WO2019171525A1 - Determination device, terminal device, determination method, communication method, determination program, and communication program - Google Patents

Abstract

A vehicle-mounted device (10) according to the present invention is included in a vehicle management system that includes a mobile device (20) that is carried by a user of a vehicle (1) and is for receiving wireless signals (40a, 40b, 40c) transmitted from a plurality of transmission antennas (11a, 11b, 11c) disposed on the vehicle (1) so as to be removed from each other and measuring the intensities of the wireless signals received from each of the transmission antennas. The vehicle-mounted device (10) stores reception intensity ratio rules indicating, for each transmission antenna, a value that serves as a reference value and has been obtained from an actual wireless signal reception intensity value when the mobile device (20) was within a prescribed range from the vehicle (1). The vehicle-mounted device (10) evaluates, for each transmission antenna, the degree of matching between a measured reception intensity value measured by the mobile device (20) and the reference value indicated by the reception intensity ratio rules and determines whether the mobile device (20) is within the prescribed range from the vehicle (1).

Description

Determination device, terminal device, determination method, communication method, determination program, and communication program

The present invention relates to a vehicle management system.

As a vehicle management system, a keyless entry system used for locking and unlocking a vehicle door has become widespread. A keyless entry system refers to a vehicle that performs wireless communication between an in-vehicle device provided in a vehicle and a terminal device (hereinafter referred to as a portable device) carried by a user, and ID (Identifier) authentication of the portable device is permitted. This is a system for locking or unlocking the door.
In a vehicle using a keyless entry system, the mobile device is automatically locked when the mobile device leaves the vehicle, and is automatically unlocked when the mobile device approaches the vehicle. Therefore, the vehicle door can be locked or unlocked only by holding the portable device without operating the portable device.
In such a keyless entry system, an LF (low frequency) request signal with a limited reach is output from the in-vehicle device on the assumption that the user is near the vehicle for unlocking the vehicle door. On the other hand, an RF (high frequency) response signal is output from the portable device to enable a door lock operation from a remote distance. Then, the distance between the in-vehicle device and the portable device is calculated based on the reception intensity of the request signal and the response signal, and the vehicle door is unlocked or locked.

By the way, a malicious third party may attack a keyless entry system in which a portable device approaches a vehicle and automatically unlocks the vehicle door, using a relay attack. When relay attack is performed, the door may be unlocked even if the user with the portable device is at a position away from the vehicle. That is, the relay device relays a request signal and a response signal between the in-vehicle device and the portable device, so that wireless signals can be transmitted and received between the in-vehicle device and the portable device. For this reason, even if the user with the portable device is away from the vehicle, the repeater can transmit the response signal from the portable device to the in-vehicle device, and the distance calculation based on the received intensity cannot be performed correctly. . As a result, the in-vehicle device erroneously recognizes that the portable device is near the in-vehicle device, and unlocks the vehicle door.

Patent Document 1 discloses a countermeasure against a relay attack.
In Patent Document 1, request signals are transmitted from transmission antennas installed at a plurality of locations of a vehicle. The portable device includes three receiving antennas facing each axial direction in three-dimensional coordinates. And a portable machine detects the receiving intensity of each request signal in three receiving antennas. The in-vehicle device is notified of the reception strength for each request signal from the portable device, and compares the three reception strengths for each request signal. If the reception intensity ratios are the same for all request signals, it can be determined that a relay attack is being performed on the assumption that a plurality of request signals are transmitted from one direction by the repeater. On the other hand, if the reception intensity ratio is different for each request signal, it can be determined that the relay attack is not performed. Since the three reception strengths by the three reception antennas differ depending on the arrival directions of the request signals, the request signals that are relayed by the repeater and arrive at the portable device can be distinguished by the ratio between the three reception strengths.

Patent Document 2 also discloses a countermeasure against a relay attack.
In Patent Document 2, a request signal is transmitted from a plurality of transmission antennas installed in a vehicle while changing the output order every time. The portable device includes one receiving antenna and confirms the change order of the reception intensity of each request signal. If the change order is not correct, it can be determined that a relay attack is being performed. On the other hand, if the change order is correct, it can be determined that the relay attack is not performed.

JP 2006-342545 A JP 2016-035133 A

In Patent Document 1, a plurality of request signals arrive at the portable device at different timings.
However, if the mobile device moves vertically and horizontally due to the movement of the user and the direction of the reception axis moves, the ratio between the three reception strengths at the three reception antennas for each request signal cannot be calculated correctly. Specifically, when a relay attack is performed, since the portable device receives all request signals from the same direction, the ratio between the three reception strengths for each request signal is usually all request signals. Match. However, when the portable device moves and receives a request signal while the direction of the reception axis is shifted, the ratio between the three reception strengths may be different for each request signal due to the shift of the direction of the reception axis. Thus, when the ratio between the three reception strengths differs for each request signal, it cannot be determined that the relay attack has been performed.

On the other hand, in Patent Document 2, when a repeater reproduces the intensity of each request signal and relays each request signal, it cannot be determined that a relay attack is being performed. This can be solved by the technique of Patent Document 1 focusing on the arrival direction of the request signal.
However, as described above, Patent Document 1 cannot detect a relay attack when the portable device moves vertically and horizontally due to the movement of the user and the direction of the reception axis moves.

The main object of the present invention is to obtain a configuration capable of accurately detecting a relay attack even when a terminal device carried by the user moves according to the movement of the user.

The determination apparatus according to the present invention includes:
A terminal device that is carried by a user of the vehicle, receives a plurality of radio signals transmitted from a plurality of transmission antennas arranged away from each other on the vehicle, and measures the reception strength of the radio signal for each transmission antenna. A determination device included in a vehicle management system including
A storage unit that stores reception strength information in which a value obtained from the actual value of the reception strength of a radio signal when the terminal device is located within a specified range from the vehicle is indicated for each transmission antenna as a reference value;
For each transmission antenna, the degree of coincidence between the measurement value of the reception intensity measured by the terminal device and the reference value indicated by the reception intensity information is evaluated, and the terminal device is within the specified range from the vehicle. And a control unit for determining whether or not the user is present.

According to the present invention, it is possible to accurately detect a relay attack even when a terminal device carried by the user moves according to the movement of the user.

