WO2019116923A1 - Dispositif de commande embarqué, système de commande embarqué, procédé de commande embarqué et programme informatique - Google Patents

Dispositif de commande embarqué, système de commande embarqué, procédé de commande embarqué et programme informatique Download PDF

Info

Publication number
WO2019116923A1
WO2019116923A1 PCT/JP2018/044113 JP2018044113W WO2019116923A1 WO 2019116923 A1 WO2019116923 A1 WO 2019116923A1 JP 2018044113 W JP2018044113 W JP 2018044113W WO 2019116923 A1 WO2019116923 A1 WO 2019116923A1
Authority
WO
WIPO (PCT)
Prior art keywords
unit
portable device
response
vehicle
signal
Prior art date
Application number
PCT/JP2018/044113
Other languages
English (en)
Japanese (ja)
Inventor
宇佐美　彰規
Original Assignee
株式会社オートネットワーク技術研究所
住友電装株式会社
住友電気工業株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社オートネットワーク技術研究所, 住友電装株式会社, 住友電気工業株式会社 filed Critical 株式会社オートネットワーク技術研究所
Publication of WO2019116923A1 publication Critical patent/WO2019116923A1/fr

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R25/00—Fittings or systems for preventing or indicating unauthorised use or theft of vehicles
    • B60R25/20—Means to switch the anti-theft system on or off
    • B60R25/24—Means to switch the anti-theft system on or off using electronic identifiers containing a code not memorised by the user
    • E—FIXED CONSTRUCTIONS
    • E05—LOCKS; KEYS; WINDOW OR DOOR FITTINGS; SAFES
    • E05B—LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
    • E05B49/00—Electric permutation locks; Circuits therefor ; Mechanical aspects of electronic locks; Mechanical keys therefor

