WO2019098020A1

WO2019098020A1 - Car sharing system

Info

Publication number: WO2019098020A1
Application number: PCT/JP2018/040404
Authority: WO
Inventors: 将宏荒川; 雅彦大矢; 雄一稲波; 穣久保
Original assignee: 株式会社東海理化電機製作所
Priority date: 2017-11-14
Filing date: 2018-10-30
Publication date: 2019-05-23
Also published as: JP6993186B2; JP2019091220A

Abstract

A car sharing system (21) is provided with: an operation terminal (2a) for a share vehicle (1), the operation terminal (2a) being capable of operating as a vehicle key for actuating an onboard apparatus (3) through an electronic key system (4); a car share device (23) that communicates wirelessly with a portable terminal (22) capable of operating as a vehicle key and actuates the onboard apparatus (3) through the electronic key system (4) in accordance with the operation of a portable terminal having authenticated key information (Dk); and a mode switching unit (41) capable of switching a share vehicle operation mode, when the share vehicle is used by a car share user other than the owner of the share vehicle, between a state in which the operation terminal (2a) is enabled and a state in which the operation terminal (2a) is disabled by the portable terminal (22) of the car share user.

Description

Car sharing system

The present invention relates to a car sharing system in which a plurality of people share one vehicle.

BACKGROUND Conventionally, a car sharing system in which one vehicle is shared by a plurality of people is known (see Patent Documents 1 and 2, etc.). In this type of car sharing system, for example, registration of use of car sharing is performed in advance, and for example, use of a vehicle is permitted within a reservation time after making vehicle reservation with a portable terminal (high-performance mobile phone etc.) .

JP, 2016-115077, A JP, 2016-71834, A

By the way, when using the valet parking service with a share vehicle, it is necessary to pass the vehicle key of the share vehicle to a third party such as a valet, but at this time, the portable terminal is lent to the third party as a vehicle key It is not realistic. However, there is a cost if the vehicle is always equipped with a dedicated bullet key taking into consideration the use of the valet parking service.

An object of the present invention is to provide a car sharing system capable of lending a shared vehicle without using a dedicated bullet key.

A car sharing system according to one embodiment includes an operation terminal for a share vehicle operable as a vehicle key that operates on-vehicle equipment through an electronic key system, and a car share device capable of wirelessly communicating with a portable terminal operable as the vehicle key. Equipped with The car sharing apparatus authenticates key information through wireless communication with the portable terminal, and operates the in-vehicle device through the electronic key system according to an operation of the portable terminal having the authenticated key information. The car sharing system further operates the operation mode of the share vehicle by the portable terminal of the car share user when the share vehicle is used by a car share user other than the owner of the share vehicle. And a mode switching unit for changing the valid state and the invalid state of the mode to a switchable mode.

According to this configuration, when a car share user other than the owner of the share vehicle uses the valet parking service, the mobile terminal of the car share user can switch the operation terminal of the share vehicle from the invalid state to the valid state. . As a result, the car share user can use the valet parking service by handing the operation terminal, which originally exists in the share vehicle, to a third party such as a valet, instead of the portable terminal of the car share user. Thus, sharing vehicles can be lent without using a dedicated bullet key.

In the car sharing system, the car sharing apparatus may be capable of wirelessly communicating with a plurality of portable terminals operable as the vehicle key. The plurality of mobile terminals may include a first mobile terminal used by the owner of the share vehicle, and a second mobile terminal used by the car share user. When the mode switching unit is permitted to change the operation mode by the operation of the first portable terminal via wireless communication between the first portable terminal and the car sharing apparatus, the mode switching unit is configured to The mode may be changed to a mode in which the second mobile terminal can switch between the valid state and the invalid state of the operation terminal.
According to this configuration, the operation mode of the share vehicle can not be changed unless the owner of the share vehicle using the first portable terminal permits the change of the operation mode. Therefore, the operation terminal is operated by the second portable terminal of the car share user You can not switch between the enabled and disabled states of. Therefore, the operating mode can be prevented from being tampered with, and security can be improved.

In the car sharing system, the mode switching unit may set the operation terminal to an invalid state as an initial state when the share vehicle is used by the car share user. In this case, the mode switching unit is configured to operate the operation terminal when the portable terminal of the car share user is operated through wireless communication between the portable terminal of the car share user and the car share apparatus. Can be switched from the disabled state to the enabled state.
According to this configuration, when the operation mode of the share vehicle is changed by the car share user's portable terminal to a mode capable of switching between the enabled state and the disabled state of the operating terminal, the operating mode is switched to the disabled state without forgetting the operating terminal It becomes possible to set.

In the car sharing system, the mode switching unit can use a normal mode in which each of the operation terminal and the first mobile terminal can be used as the vehicle key, and can use the second mobile terminal as the vehicle key. The operation mode may be switchable with the first share mode in which the operation terminal is in an invalid state. Further, the mode switching unit uses the first share mode, the operation terminal, and the second portable terminal as the vehicle key after the operation mode is changed from the normal mode to the first share mode. The operation mode may be switchable between an available second share mode.
According to this configuration, the mode switching unit is configured to use the normal mode suitable for the use of the car share vehicle by the owner, the first share mode suitable for the use of the car share vehicle by the car share user other than the owner, and the use of the car share One of the second share modes suitable for the user to use the valet parking service can be set as an operation mode suitable for each use situation of the share vehicle.
In the car sharing system, the operation terminal may be one of a plurality of operation terminals of the share vehicle. The electronic key system may include a verification device capable of communicating with each of the plurality of operation terminals and the car sharing device. The mode switching unit is capable of switching the operation mode among a plurality of operation modes, and setting any one of the plurality of operation terminals and the car sharing device as a device to communicate with the verification device in each operation mode By doing this, any one of the plurality of operation terminals and the portable terminal can be used as the vehicle key in each operation mode.
According to this configuration, only one device needs to be operated in each operation mode of the share vehicle, which is advantageous for reducing the power consumption of each device.