1 is a diagram illustrating a configuration example of a keyless entry system according to Embodiment 1. FIG. FIG. 3 is a diagram illustrating a hardware configuration example of the in-vehicle device according to the first embodiment. FIG. 3 illustrates a hardware configuration example of a portable device according to Embodiment 1; FIG. 3 is a diagram illustrating a functional configuration example of the in-vehicle device according to the first embodiment. FIG. 3 illustrates a functional configuration example of a mobile device according to Embodiment 1; 5 is a flowchart showing an operation example of the keyless entry system when the vehicle door is locked according to the first embodiment. 5 is a flowchart showing an operation example of the keyless entry system when the vehicle door is unlocked according to the first embodiment. The figure which shows the receiving direction of the request signal when the relay attack which concerns on Embodiment 1 is not performed. The figure which shows the receiving direction of the request signal in case the relay attack which concerns on Embodiment 1 is performed. The figure which shows the reception condition of the request signal when the portable machine which concerns on Embodiment 1 exists in the vehicle door vicinity. The figure which shows the reception condition of the request signal in case the relay attack which concerns on Embodiment 1 is performed. The figure which shows the example of the receiving strength for every request signal which concerns on Embodiment 1, and for every axis | shaft. FIG. 6 is a diagram illustrating an example of a reception intensity ratio rule according to the first embodiment. FIG. 5 shows an example of a request signal according to the first embodiment. FIG. 6 shows an example of a response signal according to the first embodiment. FIG. 4 is a diagram showing reception strength of each axis according to the first embodiment. FIG. 6 illustrates a hardware configuration example of a mobile device according to Embodiment 2; FIG. 6 illustrates a functional configuration example of a mobile device according to Embodiment 2; 7 is a flowchart showing an operation example of the keyless entry system when the vehicle door is unlocked according to the second embodiment. 7 is a flowchart showing an operation example of the keyless entry system when the vehicle door is unlocked according to the second embodiment. The figure which shows the example of transition of the acceleration value in which the user which concerns on Embodiment 2 is moving. The figure which shows the example of transition of the acceleration value when the user which concerns on Embodiment 2 is still. The figure which shows the example of transition of the acceleration value at the time of the user concerning Embodiment 2 changing from a movement state to a stationary state. The figure which shows the example of the relay attack using a some repeater. FIG. 6 shows an example of the directivity direction of the receiving antenna of the portable device according to Embodiment 1;

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description of the embodiments and drawings, the same reference numerals denote the same or corresponding parts. Note that the present invention is not limited to the embodiments.

Embodiment 1 FIG.
*** Explanation of configuration ***
FIG. 1 shows a configuration example of a vehicle management system according to the present embodiment. In this embodiment, a keyless entry system will be described as a vehicle management system.

The keyless entry system according to the present embodiment locks or unlocks the vehicle door 30.
The vehicle 1 is provided with an in-vehicle device 10, and a user of the vehicle 1 carries a portable device 20 that is a terminal device.
And the vehicle-mounted apparatus 10 and the portable device 20 perform radio | wireless communication, and authentication, locking, and unlocking are performed.

The in-vehicle device 10 wirelessly communicates with the portable device 20 using the transmission antennas 11 a, 11 b, 11 c and the reception antenna 12 installed in the vehicle 1. The transmission antennas 11a, 11b, and 11c transmit request signals 40a, 40b, and 40c, which are low-frequency (LF) radio signals.
The portable device 20 that has received the request signals 40a, 40b, and 40c transmits a response signal 41 that is a radio frequency (RF) radio signal.
The receiving antenna 12 receives the response signal 41 transmitted from the portable device 20.
The transmission antennas 11a, 11b, and 11c are arranged on the vehicle 1 so as to be separated from each other. For example, the transmission antennas 11a, 11b, and 11c are arranged 50 cm or more apart from each other.
Hereinafter, when there is no need to distinguish between the transmission antennas 11a, 11b, and 11c, the transmission antennas 11a, 11b, and 11c are referred to as the transmission antenna 11.
Further, when it is not necessary to distinguish between the request signals 40a, 40b, and 40c, the request signals 40a, 40b, and 40c are expressed as the request signal 40.
In FIG. 1, the number of transmission antennas 11 is three, but the number of transmission antennas 11 is not limited to three as long as the number is two or more.
In the present embodiment, the in-vehicle device 10 corresponds to a determination device.
The operations performed by the in-vehicle device 10 correspond to a determination method and a determination program.

2 and 3 show examples of the hardware configuration of the keyless entry system according to the present embodiment.

FIG. 2 shows a hardware configuration example of the in-vehicle device 10.
The processor 201 is, for example, a CPU (Central Processing Unit).
The auxiliary storage device 202 is, for example, a hard disk device.
The main storage device 203 is, for example, a RAM (Random Access Memory).
The transmission device 204 and the reception device 205 are used for wireless communication with the portable device 20.
An ECU (Engine Control Unit) 206 controls locking and unlocking of the vehicle door 30.

FIG. 3 shows a hardware configuration example of the portable device 20.
The processor 301 is a CPU, for example.
The auxiliary storage device 302 is, for example, a hard disk device.
The main storage device 303 is, for example, a RAM.
The transmission device 304 and the reception device 305 are used for wireless communication with the in-vehicle device 10.

4 and 5 show functional configuration examples of the keyless entry system according to the present embodiment.

FIG. 4 shows a functional configuration example of the in-vehicle device 10.
Since the transmission antennas 11a, 11b, and 11c and the reception antenna 12 have already been described, description thereof is omitted here.
The transmission unit 13, the control unit 14, the reception unit 15, and the reception intensity ratio rule generation unit 16 are realized by a program, for example.
A program for realizing the transmission unit 13, the control unit 14, the reception unit 15, and the reception intensity ratio rule generation unit 16 is stored in the auxiliary storage device 202, for example. The program is loaded from the auxiliary storage device 202 into the main storage device 303 and executed by the processor 201.
FIG. 4 schematically shows a state in which the program is executed by the processor 201.

The transmission unit 13 controls transmission of the request signals 40a, 40b, and 40c transmitted from the transmission antennas 11a, 11b, and 11c. Specifically, the transmission unit 13 stores the identifier of the transmission antenna 11 to be transmitted to each request signal 40 as shown in FIG. 14 and controls the transmission timing of the request signal 40.

The receiving unit 15 processes the response signal 41 received by the receiving antenna 12.
Specifically, as shown in FIG. 15, the response signal 41 stores an identifier indicating one of the transmission antennas 11 a, 11 b, and 11 c, its reception strength, and the authentication ID of the portable device 20. Extracts these from each request signal 40 and passes them to the control unit 14.

The control unit 14 controls processing of the keyless entry system.
Specifically, the control unit 14 performs position calculation of the portable device 20, authentication of the portable device 20, and relay attack determination.
The control unit 14 reads out a reception intensity ratio rule, which will be described later, from the main storage device 203 and determines whether the portable device 20 is located within a specified range from the vehicle 1 using the read reception intensity ratio rule. And the control part 14 permits operation (for example, locking or unlocking) from the portable device 20 to the vehicle 1, when it determines with the portable device 20 being located in the prescription | regulation range from the vehicle 1. FIG. The specified range is, for example, 3 meters. The specified range can be arbitrarily set by the vehicle manufacturer or the in-vehicle device 10 manufacturer.
Processing performed by the control unit 14 corresponds to reading processing and control processing.

The reception intensity ratio rule generation unit 16 generates a reception intensity ratio rule.
The reception intensity ratio rule corresponds to reception intensity information.
The reception intensity ratio rule is stored in the auxiliary storage device 202. The reception intensity ratio rule is loaded into the main storage device 203.
The auxiliary storage device 202 and the main storage device 203 correspond to a storage unit.

FIG. 5 shows a functional configuration example of the portable device 20.
As shown in FIG. 25, the receiving antennas 21a, 21b, and 21c are arranged in the portable device 20 so as to face axial directions (X axis, Y axis, and Z axis) that are orthogonal to each other, and magnetic fields in the corresponding directions. Detect ingredients.
The transmission antenna 22 transmits a response signal 41 toward the vehicle 1.

