicle or user identification information received from the terminal device, or vehicle identification information of the vehicle and the vehicle A command generation unit that generates the command based on the command transmission request message using the parameter group stored in the parameter table in association with both user identification information received from the terminal device System.
(6) According to one aspect of the present invention, in the control system according to any one of (1) to (5), the command reception unit transmits an execution result of the command to the server device, and the command control unit Is a control system that transmits the execution result of the command to the terminal device.

(7) One aspect of the present invention includes a server device, a command request unit provided in a vehicle, and a command reception unit provided in the vehicle, wherein the command request unit transmits a command executed in the vehicle. A requesting command transmission request message is transmitted to the server device, and the server device includes a command control unit that transmits the command to the vehicle based on the command transmission request message, and the command receiving unit includes the command receiving unit, A control system that receives the command from a server device.

(8) One aspect of the present invention is a server device including a command control unit that transmits a command executed in a vehicle to the vehicle based on a command transmission request message received from a terminal device.

(9) One aspect of the present invention is a server device including a command control unit that transmits a command executed by the vehicle to the vehicle based on a command transmission request message received from the vehicle.

(10) One aspect of the present invention is a control method for a control system including a terminal device, a server device, and a command receiving unit provided in a vehicle, wherein the terminal device transmits a command executed in the vehicle. A command transmission request message for requesting to the server device, the server device transmitting the command to the vehicle based on the command transmission request message, and the command receiving unit from the server device to the A control method for receiving a command.

(11) One aspect of the present invention is a control method for a control system including a server device, a command request unit provided in a vehicle, and a command reception unit provided in the vehicle, wherein the command request unit is the vehicle. A command transmission request message for requesting transmission of a command to be executed is transmitted to the server device, the server device transmits the command to the vehicle based on the command transmission request message, and the command receiving unit A control method for receiving the command from the server device.

(12) One aspect of the present invention is a computer program for causing a computer of a server device to execute a process of transmitting a command to be executed in a vehicle to the vehicle based on a command transmission request message received from a terminal device It is.

(13) One aspect of the present invention is a computer program for causing a computer of a server device to execute a process of transmitting a command to be executed in the vehicle to the vehicle based on a command transmission request message received from the vehicle. It is.

According to the present invention, it is possible to improve the safety when performing work such as maintenance of a vehicle such as an automobile.

It is a schematic structure figure of control system 1 concerning one embodiment. It is a schematic block diagram of the server apparatus 30 which concerns on one Embodiment. It is a schematic block diagram of the terminal device 50 which concerns on one Embodiment. It is a schematic block diagram of the control apparatus 70 which concerns on one Embodiment. It is a sequence chart which shows Example 1-1 of the control method which concerns on one Embodiment. It is a sequence chart which shows Example 1-2 of the control method which concerns on one Embodiment. It is a schematic structure figure of control system 1a concerning one embodiment. It is a sequence chart which shows Example 2-1 of the control method which concerns on one Embodiment. It is a sequence chart which shows Example 2-2 of the control method which concerns on one Embodiment. It is a schematic block diagram of the control system 1b which concerns on one Embodiment. It is a schematic block diagram of the control apparatus 70 which concerns on one Embodiment. It is a sequence chart which shows Example 3 of the control method which concerns on one Embodiment. It is a schematic block diagram of the command control part 38 which concerns on one Embodiment. It is a figure which shows the structural example of the parameter table 84 which concerns on one Embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following embodiment, a vehicle will be described as an example of a vehicle.

[First Embodiment]
FIG. 1 is a schematic configuration diagram of a control system 1 according to the first embodiment. In FIG. 1, the control system 1 includes a server device 30, a terminal device 50, and a control device 70. The control device 70 is provided in the automobile 10. The automobile 10 includes a communication interface 12, a control device 70, a gateway device (GW) 16, and a plurality of ECUs (electronic control devices) 18.

The ECU 18 is an in-vehicle computer provided in the automobile 10. The ECU 18 has a control function such as engine control of the automobile 10. Examples of the ECU 18 include an ECU having an engine control function, an ECU having a handle control function, and an ECU having a brake control function. The gateway device 16 has a data security (security) function applied to the ECU 18 mounted on the automobile 10. Note that any ECU mounted on the automobile 10 may function as the gateway device 16.

The gateway device 16 and the plurality of ECUs 18 are connected to a communication network (hereinafter referred to as an in-vehicle network) 17 provided in the automobile 10. The in-vehicle network 17 may be, for example, CAN (Controller Area Network). CAN is known as one of communication networks mounted on vehicles. The gateway device 16 exchanges data with each ECU 18 via the in-vehicle network 17. The ECU 18 exchanges data with other ECUs 18 via the in-vehicle network 17.

In addition, as a communication network mounted on a vehicle, a communication network other than CAN is provided in the automobile 10, data exchange between the gateway device 16 and the ECU 18, and between the ECUs 18 via the communication network other than CAN. Exchange of data may be performed. For example, the automobile 10 may include a LIN (Local Interconnect Network). Further, the automobile 10 may include CAN and LIN. Further, the automobile 10 may include an ECU 18 connected to the LIN. The gateway device 16 may be connected to CAN and LIN. Further, the gateway device 16 exchanges data with the ECU 18 connected to the CAN via the CAN, and exchanges data with the ECU 18 connected to the LIN via the LIN. Good. Further, the ECUs 18 may exchange data via the LIN.

The in-vehicle computer system of the automobile 10 is configured by connecting a gateway device 16 and a plurality of ECUs 18 to an in-vehicle network 17. The gateway device 16 monitors communication between the inside and the outside of the in-vehicle computer system of the automobile 10. The ECU 18 communicates with an external device of the in-vehicle computer system via the gateway device 16.

As a configuration of the in-vehicle network 17, the in-vehicle network 17 may include a plurality of buses (communication lines), and the plurality of buses may be connected to the gateway device 16. In this case, one ECU 18 or a plurality of ECUs 18 is connected to one bus.