According to the present invention, a shared vehicle can be lent out without using a dedicated bullet key.

BRIEF DESCRIPTION OF THE DRAWINGS The block diagram of the car sharing system of 1st Embodiment. Communication sequence diagram of key information authentication. FIG. 6 is a communication sequence diagram when operating the on-vehicle device by operating the mobile terminal. State diagram of each operation mode of the shared vehicle. State diagram of each operation mode of the shared vehicle. Sequence diagram of on / off switching in car sharing mode. The sequence diagram of on-off switching of valet parking mode. The state diagram of each operation mode of the share vehicle of 2nd Embodiment. Communication sequence diagram of smart verification. The specification figure which put together the command in each operation mode, and the device response with respect to each command.

First Embodiment
Hereinafter, a first embodiment of the car sharing system will be described with reference to FIGS. 1 to 7.
As shown in FIG. 1, the vehicle 1 is provided with an electronic key system 4. In one embodiment, the electronic key system 4 includes a verification ECU (Electronic Control Unit) 9 that performs ID verification of the electronic key 2 through wireless communication with the electronic key 2. The collation ECU 9 is an example of a collation device. The verification ECU 9 executes or permits the operation of the in-vehicle device 3 based on the establishment of the electronic key ID verification. In the electronic key system 4 also called a key operation free system, electronic key ID collation (also referred to as smart collation) is performed through the short-range wireless communication started by the vehicle 1 (collation ECU 9). In the key operation free system, electronic key ID verification can be automatically performed without directly operating the electronic key 2. The on-vehicle device 3 may include, but is not limited to, the door lock device 5 and the engine 6, for example. The electronic key 2 is an example of the operation terminal 2 a originally prepared as a vehicle key dedicated to the vehicle 1.

The vehicle 1 is provided with a verification ECU 9, a body ECU 10 that manages the power supply of in-vehicle electrical components, and an engine ECU 11 that controls the engine 6. Each of the body ECU 10 and the engine ECU 11 is also called an in-vehicle device ECU. The ECUs 9 to 11 are electrically connected to each other via a communication line 12 in the vehicle 1. The communication line 12 is, for example, a controller area network (CAN), a local interconnect network (LIN), or a combination thereof. Each of the verification ECU 9 and the electronic key 2 includes a memory (not shown), and the memory stores an electronic key ID and an electronic key specific encryption key. The electronic key ID and the electronic key unique encryption key are information unique to the electronic key 2 registered in the vehicle 1 and are used for electronic key ID verification. The body ECU 10 controls a door lock device 5 that switches locking and unlocking of the vehicle door 13.

The electronic key system 4 further includes a radio wave transmitter 16 and a radio wave receiver 17 provided in the vehicle 1. Although not shown, for example, the radio wave transmitter 16 may include an outdoor transmitter that transmits radio waves outdoors, and an indoor transmitter that transmits radio waves indoors. The radio wave transmitter 16 transmits radio waves in the LF (Low Frequency) band. The radio receiver 17 receives radio waves in the UHF (Ultra High Frequency) band. Therefore, in the electronic key system 4, the verification ECU 9 communicates with the electronic key 2 by the two-way communication of LF-UHF.

When the electronic key 2 enters a communication area formed by the wake signal of the LF radio wave transmitted from the radio wave transmitter 16, the electronic key 2 receives the wake signal and starts from the standby state. When the electronic key 2 is activated, the verification ECU 9 executes ID verification (smart verification) of the electronic key 2. By way of example and not limitation, in smart verification, electronic key ID verification for authenticating the electronic key 2 and challenge response authentication using an electronic key unique encryption key may be performed. The electronic key ID verification performed under the situation where the electronic key 2 is outside the vehicle 1 may be called outdoor smart verification. When the outdoor smart verification is established, the verification ECU 9 permits or executes the locking and unlocking of the vehicle door 13 via the body ECU 10.

Electronic key ID verification performed under the condition that the electronic key 2 is in the vehicle 1 may be referred to as indoor smart verification. When the indoor smart verification is established, the verification ECU 9 permits the power supply transition operation according to the operation of the engine switch 18. For example, when the engine switch 18 is operated in a state where the brake pedal is depressed, the verification ECU 9 starts the engine 6 via the engine ECU 11.

The vehicle 1 is provided with a car sharing system 21 which shares the vehicle 1 with a plurality of people. In this example, the car sharing system 21 includes a car share device 23 mounted on the vehicle 1. The car share device 23 can execute verification of the electronic key ID used in the electronic key system 4 provided in the vehicle 1. Further, the car share device 23 can wirelessly communicate with the portable terminal 22. In the mobile terminal 22, encrypted key information Dk acquired from an external device such as the server 20 is registered. The car share device 23 acquires key information Dk from the portable terminal 22 and authenticates the key information Dk. In this example, the car share device 23 has an encryption key (car share device unique encryption key) that can decrypt the key information Dk, and decrypts the key information Dk using the encryption key. If decryption of the key information Dk is successful, the key information Dk is authenticated. After the authentication of the key information Dk is established, the portable terminal 22 can transmit an operation request for requesting the operation of the in-vehicle device 3 to the car share device 23. The mobile terminal 22 can be, for example, a high-performance mobile phone such as a smartphone. The key information Dk is preferably, for example, a one-time key (one-time password) whose use is permitted only once.

The car share device 23 is independent of the hardware configuration of the electronic key system 4 and can be retrofitted to the vehicle 1. The car share device 23 is, for example, positioning of an electronic key (vehicle key) that is enabled only within the reserved time of the vehicle 1 and is treated the same as the spare key. In this example, the car sharing device 23 cooperates with the portable terminal 22 so that the portable terminal 22 can operate as a vehicle key replacing the electronic key 2. The car share device 23 has a key function (electronic key function) switched between the enabled state and the disabled state. When the key function of the car sharing device 23 is activated, it looks as if an electronic key appeared in the vehicle 1, while when the key function is invalidated, it seems as if the electronic key has disappeared from the vehicle 1 It looks like The car share device 23 is supplied with power from the battery + B of the vehicle 1.