Definitions

  • the present invention relates to an in-vehicle control device, an in-vehicle control system, an in-vehicle control method, and a computer program.
  • a vehicle communication system for locking and unlocking a vehicle door without using a mechanical key has been put to practical use.
  • a keyless entry system that locks or unlocks a vehicle door by wireless remote control using a portable device carried by the user, a user carrying the portable device approaches the vehicle, or only holds the door handle
  • the smart entry (registered trademark) system and the like for unlocking the vehicle door has been put to practical use (see, for example, Patent Document 1).
  • a vehicle communication system for starting a vehicle engine without using a mechanical key is also in practical use.
  • a push-start system has been put into practical use, in which a user carrying a portable device starts an engine simply by pressing an engine start button.
  • a welcome light system has been put to practical use, which turns on the interior light or the exterior light.
  • the in-vehicle control device performs wireless communication with the portable device.
  • various signals are transmitted from the transmission antenna of the on-vehicle control device to the portable device using radio waves in the LF (low frequency) band, and the portable device receiving the signals uses the radio waves in the RF (radio frequency) band And by transmitting a response signal.
  • the on-vehicle control device performs control of unlocking, locking, engine start, welcome light lighting, etc. after authentication and position confirmation of the portable device.
  • the signal transmitted from the on-vehicle control device is a signal of the LF band, and the transmission range of the signal is limited to a predetermined range around the vehicle. For this reason, the portable device receives the signal of the LF band transmitted from the in-vehicle control device, and the signal of the RF band is returned from the portable device as a response. It is limited to the case where the occupant is inside or around the vehicle.
  • the present invention has been made in view of such circumstances, and it is an object of the present invention to provide an on-vehicle control device, an on-vehicle control system, an on-vehicle control method, and a computer program that can suppress unauthorized access due to relay attack.
  • the on-vehicle control device requests a response to the portable device when the operation unit receives an operation relating to a start request of an accessory mounted on a vehicle, and the operation unit receives the operation.
  • An on-vehicle control device for starting the accessory when the portable device is authenticated based on a response signal from the portable device in response to the response request signal.
  • a detection unit for detecting the presence of a portable device, and a transmission stop unit for stopping transmission of the response request signal when the operation unit receives the operation without detecting the presence of the portable device by the detection unit
  • An on-vehicle control system requests an operation unit that receives an operation related to a start request of an accessory mounted on a vehicle, and a response to the portable device when the operation unit receives the operation.
  • An on-vehicle control device having a transmission unit for transmitting a response request signal, and a portable device for transmitting a response signal when the response request signal from the on-vehicle control device is received, the portable device for the response request signal
  • An on-vehicle control system that starts the accessory when the portable device is authenticated based on a response signal from the control unit, wherein the on-vehicle control device detects the presence of the portable device by a detection unit, and the detection unit And a transmission stop unit that stops transmission of the response request signal when the operation unit receives the operation without detecting the presence of the portable device.
  • An on-vehicle control system requests an operation unit that receives an operation related to a start request of an accessory mounted on a vehicle, and a response to the portable device when the operation unit receives the operation.
  • An on-vehicle control device having a transmission unit for transmitting a response request signal, and a portable device for transmitting a response signal when the response request signal from the on-vehicle control device is received, the portable device for the response request signal
  • An on-vehicle control system that starts the accessory when the portable device is authenticated based on a response signal from the mobile communication device, wherein the on-vehicle control device includes a detection unit that detects the presence of the portable device, the portable device The response signal is received when the response request signal is received without the presence of the portable device being detected by the acquisition unit that acquires the detection result by the detection unit from the in-vehicle control device, and the detection unit. And a transmission stopping unit for stopping the transmission.
  • the on-vehicle control method transmits a response request signal for requesting a response to the portable device when receiving an operation related to a start request for an accessory mounted on the vehicle, and transmits the response request signal
  • transmission of the response request signal is stopped.
  • the computer program transmits a response request signal for requesting a response to the portable device when receiving an operation related to a start request for an accessory mounted in a vehicle, and transmits the response request signal to the portable device. It is a program for starting the equipment when the portable device is authenticated based on a response signal from the portable device, and the presence of the portable device is detected and the presence of the portable device is not detected. It is a computer program for making a computer perform processing which stops transmission of the said response request signal, when the said operation is received.