The communication interface 12 communicates with an external device of the automobile 10. The communication interface 12 may perform wireless communication or may perform wired communication. For example, the communication interface 12 may be a wireless communication interface such as a mobile communication network, a wireless LAN (Local Area Network), or a short-range wireless communication. Alternatively, the communication interface 12 may be a wired communication interface such as a wired LAN or a universal serial bus (Universal Serial Bus: USB). The communication interface 12 may include both a wireless communication interface and a wired communication interface. Alternatively, the communication interface 12 may be a diagnostic port of the automobile 10. For example, an OBD (On-board Diagnostics) port may be used as a diagnostic port of the automobile 10.

The communication interface 12 communicates with the server device 30 via the communication path 102. The control device 70 is connected to the communication interface 12 and the gateway device 16. The control device 70 communicates with the server device 30 via the communication interface 12. The control device 70 communicates with the ECU 18 via the gateway device 16.

The server device 30 communicates with the communication interface 12 of the automobile 10 via the communication path 102. The server device 30 communicates with the control device 70 of the automobile 10 via the communication interface 12 of the automobile 10.

The communication path 102 may be a wireless communication path, a wired communication path, or a wireless communication path and a wired communication path. For example, the communication path 102 may be a communication path of a wireless communication network used by the communication interface 12. Alternatively, the communication path 102 may be a communication path including a communication network such as the Internet and a wireless communication network used by the communication interface 12. Further, for example, the server device 30 and the communication interface 12 may be connected by a dedicated line such as a VPN (Virtual Private Network) line.

Further, the server device 30 and the automobile 10 may be connected by a communication cable. For example, the server device 30 and the communication interface 12 of the automobile 10 may be connected by a communication cable. For example, the server device 30 and the diagnostic port of the automobile 10 may be connected by a communication cable. Alternatively, the server device 30 and the automobile 10 may be configured to communicate via a wired or wireless communication network. For example, the server device 30 and the automobile 10 may be connected by a wired or wireless LAN.

The server device 30 communicates with the terminal device 50 via the communication path 104. The communication path 104 may be a wireless communication path, a wired communication path, or may be configured by a wireless communication path and a wired communication path. For example, the server device 30 and the terminal device 50 may be connected by a communication cable. Alternatively, the server device 30 and the terminal device 50 may be configured to perform communication via a wired or wireless communication network. For example, the server device 30 and the terminal device 50 may be connected by a wired or wireless LAN.

FIG. 2 is a schematic configuration diagram of the server device 30 according to the present embodiment. In FIG. 2, the server device 30 includes a communication unit 32, an authentication unit 34, a recording unit 36, and a command control unit 38. The communication unit 32 communicates with the automobile 10 via the communication path 102. The communication unit 32 communicates with the terminal device 50 via the communication path 104. The authentication unit 34 performs authentication of the other party who accesses the server device 30. The command control unit 38 performs control such as transmission of commands executed in the automobile 10. The recording unit 36 records commands executed by the automobile 10.

The function of the server device 30 is realized by a CPU (Central Processing Unit) provided in the server device 30 executing a computer program. Note that the server device 30 may be configured using a general-purpose computer device, or may be configured as a dedicated hardware device.

FIG. 3 is a schematic configuration diagram of the terminal device 50 according to the present embodiment. In FIG. 3, the terminal device 50 includes a communication unit 52, an operation unit 54, a display unit 56, and a command request unit 58. The communication unit 52 communicates with the server device 30 via the communication path 104. The operation unit 54 is configured by an input device such as a numeric keypad, and performs data input according to a user operation. The display unit 56 is composed of a display device such as a liquid crystal display device, and performs data display. Alternatively, the terminal device 50 may include a touch panel capable of both data input and data display as a device having both functions of the operation unit 54 and the display unit 56. The command request unit 58 requests the server device 30 to transmit a command to be executed by the automobile 10.

The function of the terminal device 50 is realized by the CPU provided in the terminal device 50 executing a computer program. The terminal device 50 may be configured using a general-purpose computer device or may be configured as a dedicated hardware device. Further, as the terminal device 50, a mobile communication terminal device such as a smartphone, a tablet computer device (tablet PC), a stationary personal computer device, or the like may be used.

FIG. 4 is a schematic configuration diagram of the control device 70 according to the present embodiment. In FIG. 4, the control device 70 includes a communication unit 72, an operation unit 74, a display unit 76, and a command reception unit 78. The communication unit 72 communicates with the server device 30 via the communication interface 12. The operation unit 74 is composed of an input device such as a numeric keypad, and performs data input according to a user operation. The display unit 76 is composed of a display device such as a liquid crystal display device, and performs data display. Alternatively, the control device 70 may include a touch panel capable of both data input and data display as a device having both functions of the operation unit 74 and the display unit 76. The command receiving unit 78 receives a command from the server device 30.

The function of the control device 70 is realized by a CPU provided in the control device 70 executing a computer program. Note that the control device 70 may be configured using a general-purpose computer device, or may be configured as a dedicated hardware device.

Also, the control device 70 may be realized using another computer device mounted on the automobile 10. For example, the control device 70 may be realized using an infotainment device mounted on the automobile 10. Examples of the infotainment device include those having a navigation function, a location information service function, a multimedia playback function such as music and video, a voice communication function, a data communication function, and an Internet connection function. The infotainment device is generally called, for example, an in-vehicle infotainment (IVI) system. The function of the control device 70 may be realized by a CPU provided in the infotainment device executing a computer program for realizing the function of the control device 70. In addition, the operation unit 74 and the display unit 76 of the control device 70 may be an input device and a display device included in the infotainment device. For example, a touch panel included in the infotainment device may be used for the operation unit 74 and the display unit 76 of the control device 70.

Next, a control method according to the present embodiment will be described with reference to FIGS. The control method according to the present embodiment includes a stage of authenticating a worker who performs maintenance work on the automobile 10 (authentication phase) and a stage where the worker performs maintenance work on the automobile 10 (maintenance phase). The maintenance work of the automobile 10 is performed at the time of production of the automobile 10 at an automobile manufacturing company, or at the time of maintenance of the automobile 10 at an automobile maintenance factory, an automobile dealer, or the like. There are various items in the maintenance work of the automobile 10. Examples of maintenance work of the automobile 10 include various diagnoses of the automobile 10, installation and updating of programs and setting data of the ECU 18, initialization of the ECU 18, and the like. The command executed in the automobile 10 may be a command used in maintenance work of the automobile 10, for example.