By way of example and not limitation, the portable terminal 22 includes a terminal control unit 26 that controls the operation of the portable terminal 22, and a network communication module 27 for performing network communication between the portable terminal 22 and an external device such as a server, A short distance wireless communication module 28 for performing short distance wireless communication between the portable terminal 22 and the car sharing device 23 and a memory 29 capable of rewriting data are provided. The portable terminal 22 acquires key information Dk from the server 20 through the network communication module 27 and writes the key information Dk in the memory 29. The near field communication is, for example, Bluetooth (registered trademark), preferably Bluetooth (registered trademark) Low Energy (BLE).

The mobile terminal 22 comprises a user interface (UI) application 30 that manages the operation of the car sharing system 21. The UI application 30 is installed in the terminal control unit 26 by being downloaded from the server 20, for example. In this example, the memory 29 of the portable terminal 22 has a user authentication key used when the portable terminal 22 communicates with the car share device 23 of the vehicle 1 and operates the on-vehicle device 3 by operating the portable terminal 22. be registered. The user authentication key can be, for example, a random number whose value changes each time it is generated. The user authentication key may be registered in advance in the car sharing system 21 or may be generated and registered when the vehicle 1 is used.

By way of example and not limitation, the car share device 23 performs smart communication (short range wireless communication) between the controller 33 that controls the operation of the car share device 23 and the car share device 23 and the electronic key system 4 (collation ECU 9) Communication block 34 for performing communication, a near field wireless module 35 for performing near field communication between the car share device 23 and the portable terminal 22, a memory 36 capable of rewriting data, and the car share device 23 And a timer unit 37 that manages the date and time. The memory 36 stores a car sharing device ID, a car sharing device unique encryption key, an electronic key ID, and an electronic key unique encryption key. The car share device ID and the car share device unique encryption key are information unique to the car share device 23. The car share device unique encryption key is used for cryptographic communication between the portable terminal 22 and the car share device 23. For example, the portable terminal 22 can obtain, from the server 20, key information Dk encrypted by the car sharing device unique encryption key. Then, the car sharing device unique encryption key may be used to transmit the key information Dk from the portable terminal 22 to the car sharing device 23. The electronic key ID and the electronic key unique encryption key are used for electronic key ID verification (in this example, smart verification) through the electronic key system 4 as described above. The timer unit 37 includes, for example, a soft timer. The car share device 23 is associated with the vehicle 1 on a one-on-one basis, for example, by associating the car share device ID with the vehicle ID (body number).

The car share device 23 is a key function unit that executes electronic key ID collation (in this example, smart collation) between the car share device 23 and the electronic key system 4 (collation ECU 9) through smart communication by the smart communication block 34. It has 38. The key function unit 38 is provided in the controller 33. For example, the car share device 23 includes one or more processors and a memory storing one or more instructions, and causes the controller 33 to operate as the key function unit 38 by executing the instructions. Alternatively, the key function unit 38 may be implemented by a dedicated circuit. The key function unit 38 acquires key information Dk from the portable terminal 22 and authenticates the key information Dk. Then, when the authentication of the key information Dk is established, the key function unit 38 can execute electronic key ID collation through smart communication with the collation ECU 9. For example, when the portable terminal 22 is operated to operate the on-vehicle device 3 of the share vehicle (vehicle 1), the key function unit 38 is similar to the electronic key ID collation performed between the electronic key 2 and the collation ECU 9 Electronic key ID collation (in this example, smart collation) is performed between the car share device 23 and the collation ECU 9 through the processing, and the operation of the in-vehicle device 3 according to the operation of the portable terminal 22 under the establishment of the electronic key ID collation Perform or allow

Subsequently, using FIG. 2 and FIG. 3, the procedure for reserving use of the vehicle 1 using the portable terminal 22 and operating the on-vehicle device 3 of the vehicle 1 with the portable terminal 22 functioning as a vehicle key will be described. .
In step S101, the server 20 authenticates the user (user who reserves the vehicle 1) of the mobile terminal 22 through network communication with the mobile terminal 22 (UI application 30). In this example, user authentication is performed using a user ID and a password. Moreover, in this user authentication, the use reservation procedure which registers the reservation information of the vehicle 1 is implemented. The reservation information of the vehicle 1 includes, for example, a reservation vehicle, a reservation date and time, and the like. For example, the user ID and password are input to the mobile terminal 22 and transmitted to the server 20 through network communication. When the server 20 authenticates the user based on the user ID and the password, the process proceeds to step S102. If the user authentication is not established, the process is forcibly terminated.

In step S102, the server 20 generates key information Dk. The server 20 may store, for example, a car share apparatus unique encryption key of the car share apparatus 23 mounted on the vehicle 1. The server 20 can generate key information Dk using the car sharing device unique encryption key. In this example, the server 20 encrypts the plaintext with the car-sharing apparatus unique encryption key using an encryption method (encryption algorithm), and obtains the ciphertext as the key information Dk. The key information Dk includes, for example, the “reservation date and time” of the vehicle 1, the “terminal ID” unique to the portable terminal 22, and an encryption key for performing encryption communication between the portable terminal 22 and the car sharing device 23. And “user authentication key” used as

In step S103, the server 20 transmits the key information Dk to the portable terminal 22 through network communication.
In step S104, the portable terminal 22 (UI application 30) performs short-distance wireless communication (in this example, BLE) connection with the car sharing apparatus 23. For example, the car sharing device 23 periodically transmits an advertising packet. The portable terminal 22 transmits a communication connection request to the car share device 23 when receiving the advertising packet within the reservation time to borrow the vehicle 1. The car share device 23 establishes BLE communication with the portable terminal 22 in response to the communication connection request from the portable terminal 22. Then, the car share device 23 transmits, to the portable terminal 22, a communication connection confirmation for communicating establishment of BLE communication.