The reception unit 23, the control unit 24, and the transmission unit 25 are realized by a program, for example.
A program for realizing the reception unit 23, the control unit 24, and the transmission unit 25 is stored in the auxiliary storage device 302, for example. The program is loaded from the auxiliary storage device 302 by the main storage device 303 and executed by the processor 301.
FIG. 5 schematically shows a state in which the program is executed by the processor 301.

As shown in FIG. 16, the receiving unit 23 receives the reception intensity in the X-axis, Y-axis, and Z-axis directions of the request signal 40a received by the receiving antennas 21a, 21b, and 21c as shown in FIG. To detect. Similarly, the reception unit 23 detects the reception intensity in each axial direction for the request signals 40b and 40c.
That is, the receiving unit 23 measures the reception intensity of the request signal 40 for each transmission antenna 11 and for each coordinate axis (X axis, Y axis, Z axis) in the three-dimensional coordinate axis.

The control unit 24 instructs the transmission unit 25 to transmit the response signal 41 when the reception unit 23 detects the reception intensity of the request signal 40.

The transmission unit 25 instructs the transmission antenna 22 to transmit the response signal 41.
As shown in FIG. 15, the response signal 41 stores an identifier indicating one of the transmission antennas 11a, 11b, and 11c, the authentication ID of the portable device 20, and the reception intensity of each axis detected by the receiving unit 23. Has been.

FIG. 13 shows an example of the reception intensity ratio rule.
In the reception intensity ratio rule, a value obtained from the actual value of the reception intensity of the request signal 40 is indicated for each transmission antenna 11 (for each request signal 40) as a reference value.
More specifically, in the reception intensity ratio rule, a ratio between actual values for each coordinate axis (X axis, Y axis, Z axis) in a three-dimensional coordinate axis is indicated for each transmission antenna 11 as a reference value.
In the present embodiment, the reception intensity ratio rule generation unit 16 of the in-vehicle device 10 generates (updates) the reception intensity ratio rule using the actual value of the reception intensity measured when the vehicle door is locked. In other words, in the present embodiment, the reception intensity ratio rule includes the actual value of the reception intensity for each transmission antenna and each coordinate axis measured when the portable device 20 is located within a specified range from the vehicle 1. Is shown as a reference value. In the present embodiment, an example in which the ratio between the actual received intensity values is indicated as a reference value in the received intensity ratio rule will be described, but the actual received intensity value may be indicated in the received intensity ratio rule. .
The reception intensity ratio rule generation unit 16 may not generate (update) the reception intensity ratio rule.
That is, in the vehicle manufacturer or the vehicle-mounted device 10 manufacturer, the reception value of the request signal when the portable device similar to the portable device 20 is located in the vicinity of the vehicle similar to the vehicle 1 is measured, and the actual value obtained by the measurement It is also possible to use a reception intensity ratio rule describing the ratio between the two.
In this case, step S008 of FIG. 6 described later may be omitted. Further, the reception intensity ratio rule generation unit 16 may be omitted from the in-vehicle device 10.

*** Explanation of operation ***
Next, an operation example of the keyless entry system according to the present embodiment will be described with reference to FIGS.

Fig. 6 shows an example of the operation of the keyless entry system when the vehicle door is locked.

(Step S001): The engine is stopped by the user's operation.
(Step S002): Request signals 40a, 40b, and 40c to which transmission antenna identifiers are added are transmitted from the transmission antennas 11a, 11b, and 11c of the vehicle 1 as shown in FIG.

(Step S003): The receiving antennas 21a, 21b, and 21c of the portable device 20 receive the request signals 40a, 40b, and 40c as shown in FIG. 8 or FIG. And the receiving part 23 detects the receiving intensity | strength of each axis direction of a X-axis, a Y-axis, and a Z-axis for every request signal 40 like FIG.

(Step S004): The transmission unit 25 of the portable device 20 transmits the response signal 41 from the transmission antenna 22. The transmission unit 25 transmits one response signal 41 to one request signal 40. Therefore, when the receiving unit 23 receives the request signals 40a, 40b, and 40c, the transmitting unit 25 transmits three response signals 41 corresponding to each.
As shown in FIG. 15, the response signal 41 includes the transmission antenna identifier stored in the corresponding request signal 40, the authentication ID of the portable device 20, and the reception of each axis of the request signal detected in (step S003). The intensity is stored.

(Step S005): The receiving antenna 12 of the vehicle 1 receives three response signals 41 corresponding to the request signals 40a, 40b, and 40c, respectively.
Then, the reception unit 15 acquires the reception intensity for each coordinate axis for each request signal as shown in FIG. 12 based on the reception intensity stored in the three response signals 41 and the transmission antenna identifier.

(Step S006): Based on the reception intensity of each request signal 40 described in each response signal 41 received in (Step S005) described above, the control unit 14 determines whether the portable device 20 is in the vehicle or outside the vehicle. Determine if you are located in
If the control unit 14 determines that the portable device 20 is located in the vehicle (YES in step S006), the process proceeds to (step S002).
On the other hand, when the control unit 14 determines that the portable device 20 is located outside the vehicle (NO in step S006), the process proceeds to (step S007).
Note that the control unit 14 refers to, for example, a table indicating typical reception strength when the portable device 20 is located in the vehicle, and determines whether the portable device 20 is located inside or outside the vehicle. You may judge. The table may be stored in the in-vehicle device 10 in advance, or may be received from the external device through communication with the external device.

(Step S007): Based on the reception intensity of each request signal 40 described in each response signal 41 received in (Step S005) described above, the control unit 14 causes the portable device 20 to be located near the vehicle door. It is determined whether or not.
When the control unit 14 determines that the portable device 20 is located near the vehicle door 30 (YES in step S007), the process proceeds to (step S008).
On the other hand, if the control unit 14 determines that the portable device 20 is not located near the vehicle door 30 (YES in step S007), the process proceeds to (step S009).
The vicinity of the vehicle door 30 is, for example, a range of 3 meters from the vehicle 30.
At this stage, if the reception intensity ratio rule generation unit 16 has already generated the reception intensity ratio rule, the control unit 14 refers to the reception intensity ratio rule and the portable device 20 is located near the vehicle door 30. Determine whether you are doing. On the other hand, if the reception intensity ratio rule generation unit 16 has not generated the reception intensity ratio rule, the control unit 14 may refer to the reception intensity ratio rule generated at the time of the previous vehicle door locking described later. Moreover, the control part 14 may refer to the reception intensity ratio rule produced | generated by the vehicle manufacturer or the vehicle equipment 10 manufacturer. The reception intensity ratio rule generated by the vehicle manufacturer or the in-vehicle device 10 manufacturer may be stored in the in-vehicle device 10 in advance, or may be received from the external device through communication with the external device.