<Example of control method 1-1>
An example 1-1 of the control method according to the present embodiment will be described with reference to FIG. FIG. 5 is a sequence chart showing Example 1-1 of the control method according to the present embodiment. In FIG. 5, the communication unit 32 of the server device 30 and the communication unit 52 of the terminal device 50 perform encrypted communication using an encryption key shared in advance. Thereby, the encryption communication path between the server apparatus 30 and the terminal device 50 is made.
Further, the communication unit 32 of the server device 30 and the communication unit 72 of the control device 70 perform encrypted communication using an encryption key shared in advance. Thereby, the encryption communication path between the server apparatus 30 and the control apparatus 70 is made. As an example of the encryption communication path, https (hypertext transfer protocol secure) communication may be performed.

In the following description, the server device 30 and the terminal device 50 transmit and receive data through an encrypted communication path between the server device 30 and the terminal device 50. The server device 30 and the control device 70 of the automobile 10 transmit and receive data via an encrypted communication path between the server device 30 and the control device 70.

(Authentication phase)
The authentication phase of the control method example 1-1 will be described. In the authentication phase, the terminal device 50 and the control device 70 of the automobile 10 log in to the server device 30.

(Step S11) The operator inputs a user identification information ID and a password PWD for logging in to the server device 30 through the operation unit 74 of the control device 70 of the automobile 10. The communication unit 72 of the control device 70 sends a log-in request message including the vehicle identification number (Vehicle Identification Number: VIN) of the automobile 10 and the user identification information ID and password PWD input by the operation unit 74 to the server device 30. Send. The login request message corresponds to the authentication request message. The vehicle identification number corresponds to the vehicle identification information. The communication unit 72 corresponds to the vehicle communication unit.

The vehicle identification number (VIN) is described in Non-Patent Document 2, for example. The vehicle identification number VIN of the automobile 10 may be stored in the control device 70 in advance, or the vehicle identification number VIN may be notified from the outside to the control device 70 at a predetermined opportunity.

For example, when the ECU 18 having the engine control function of the automobile 10 stores the vehicle identification number VIN of the automobile 10, the ECU 18 notifies the control device 70 of the vehicle identification number VIN of the automobile 10 after the ECU 18 is started. May be.

Alternatively, as the vehicle identification number VIN of the automobile 10, for example, the vehicle identification number VIN managed by the automobile manufacturer or automobile dealer of the automobile 10 may be supplied to the control device 70. For example, the automobile manufacturer of the automobile 10 may be provided with a database of the vehicle identification number VIN, and the vehicle identification number VIN may be notified from the database to the control device 70 of the automobile 10 by communication.

The authentication unit 34 of the server device 30 authenticates the login request message received from the control device 70 of the automobile 10. A set of the user identification information ID and the password PWD is registered in the server device 30 in advance. The authentication unit 34 holds a set of user identification information ID and password PWD registered in the server device 30. The authentication unit 34 compares the set of user identification information ID and password PWD included in the login request message with the set of user identification information ID and password PWD registered in the server device 30. As a result of this comparison, if the two match, the authentication for the login request message is passed, and if the two do not match, the authentication for the login request message fails. Authentication for a login request message refers to authentication for a set of user identification information ID and password PWD included in the login request message.

If the authentication for the login request message is successful, the recording unit 36 records the vehicle identification number VIN included in the login request message in association with the user identification information ID included in the login request message. Thereafter, the process proceeds to step S12.

On the other hand, if the authentication for the login request message is unsuccessful, the processing in FIG. 5 is terminated. If the authentication for the login request message fails, the login from the control device 70 of the automobile 10 to the server device 30 has failed. If the authentication for the login request message fails, the recording unit 36 records the login failure in association with the user identification information ID included in the login request message. If the authentication for the login request message fails, the server device 30 may execute a predetermined error process.

(Step S12) The authentication unit 34 of the server device 30 returns a login success message OK including the authentication identification information Tk to the control device 70 of the automobile 10 that has transmitted the login request message that has passed the authentication. The authentication identification information Tk is identification information regarding the success of the current login for the user identification information ID included in the login request message that has passed the authentication.
The authentication unit 34 generates authentication identification information Tk as disposable identification information (one-time password). The authentication unit 34 holds the authentication identification information Tk in association with the user identification information ID included in the login request message that has passed authentication. This authentication identification information Tk is referred to as verification authentication identification information Tk. The login from the control device 70 of the automobile 10 to which the login success message OK is returned to the server device 30 is successful. The recording unit 36 records the successful login in association with the user identification information ID included in the login request message that has passed the authentication.

The communication unit 72 of the control device 70 of the automobile 10 displays the authentication identification information Tk included in the login success message OK received from the server device 30 on the display screen of the display unit 76. The worker recognizes the authentication identification information Tk displayed on the display screen of the display unit 76. Display unit 76 corresponds to a vehicle notification unit.

In addition, the vehicle alerting | reporting part should just have the function to alert | report authentication identification information Tk by the output method which a person can recognize. For example, the vehicle notification unit may notify the authentication identification information Tk by voice. Or a vehicle alerting | reporting part may alert | report authentication identification information Tk by printing.

(Step S13) The operator inputs the authentication identification information Tk and the user identification information ID and password PWD for logging in to the server device 30 through the operation unit 54 of the terminal device 50. The command request unit 58 of the terminal device 50 transmits a login request message including the user identification information ID, the password PWD, and the authentication identification information Tk input by the operation unit 54 to the server device 30. The operation unit 54 corresponds to a terminal input unit.

The authentication unit 34 of the server device 30 authenticates the login request message received from the terminal device 50. The authentication unit 34 compares the set of user identification information ID and password PWD included in the login request message with the set of user identification information ID and password PWD registered in the server device 30. As a result of this comparison, if the two match, the authentication for the login request message is passed, and if the two do not match, the authentication for the login request message fails.

If the authentication for the login request message is unsuccessful, the processing in FIG. If the authentication for the login request message fails, the server device 30 may execute a predetermined error process.

If the authentication for the login request message is successful, the authentication unit 34 further holds the authentication identification information Tk included in the login request message and the user identification information ID included in the login request message. The verification authentication identification information Tk is compared. As a result of the comparison, if the two match, the verification of the authentication identification information Tk included in the login request message has passed, and if the two do not match, the verification of the authentication identification information Tk included in the login request message has failed. Pass.