In step S105, the car sharing device 23 transmits a key information request for requesting key information Dk to the portable terminal 22.
In step S106, the portable terminal 22 (UI application 30) transmits the key information Dk to the car share device 23 in response to the key information request.

In step S107, the car share device 23 authenticates the key information Dk. In this example, the car share device 23 decrypts the key information Dk using a predetermined encryption key (for example, a car share device unique encryption key). At this time, if the decryption of the key information Dk is successful, the car share device 23 determines that the key information Dk received from the portable terminal 22 is correct. If the authentication is successful, the car share device 23 acquires “reservation date and time”, “terminal ID” and “user authentication key” from the key information Dk. On the other hand, if the authentication is not established, the car sharing apparatus 23 determines that the key information Dk is not correct, and disconnects the BLE communication.

In step S108, the car share device 23 transmits the user authentication key to the portable terminal 22.
In step S109, the portable terminal 22 (UI application 30) transmits a key function on request to the car share apparatus 23. The key function on request is a request for switching the key function (key function unit 38) of the car sharing device 23 to the enabled state.

In step S110, in response to the key function on request from the portable terminal 22, the car share device 23 switches the key function unit 38 to the on state (valid state). As a result, the car share device 23 can execute electronic key ID collation through bidirectional communication of LF-UHF with the collation ECU 9.

In step S111, the car sharing apparatus 23 stores key information Dk including the user authentication key in the memory 36 of the car sharing apparatus 23. When the key information Dk (user authentication key) is stored in the memory 36, both the portable terminal 22 and the car sharing device 23 shift to the authentication completed state. This makes it possible to use the portable terminal 22 as a vehicle key in place of the electronic key 2.

As shown in FIG. 3, in step S201, the user turns on the operation request button on the portable terminal 22 in the authentication completed state. As the operation request button, for example, an unlock request button for unlocking the vehicle door 13, a locking request button for locking the vehicle door 13, an engine start request button for allowing the vehicle 1 to start the engine 6, etc. There are various buttons corresponding to the in-vehicle device 3.

In step S202, the portable terminal 22 (UI application 30) encrypts the operation request signal corresponding to the operation request button with the user authentication key. The operation request signal includes a device operation command corresponding to the operation request button.

In step S203, the portable terminal 22 (UI application 30) transmits the encrypted operation request signal to the car share device 23 through near field communication.

In step S 204, when the car share device 23 receives the operation request signal, the car share device 23 transmits a request acceptance response to the portable terminal 22. Then, the car share device 23 communicates with the electronic key system 4 and operates the on-vehicle device 3 according to the received operation request signal. By way of example and not limitation, the car share device 23 may communicate smartly with the verification ECU 9 of the electronic key system 4 through the smart communication block 34, and transmit the device operation command and the electronic key ID to the verification ECU 9. In this case, the verification ECU 9 performs electronic key ID verification, and when electronic key ID verification is established, sends a device operation command to the corresponding in-vehicle device ECU to operate the corresponding in-vehicle device 3. For example, if the device operation command is an unlock request command for the vehicle door 13, the body ECU 10 operates the door lock device 5 to unlock the vehicle door 13, and the device operation command is a lock request command for the vehicle door 13. If so, the body ECU 10 operates the door lock device 5 to lock the vehicle door 13.

If the device operation command is a start request command of the engine 6, the engine ECU 11 permits the start of the engine 6. For example, when the engine switch 18 is operated with the brake pedal depressed, the engine ECU 11 starts the engine 6. Optionally, in addition to the electronic key ID collation, challenge response authentication using an electronic key unique encryption key may be performed between the collation ECU 9 and the car sharing apparatus 23. As described above, as in the smart verification performed between the electronic key 2 and the verification ECU 9, the smart verification may be performed between the car sharing device 23 and the verification ECU 9.

Note that, as shown in FIG. 4, the verification ECU 9 and the car sharing device 23 may be wired connected by a wire 40 instead of being connected wirelessly. In this case, when the car share device 23 receives an operation request signal (a device operation command such as a lock request comment, an unlock request command, or a start request command) from the portable terminal 22, the operation request signal is collated through the wiring 40. It outputs to ECU9. When acquiring the operation request signal from the car sharing device 23 through the wiring 40, the verification ECU 9 performs electronic key ID verification, and operates the corresponding in-vehicle device 3 by sending a device activation command to the corresponding in-vehicle device ECU. .

As shown in FIG. 5, the car sharing system 21 has a function of switching the operation mode of the share vehicle (vehicle 1). In this example, the operation mode is “normal mode” set when the owner of the vehicle 1 uses the vehicle 1, and a car share user other than the owner makes a use reservation of the vehicle 1 to share vehicle (vehicle 1 Between "car share mode" set when using) and "valet parking mode" set when the car share user lends the share vehicle (vehicle 1) to a third party It is possible to switch on. The car share mode is an example of a first share mode, and the valet parking mode is an example of a second share mode.

In the normal mode, the operation terminal 2a is validated, and the vehicle 1 can be operated (that is, the in-vehicle device 3 is operated) by the operation terminal 2a. Further, in the normal mode, the vehicle 1 can be operated by the first portable terminal 22 a possessed by the owner of the vehicle 1. The operation terminal 2a (electronic key 2) is a standard vehicle key provided as standard on the vehicle 1, and is also called a smart key (registered trademark).

In the car share mode, the vehicle 1 can be operated by the second portable terminal 22 b during the use reservation period of the vehicle 1 performed by the second portable terminal 22 b possessed by the car share user. The second mobile terminal 22b can have the same configuration as the first mobile terminal 22a shown in FIG. In the car share mode, the operation terminal 2a is invalidated, and the vehicle 1 can not be operated by the operation terminal 2a. As described above, since the operation terminal 2a is disabled in the car share mode, there is no concern that the operation terminal 2a is illegally used while the vehicle 1 is being shared.