(Step S008): The reception intensity ratio rule generation unit 16 generates a reception intensity ratio rule.
That is, the control unit 14 outputs the reception intensity for each request signal 40 received in (Step S005) to the reception intensity ratio rule generation unit 16. Then, the reception strength ratio rule generation unit 16 generates a reception strength ratio rule using the ratio between the input reception strengths. For example, the reception intensity ratio rule generation unit 16 adds the reception intensity ratio of the request signal 40 to the reception intensity ratio rule as shown in FIG. In this way, the reception intensity ratio added to the reception intensity ratio rule can be handled as a correct reception intensity ratio.
As long as it is determined by the process of (Step S007) that the portable device 20 is in the vicinity of the vehicle 1 as shown in FIG. 10, the process of (Step S008) is repeated. For this reason, a number of reception intensity ratio patterns are added to the reception intensity ratio rule as shown in FIG.
The reception intensity ratio rule is used in the unlocking determination (specifically, step S106 in FIG. 7) of the vehicle door 30 described later.
The reception intensity ratio rule records the reception intensity ratio when the portable device 20 is in the vicinity of the vehicle door 30 as shown in FIG. For this reason, if the measured value of the reception intensity of the request signal 40 when the vehicle door 30 is unlocked matches the reception intensity ratio indicated in the reception intensity ratio rule, it is determined that the relay attack is not performed. be able to.

(Step S009): The control unit 14 checks the authentication ID of the portable device 20 stored in the response signal 41. If the authentication ID stored in the response signal 41 is the authentication ID of the portable device 20 used for the operation of the vehicle 1, the process proceeds to (Step S009). On the other hand, if the authentication ID stored in the response signal 41 is not the authentication ID of the portable device 20 used for the operation of the vehicle 1, the control unit 14 ends the process.

(Step S010): Assuming that the portable device 20 is located away from the vehicle 1, the control unit 14 locks the vehicle door 30 via the ECU 206.
Note that the method for locking the vehicle door 30 is not limited to this, and for example, there is a method of locking the vehicle door 30 after a certain period of time has elapsed since the engine stopped.

The reception intensity ratio rule generation unit 16 may generate a new reception intensity ratio rule each time the engine is stopped, or add a new record to the reception intensity ratio rule generated at the previous vehicle door locking. You may do it.

Fig. 7 shows an example of the operation of the keyless entry system when the vehicle door is unlocked.

(Step S101): A switch on the vehicle door 30 is pushed by a user's operation. The unlocking process is started by the user's operation.

(Step S102): Request signals 40a, 40b, and 40c to which transmission antenna identifiers are added are transmitted from the transmission antennas 11a, 11b, and 11c of the vehicle 1 as shown in FIG.

(Step S103): In the portable device 20, the receiving antennas 21a, 21b, and 21c receive the request signals 40a, 40b, and 40c. And the receiving part 23 detects the receiving intensity | strength of each axis direction of a X-axis, a Y-axis, and a Z-axis for every request signal 40 like FIG.

(Step S <b> 104): In the portable device 20, the transmission unit 25 transmits the response signal 41 from the transmission antenna 22. The transmission unit 25 transmits one response signal 41 to one request signal 40. Therefore, when the request signals 40a, 40b, and 40c are received, the transmission unit 25 transmits three response signals 41 corresponding to the request signals 40a, 40b, and 40c.
As shown in FIG. 15, the response signal 41 includes the transmission antenna identifier stored in the corresponding request signal 40, the authentication ID of the portable device 20, and the corresponding request signal detected in (step S103). The received intensity for each of the X axis, Y axis, and Z axis is stored.

(Step S105): The receiving antenna 12 of the vehicle 1 receives three response signals 41 corresponding to the request signals 40a, 40b, and 40c, respectively.
The receiving unit 15 extracts the transmission antenna identifier, the authentication ID, and the reception strength from the three response signals 41, and outputs the extracted transmission antenna identifier, authentication ID, and reception strength to the control unit 14. As shown in FIG. 12, the control unit 14 collects the measurement values of the received intensity in units of coordinate axes for each request signal (for each transmission antenna).

(Step S106): The control unit 14 determines the degree of coincidence between the reception intensity ratio of the reception intensity (FIG. 12) collected in (Step S105) and the reception intensity ratio described in the reception intensity ratio rule (FIG. 13). Evaluation is performed to determine whether or not the portable device 20 is near the vehicle door 30, that is, whether or not the portable device 20 is located within a specified range from the vehicle 1.
More specifically, the control unit 14 obtains the reception intensity ratio of the X axis, the Y axis, and the Z axis for each of the request signals 40a, 40b, and 40c in FIG. Then, the control unit 14 receives the X-axis, Y-axis, and Z- axis reception signals 40a, 40b, and 40c of the request signals 40a, 40b, and 40c of any rule (record) of the reception intensity ratio rule of FIG. It is determined whether or not it matches the intensity ratio.
For example, the received intensity ratio of the acquired request signal 40a is “ax: ay: az”, the received intensity ratio of the request signal 40b is “bx: by: bz”, and the received intensity ratio of the request signal 40c is “cx: cy: cz”. ”Is assumed.
The control unit 14 compares the reception intensity ratios of the request signals 40 with the reception intensity ratios of the request signals 40 in the rule 2 (second line) in FIG. 13. As a result, “ax: ay: az≈AX2: AY2: When the result of “AZ2” and “bx: by: bz≈BX2: BY2: BZ2” and “cx: cy: cz≈CX2: CY2: CZ2” is obtained, the control unit 14 satisfies the reception intensity ratio rule. It is determined that That is, the control unit 14 determines that the portable device 20 is located near the vehicle door 30.
It should be noted that the received signal strength ratio can be determined to match if it is within the prescribed allowable range even if it is not completely matched.
The determination process of the control unit 14 will be described using specific values.
Assume that “ax: ay: az” = “1: 3.1: 2.8” and “AX2: AY2: AZ2” = “1: 3.3: 2.6”. Further, it is assumed that “bx: by: bz” = “1: 6.2: 3.1” and BX2: BY2: BZ2 ”=“ 1: 6.4: 3.4 ”. Further, it is assumed that “cx: cy: cz” = “1: 9.4: 18.2” and “CX2: CY2: CZ2” = “1: 10.1: 19.5”. In this case, the control unit 14 determines that “ax: ay: az≈AX2: AY2: AZ2” and “bx: by: bz≈BX2: BY2: BZ2” and “cx: cy: cz≈CX2: CY2: CZ2”. And it is determined that the reception intensity ratio rule is satisfied.
The control unit 14 may determine that the portable device 20 is located within a specified range from the vehicle 1 when the degree of coincidence between the measurement value and the reference value exceeds the threshold value in all the transmission antennas.
For example, the threshold value may be 90%.
In the above example, the control unit 14 receives two receptions having a correspondence relationship such as ay / AY2 = 3.1 / 3.3≈94% and AZ / az = 2.6 / 2.8≈93%. It is determined whether or not the ratio (degree of coincidence) obtained by dividing a small value of the intensity ratio by a large value exceeds 90%.

If the control unit 14 determines that the portable device 20 is near the vehicle door 30 (YES in step S106), the process proceeds to (step S107).
When it determines with the portable device 20 not being in the vehicle door 30 vicinity (it is NO at step S106), the control part 14 determines with the relay attack being performed, and complete | finishes a process.