When the verification of the authentication identification information Tk included in the login request message is acceptable, the recording unit 36 indicates that the verification of the authentication identification information Tk is successful in the user identification information ID included in the login request message. Record in association. Thereafter, the process proceeds to step S14.

On the other hand, if the verification of the authentication identification information Tk included in the login request message fails, the process of FIG. If at least one of the authentication for the login request message or the verification of the authentication identification information Tk included in the login request message fails, the login from the terminal device 50 to the server device 30 is unsuccessful. When the verification of the authentication identification information Tk included in the login request message is unsuccessful, the recording unit 36 indicates that the verification of the authentication identification information Tk is unsuccessful, and the user identification information included in the login request message. Record in association with the ID. In addition, when the verification of the authentication identification information Tk included in the login request message fails, the server device 30 may execute a predetermined error process.

(Step S <b> 14) The authentication unit 34 of the server device 30 passes the authentication for the login request message and the verification of the authentication identification information Tk included in the login request message to the terminal device 50 that is the transmission source of the login request message. , A login success message OK is returned. The login from the terminal device 50 to which the login success message OK is returned to the server device 30 is successful. The recording unit 36 records the successful login in association with the user identification information ID included in the login request message that has passed the authentication.

(Maintenance phase)
The maintenance phase of the control method example 1-1 will be described. The server device 30 executes the procedure of the maintenance phase for the control device 70 and the terminal device 50 of the automobile 10 that are the counterparts who returned the login success message OK in the authentication phase. The terminal device 50 and the control device 70 of the automobile 10 to which the authentication unit 34 of the server device 30 has returned the login success message OK in the authentication phase are continuing to log in to the server device 30 based on the user identification information ID. The recording unit 36 of the server device 30 records the user identification information ID and the vehicle identification number VIN of the automobile 10 in association with each other.

(Step S <b> 21) The command request unit 58 of the terminal device 50 transmits a command transmission request message for requesting transmission of a command executed by the automobile 10 to the server device 30. The command that the command requesting unit 58 requests to send to the server device 30 by the command transmission request message may be a command designated by the operator through the operation unit 54 or may be set in advance as maintenance work content. .

(Step S <b> 22) The command control unit 38 of the server device 30 transmits a command to the control device 70 of the automobile 10 based on the command transmission request message received from the terminal device 50. The recording unit 36 records the command transmitted from the command control unit 38 to the control device 70 of the automobile 10 in association with the user identification information ID. The command receiving unit 78 of the control device 70 of the automobile 10 receives a command from the server device 30. The command receiving unit 78 transfers the command received from the server device 30 to the in-vehicle device of the automobile 10 that executes the command. Examples of the in-vehicle device of the automobile 10 that executes a command include the gateway device 16 and the ECU 18. Note that the control device 70 may execute the command received by the command receiving unit 78 from the server device 30.

(Step S <b> 23) The command receiving unit 78 of the control device 70 of the automobile 10 receives a command execution result from the command transfer destination in-vehicle device. The command receiving unit 78 transmits the command execution result to the server device 30. The recording unit 36 of the server device 30 records the execution result of the command received from the control device 70 of the automobile 10 in association with the user identification information ID.

(Step S24) The command control unit 38 of the server device 30 transmits the execution result of the command received from the control device 70 of the automobile 10 to the terminal device 50 that is the transmission source of the command transmission request message. The command request unit 58 of the terminal device 50 displays the execution result of the command received from the server device 30 on the display screen of the display unit 56. The worker recognizes the execution result of the command displayed on the display screen of the display unit 56.

<Example of control method 1-2>
An example 1-2 of the control method according to the present embodiment will be described with reference to FIG. FIG. 6 is a sequence chart showing Example 1-2 of the control method according to the present embodiment. In FIG. 6, portions corresponding to the respective steps in FIG. In the following description, similarly to Example 1-1 of the control method, the server device 30 and the terminal device 50 transmit and receive data via an encrypted communication path between the server device 30 and the terminal device 50. The server device 30 and the control device 70 of the automobile 10 transmit and receive data via an encrypted communication path between the server device 30 and the control device 70. In the following, the difference between the control method example 1-2 and the control method example 1-1 will be mainly described.

(Authentication phase)
The authentication phase of the control method example 1-2 will be described. In the authentication phase of the control method example 1-2, the order in which the terminal device 50 and the control device 70 of the automobile 10 log in to the server device 30 is opposite to the authentication phase of the control method example 1-1.

(Step S11a) The operator inputs the user identification information ID and the password PWD for logging in to the server device 30 through the operation unit 54 of the terminal device 50. The command request unit 58 of the terminal device 50 transmits a login request message including the user identification information ID input by the operation unit 54 and the password PWD to the server device 30.

The authentication unit 34 of the server device 30 authenticates the login request message received from the terminal device 50. The authentication unit 34 compares the set of user identification information ID and password PWD included in the login request message with the set of user identification information ID and password PWD registered in the server device 30. As a result of this comparison, if the two match, the authentication for the login request message is passed, and if the two do not match, the authentication for the login request message fails.

If the authentication for the login request message is successful, the process proceeds to step S12a. On the other hand, if the authentication for the login request message is unsuccessful, the process of FIG. 6 ends. If the authentication for the login request message fails, the login from the terminal device 50 to the server device 30 has failed. If the authentication for the login request message fails, the recording unit 36 records the login failure in association with the user identification information ID included in the login request message. If the authentication for the login request message fails, the server device 30 may execute a predetermined error process.

(Step S12a) The authentication unit 34 of the server device 30 returns a login success message OK including the authentication identification information Tk to the terminal device 50 that has transmitted the login request message that has passed the authentication. The authentication identification information Tk is identification information regarding the success of the current login for the user identification information ID included in the login request message that has passed the authentication. The authentication unit 34 generates authentication identification information Tk as disposable identification information (one-time password). The authentication unit 34 holds the authentication identification information Tk in association with the user identification information ID included in the login request message that has passed authentication. This authentication identification information Tk is referred to as verification authentication identification information Tk. The login from the terminal device 50 to which the login success message OK is returned to the server device 30 is successful. The recording unit 36 records the successful login in association with the user identification information ID included in the login request message that has passed the authentication.