  • FIG. 1 is a schematic view illustrating a schematic configuration of an in-vehicle control system according to a first embodiment. It is a block diagram explaining an internal configuration of an in-vehicle control device. It is a block diagram explaining an internal configuration of a portable machine. It is a flowchart explaining the procedure of the process which the vehicle-mounted control apparatus which concerns on Embodiment 1 performs. It is a flowchart explaining the procedure of the process which the vehicle-mounted control apparatus which concerns on Embodiment 2 performs. It is a flowchart explaining the procedure of the process which the portable machine which concerns on Embodiment 3 performs.
  • the on-vehicle control device requests a response to the portable device when the operation unit receives an operation relating to a start request of an accessory mounted on a vehicle, and the operation unit receives the operation.
  • An on-vehicle control device for starting the accessory when the portable device is authenticated based on a response signal from the portable device in response to the response request signal.
  • a detection unit for detecting the presence of a portable device, and a transmission stop unit for stopping transmission of the response request signal when the operation unit receives the operation without detecting the presence of the portable device by the detection unit
  • the on-vehicle control device further includes a release unit that releases the transmission stop of the response request signal when an instruction to release the transmission stop of the response request signal is received from the portable device.
  • the on-vehicle control device further includes a release unit that cancels the transmission stop of the response request signal when a set time has elapsed since the transmission of the response request signal is stopped.
  • the prohibition can be canceled when the set time has elapsed.
  • the on-vehicle control device further includes a notification unit that notifies that the transmission of the response request signal is stopped when the transmission stop unit stops the transmission of the response request signal.
  • the on-vehicle control device further includes a lighting control unit that turns on a vehicle light when the detection unit detects the presence of the portable device.
  • the accessory is an engine or a battery system for driving provided in the vehicle, or a door lock mechanism that locks or unlocks a door of the vehicle.
  • An on-vehicle control system requests an operation unit that receives an operation related to a start request of an accessory mounted on a vehicle, and a response to the portable device when the operation unit receives the operation.
  • An on-vehicle control device having a transmission unit for transmitting a response request signal, and a portable device for transmitting a response signal when the response request signal from the on-vehicle control device is received, the portable device for the response request signal
  • An on-vehicle control system that starts the accessory when the portable device is authenticated based on a response signal from the control unit, wherein the on-vehicle control device detects the presence of the portable device by a detection unit, and the detection unit And a transmission stop unit that stops transmission of the response request signal when the operation unit receives the operation without detecting the presence of the portable device.
  • An on-vehicle control system requests an operation unit that receives an operation related to a start request of an accessory mounted on a vehicle, and a response to the portable device when the operation unit receives the operation.
  • An on-vehicle control device having a transmission unit for transmitting a response request signal, and a portable device for transmitting a response signal when the response request signal from the on-vehicle control device is received, the portable device for the response request signal
  • An on-vehicle control system that starts the accessory when the portable device is authenticated based on a response signal from the mobile communication device, wherein the on-vehicle control device includes a detection unit that detects the presence of the portable device, the portable device The response signal is received when the response request signal is received without the presence of the portable device being detected by the acquisition unit that acquires the detection result by the detection unit from the in-vehicle control device, and the detection unit. And a transmission stopping unit for stopping the transmission.
  • the on-vehicle control method transmits a response request signal for requesting a response to the portable device when receiving an operation related to a start request for an accessory mounted on the vehicle, and transmits the response request signal
  • transmission of the response request signal is stopped.
  • the computer program transmits a response request signal for requesting a response to the portable device when receiving an operation related to a start request for an accessory mounted in a vehicle, and transmits the response request signal to the portable device. It is a program for starting the equipment when the portable device is authenticated based on a response signal from the portable device, and the presence of the portable device is detected and the presence of the portable device is not detected. It is a computer program for making a computer perform processing which stops transmission of the said response request signal, when the said operation is received.
  • FIG. 1 is a schematic view illustrating a schematic configuration of the on-vehicle control system according to the first embodiment.
  • the on-vehicle control system according to the first embodiment includes, for example, an on-vehicle control device 100 mounted on a vehicle C, and a portable device 200 carried by an occupant.
  • the in-vehicle control device 100 is, for example, an ECU (Electronic Controller Unit), and integrally performs control related to the operation of the engine provided in the vehicle C, control related to locking and unlocking of the vehicle door, and the like.
  • ECU Electronic Controller Unit
  • the on-vehicle control device 100 includes a plurality of LF transmission antennas 106a to 106e and an RF reception antenna 107a in order to perform wireless communication with the portable device 200.