(Step S107): The control unit 14 checks the authentication ID of the portable device 20 stored in the response signal 41. If the authentication ID stored in the response signal 41 is the authentication ID of the portable device 20 used for the operation of the vehicle 1, the process proceeds to (Step S108). On the other hand, if the authentication ID stored in the response signal 41 is not the authentication ID of the portable device 20 used for the operation of the vehicle 1, the control unit 14 ends the process.
(Step S108): The control unit 14 determines that the portable device 20 is in the vicinity of the vehicle 1, and unlocks the vehicle door 30 via the ECU 206.

In the operation example of the keyless entry system of FIG. 6 and FIG. 7, the reception intensity ratio rule is generated as shown in FIG. 13 by adding the actual reception intensity ratio extracted by the portable device 20 in (Step S008). However, the method of generating the reception intensity ratio rule is not limited to this.
For example, the reception intensity ratio rule may be generated using machine learning. When the reception intensity ratio rule is generated using machine learning, (Step S008) and (Step S106) are as follows.
(Step S008): Machine learning is performed using the reception intensity of each request signal 40 shown in FIG. 12 as the correct reception intensity when the portable device 20 receives the request signal 40 near the vehicle door 30, and the reception intensity ratio rule Is generated. Since (Step S008) is performed a plurality of times by the processing of (Step S007), the reception intensity ratio rule is generated from machine learning based on the reception intensity ratios of the plurality of request signals 40. That is, the reception intensity ratio rule in this case is information indicating a ratio obtained by machine learning with respect to a ratio between the actual values for each coordinate axis for each transmission antenna.
(Step S106): The control unit 14 performs machine learning on the degree of coincidence between the reception intensity ratio obtained in (Step S105) as shown in FIG. 12 and the ratio indicated in the reception intensity ratio rule generated in (Step S008). The used evaluation is performed to determine whether or not the portable device 20 is located near the vehicle door 30.

In the operation examples of FIGS. 6 and 7, the in-vehicle device 10 performs relay attack determination, but the portable device 20 may perform relay attack determination.
In this case, the portable device 20 corresponds to the determination device. Moreover, the operation performed in the portable device 20 corresponds to the determination method. Furthermore, the operations performed by the control unit 24 correspond to a read process and a control process.
In this case, the reception intensity ratio rule is stored in the auxiliary storage device 302 of the portable device 20. The reception intensity ratio rule is loaded into the main storage device 303. For this reason, the auxiliary storage device 302 and the main storage device 303 correspond to a storage unit.

When the portable device 20 performs the relay attack determination, the control unit 24 performs (Step S007) in (Step S003) of FIG. If (YES in step S007), the control unit 24 also performs the process of (step S008) to generate a reception intensity ratio rule. On the other hand, if “NO” in the step S007, the process proceeds to the step S002.
Thereafter, in FIG. 7, when the control unit 24 performs the process of (Step S106) in (Step S104) and determines that the portable device 20 is not near the vehicle 1 according to the reception intensity ratio rule, It determines with the attack being performed and complete | finishes the process of the portable device 20.
Thereafter, the in-vehicle device 10 passes a certain period of time without receiving the response signal 41, and thus the processing of the in-vehicle device 10 ends due to a timeout.

Also, in (Step S004) and (Step S104), the portable device 20 transmits one response signal 41 to one request signal 40. Instead, after receiving all the request signals 40 from the respective transmission antennas 11, the portable device 20 transmits the transmission antenna identifier included in each request signal 40 and the X-axis, Y-axis, and Z-axis of each request signal 40. The reception intensity of each axis may be included in the response signal 41 and transmitted. In that case, in the in-vehicle device 10, when one response signal 41 is received in (Step S 005) and (Step S 105), a measurement value of the reception intensity for each request signal 40 as shown in FIG. 12 is acquired.

*** Explanation of the effect of the embodiment ***
As described above, according to the present embodiment, it is possible to reliably determine the relay attack.
When the vehicle door 30 is unlocked and the portable device 20 is in the vicinity of the vehicle door 30 as shown in FIG. 10, the portable device 20 receives the request signals 40a, 40b, and 40c as shown in FIG. The ratio matches the reception intensity ratio rule generated when the vehicle door is locked.
On the other hand, when a relay attack occurs as shown in FIG. 11, the portable device 20 receives the request signals 40a, 40b, and 40c as shown in FIG. In this case, the reception intensity ratio of each request signal is “ax: ay: az≈bx: by: bz≈cx: cy: cz”, and the reception intensity ratio does not match the reception intensity ratio rule generated when the vehicle door 30 is locked. . For this reason, it can be determined that a relay attack has occurred.
In addition, in a situation where a relay attack occurs as shown in FIG. 11, the portable device 20 may move due to the movement of the user. In this case, the portable device 20 receives the request signal 40 in a state where the direction of the reception axis of the portable device 20 is shifted. In this case, as shown in FIG. 8, the portable device may receive the request signals 40a, 40b, and 40c from different directions. At this time, the reception intensity ratio between the request signals 40a, 40b, and 40c does not match, that is, “ax: ay: az ≠ bx: by: bz ≠ cx: cy: cz”. For this reason, according to the conventional method in which the relay attack determination is performed only by matching / mismatching of the reception intensity ratio, it is determined that no relay attack has occurred.
However, according to the present embodiment, the presence / absence of a relay attack is determined using the reception intensity ratio rule instead of “ax: ay: az ≠ bx: by: bz ≠ cx: cy: cz”.
In the portable device 20 away from the vehicle door 30, the reception intensity ratio for each request signal 40 is received even if the reception intensity ratio is “ax: ay: az ≠ bx: by: bz ≠ cx: cy: cz”. It does not match the intensity ratio rule.
Therefore, according to the present embodiment, even when the portable device 20 receives the request signal 40 in a state where the direction of the reception axis of the portable device 20 is shifted due to the movement of the user, the presence / absence of the relay attack is accurately determined. be able to.

Embodiment 2. FIG.
In the first embodiment described above, a configuration in which the relay attack can be correctly detected even when the portable device 20 moves and the request signal 40 is received in a state in which the direction of the reception axis is shifted is described using the reception intensity ratio rule. did.
However, depending on the accuracy of the reception intensity ratio rule, it may be determined that the portable device 20 is near the vehicle door 30 by the relay attack even if the portable device 20 is not near the vehicle door 30. For example, if the direction of the reception axis of the portable device 20 is shifted when a relay attack is occurring, the ratio between the measured reception strengths may coincide with the reception strength ratio rule. In this case, although the portable device 20 is not near the vehicle door 30, it is erroneously determined that the portable device 20 is near the vehicle door 30.
Therefore, in the present embodiment, a configuration for preventing erroneous determination due to the problem of accuracy of the reception intensity ratio rule will be described.
More specifically, in the present embodiment, a seismic device such as an acceleration sensor is built in the portable device 20. A configuration in which the in-vehicle device 10 does not authenticate the portable device 20 when it is detected that the portable device 20 is moving will be described.

Hereinafter, differences from the first embodiment will be mainly described. Matters not described below are the same as those in the first embodiment.

*** Explanation of configuration ***
In the keyless entry system according to the present embodiment, the hardware configuration example of the in-vehicle device 10 is as shown in FIG.
On the other hand, a hardware configuration example of the portable device 20 is as shown in FIG.