In the valet parking mode, not only the second mobile terminal 22 b but also the operation terminal 2 a is validated. Therefore, the vehicle 1 can be operated by any of the second portable terminal 22b and the operation terminal 2a. For example, it is assumed that a car share user uses the valet parking service. In this case, it is not realistic to hand over the car share user's own portable terminal (the second portable terminal 22b) to a third party such as a valet clerk. In consideration of this point, when using the valet parking service, the car share user changes the operation mode of the vehicle 1 to the valet parking mode to switch the operation terminal 2a from the invalid state to the valid state. Thereby, the car share user can hand over the operation terminal 2a to the valet clerk and can use the valet parking service.

Returning to FIG. 1, the car sharing system 21 includes a mode switching unit 41 that sets the operation mode of the share vehicle 1. In the present example, the mode switching unit 41 is provided in the verification ECU 9. For example, the vehicle 1 includes one or more processors and a memory storing one or more instructions, and causes the processors to operate as the verification ECU 9 and the mode switching unit 41 by executing the instructions. . Alternatively, the mode switching unit 41 may be mounted by a dedicated circuit different from the verification ECU 9 and may be provided to communicate with the verification ECU 9. When the share vehicle 1 is used by a car share user other than the owner, the mode switching unit 41 sets the operation mode of the share vehicle 1 to the mobile terminal of the car share user (in this example, the second portable terminal 22 b). The mode is switched to a mode (in the present example, a car share mode) in which it is possible to switch between the valid state and the invalid state of the operation terminal 2a of the share vehicle 1 by the above.

Next, the operation of the car sharing system 21 will be described using FIGS. 6 and 7. Here, it is assumed that the first portable terminal 22a is registered in the car sharing apparatus 23 by the process of the above-mentioned steps S101 to S111.

[Car share mode enable / disable switching sequence]
As shown in FIG. 6, switching between on (valid) and off (invalid) of the car share mode is performed from the first portable terminal 22a. First, the case where the car share mode is turned on will be described. In step S301, the first portable terminal 22a and the car sharing device 23 are activated by operating the first portable terminal 22a (US application 30) and activating the key function (key function unit 38) of the car sharing device 23. Move to authentication complete state (connection complete state).

In step S302, the car share mode on operation is performed in the first portable terminal 22a (UI application 30). In the car share mode on operation, for example, a button of "car share mode on" is displayed on the screen of the first portable terminal 22a, and the button is touch-operated.

In step S303, the first portable terminal 22a (UI application 30) wirelessly transmits a car share mode on request (smart function disable request) to the car share apparatus 23 in response to the execution of the car share mode on operation.

In step S304, the car share device 23 outputs the car share mode on request (smart function disable request) transmitted from the first portable terminal 22a to the verification ECU 9. When the car share device 23 and the verification ECU 9 are wirelessly connected, this car share mode on request is sent to the verification ECU 9 through the electronic key system 4, and the car share device 23 and the verification ECU 9 are wire connected. If it is, it is sent to the verification ECU 9 through the wiring 40.

In step S305, the verification ECU 9 (mode switching unit 41) switches the operation mode of the share vehicle 1 to the car share mode in response to the car share mode ON request (smart function disable request) from the car share device 23. This will disable the smart feature. Here, when the verification ECU 9 and the car share device 23 are wirelessly connected, the smart function is invalidated, for example, by disabling the wake signal transmission function of the verification ECU 9. When the verification ECU 9 and the car sharing device 23 are connected by wire, for example, while the smart function is valid, the LF radio transmission function of the vehicle 1 (radio wave transmitter 16) is enabled and the vehicle 11 is the operation terminal Although the UHF radio wave from 2a can be received, after the smart function is invalidated, the vehicle 1 does not receive the UHF radio wave from the operation terminal 2a because the LF radio wave transmission function is invalidated.

In step S306, the verification ECU 9 (mode switching unit 41) outputs a car share mode on response (smart function invalid response) to the car share device 23. The car share mode ON response is sent to the car share device 23 through the electronic key system 4 in the case of wireless connection, and is sent to the car share device 23 through the wire 40 in the case of wired connection.

In step S307, the car share device 23 wirelessly transmits the car share mode on response (smart function invalid response) from the verification ECU 9 to the first portable terminal 22a. Then, the first mobile terminal 22a (UI application 30) displays the car share mode on notification, for example, on the screen of the first mobile terminal 22a. Thus, the owner of the share vehicle 1 is notified that the car share mode has been turned on.

The process of turning off the car share mode from the first portable terminal 22a is performed in the same manner as the process of turning on the car share mode in the procedure shown in steps S308 to S314 of FIG. In this example, the car share mode is turned off by transmitting a car share mode off request (smart function enable request) from the first portable terminal 22 a to the verification ECU 9 via the car share device 23. Then, the car share mode off response (smart function valid response) is transmitted from the verification ECU 9 to the first portable terminal 22a via the car share device 23, so that the owner of the share vehicle 1 has the car share mode turned off. Will be notified.

[Ballet parking mode enable / disable switching sequence]
As shown in FIG. 7, switching of the valet parking mode on (valid) and off (invalid) can be performed from the second portable terminal 22 b. First, the case where the valet parking mode is turned on will be described. In step S401, the second mobile terminal 22b and the car share device 23 are activated by the second mobile terminal 22b (UI application 30) being operated and the key function (key function unit 38) of the car share device 23 being enabled. Move to authentication complete state (connection complete state).

In step S402, the bullet parking mode on operation is performed in the second portable terminal 22b (UI application 30). In the bullet parking mode on operation, for example, a button of "ballet parking mode on" is displayed on the screen of the second portable terminal 22b, and the button is touch-operated.

In step S403, the second portable terminal 22b (UI application 30) wirelessly transmits a valet parking mode on request (smart function activation request) to the car share device 23 in response to the execution of the valet parking mode on operation.