The command request unit 58 of the terminal device 50 displays the authentication identification information Tk included in the login success message OK received from the server device 30 on the display screen of the display unit 56. The worker recognizes the authentication identification information Tk displayed on the display screen of the display unit 56. The display unit 56 corresponds to a terminal notification unit.

In addition, the terminal alerting | reporting part should just have the function to alert | report authentication identification information Tk by the output method which a person can recognize. For example, the terminal notification unit may notify the authentication identification information Tk by voice. Alternatively, the terminal notification unit may notify the authentication identification information Tk by printing.

(Step S <b> 13 a) The worker inputs the authentication identification information Tk, the user identification information ID for logging in to the server device 30, and the password PWD through the operation unit 74 of the control device 70 of the automobile 10. The communication unit 72 of the control device 70 transmits a login request message including the vehicle identification number VIN of the automobile 10 and the user identification information ID, the password PWD, and the authentication identification information Tk input by the operation unit 74 to the server device 30. . The operation unit 74 corresponds to a vehicle input unit.

The authentication unit 34 of the server device 30 authenticates the login request message received from the control device 70 of the automobile 10. The authentication unit 34 compares the set of user identification information ID and password PWD included in the login request message with the set of user identification information ID and password PWD registered in the server device 30. As a result of this comparison, if the two match, the authentication for the login request message is passed, and if the two do not match, the authentication for the login request message fails.

If the authentication for the login request message is unsuccessful, the processing in FIG. If the authentication for the login request message fails, the server device 30 may execute a predetermined error process.

If the authentication for the login request message is successful, the authentication unit 34 further holds the authentication identification information Tk included in the login request message and the user identification information ID included in the login request message. The verification authentication identification information Tk is compared. As a result of the comparison, if the two match, the verification of the authentication identification information Tk included in the login request message has passed, and if the two do not match, the verification of the authentication identification information Tk included in the login request message has failed. Pass.

When the verification of the authentication identification information Tk included in the login request message is acceptable, the recording unit 36 indicates that the verification of the authentication identification information Tk is successful in the user identification information ID included in the login request message. Record in association. Thereafter, the process proceeds to step S14a.

On the other hand, if the verification of the authentication identification information Tk included in the login request message fails, the process of FIG. When at least one of the authentication for the login request message or the verification of the authentication identification information Tk included in the login request message fails, the login from the control device 70 of the automobile 10 to the server device 30 has failed. is there. When the verification of the authentication identification information Tk included in the login request message is unsuccessful, the recording unit 36 indicates that the verification of the authentication identification information Tk is unsuccessful, and the user identification information included in the login request message. Record in association with the ID. In addition, when the verification of the authentication identification information Tk included in the login request message fails, the server device 30 may execute a predetermined error process.

(Step S14a) The authentication unit 34 of the server device 30 controls the automobile 10 that is the transmission source of the login request message that has passed both the authentication for the login request message and the verification of the authentication identification information Tk included in the login request message. A login success message OK is returned to the device 70. The login from the control device 70 of the automobile 10 to which the login success message OK is returned to the server device 30 is successful. The recording unit 36 records the successful login in association with the user identification information ID included in the login request message that has passed the authentication.

(Maintenance phase)
The maintenance phase of the control method example 1-2 will be described. The maintenance phase of the control method example 1-2 is the same as the maintenance phase of the control method example 1-1. In the maintenance phase of the control method example 1-2, steps S21 to S24 are performed as in the maintenance phase of the control method example 1-1.

[Second Embodiment]
FIG. 7 is a schematic configuration diagram of a control system 1a according to the second embodiment. In FIG. 7, portions corresponding to the respective portions in FIG. The server device 30 can apply the configuration of FIG. The terminal device 50 can apply the configuration of FIG. The configuration of FIG. 4 can be applied to the control device 70. Hereinafter, the control system 1a of FIG. 7 according to the second embodiment will be described mainly with respect to differences from the control system 1 of FIG. 1 according to the first embodiment.

7, the server device 30 and the control device 70 of the automobile 10 communicate with each other via the terminal device 50. The server device 30 communicates with the terminal device 50 via the communication path 104. The terminal device 50 communicates with the communication interface 12 of the automobile 10 via the communication path 106. Similarly to the communication path 102 according to the first embodiment, the communication path 106 may be a wireless communication path, a wired communication path, or a wireless communication path and a wired communication path. May be. The server device 30 communicates with the control device 70 of the automobile 10 via the terminal device 50 and the communication interface 12 of the automobile 10.

Next, a control method according to the present embodiment will be described with reference to FIGS. The control method according to this embodiment includes an authentication phase and a maintenance phase, as in the first embodiment.

<Example of control method 2-1>
An example 2-1 of the control method according to the present embodiment will be described with reference to FIG. FIG. 8 is a sequence chart showing an example 2-1 of the control method according to the present embodiment. In FIG. 8, parts corresponding to the respective steps in FIG. 5 according to the control method example 1-1 of the first embodiment are denoted by the same reference numerals. In the control method example 2-1, similarly to the control method example 1-1, the server device 30 and the terminal device 50 transmit and receive data via the encryption communication path between the server device 30 and the terminal device 50. . The server device 30 and the control device 70 of the automobile 10 transmit and receive data via an encrypted communication path between the server device 30 and the control device 70. However, communication data transmitted and received between the server device 30 and the control device 70 is transmitted via the terminal device 50. The communication unit 52 of the terminal device 50 has a function of relaying communication data transmitted and received between the server device 30 and the control device 70.

(Authentication phase)
The authentication phase of the control method example 2-1 will be described. The authentication phase of the control method example 2-1 is the same as that of the control method example 1-1 of the first embodiment. In the authentication phase of the control method example 2-1, similarly to the authentication phase of the control method example 1-1, steps S11 to S14 are performed.

(Maintenance phase)
The maintenance phase of the control method example 2-1 will be described. The maintenance phase of the control method example 2-1 is the same as the maintenance phase of the control method example 1-1 of the first embodiment. In the maintenance phase of the control method example 2-1, steps S21 to S24 are performed as in the maintenance phase of the control method example 1-1.