Compared to FIG. 3, a seismic device 306 is added in FIG. 17.
The seismic sensor 306 senses the vibration of the portable device 20. The seismic device 306 measures the acceleration with respect to each of the X axis, the Y axis, and the Z axis of the portable device 20. The seismic device 306 is, for example, an acceleration sensor.
The processor 301, the auxiliary storage device 302, the main storage device 303, the transmission device 304, and the reception device 305 are the same as those shown in FIG.

In the keyless entry system according to the present embodiment, the functional configuration example of the in-vehicle device 10 is as shown in FIG.
On the other hand, a functional configuration example of the portable device 20 is as shown in FIG.
Compared to FIG. 5, in FIG. 18, a portable device state determination unit 26 and a seismic data acquisition unit 27 are added.

The seismic data acquisition unit 27 acquires seismic data as a seismic result of the seismic device 306 from the seismic device 36.
If the seismoscope 306 is an acceleration sensor, the seismic data is an acceleration value.

The portable device state determination unit 26 determines the movement state of the portable device 20. More specifically, the portable device state determination unit 26 is in a state where the portable device 20 is moving based on the seismic data acquired by the seismic data acquisition unit 27 (hereinafter also referred to as “moving”). Either in a stationary state (hereinafter also referred to as “still”) or in a state where it has transitioned from a moving state to a stationary state (hereinafter also referred to as “moving → stationary”) Determine if there is.
When the seismic device 306 is an acceleration sensor that can measure the accelerations of the three axes of the X axis, the Y axis, and the Z axis, the portable device state determination unit 26 obtains an acceleration value as shown in FIG. obtain.
When the portable device 20 is “moving”, the acceleration values of the three axes vary greatly as shown in FIG.
When the portable device 20 is “still”, the triaxial acceleration values are substantially constant as shown in FIG.
When the x-axis and y-axis are axes that are horizontal to the ground and the z-axis is an axis that is perpendicular to the ground, the x-axis and y-axis accelerations are zero, and the z-axis acceleration becomes the gravitational acceleration. Become.
When the portable device 20 is “moving → still”, as shown in FIG. 23, the three-axis acceleration value varies from a dispersed state to a constant state.
The portable device state determination unit 26 determines the moving state of the portable device 20 by analyzing the time transition of the triaxial seismic data as shown in FIGS.
The portable device state determination unit 26 corresponds to a movement state determination unit. The process performed by the portable device state determination unit 26 corresponds to a movement state determination process.

In the present embodiment, when the request signal 40 is received, the control unit 24 determines the transmission form of the response signal 41 based on the determination result of the portable device state determination unit 26.
More specifically, when the request signal 40 is received, the moving state of the portable device 20 has been changed from the moving state of the portable device 20 to the stationary state by the portable device state determination unit 26. When it is determined that the state (that is, “moving → still”), the control unit 24 determines to transmit the response signal 41.
On the other hand, when the request signal 40 is received, the portable device state determination unit 26 moves the portable device 20 (ie, “moving”) and stands still (ie, “still”). When it is determined that the response signal 41 is invalid, the control unit 24 determines to transmit an invalid response signal 41. The invalid response signal 41 is, for example, a response signal 41 including error information. The error information is information notifying that the response signal 41 is invalid, and corresponds to invalid information.
In addition, when the request signal 40 is received, the portable device state determination unit 26 moves the portable device 20 (that is, “moving”) and is stationary (that is, “still”). When it is determined that the response signal 41 is, the control unit 24 may determine not to transmit the response signal 41.
The request signal 40 according to the present embodiment corresponds to the first radio signal, and the response signal 41 according to the present embodiment corresponds to the second radio signal.
The process performed by the control unit 24 corresponds to a control process.

The receiving antennas 21a, 21b, and 21c, the transmitting antenna 22, the receiving unit 23, and the transmitting unit 25 are the same as those shown in FIG.

In the present embodiment, the operation performed by the portable device 20 corresponds to a communication method and a communication program.

*** Explanation of operation ***
An operation example of the keyless entry system according to the present embodiment will be described.
An example of operation when the vehicle door is locked is the same as in FIG.
An example of operation when the vehicle door is unlocked is as shown in FIGS.

(Step S201): Similar to (Step S101), the switch on the vehicle door 30 is pushed by the user's operation. The unlocking process is started by the user's operation.
(Step S202): Similar to (Step S102), request signals 40a, 40b, and 40c to which a transmission antenna identifier is added are transmitted from the transmission antennas 11a, 11b, and 11c of the vehicle 1 as shown in FIG.

(Step S203): In the portable device 20, the seismic data acquisition unit 27 starts acquiring seismic data.
(Step S204): Similar to (Step S103), the receiving antennas 21a, 21b, 21c of the portable device 20 receive the request signals 40a, 40b, 40c. And the receiving part 23 detects the receiving intensity | strength of each axis direction of a X-axis, a Y-axis, and a Z-axis for every request signal 40 like FIG.

(Step S205): From the seismic data continuously acquired from (Step S203), the portable device state determination unit 26 determines that the movement state of the portable device 20 is “moving”, “still still”, and “moving → still”. It is determined which state.
When the portable device state determination unit 26 determines that the moving state of the portable device 20 is “moving → still” (YES in step S205), the process proceeds to (step S206). If the portable device state determination unit 26 determines that the moving state of the portable device 20 is “moving” or “still” (NO in step S205), the process proceeds to (step S207).

(Step S206): Similar to (Step S104), the transmission unit 25 transmits the response signal 41 from the transmission antenna 22. The transmission unit 25 transmits one response signal 41 to one request signal 40. Therefore, when the request signals 40a, 40b, and 40c are received, the transmission unit 25 transmits three response signals 41 corresponding to the request signals 40a, 40b, and 40c. The response signal 41 transmitted in step S206 is as shown in FIG.

(Step S207): In order to inform the in-vehicle device 10 that the moving state of the portable device 20 is not "moving to stationary", the transmitting unit 25 transmits a response signal 41 including error information from the transmitting antenna 22.

(Step S208): Similar to (Step S105), the receiving antenna 12 of the vehicle 1 receives three response signals 41 corresponding to the request signals 40a, 40b, and 40c, respectively.
The receiving unit 15 extracts the transmission antenna identifier, the authentication ID, and the reception strength from the three response signals 41, and outputs the extracted transmission antenna identifier, authentication ID, and reception strength to the control unit 14. The control unit 14 collects the reception intensity in units of coordinate axes for each request signal (for each transmission antenna) as shown in FIG.

(Step S209): If the error information is included in any of the response signals 41 received in (Step S208), the control unit 14 indicates that the moving state of the portable device 20 is not “moving → still” but the vehicle door 30. It is determined that the unlocking operation is not performed in the vicinity, and the process is terminated.
If no error information is included in all the response signals 41, the control unit 14 determines that the moving state of the portable device 20 is “moving → still”, and the process proceeds to (step S210).

(Step S210): Same as (Step S106), and the received intensity ratio of the received intensity (FIG. 12) collected in (Step S208) and the received intensity ratio described in the received intensity ratio rule (FIG. 13). Are evaluated to determine whether or not the portable device 20 is near the vehicle door 30, that is, whether or not the portable device 20 is located within a specified range from the vehicle 1.
If the control unit 14 determines that the portable device 20 is near the vehicle door 30 (YES in step S210), the process proceeds to (step S211).
When it determines with the portable device 20 not being in the vehicle door 30 vicinity (it is NO at step S210), the control part 14 determines with the relay attack being performed, and complete | finishes a process.