  • the LF transmission antennas 106a to 106e are antennas provided, for example, in the vicinity of each vehicle door provided in the vehicle C and in each tire house, and transmit a signal having a frequency of the LF band (hereinafter also referred to as an LF signal).
  • the LF transmission antennas 106a to 106e are provided, for example, around the vehicle door for the driver's seat, the passenger seat, the right rear seat, the left rear seat, and the rear door and in each tire house.
  • the RF receiving antenna 107a is, for example, an antenna incorporated in the on-vehicle control device 100, and receives a signal having a frequency of an RF band (hereinafter also referred to as an RF signal).
  • the portable device 200 includes an LF reception antenna 204a and an RF transmission antenna 205a to perform wireless communication with the on-vehicle control device 100 mounted on the vehicle C (see FIG. 3).
  • the LF receiving antenna 204 a is an antenna incorporated in the portable device 200, and receives an LF signal transmitted from the on-vehicle control device 100.
  • the RF transmission antenna 205a is an antenna built in the portable device 200, and for example, when receiving an LF signal transmitted from the in-vehicle control device 100, transmits an RF signal as the response signal to the in-vehicle control device 100.
  • the communication range of wireless communication using an RF signal is about several tens of meters, but the communication range of wireless communication using an LF signal Is about several meters. Therefore, if the portable device 200 receives the LF signal transmitted from the on-vehicle control device 100 and transmits the RF signal as the response signal from the portable device 200, the portable device 200 should be properly possessed. It is limited to the case where the vehicle occupant is present inside or around the vehicle C.
  • the passenger carrying the portable device 200 can Even in the case of being separated from the vehicle C, communication between the on-vehicle control device 100 and the portable device 200 can be achieved. If an unauthorized access to the in-vehicle control device 100 occurs, there is a possibility that a malicious third party may execute door lock release, engine start, power transition, and the like.
  • the door lock is released, the engine is started, when an operation that does not follow the normal procedure is received with respect to the operation that requests the start of the engine or the operation that requests the door lock.
  • FIG. 2 is a block diagram for explaining the internal configuration of the on-vehicle control device 100.
  • the on-vehicle control device 100 includes a control unit 101, a storage unit 102, an input unit 103, an output unit 104, an in-vehicle communication unit 105, an LF transmission unit 106, and an RF reception unit 107.
  • the control unit 101 includes, for example, a central processing unit (CPU), a read only memory (ROM), and a random access memory (RAM).
  • the CPU in the control unit 101 executes the control program stored in the ROM to control the operation of the hardware included in the in-vehicle control device 100, and causes the entire device to function as the in-vehicle device of the present application.
  • the RAM in the control unit 101 stores various data generated during execution of the control program.
  • the control unit 101 is not limited to the above configuration, and may be one or more processing circuits including a single core CPU, a multi-core CPU, a microcomputer, a volatile or non-volatile memory, and the like. Further, the control unit 101 may have functions such as a clock for outputting date and time information, a timer for measuring an elapsed time from giving a measurement start instruction to giving a measurement end instruction, and a counter for counting the number.
  • the storage unit 102 is formed of, for example, a nonvolatile memory such as an EEPROM (Electronically Erasable Programmable Read Only Memory), and stores various information.
  • various information stored in the storage unit 102 includes, for example, the ID (Identifier) of the vehicle C on which the on-vehicle control device 100 is mounted, the ID of the portable device 200 serving as the communication partner, and authentication of key information used for encryption processing. Information is included.
  • the input unit 103 includes an interface for connecting request switches such as the engine start switch 111 and the door lock switch 112.
  • the engine start switch 111 is a request switch for receiving a request for starting the engine included in the vehicle C, and is provided on a console inside the vehicle.
  • the door lock switch 112 is a request switch for receiving a request for locking and unlocking the vehicle door, and is provided on a key cylinder, a door handle or the like provided on the vehicle door for the driver's seat. Note that these request switches may be mechanical switches, or may be switches equipped with a sensor that detects the operation of the occupant in a contact system or non-contact system.
  • the output unit 104 includes an interface that connects the engine starter 121, the door lock mechanism 122, and the like.
  • the engine starter 121 is a starting device for starting the engine of the vehicle C.
  • the door lock mechanism 122 includes a mechanical mechanism for locking and unlocking each vehicle door of the vehicle C, an actuator for electrically operating the mechanical mechanism, and the like.
  • the in-vehicle communication unit 105 includes, for example, a CAN communication interface (CAN: Controller Area Network), and is connected to another ECU of the vehicle C via a CAN bus.
  • CAN Controller Area Network
  • the in-vehicle communication unit 105 exchanges data with another ECU (not shown) in accordance with the CAN protocol.
  • the LF transmission unit 106 includes a signal generation circuit that generates an LF signal based on the signal output from the control unit 101, an amplification circuit that amplifies the generated signal, and the like.
  • the amplified signal is transmitted to the LF transmission antennas 106a to 106e. Send to more outside.
  • the LF transmission unit 106 transmits, for example, a detection signal (LF signal) for detecting the portable device 200 through the LF transmission antennas 106a to 106e.