<Example of control method 2-2>
An example 2-2 of the control method according to the present embodiment will be described with reference to FIG. FIG. 9 is a sequence chart showing an example 2-2 of the control method according to the present embodiment. 9, parts corresponding to the respective steps in FIG. 6 according to the control method example 1-2 of the first embodiment are denoted by the same reference numerals. In the control method example 2-2, as in the control method example 1-2, the server device 30 and the terminal device 50 transmit and receive data via the encryption communication path between the server device 30 and the terminal device 50. . The server device 30 and the control device 70 of the automobile 10 transmit and receive data via an encrypted communication path between the server device 30 and the control device 70. However, the communication data transmitted and received between the server device 30 and the control device 70 is transmitted via the terminal device 50 as in the control method example 2-1. The communication unit 52 of the terminal device 50 has a function of relaying communication data transmitted and received between the server device 30 and the control device 70.

(Authentication phase)
The authentication phase of the control method example 2-2 will be described. The authentication phase of the control method example 2-2 is the same as that of the control method example 1-2 of the first embodiment. In the authentication phase of the control method example 2-2, similarly to the authentication phase of the control method example 1-2, steps S11a to S14a are performed.

(Maintenance phase)
The maintenance phase of the control method example 2-2 will be described. The maintenance phase of the control method example 2-2 is the same as the maintenance phase of the control method example 1-2 of the first embodiment (the maintenance phase of the control method example 1-1). In the maintenance phase of the control method example 2-2, steps S21 to S24 are performed as in the maintenance phase of the control method example 1-2 (the maintenance phase of the control method example 1-1).

According to the first embodiment and the second embodiment described above, the terminal device 50 transmits a command transmission request message to the server device 30. The server device 30 transmits a command to the automobile 10 based on the command transmission request message received from the terminal device 50. The automobile 10 executes the command received from the server device 30. Thereby, since the server apparatus 30 can manage the command performed with the motor vehicle 10, the safety | security at the time of work, such as a maintenance of the motor vehicle 10, can be improved. For example, an effect of preventing an inappropriate command from being executed in the automobile 10 can be obtained.

Also, the recording unit 36 records the command transmitted to the automobile 10 in association with the user identification information ID logged into the server device 30 and the vehicle identification number VIN of the automobile 10 on which the command is executed. For this reason, it is possible to grasp which worker (user identification information) has performed what operation (command execution) on which automobile 10 (vehicle identification number).

The recording unit 36 may record the command transmitted to the automobile 10 in association with the vehicle identification number VIN of the automobile 10 or the user identification information ID received from the terminal device 50. Alternatively, the recording unit 36 may record the command transmitted to the automobile 10 in association with both the vehicle identification number VIN of the automobile 10 and the user identification information ID received from the terminal device 50.
[Third Embodiment]
FIG. 10 is a schematic configuration diagram of a control system 1b according to the third embodiment. 10, parts corresponding to those in FIG. 1 are given the same reference numerals. The server device 30 can apply the configuration of FIG. Hereinafter, the control system 1b of FIG. 10 according to the third embodiment will be described mainly with respect to differences from the control system 1 of FIG. 1 according to the first embodiment.

10 does not include the terminal device 50. The control system 1b shown in FIG. FIG. 11 is a schematic configuration diagram of the control device 70 according to the present embodiment. In FIG. 11, the same reference numerals are given to portions corresponding to the respective portions in FIG. 4. A control device 70 shown in FIG. 11 further includes a command requesting unit 58 in addition to the configuration of FIG. In the control system 1b illustrated in FIG. 10, the control device 70 of the automobile 10 includes the command request unit 58 included in the terminal device 50 in the control system 1 illustrated in FIG. 1.

Next, a control method according to this embodiment will be described with reference to FIG. The control method according to this embodiment includes an authentication phase and a maintenance phase, as in the first embodiment.

<Example 3 of control method>
An example 3 of the control method according to the present embodiment will be described with reference to FIG. FIG. 12 is a sequence chart illustrating a third example of the control method according to the present embodiment. In FIG. 12, portions corresponding to the respective steps in FIG. In the following description, similarly to the control method example 1-1, the server device 30 and the control device 70 of the automobile 10 transmit and receive data via an encrypted communication path between the server device 30 and the control device 70.

(Authentication phase)
The authentication phase of the control method example 3 will be described. In the authentication phase of Example 3 of the control method, the control device 70 of the automobile 10 logs into the server device 30. In the authentication phase of the control method example 3, step S11 is performed as in the authentication phase of the control method example 1-1. In step S11, when the authentication for the login request message transmitted from the control device 70 of the automobile 10 to the server device 30 is successful, the process proceeds to step S12b.

(Step S12b) The authentication unit 34 of the server device 30 returns a login success message OK to the control device 70 of the automobile 10 that has transmitted the login request message that has passed the authentication. The login from the control device 70 of the automobile 10 to which the login success message OK is returned to the server device 30 is successful. The recording unit 36 records the successful login in association with the user identification information ID included in the login request message that has passed the authentication.

(Maintenance phase)
The maintenance phase of the control method example 3 will be described. The server device 30 executes the procedure of the maintenance phase for the control device 70 of the automobile 10 that is the partner that has returned the login success message OK in the authentication phase. The control device 70 of the automobile 10 to which the authentication unit 34 of the server device 30 has returned the login success message OK in the authentication phase is continuing to log in to the server device 30 using the user identification information ID. The recording unit 36 of the server device 30 records the user identification information ID and the vehicle identification number VIN of the automobile 10 in association with each other.

(Step S <b> 21 a) The command request unit 58 of the control device 70 of the automobile 10 transmits a command transmission request message for requesting transmission of a command executed in the automobile 10 to the server device 30. The command that the command requesting unit 58 requests to send to the server device 30 by a command transmission request message may be a command specified by the operator using the operation unit 74 or may be set in advance as maintenance work content. .

(Step S <b> 22) The command control unit 38 of the server device 30 transmits a command to the control device 70 of the vehicle 10 based on the command transmission request message received from the control device 70 of the vehicle 10. The recording unit 36 records the command transmitted from the command control unit 38 to the control device 70 of the automobile 10 in association with the user identification information ID. The command receiving unit 78 of the control device 70 of the automobile 10 receives a command from the server device 30. The command receiving unit 78 transfers the command received from the server device 30 to the in-vehicle device of the automobile 10 that executes the command. Note that the control device 70 may execute the command received by the command receiving unit 78 from the server device 30.