In step S404, the car share device 23 outputs the valet parking mode on request (smart function enable request) transmitted from the second portable terminal 22b to the verification ECU 9. The valet parking mode ON request is sent to the verification ECU 9 through the electronic key system 4 when the car sharing device 23 and the verification ECU 9 are wirelessly connected, and the car sharing device 23 and the verification ECU 9 are wire connected In this case, it is sent to the verification ECU 9 through the wiring 40.

In step S405, the verification ECU 9 (mode switching unit 41) switches the operation mode of the share vehicle 1 to the bullet parking mode in response to the bullet parking mode on request (smart function activation request) from the car sharing device 23. This enables the smart function. Here, when the verification ECU 9 and the car sharing device 23 are wirelessly connected, the smart function is validated by, for example, enabling the wake signal transmission function of the verification ECU 9. When the verification ECU 9 and the car sharing device 23 are connected by wire, the LF radio transmission function of the vehicle 1 (radio wave transmitter 16) is enabled and the vehicle 1 can receive UHF radio waves from the operation terminal 2a. The smart feature is enabled.

Here, when the smart function is enabled in the valet parking mode, the functions available on the share vehicle 1 may be limited. As this function limitation, for example, the expiration date of the share vehicle 1 is set by date and time etc., unlocking of the trunk is invalidated, unlocking of the glove box is invalidated, and additional registration of the portable terminal 22 (vehicle key) And the like.

After the operation mode of the shared vehicle 1 is switched to the bullet parking mode, in step S406, the verification ECU 9 (mode switching unit 41) outputs a bullet parking mode on response (smart function valid response) to the car share device 23. The valet parking mode on response is sent to the car sharing device 23 through the electronic key system 4 in the case of wireless connection, and is sent to the car sharing device 23 through the wire 40 in the case of wired connection.

In step S407, the car sharing device 23 wirelessly transmits the bullet parking mode on response (smart function valid response) from the verification ECU 9 to the second portable terminal 22b. Then, the second mobile terminal 22b (UI application 30) displays a valet parking mode on notification, for example, on the screen of the second mobile terminal 22b. Thus, the car sharing user is notified that the valet parking mode has been turned on.

The process of turning off the valet parking mode from the second portable terminal 22b is performed in the same manner as the process of turning on the valet parking mode in the procedure shown in steps S408 to S414 of FIG. In this example, the valet parking mode is turned off by transmitting a bullet parking mode off request (smart function invalidation request) from the second portable terminal 22 b to the verification ECU 9 via the car sharing device 23. Then, the valet parking mode is turned off for the car share user by the valence parking mode off response (smart function invalidation response) being transmitted from the verification ECU 9 to the second portable terminal 22 b via the car sharing device 23. Is notified.

The car sharing system 21 described above has the following advantages.
When a car share user other than the owner of the shared vehicle 1 uses the valet parking service, the second mobile terminal 22 b of the car share user is operated to switch the operation terminal 2 a of the share vehicle 1 from the disabled state to the enabled state. Thereby, the car share user can use the valet parking service by handing the operation terminal 2a which originally exists in the share vehicle 1 instead of the second portable terminal 22b to a third party such as a valet person. . Therefore, it is not necessary to prepare a dedicated bullet key for using the valet parking service in the car sharing system 21.

When the mode switching unit 41 is permitted to change the operation mode by the operation of the first mobile terminal 22a through the wireless communication between the first mobile terminal 22a used by the owner of the share vehicle 1 and the car sharing device 23, The operation mode of the shared vehicle 1 is changed to a mode (in the present example, a car share mode) in which the second mobile terminal 22b of the car share user can switch between the valid state and the invalid state of the operation terminal 2a. Thus, the operation mode of the share vehicle 1 can not be changed to the car share mode unless the first portable terminal 22a is operated to change the operation mode. Therefore, security can be improved by preventing the operating mode from being illegally changed.

When the share vehicle 1 is used by a car share user other than the owner (in the car share mode), the mode switching unit 41 sets the operation terminal 2a as an initial state to an invalid state, and operates the second portable terminal 22b. Switches the operation terminal 2a from the disabled state to the enabled state. As described above, when the operation mode of the share vehicle 1 is changed from the normal mode to the car share mode, the operation terminal 2a is set in the invalid state, so there is a concern that the operation terminal 2a is used illegally when using the car share mode There is no

Second Embodiment
Next, a second embodiment will be described with reference to FIGS. In the second embodiment, the type of terminal (operation terminal / form terminal) operable as a vehicle key in each operation mode of the share vehicle 1 is changed from the first embodiment. Hereinafter, the same parts as those of the first embodiment are denoted by the same reference numerals, and the description thereof is omitted. Only different parts will be described in detail.

As shown in FIG. 8, in the car sharing system 21 of the second embodiment, as in the first embodiment, among the plurality of operation modes (in this example, the normal mode, the car share mode, and the valet parking mode) One is selected as the operation mode of the share vehicle 1. The car sharing system 21 of the second embodiment includes a first operation terminal 2s and a second operation terminal 2t. Here, the first operation terminal 2 s is a main vehicle key (also called an owner key) of the share vehicle 1, and the second operation terminal 2 t is a sub-vehicle key of the share vehicle 1. The first and

second operation terminals

2s and 2t can be, for example, smart keys configured similarly to the electronic key 2 of FIG. The second operation terminal 2t can be stored, for example, in a car. The mode switching unit 41 of the second embodiment sets one of the first operation terminal 2s, the second operation terminal 2t, and the car sharing device 23 as a device 45 that communicates with the verification ECU 9 of the vehicle 1 in each operation mode. By doing this, any one of the first operation terminal 2s, the second operation terminal 2t, and the portable terminal 22 can be used as a vehicle key in each operation mode.