  • LF signal detection signal
  • the authentication information stored in the storage unit 102 is added to the LF signal transmitted from the LF transmission unit 106.
  • the RF receiving unit 107 is connected to the RF receiving antenna 107a, and includes a receiving circuit that receives an RF signal through the RF receiving antenna 107a. In the present embodiment, the RF receiving unit 107 transmits the RF signal received through the RF receiving antenna 107 a to the control unit 101.
  • the received RF signal includes the authentication information added by the transmission source (for example, the portable device 200), and it can be determined whether or not to authenticate the transmission source using this authentication information.
  • the control unit 101 of the in-vehicle control device 100 receives the operation of the engine start switch 111 through the input unit 103, receives an RF signal as a response to the LF signal transmitted from the LF transmission unit 106, and receives the RF signal
  • the control signal is output to the engine starter 121 through the output unit 104 to perform control to start the engine of the vehicle C.
  • the control unit 101 receives the operation of the door lock switch 112 through the input unit 103, receives an RF signal as a response to the LF signal transmitted from the LF transmission unit 106, and is included in the received RF signal.
  • a control signal is output to the door lock mechanism 122 through the output unit 104 to perform control to unlock the lock of the vehicle door.
  • the on-vehicle control device 100 controls the start of the engine.
  • the vehicle C incorporates a drive battery system instead of the engine as a drive source
  • the drive battery system is started. It may be configured to control.
  • the on-vehicle control device 100 is configured to execute control related to starting of the engine and locking and unlocking of the vehicle door. However, control related to starting of the engine is performed.
  • the engine ECU and a door lock ECU that performs control related to locking and unlocking of the vehicle door may be connected to the in-vehicle communication unit 105, and control of these may be performed through the engine ECU and the door lock ECU.
  • FIG. 3 is a block diagram for explaining the internal configuration of the portable device 200.
  • the portable device 200 includes a control unit 201, a storage unit 202, an operation unit 203, an LF reception unit 204, an RF transmission unit 205, and a notification unit 206.
  • the control unit 201 includes, for example, a CPU, a ROM, and the like.
  • the CPU in the control unit 201 controls the operation of each hardware provided in the portable device 200 by executing the control program stored in the ROM, and causes the entire device to function as the portable device of the present application.
  • the control unit 201 may have a function such as a timer that measures an elapsed time from giving a measurement start instruction to giving a measurement end instruction, a counter that counts the number, and the like.
  • the storage unit 202 is configured by a non-volatile memory such as an EEPROM and stores various types of information.
  • the various information stored in the storage unit 202 includes, for example, the ID of the portable device 200, the ID of the vehicle C equipped with the on-vehicle control device 100 as the communication partner, and authentication information such as key information used for encryption processing.
  • the operation unit 203 includes an interface for receiving an operation by a passenger.
  • the operation unit 203 includes an unlock button 203a operated when unlocking the door of the vehicle C and a lock button 203b operated when locking the door of the vehicle C.
  • the operation unit 203 outputs a signal indicating that the unlock button 203a (or the lock button 203b) is operated to the control unit 201.
  • the control unit 201 receives a signal indicating that the unlock button 203a (or the lock button 203b) has been operated, the control unit 201 sends, to the RF transmission unit 205, a control signal instructing unlocking (or locking) of the door of the vehicle C. Do.
  • the LF reception unit 204 is connected to the LF reception antenna 204a, receives the LF signal through the LF reception antenna 204a, measures the signal strength of the received signal, and obtains the RSSI (Received Signal Strength Indicator). It has a circuit etc.
  • the LF reception unit 204 acquires the RSSI of the received detection signal, and sends the received detection signal and the acquired RSSI to the control unit 201.
  • the control unit 201 executes processing for authenticating the on-vehicle control device 100 of the transmission source, and when it is a detection signal from the on-vehicle control device 100, it transmits RF as a response.
  • a process of transmitting an RF signal from the unit 205 is performed.
  • the control unit 201 outputs the RSSI and the authentication information to the RF transmission unit 205 in order to add the RSSI of the detection signal and the authentication information of the portable device 200 to the RF signal to be transmitted to the RF transmission unit 205. Do the process.
  • the RF transmission unit 205 includes a signal generation circuit that generates an RF signal including RSSI and authentication information based on an instruction from the control unit 201, an amplification circuit that amplifies the generated signal, and the like. It transmits outside from the RF transmission antenna 205a.
  • the notification unit 206 includes, for example, an LED (Light Emitting Diode), and emits light in response to a signal transmitted from the in-vehicle control device 100 to notify information notified from the in-vehicle control device 100. Further, the notification unit 206 includes, for example, a vibration element, and is configured to notify the information notified from the on-vehicle control device 100 by vibrating the portable device 200 according to a signal transmitted from the on-vehicle control device 100. It is also good. Furthermore, the notification unit 206 may be configured to include a display unit that displays character information.
  • FIG. 4 is a flow chart for explaining the procedure of processing executed by the on-vehicle control device 100 according to the first embodiment.