(Step S <b> 23) The command receiving unit 78 of the control device 70 of the automobile 10 receives a command execution result from the command transfer destination in-vehicle device. The command receiving unit 78 transmits the command execution result to the server device 30. The recording unit 36 of the server device 30 records the execution result of the command received from the control device 70 of the automobile 10 in association with the user identification information ID.

(Step S24a) The command control unit 38 of the server device 30 transmits the execution result of the command received from the control device 70 of the automobile 10 to the control device 70 of the automobile 10 that is the transmission source of the command transmission request message. The command request unit 58 of the control device 70 of the automobile 10 causes the execution result of the command received from the server device 30 to be displayed on the display screen of the display unit 76. The worker recognizes (views) the execution result of the command displayed on the display screen of the display unit 76.

According to the third embodiment described above, the automobile 10 transmits a command transmission request message to the server device 30. Server device 30 transmits a command to vehicle 10 based on the command transmission request message received from vehicle 10. The automobile 10 executes the command received from the server device 30. Thereby, since the server apparatus 30 can manage the command performed with the motor vehicle 10, the safety | security at the time of work, such as a maintenance of the motor vehicle 10, can be improved. For example, an effect of preventing an inappropriate command from being executed in the automobile 10 can be obtained.

Further, the recording unit 36 records the command transmitted to the automobile 10 in association with the user identification information ID logged into the server device 30 and the vehicle identification number VIN of the automobile 10 on which the command is executed. For this reason, it is possible to grasp which worker (user identification information) has performed what operation (command execution) on which automobile 10 (vehicle identification number).

The recording unit 36 may record the command transmitted to the automobile 10 in association with the vehicle identification number VIN of the automobile 10 or the user identification information ID received from the automobile 10. Alternatively, the recording unit 36 may record the command transmitted to the automobile 10 in association with both the vehicle identification number VIN of the automobile 10 and the user identification information ID received from the automobile 10.

[Fourth Embodiment]
FIG. 13 is a schematic configuration diagram of the command control unit 38 according to the fourth embodiment. The command control unit 38 illustrated in FIG. 13 may be applied to the control systems 1, 1a, and 1b of the above-described embodiments. In FIG. 13, the command control unit 38 includes a command generation unit 82, a parameter table 84, and a display control unit 86.

The parameter table 84 stores a parameter group used for generating a command to be executed in the automobile 10. The command generation unit 82 uses the parameter group stored in the parameter table 84 to generate a command based on the command transmission request message. The command control unit 38 transmits the command generated by the command generation unit 82 to the control device 70 of the automobile 10.

FIG. 14 is a diagram illustrating a configuration example of the parameter table 84 according to the present embodiment. In FIG. 14, the parameter table 84 stores a parameter group (parameter set) used for generating a command executed in the automobile 10. The parameter table 84 stores parameter sets in association with vehicle identification numbers (VIN) or user identification information (user IDs). Alternatively, the parameter table 84 stores a parameter set in association with both the vehicle identification number (VIN) and user identification information (user ID).

For example, the parameter set_a is stored in the parameter table 84 in association with both the user identification information UID_a and the vehicle identification number VIN_a. The parameter set_a is when the user identification information for logging in to the server device 30 is “UID_a” and the vehicle identification number of the command destination vehicle 10 is “VIN_a” (when the parameter set use condition a is satisfied). , A set of parameters that are allowed to be used. The command generation unit 82 generates a command based on the command transmission request message using the parameter set_a when the parameter set use condition a is satisfied.

For example, the parameter set_b is stored in the parameter table 84 in association with the user identification information UID_b. The parameter set_b is a parameter set that is allowed to be used when the user identification information for logging in to the server device 30 is “UID_b” (when the parameter set use condition b is satisfied). The command generation unit 82 generates a command based on the command transmission request message using the parameter set_b when the parameter set use condition b is satisfied.

For example, the parameter set_c is stored in the parameter table 84 in association with the vehicle identification number VIN_c. The parameter set_c is a parameter set that is permitted to be used when the vehicle identification number of the automobile 10 that is the command transmission destination is “VIN_c” (when the parameter set use condition c is satisfied). The command generation unit 82 generates a command based on the command transmission request message using the parameter set_c when the parameter set use condition c is satisfied.
An expiration date may be set for the parameter set. The parameter set in which the expiration date is set is a parameter set that is allowed to be used only within the expiration date. The command generation unit 82 uses the parameter set for which the expiration date is set only within the expiration date.

According to this embodiment, the vehicle (vehicle identification number) in which the operator (user identification information) or the command is executed or the vehicle 10 in which the command is executed with the worker (user identification information) according to the parameter table 84. (Vehicle identification number) can be specified to cause the control device 70 of the automobile 10 to execute a command generated using a specific parameter set. For example, a command can be generated and applied to an automobile 10 having a specific vehicle identification number using a parameter set limited to a certain range of parameter values. For example, it is possible to generate a command using a parameter set limited to a certain range of parameter values and apply the command to an operator of specific user identification information. For example, a command is generated using a parameter set limited to a certain range of parameter values for a combination of an operator with specific user identification information and an automobile 10 with a specific vehicle identification number, and the command is applied. be able to.

The parameter set may include parameters for setting a range of functions that can be performed by the automobile 10, a range of performance that can be performed by the automobile 10, and the like. For example, the parameter table 84 is configured so that a parameter set having parameters for setting functions and performances according to the specific area is applied to the automobile 10 (vehicle identification number) sold in the specific area. Can be mentioned.

The display control unit 86 controls display data displayed on the display screen of the display unit 56 of the terminal device 50 or the display screen of the display unit 76 of the control device 70 of the automobile 10. For example, the display control unit 86 has a function of providing a web page, and displays a web page on the display screen of the display unit 56 of the terminal device 50 or the display screen of the display unit 76 of the control device 70 of the automobile 10. To control. For example, the web page includes a login screen to the server device 30 (user identification information and password input screen or authentication identification information, user identification information and password input screen). For example, an input screen for a command transmission request can be cited as a Web page. For example, a browsing screen for command execution results can be cited as a Web page.