In the present embodiment, in the normal mode, the on-vehicle device 3 can be operated only at the first operation terminal 2s (for example, locking and unlocking of the vehicle door 13, start of the engine 6, and the like can be performed). That is, in the normal mode, only the first operation terminal 2s is validated and can be used as a vehicle key. In the car share mode, only the second mobile terminal 22b (car share device 23) of the car share user is validated and can be used as a vehicle key. In the valet parking mode, only the second operation terminal 2t is validated and can be used as a vehicle key. The switching from the normal mode to the car share mode can be performed by the first operation terminal 2s or the first portable terminal 22a. Switching from the car share mode to the valet parking mode can be performed only at the second portable terminal 22 b.

Next, the operation of the car sharing system 21 of the second embodiment will be described using FIGS. 9 and 10.
As shown in FIG. 9, the verification ECU 9 periodically or irregularly transmits a wake signal from the radio wave transmitter 16, and a specific device 45 located around the verification ECU 9 (in this example, a communication target with the verification ECU 9) Waits for an acknowledgment (ACK) signal from any one of the first operation terminal 2s, the second operation terminal 2t, and the car sharing device 23 set as (1). When the verification ECU 9 receives an ACK signal to the wake signal from a specific device 45, it executes challenge response authentication through communication with the device 45. In this example, the verification ECU 9 transmits a challenge code for a specific device 45, and receives from the device 45 a response code calculated using the challenge code. Further, the collation ECU 9 also calculates a response code from the challenge code, and compares the calculated response code with the response code transmitted from the device 45. When the two response codes match, the matching ECU 9 determines that the challenge response authentication has been established.

As shown in FIG. 10, in the normal mode, the device 45 in communication with the verification ECU 9 is set to the first operation terminal 2s of the main vehicle key. Therefore, the verification ECU 9 communicates only with the first operation terminal 2s to perform ID verification (smart verification or wireless verification). In the present example, smart verification is performed, and the verification ECU 9 transmits “wake signal 1” that can be responded to by only the first operation terminal 2s. When the first operation terminal 2s receives the wake signal 1 transmitted from the radio wave transmitter 16, the first operation terminal 2s sends back an ACK signal to the verification ECU 9. In the case where wireless verification is performed instead of smart verification, the device 45 (the first operation terminal 2s, the second operation terminal 2t, or the car sharing device 23) starts communication and ID verification is performed.

When the verification ECU 9 receives an ACK signal corresponding to the wake signal 1 from the first operation terminal 2s, the verification ECU 9 transmits "challenge 1" as a challenge code. The challenge 1 is a challenge code that can be used only by the first operation terminal 2s for the response code calculation. When receiving the challenge 1, the first operation terminal 2s calculates a response code from the challenge 1 and a given encryption key, and transmits the calculated response code to the verification ECU 9. The verification ECU 9 also calculates the response code from the same encryption key and the challenge 1. Then, the comparison ECU 9 compares the calculated response code with the response code transmitted from the first operation terminal 2s, and if both match, it is determined that the challenge response authentication is established. In addition to the challenge response authentication, the verification ECU 9 also performs electronic key ID verification of the first operation terminal 2s. Then, when the challenge response authentication and the electronic key ID collation are established, the collation ECU 9 determines that the smart collation with the first operation terminal 2s is established. As a result, in the normal mode, only the first operation terminal 2s (main vehicle key) is validated and can be used as a vehicle key for operating the on-vehicle device 3.

In the car share mode, the device 45 communicating with the verification ECU 9 is set in the car share device 23. In this case, the verification ECU 9 communicates only with the car share device 23 to perform ID verification (smart verification or wireless verification). In the present embodiment, in the car share mode, the verification ECU 9 transmits the “wake signal 2” that only the car share device 23 can respond to. Then, when the verification ECU 9 receives the ACK signal from the car sharing device 23, the verification ECU 9 transmits "challenge 2" as a challenge code. The challenge 2 is a challenge code that can be used only by the car sharing device 23 for response code calculation. Then, in the same manner as in the normal mode, the verification ECU 9 performs challenge response authentication via communication with the car share device 23, and when challenge response authentication and electronic key ID verification are established, the smart with the car share device 23 is performed. It is determined that the collation has been established. As a result, in the car share mode, only the car share device 23 is enabled, and only the second mobile terminal 22 b of the car share user can be used as a vehicle key for operating the on-vehicle device 3 through the car share device 23.

In the bullet parking mode, the device 45 communicating with the verification ECU 9 is set to the second operation terminal 2t of the sub vehicle key. In this case, the verification ECU 9 communicates only with the second operation terminal 2t to perform ID verification (smart verification or wireless verification). In the present embodiment, in the valet parking mode, the verification ECU 9 transmits the “wake signal 3” which can be responded only by the second operation terminal 2t. And collation ECU9 will transmit "challenge 3" as a challenge code | cord, if an ACK signal is received from the 2nd operation terminal 2t. The challenge 3 is a challenge code that can be used only by the second operation terminal 2t for response code calculation. Then, as in the case of the normal mode, the verification ECU 9 performs challenge response authentication via communication with the second operation terminal 2t, and when challenge response authentication and electronic key ID verification are established, the second operation terminal 2t and It is determined that the smart verification of has been established. As a result, in the valet parking mode, only the second operation terminal 2t (sub vehicle key) is validated and can be used as a vehicle key for operating the in-vehicle device 3.

The car sharing system 21 of the second embodiment has the following advantages.
The mode switching unit 41 sets any one of the first operation terminal 2s, the second operation terminal 2t, and the car sharing device 23 as a device 45 that communicates with the verification ECU 9 in each operation mode. Thereby, any one of the first operation terminal 2s, the second operation terminal 2t, and the portable terminal 22 (in this example, the second portable terminal 22b of the car sharing user) can be used as a vehicle key in each operation mode It becomes. Therefore, since only one device 45 needs to be operated in each operation mode of the share vehicle 1, it is advantageous to keep the power consumption of each device 45 low.

The above embodiment is not limited to the configuration described above, and may be modified as follows.
In each embodiment, the operation mode of the share vehicle 1 is not limited to the normal mode, the car share mode, and the valet parking mode, and other modes may be adopted.