  • the on-vehicle control device 100 executes the following processing, for example, at regular timing.
  • the control unit 101 determines whether a keyless request has been received (step S101).
  • the control unit 101 is keyless by determining whether or not the RF signal transmitted from the RF transmission unit 205 is received when the unlock button 203a is pressed on the operation unit 203 of the portable device 200. Determine if the request has been accepted.
  • the control unit 101 executes a process (for example, unlocking of the vehicle door) corresponding to the keyless request (step S102), and ends the process according to this flowchart.
  • the control unit 101 determines whether the portable device 200 present in the vicinity of the vehicle C has been detected (step S103). At this time, the control unit 101 transmits a detection signal for detecting the portable device 200 from the LF transmission unit 106, and when a response signal to the detection signal is received by the RF reception unit 107, the control signal exists in the vicinity of the vehicle C. It can be determined that the portable device 200 is detected.
  • the control unit 101 determines whether the request switch operation has been received through the input unit 103 (step S104) .
  • the control unit 101 determines whether the request switch operation has been received by determining whether the engine start switch 111 or the door lock switch 112 has been operated based on the information input through the input unit 103. to decide. If the operation has not been received (S104: NO), the control unit 101 returns the process to step S101.
  • the control unit 101 determines that a relay attack has occurred because there is a possibility that an operation by a third party who has not followed the normal procedure has been received. (Step S105), the smart function is stopped (step S106).
  • the smart function when the request switch is operated by a regular passenger, the LF transmission unit 106 transmits an LF signal (response request signal), and when the portable device is authenticated based on the response signal transmitted from the portable device, the engine Start up, unlock the vehicle door, etc.
  • the smart function is stopped by, for example, stopping the transmission of the LF signal (response request signal).
  • the smart function is stopped by stopping the transmission of the LF signal (response request signal).
  • the LF signal (response request signal) is transmitted each time the request switch is operated. You may In the configuration that transmits the LF signal (response request signal) every time the request switch is operated, the smart function is stopped by ignoring the received response signal and prohibiting engine start, vehicle door lock release, etc. May be
  • control unit 101 determines whether a keyless request has been received (step S107). When the keyless request has not been received (S107: NO), the control unit 101 waits until the keyless request is received. When a keyless request is received (S107: YES), the control unit 101 executes a process (for example, unlocking of a vehicle door) corresponding to the keyless request (step S108), and ends the process of this flowchart.
  • a process for example, unlocking of a vehicle door
  • step S103 When it is determined in step S103 that the portable device 200 is detected (S103: YES), the control unit 101 operates the built-in timer to measure the elapsed time since the detection of the portable device 200, and the input unit It is determined whether the request switch operation has been accepted through 103 (step S109). Also, when it is determined that the portable device 200 is detected in step S103, the control unit 101 may turn on a not-shown interior light to execute a so-called welcome function.
  • step S109 If it is determined that the request switch operation has been received (S109: YES), there is a high possibility that an operation by a regular passenger who has followed a regular procedure is received, so the control unit 101 performs processing according to the keyless request (for example, vehicle The door is unlocked (step S110), and the process according to this flowchart ends.
  • the keyless request for example, vehicle The door is unlocked (step S110)
  • control unit 101 determines whether the set time has elapsed since detecting the portable device 200 (step S111). If the control unit 101 determines that the set time has not elapsed (S111: NO), the process returns to step S109, and if it is determined that the set time has elapsed (S111: YES), the process returns to step S101. .
  • the portable device 200 when detecting the operation of the request switch by a third party who does not follow the normal procedure, it is determined that there is a possibility that a relay attack has occurred, and the portable device 200 is selected. The transmission of the response request signal requesting the response signal is stopped. With such a configuration, it is possible to prevent the relay attack from starting the engine and unlocking the vehicle door.
  • the stop of the smart function may be canceled when an instruction from a passenger is received.
  • a configuration will be described in which the stop of the smart function is canceled when an instruction from an occupant is received.
  • the whole structure of a vehicle communication system and the internal structure of the vehicle-mounted control apparatus 100 and the portable device 200 are the same as that of Embodiment 1, suppose that the description is abbreviate
  • FIG. 5 is a flowchart for explaining the procedure of processing performed by the on-vehicle control device 100 according to the second embodiment.
  • the in-vehicle control device 100 determines whether the smart function has been stopped according to the same procedure as in the first embodiment (step S201). When the smart function is not stopped (S201: NO), the control unit 101 ends the process of this flowchart without executing the following process.
  • the control unit 101 notifies the portable device 200 of information indicating that the smart function has stopped (step S202).