As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.
In the above-described embodiment, the control device 70 of the vehicle 10 includes the command receiving unit 78, and the command receiving unit 78 of the control device 70 receives the command received from the server device 30 as the ECU 18 of the vehicle 10 that executes the command. However, the present invention is not limited to this. For example, the gateway device 16 of the automobile 10 includes the command receiving unit 78, and the command receiving unit 78 of the gateway device 16 transfers the command received from the server device 30 to an in-vehicle device such as the ECU 18 of the automobile 10 that executes the command. May be. For example, the in-vehicle device such as the ECU 18 of the automobile 10 includes a command receiving unit, and the server device 30 transmits the command to the in-vehicle device such as the ECU 18 of the automobile 10 that executes the command, and the vehicle 10 that executes the command The command receiving unit of the in-vehicle device such as the ECU 18 may receive the command from the server device 30.

The above-described embodiment may be applied to the automobile 10 in, for example, an automobile manufacturing factory, a maintenance factory, a sales shop, or the like.

In the above-described embodiment, an automobile is taken as an example of a vehicle, but the present invention can also be applied to other vehicles such as a motorbike and a railway vehicle.

In addition, a computer program for realizing the functions of each device described above may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be read into a computer system and executed. Here, the “computer system” may include an OS and hardware such as peripheral devices.
“Computer-readable recording medium” refers to a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disc), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above.
Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

According to the present invention, it is possible to improve the safety when performing work such as maintenance of a vehicle such as an automobile.

DESCRIPTION OF SYMBOLS 1,1a, 1b ... Control system, 10 ... Automobile, 12 ... Communication interface, 16 ... Gateway apparatus, 17 ... In-vehicle network, 18 ... ECU, 30 ... Server apparatus, 32, 52, 72 ... Communication part, 34 ... Authentication part , 36 ... recording unit, 38 ... command control unit, 50 ... terminal device, 54, 74 ... operation unit, 56, 76 ... display unit, 58 ... command request unit, 70 ... control device, 78 ... command reception unit, 82 ... Command generation unit, 84 ... parameter table, 86 ... display control unit

Claims (13)

1. A terminal device, a server device, and a command receiver included in the vehicle;
   The terminal device
   A command transmission request message for requesting transmission of a command executed in the vehicle, to the server device;
   The server device
   Based on the command transmission request message, comprising a command control unit for transmitting the command to the vehicle,
   The command receiving unit receives the command from the server device;
   Control system.
2. The server device includes an authentication unit that authenticates an authentication request message received from the vehicle and transmits authentication identification information to the vehicle that has passed the authentication,
   The control system includes:
   A vehicle communication unit that transmits the authentication request message to the server device;
   A vehicle notifying unit for notifying the authentication identification information; and
   The terminal device includes a terminal input unit for inputting authentication identification information,
   The command request unit transmits authentication identification information input by the terminal input unit to the server device,
   The command control unit
   If the authentication identification information received from the command request unit matches the authentication identification information transmitted to the vehicle, the command based on the command transmission request message is transmitted to the vehicle,
   If the authentication identification information received from the command request unit does not match the authentication identification information transmitted to the vehicle, the command based on the command transmission request message is not transmitted to the vehicle.
   The control system according to claim 1.
3. The server device includes an authentication unit that authenticates an authentication request message received from the terminal device and transmits authentication identification information to the terminal device that has passed the authentication,
   The command request unit transmits the authentication request message to the server device,
   The terminal device includes a terminal notification unit that notifies the authentication identification information,
   The control system includes:
   A vehicle input unit for inputting authentication identification information;
   A vehicle communication unit that transmits authentication identification information input by the vehicle input unit to the server device;
   The command control unit
   If the authentication identification information received from the vehicle matches the authentication identification information transmitted to the terminal device, the command based on the command transmission request message is transmitted to the vehicle,
   If the authentication identification information received from the vehicle does not match the authentication identification information transmitted to the terminal device, the command based on the command transmission request message is not transmitted to the vehicle.
   The control system according to claim 1.
4. The server device records the command transmitted to the vehicle in association with vehicle identification information of the vehicle, user identification information received from the terminal device, or both the vehicle identification information and the user identification information. With a recording unit,
   The control system according to any one of claims 1 to 3.
5. The command control unit
   A parameter table for storing a parameter group used to generate the command in association with vehicle identification information or user identification information, or both vehicle identification information and user identification information;
   The parameter stored in the parameter table in association with the vehicle identification information of the vehicle or the user identification information received from the terminal device, or both the vehicle identification information of the vehicle and the user identification information received from the terminal device A command generation unit that generates the command based on the command transmission request message using a group;
   The control system according to any one of claims 1 to 4, further comprising:
6. The command receiving unit transmits the execution result of the command to the server device;
   The command control unit transmits the execution result of the command to the terminal device.
   The control system according to any one of claims 1 to 5.
7. A server device, a command request unit provided in the vehicle, and a command reception unit provided in the vehicle,
   The command request unit transmits a command transmission request message for requesting transmission of a command executed in the vehicle to the server device,
   The server device
   Based on the command transmission request message, comprising a command control unit for transmitting the command to the vehicle,
   The command receiving unit receives the command from the server device;
   Control system.
8. Based on the command transmission request message received from the terminal device, a command control unit that transmits a command executed in the vehicle to the vehicle,
   A server device comprising:
9. Based on a command transmission request message received from the vehicle, a command control unit that transmits a command executed by the vehicle to the vehicle,
   A server device comprising:
10. A control system control method comprising a terminal device, a server device, and a command receiving unit provided in a vehicle,
    The terminal device transmits a command transmission request message for requesting transmission of a command executed in the vehicle to the server device;
    The server device transmits the command to the vehicle based on the command transmission request message,
    The command receiving unit receives the command from the server device;
    Control method.
11. A control method of a control system comprising a server device, a command request unit provided in a vehicle, and a command reception unit provided in the vehicle,
    The command request unit transmits a command transmission request message for requesting transmission of a command executed in the vehicle to the server device,
    The server device transmits the command to the vehicle based on the command transmission request message,
    The command receiving unit receives the command from the server device;
    Control method.
12. On the server device computer,
    Based on the command transmission request message received from the terminal device, a command to be executed in the vehicle is transmitted to the vehicle.
    A computer program for executing processing.
13. On the server device computer,
    Based on the command transmission request message received from the vehicle, a command executed in the vehicle is transmitted to the vehicle.
    A computer program for executing processing.

Images