(Step S211): Similar to (Step S107), the control unit 14 checks the authentication ID of the portable device 20 stored in the response signal 41. If the authentication ID stored in the response signal 41 is the authentication ID of the portable device 20 used for the operation of the vehicle 1, the process proceeds to (Step S212). On the other hand, if the authentication ID stored in the response signal 41 is not the authentication ID of the portable device 20 used for the operation of the vehicle 1, the control unit 14 ends the process.
(Step S212): Similar to (Step S108), the control unit 14 determines that the portable device 20 is in the vicinity of the vehicle 1, and unlocks the vehicle door 30 via the ECU 206.

For example, when an acceleration sensor is used as the seismic sensor 306, the portable device state determination unit 26 sets the movement state of the portable device 20 to “moving” if the triaxial acceleration value changes by a certain threshold value or more. Can be determined.
In addition, the portable device state determination unit 26 can determine that the movement state of the portable device 20 is “still” when the triaxial acceleration value for a certain period of time changes only below a certain threshold value.
In addition, the portable device state determination unit 26 has a case where the X-axis and Y-axis acceleration values are 0 and the Z-axis acceleration value coincides with the gravitational acceleration, such as when the 3-axis acceleration value becomes a certain value. In addition, the moving state of the portable device 20 can be determined as “still”.
If the determination in step S205 is made at a timing within a certain period after the determination in step S205 changes from the “moving” state to the “stationary” state, the portable device state determination unit 26 Is determined to be “moving → still”.
On the other hand, when the determination in step S205 is performed at a timing after the “still state” state has elapsed for a certain period or longer, the portable device state determination unit 26 does not determine “moving → stationary” but “stationary” It is determined as “medium”.
In addition, when the determination in step S205 is performed at a timing after the state of “still” is changed to “moving”, the portable device state determination unit 26 does not determine “movement → stationary”, It is determined as “moving”.

6, 19, and 20, the in-vehicle device 10 performs the relay attack determination, but the portable device 20 may perform the relay attack determination. In this case, the reception intensity ratio rule is stored in the auxiliary storage device 302 of the portable device 20. The reception intensity ratio rule is loaded into the main storage device 303.

When the portable device 20 performs the relay attack determination, the control unit 24 performs (Step S007) in (Step S003) of FIG. If (YES in step S007), the control unit 24 also performs the process of (step S008) to generate a reception intensity ratio rule. On the other hand, if “NO” in the step S007, the process proceeds to the step S002.
Thereafter, in FIG. 19 and FIG. 20, when the control unit 24 performs the process of (Step S210) in (Step S204) and determines that the portable device 20 is not near the vehicle 1 by the reception intensity ratio rule, the control unit 24 Determines that the relay attack is being performed and ends the process of the portable device 20.
Thereafter, since the on-vehicle device 10 has passed for a certain period without receiving the response signal 41, the processing of the on-vehicle device 10 ends due to a timeout.

In the operation examples of FIGS. 6, 19, and 20, since the mobile device 20 is not in the “moving → stationary” state, the in-vehicle device 10 does not perform the door unlocking process. Processing can also be performed by the portable device 20.
In this case, the control unit 24 determines not to transmit the response signal 41 in (Step S207) in FIG. 19, and ends the processing of the portable device 20.
Thereafter, the in-vehicle device 10 passes a certain period of time without receiving the response signal 41, and thus the processing of the in-vehicle device 10 ends due to a timeout.

Moreover, although the reception intensity ratio rule is used in the operation examples of FIGS. 6, 19, and 20, the door unlocking operation can be performed without using the reception intensity ratio rule.
In this case, the processing of (Step S007) and (Step S008) in FIG. 6 is not necessary. If it is determined in (Step S006) that the portable device 20 is outside the vehicle, the process proceeds to (Step S009).
After that, instead of the process of determining whether the portable device 20 is near the vehicle door 30 using the reception intensity ratio rule in (Step S210) of FIG. 20, the X axis, Y axis, and Z as shown in FIG. If the axial reception intensity satisfies “ax: ay: az ≠ bx: by: bz ≠ cx: cy: cz”, the process proceeds to (step S211), and if not, the process of the in-vehicle device 10 ends. .
With this processing, the accuracy of relay attack determination is reduced compared to the case where the reception intensity ratio rule is used. However, the process of (Step S210) is not reached when the portable device 20 is moved and the direction of the reception axis is shifted by the process of (Step S205). For this reason, unlike the conventional method, it is possible to avoid a situation in which it is determined that the relay attack is not performed although the relay attack is performed due to the deviation of the direction of the reception axis.

In the above description, the portable device 20 transmits one response signal 41 to one request signal 40 in (Step S004), (Step S206), and (Step S207). Instead, after receiving all the request signals 40 from the respective transmission antennas 11, the portable device 20 transmits the transmission antenna identifier included in each request signal 40 and the X-axis, Y-axis, and Z-axis of each request signal 40. The reception intensity of each axis may be included in the response signal 41 and transmitted. In that case, in the in-vehicle device 10, when one response signal 41 is received in (Step S 005) and (Step S 208), the reception strength for each request signal 40 as shown in FIG. 12 is acquired.

*** Explanation of the effect of the embodiment ***
As described above, according to the present embodiment, the unlocking of the vehicle door 30 by the relay attack as shown in FIG. 24 can be reliably prevented.
In FIG. 24, the attacker intentionally sets the arrival direction of each request signal 40 to the portable device 20 and disguises the situation where each request signal 40 is received near the vehicle door 30.
In this case, the conventional method cannot detect that a relay attack has occurred.
In the case of a relay attack as shown in FIG. 24, even with the technique according to the first embodiment, it is determined that the reception intensity ratio satisfies the reception intensity ratio rule, and as a result, it is determined that the portable device 20 is near the vehicle door 30. There is a possibility. Therefore, there is a possibility that the relay attack cannot be detected.
However, according to the present embodiment, if the state of the portable device 20 is “still” or “moving”, the unlocking operation of the vehicle door 30 is not performed. Therefore, the unlocking of the vehicle door 30 by the relay attack is not performed. It can be surely prevented.
When the portable device 20 is “moving”, it is necessary for the attacker to follow the movement of the portable device 20 and arrange the repeaters 50a to 50f at appropriate positions. It is difficult to make the request signal 40 reach the machine 20 from different directions of arrival. Therefore, when the movement state of the portable device 20 is “moving” and “moving → stationary”, the possibility of receiving the attack pattern shown in FIG. 24 is low, and the relay attack is reliably detected against this attack. It can be carried out.

Further, in the present embodiment, “movement → stationary” and “stationary” are distinguished, and as a result, a relay attack as shown in FIG. 24 can be dealt with.
As described above, according to the present embodiment, even when the accuracy of the reception intensity ratio rule is not good, or even when the relay attack that reproduces the arrival direction of the request signal 40 to the portable device 20 is performed, the relay attack is not performed. Can be prevented.