In each embodiment, the mode capable of switching between the valid state and the invalid state of the

operation terminals

2a, 2s, and 2t is not limited to the car share mode, and may be another mode.
In each embodiment, the change from the normal mode to the car share mode is not limited to being performed by the first portable terminal 22 a possessed by the owner of the share vehicle 1. For example, the share vehicle 1 may be switched from the normal mode to the car share mode by an instruction from the server 20 or another communication device owned by the owner.

-In each embodiment, the operation terminal 2a is not limited to an electronic key, What is necessary is just an arbitrary vehicle key.
In each embodiment, when the operation mode is switched from the normal mode to the car share mode, the present invention is not limited to setting the operation terminal 2a in the invalid state as the initial state. For example, when the mode is switched to the car share mode, the operation mode may shift to a setting mode for setting the operation terminal 2a to the valid state or the invalid state. In this case, the operation terminal 2a may be set to the valid state or the invalid state at the timing when the car share user borrows and uses the share vehicle 1.

In each embodiment, the mode switching unit 41 may be provided not in the matching ECU 9 but in another device.
In each embodiment, the encryption key may be changed to any other encryption key other than the user authentication key.

In each embodiment, the portable terminal 22 or the car sharing device 23 may obtain the user authentication key by any procedure or method.
In each embodiment, the key information Dk is not limited to the information encrypted by the car sharing device unique encryption key, and may be encrypted by any other encryption key.

In each embodiment, the content of the key information Dk is not limited to the content described above, and may include other arbitrary information.
In each embodiment, the key information Dk is not limited to being generated by the server 20, and may be generated by any other external device.

In each embodiment, the condition for switching the key function unit 38 from the invalid state to the valid state is not limited to the condition described above, and may be another arbitrary condition.
In each embodiment, the start of the engine 6 may be started by, for example, displaying a button of “engine start” on the screen of the portable terminal 22 and operating this button.

In each embodiment, in smart verification performed in the key operation free system (electronic key system 4), an external transmitter and an external vehicle for determining whether the electronic key 2 is inside the vehicle 1 or outside the vehicle 1 It is not limited to using an in-vehicle transmitter. For example, if antennas (LF antennas) are arranged on the left and right of the vehicle body and the combination of the response of the electronic key 2 to the radio waves (communication area) transmitted from each antenna is confirmed, is the electronic key 2 in the vehicle 1? Alternatively, it may be determined whether the vehicle 1 is outside.

In each embodiment, the smart verification of the electronic key system 4 is not limited to performing both the electronic key ID verification and the challenge response authentication. Any method may be used as the collation method as long as at least electronic key ID collation is performed. Also, any other authentication may be used instead of the challenge response authentication.

In each embodiment, the electronic key system 4 may adopt a wireless key system in which the electronic key 2 starts wireless communication and executes electronic key ID collation instead of the collation ECU 9.
In each embodiment, the electronic key 2 is not limited to the smart key (registered trademark), and may be any other wireless key.

In each embodiment, the near field communication is not limited to the Bluetooth communication, and can be changed to any other communication method.
In each embodiment, the key information Dk is not limited to the one-time key, and may be any other restricted information.

In each embodiment, as an encryption key used for encryption communication, any of a car share device unique encryption key, a user authentication key, and an electronic key unique encryption key can be used, for example. In this case, for example, switching the encryption key to be used in the middle of the process is advantageous for further improving the communication security.

In each embodiment, the mounting location of the car sharing apparatus 23 is not particularly limited.
In each embodiment, the mobile terminal 22 is not limited to a high-performance mobile phone such as a smartphone, and can be changed to any other mobile terminal.

Claims

A car sharing system,
An operation terminal for a share vehicle operable as a vehicle key for operating the in-vehicle device through the electronic key system;
The electronic key system is wirelessly communicable with a portable terminal operable as the vehicle key, authenticates key information through wireless communication with the portable terminal, and operates the portable terminal having the authenticated key information. A car sharing device for operating the in-vehicle device through
When the share vehicle is used by a car share user other than the owner of the share vehicle, the operation mode of the share vehicle is determined by the portable terminal of the car share user. A car sharing system provided with a mode switching unit that changes to a switchable mode.
The car sharing apparatus can wirelessly communicate with a plurality of portable terminals operable as the vehicle key,
The plurality of mobile terminals include a first mobile terminal used by the owner of the share vehicle, and a second mobile terminal used by the car share user.
When the mode switching unit is permitted to change the operation mode by the operation of the first portable terminal via wireless communication between the first portable terminal and the car sharing apparatus, the mode switching unit is configured to Changing the enabled state and the disabled state of the operation terminal to a switchable mode by the second mobile terminal;
The car sharing system according to claim 1.
The mode switching unit is
When the shared vehicle is used by the car sharing user, the operating terminal is set to an invalid state as an initial state,
When the mobile terminal of the car share user is operated through wireless communication between the mobile terminal of the car share user and the car share apparatus, the operation terminal is switched from the disabled state to the enabled state.
The car sharing system according to claim 1 or 2.
The mode switching unit is
A normal mode in which each of the operation terminal and the first mobile terminal can be used as the vehicle key, and a first share mode in which the second mobile terminal can be used as the vehicle key and the operation terminal is disabled Switching between the operating modes, and
After the operation mode is changed from the normal mode to the first share mode, the first share mode, and a second share mode in which each of the operation terminal and the second portable terminal can be used as the vehicle key Switching between the operating modes between
The car sharing system according to claim 2.
The operation terminal is one of a plurality of operation terminals of the share vehicle,
The electronic key system includes a verification device capable of communicating with each of the plurality of operation terminals and the car sharing device.
The mode switching unit is capable of switching the operation mode among a plurality of operation modes, and setting any one of the plurality of operation terminals and the car sharing device as a device to communicate with the verification device in each operation mode To enable any one of the plurality of operation terminals and the portable terminal to be used as the vehicle key in each operation mode,
The car sharing system according to any one of claims 1 to 3.