  • the portable device 200 that has received the notification notifies the occupant of the information that the smart function has stopped from the notification unit 206. If communication connection can be established between the in-vehicle control device 100 and a portable terminal such as a mobile phone or a smart phone possessed by a valid passenger, the portable terminal of the passenger is notified that the smart function has stopped. It is also good.
  • the control unit 101 determines whether an instruction to release the stop of the smart function has been received (step S203). For example, when the unlocking of the vehicle door is restricted by stopping the smart function, an RF signal indicating that the unlock button 203a has been pressed by the operation unit 203 of the portable device 200 is sent to the RF receiving unit 107. When it is determined that the smart function has been received, that is, when a keyless request has been received, it can be determined that an instruction to release the smart function stop has been received.
  • step S204 If it is determined that the instruction to cancel the stop of the smart function has been received (S203: YES), the control unit 101 cancels the stop of the smart function (step S204), and ends the process of this flowchart.
  • the control unit 101 determines whether the set time has elapsed since the smart function was stopped (step S205).
  • the set time is an appropriate standby time set in advance to release the stop of the smart function.
  • control unit 101 If it is determined that the set time has not elapsed (S205: NO), the control unit 101 returns the process to step S203. On the other hand, when it is determined that the set time has elapsed (S205: YES), the control unit 101 cancels the stop of the smart function (step S204), and ends the processing of this flowchart.
  • the second embodiment it is possible to notify the portable device 200 carried by a valid occupant that the smart function has stopped.
  • the stop of the smart function can be canceled by the operation of a valid occupant or the elapse of the setting time.
  • FIG. 6 is a flowchart for explaining the procedure of processing executed by the portable device 200 according to the third embodiment.
  • the on-vehicle control device 100 notifies the portable device 200 that the presence of the portable device 200 has been detected.
  • the portable device 200 executes the following processing, for example, at regular timing.
  • the control unit 201 determines whether the own device (portable device 200) present in the vicinity of the vehicle C is detected by the on-vehicle control device 100 (step S301). That is, when the control unit 201 receives a notification that the portable device 200 has been detected from the in-vehicle control device 100, the control unit 201 determines that the own device (the portable device 200) is detected by the in-vehicle control device 100.
  • control unit 201 transmits a response request transmitted when the request switch operation is accepted through the input unit 103 of the on-vehicle control device 100. It is determined whether a signal has been received (step S302). When the response request signal has not been received (S302: NO), the control unit 201 returns the process to step S301.
  • the control unit 201 may have received a relay attack because the on-vehicle control device 100 may have received an operation by a third party who has not taken the normal procedure. Is determined to have occurred (step S303), and transmission of the response signal is stopped (step S304).
  • the smart function when the request switch is operated by a regular passenger, the LF transmission unit 106 transmits an LF signal (response request signal), and when the portable device is authenticated based on the response signal transmitted from the portable device, the engine Start up, unlock the vehicle door, etc.
  • the smart function is stopped by stopping transmission of the response signal to the response request signal from the on-vehicle control device 100.
  • the control unit 201 determines whether a keyless operation has been received (step S305).
  • the keyless operation refers to the operation of the unlock button 203 a or the like provided on the operation unit 203 of the portable device 200. If the keyless operation has not been received (S305: NO), the control unit 201 waits until the keyless operation is received. When the keyless operation is received (S305: YES), the control unit 201 transmits an operation signal (for example, a signal requesting the unlocking of the vehicle door) corresponding to the keyless operation to the on-vehicle control device 100 (step S306) , End the processing according to this flowchart.
  • the on-vehicle control device 100 having received the operation signal from the valid portable device 200 executes a process (for example, unlocking of the vehicle door) according to the operation signal.
  • step S301 If it is determined in step S301 that the own vehicle has been detected by the in-vehicle control device 100 (S301: YES), the control unit 201 transmits a response when the request switch operation is accepted through the input unit 103 of the in-vehicle control device 100. It is determined whether a request signal has been received (step S307). When the response request signal has not been received (S307: NO), the control unit 201 returns the process to step S301.
  • control unit 201 transmits a response signal to the response request signal to the on-vehicle control device 100 (step S308), and ends the processing according to this flowchart.
  • the on-board controller 100 when there is a possibility that the on-board controller 100 receives an operation by a third party who does not follow the formal procedure, a response signal from the portable device 200 to the on-board controller 100 Stop sending With such a configuration, it is possible to prevent the relay attack from starting the engine and unlocking the vehicle door.
  • Reference Signs List 100 in-vehicle control device 101 control unit 102 storage unit 103 input unit 104 output unit 105 in-vehicle communication unit 106 LF transmission unit 106a to 106e LF transmission antenna 107 RF reception unit 107a RF reception antenna 111 engine start switch 112 door lock switch 121 engine starter 122 Door lock mechanism 200 portable unit 201 control unit 202 storage unit 203 operation unit 204 LF reception unit 204a LF reception antenna 205 RF transmission unit 205a RF transmission antenna

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Lock And Its Accessories (AREA)

Abstract

L'invention concerne un dispositif de commande embarqué, un système de commande embarqué, un procédé de commande embarqué et un programme informatique. Le dispositif de commande embarqué comprend : une unité d'opération qui reçoit une opération relative à une demande de démarrage pour un accessoire monté dans un véhicule ; et une unité de transmission qui, lorsque l'unité d'opération reçoit l'opération, transmet un signal de demande de réponse qui demande une réponse à un appareil portable. Lorsque l'appareil portable est authentifié sur la base d'un signal de réponse au signal de demande de réponse en provenance de l'appareil portable, le dispositif de commande embarqué démarre l'accessoire. Le dispositif de commande embarqué comprend : une unité de détection qui détecte la présence de l'appareil portable ; et une unité d'arrêt de transmission qui arrête la transmission du signal de demande de réponse lorsque l'opération est reçue par l'unité d'opération.
PCT/JP2018/044113 2017-12-15 2018-11-30 Dispositif de commande embarqué, système de commande embarqué, procédé de commande embarqué et programme informatique WO2019116923A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2017-240813 2017-12-15
JP2017240813A JP2019108680A (ja) 2017-12-15 2017-12-15 車載制御装置、車載制御システム、車載制御方法及びコンピュータプログラム

Publications (1)

Publication Number Publication Date
WO2019116923A1 true WO2019116923A1 (fr) 2019-06-20

Family

ID=66819283

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2018/044113 WO2019116923A1 (fr) 2017-12-15 2018-11-30 Dispositif de commande embarqué, système de commande embarqué, procédé de commande embarqué et programme informatique

Country Status (2)

Country Link
JP (1) JP2019108680A (fr)
WO (1) WO2019116923A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114093057A (zh) * 2020-05-26 2022-02-25 株式会社东海理化电机制作所 控制装置以及计算机可读存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012082653A (ja) * 2010-10-14 2012-04-26 Tokai Rika Co Ltd 電子キーシステム
JP2015101908A (ja) * 2013-11-27 2015-06-04 アルプス電気株式会社 キーレスエントリシステム
JP2016079600A (ja) * 2014-10-14 2016-05-16 矢崎総業株式会社 車両用認証システム

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012082653A (ja) * 2010-10-14 2012-04-26 Tokai Rika Co Ltd 電子キーシステム
JP2015101908A (ja) * 2013-11-27 2015-06-04 アルプス電気株式会社 キーレスエントリシステム
JP2016079600A (ja) * 2014-10-14 2016-05-16 矢崎総業株式会社 車両用認証システム

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114093057A (zh) * 2020-05-26 2022-02-25 株式会社东海理化电机制作所 控制装置以及计算机可读存储介质

Also Published As

Publication number Publication date
JP2019108680A (ja) 2019-07-04

Similar Documents

Publication Publication Date Title
US10493953B2 (en) Car sharing system
WO2015107609A1 (fr) Système de commande
JP2019012337A (ja) カーシェアリングシステム及びカーシェアリング用プログラム
CN109572617B (zh) 终端、车辆控制系统、以及车辆控制方法
CN109658547B (zh) 车辆共享系统
JP5432192B2 (ja) 電子キーシステム
CN111094082B (zh) 车辆共享系统
JP6540570B2 (ja) 車両ドア解錠システム及び車載制御装置
WO2014017056A1 (fr) Système de commande d'appareil embarqué
CN112839844B (zh) 车载控制装置、车载控制方法及计算机程序
JP2010168010A (ja) 電子キーシステム及び車両制御用携帯機
WO2019116923A1 (fr) Dispositif de commande embarqué, système de commande embarqué, procédé de commande embarqué et programme informatique
JP6997053B2 (ja) 通信不正成立防止システム及び通信不正成立防止方法
JP2018053489A (ja) スマートキーシステム
JP2020082856A (ja) 車載制御装置、車載制御方法及びコンピュータプログラム
WO2019116924A1 (fr) Dispositif de commande embarqué, procédé de commande embarqué et programme informatique
JP5502769B2 (ja) 電子キーシステム
WO2019116899A1 (fr) Système de communication de véhicule, dispositif portable, et dispositif embarqué
JP2020093627A (ja) 車載制御装置、車載制御方法及びコンピュータプログラム
WO2018043108A1 (fr) Système de communication et machine portative
JP2020127134A (ja) 通信システム
JP2010265643A (ja) 電子キーの通信形式切換装置及び通信形式切換方法
JP2018071157A (ja) 車両用通信システム及び携帯機

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18889173

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18889173

Country of ref document: EP

Kind code of ref document: A1