Although the embodiments of the present invention have been described above, these two embodiments may be combined and implemented.
Alternatively, one of these two embodiments may be partially implemented.
Alternatively, these two embodiments may be partially combined.
In addition, this invention is not limited to these embodiment, A various change is possible as needed.

*** Explanation of hardware configuration ***
Finally, a supplementary explanation of the hardware configuration of the in-vehicle device 10 and the portable device 20 will be given.

The auxiliary storage device 202 of the in-vehicle device 10 also stores an OS (Operating System).
Then, at least a part of the OS is executed by the processor 201.
The processor 201 executes a program that realizes the functions of the transmission unit 13, the control unit 14, the reception unit 15, and the reception intensity ratio rule generation unit 16 while executing at least a part of the OS.
When the processor 201 executes the OS, task management, memory management, file management, communication control, and the like are performed.
In addition, at least one of information, data, a signal value, and a variable value indicating processing results of the transmission unit 13, the control unit 14, the reception unit 15, and the reception intensity ratio rule generation unit 16 is stored in the storage device 902 and the processor 901. Stored in at least one of a register and a cache memory.
The programs for realizing the functions of the transmission unit 13, the control unit 14, the reception unit 15, and the reception intensity ratio rule generation unit 16 are magnetic disks, flexible disks, optical disks, compact disks, Blu-ray (registered trademark) disks, DVDs, and the like. It may be stored in a portable recording medium.

The auxiliary storage device 302 of the portable device 20 also stores an OS.
At least a part of the OS is executed by the processor 301.
The processor 301 executes a program that realizes the functions of the reception unit 23, the control unit 24, the transmission unit 25, the portable device state determination unit 26, and the seismic data acquisition unit 27 while executing at least a part of the OS.
When the processor 301 executes the OS, task management, memory management, file management, communication control, and the like are performed.
In addition, at least one of information, data, a signal value, and a variable value indicating processing results of the reception unit 23, the control unit 24, the transmission unit 25, the portable device state determination unit 26, and the seismic data acquisition unit 27 is stored in the storage device. 902, stored in at least one of a register and a cache memory in the processor 901.
Moreover, the program which implement | achieves the function of the receiving part 23, the control part 24, the transmission part 25, the portable device state determination part 26, and the seismic sensitivity data acquisition part 27 is a magnetic disk, a flexible disk, an optical disk, a compact disk, Blu-ray (trademark). ) It may be stored in a portable recording medium such as a disk or DVD.

Further, “part” of the transmission unit 13, the control unit 14, the reception unit 15, and the reception intensity ratio rule generation unit 16 may be read as “circuit”, “process”, “procedure”, or “processing”.
Moreover, the vehicle-mounted apparatus 10 may be implement | achieved by the processing circuit. The processing circuit is, for example, a logic IC (Integrated Circuit), a GA (Gate Array), an ASIC (Application Specific Integrated Circuit), or an FPGA (Field-Programmable Gate Array).
Furthermore, the “unit” in the receiving unit 23, the control unit 24, the transmitting unit 25, the portable device state determination unit 26, and the seismic data acquisition unit 27 is replaced with “circuit” or “process” or “procedure” or “processing”. May be.
Moreover, the portable device 20 may be realized by a processing circuit. As described above, the processing circuit is a logic IC, GA, ASIC, or FPGA.

In this specification, the superordinate concept of the processor and the processing circuit is referred to as “processing circuitry”.
That is, the processor and the processing circuit are specific examples of “processing circuitry”.

1 vehicle, 10 in-vehicle device, 11 transmitting antenna, 12 receiving antenna, 13 transmitting unit, 14 control unit, 15 receiving unit, 16 receiving intensity ratio rule generating unit, 20 portable device, 21 receiving antenna, 22 transmitting antenna, 23 receiving unit , 24 control unit, 25 transmission unit, 26 portable device state determination unit, 27 seismic data acquisition unit, 30 vehicle door, 40 request signal, 41 response signal, 50 relay, 201 processor, 202 auxiliary storage device, 203 main memory Device, 204 transmission device, 205 reception device, 206 ECU, 301 processor, 302 auxiliary storage device, 303 main storage device, 304 transmission device, 305 reception device, 306 vibration sensor.

Claims (14)

1. A terminal device that is carried by a user of the vehicle, receives a plurality of radio signals transmitted from a plurality of transmission antennas arranged away from each other on the vehicle, and measures the reception strength of the radio signal for each transmission antenna. A determination device included in a vehicle management system including
   A storage unit that stores reception strength information in which a value obtained from the actual value of the reception strength of a radio signal when the terminal device is located within a specified range from the vehicle is indicated for each transmission antenna as a reference value;
   For each transmission antenna, the degree of coincidence between the measurement value of the reception intensity measured by the terminal device and the reference value indicated by the reception intensity information is evaluated, and the terminal device is within the specified range from the vehicle. And a control unit that determines whether or not the user is present.
2. The terminal device measures reception intensity for each transmission antenna and for each coordinate axis in the three-dimensional coordinate axis,
   The storage unit
   As the received intensity information, a ratio between the actual values for each coordinate axis is stored as information for each transmitting antenna as the reference value,
   The controller is
   For each transmitting antenna, the terminal device evaluates the degree of coincidence between the ratio between the measured values for each coordinate axis measured by the terminal device and the ratio indicated as the reference value in the received intensity information, and the terminal device The determination apparatus according to claim 1, wherein the determination apparatus determines whether the position is within the specified range.
3. The terminal device
   Measure the reception intensity for each transmitting antenna and for each coordinate axis in the three-dimensional coordinate axis,
   The storage unit
   As the received intensity information, a ratio obtained by machine learning with respect to the actual value for each coordinate axis is stored as information indicated for each transmitting antenna as the reference value,
   The controller is
   For each transmitting antenna, the terminal device evaluates the degree of coincidence between the ratio between the measured values for each coordinate axis measured by the terminal device and the ratio indicated as the reference value in the received intensity information, and the terminal device The determination apparatus according to claim 1, wherein the determination apparatus determines whether the position is within the specified range.
4. The controller is
   The determination apparatus according to claim 1, wherein when the degree of coincidence between the measured value and the reference value exceeds a threshold value in all transmission antennas, the terminal apparatus determines that the terminal apparatus is located within the specified range from the vehicle.
5. The controller is
   The determination device according to claim 1, wherein when it is determined that the terminal device is located within the specified range from the vehicle, an operation from the terminal device to the vehicle is permitted.
6. The determination device includes:
   The determination device according to claim 1, wherein the determination device is provided in any one of the in-vehicle device and the terminal device mounted on the vehicle.
7. The vehicle management system is a keyless entry system,
   The storage unit
   Information indicating, as the reference value, a value obtained from the actual value of the reception intensity for each transmission antenna measured when the operation for locking the vehicle door is performed from the terminal device as the reception intensity information. The determination device according to claim 1, wherein the determination device is stored.
8. A terminal device carried by a user of the vehicle that receives a first radio signal transmitted from an in-vehicle device mounted on the vehicle,
   A movement state determination unit for determining a movement state of the terminal device;
   When the first radio signal is received, the movement state determination unit determines that the movement state of the terminal device has finished transitioning from a state where the terminal device is moving to a state where it is stationary. And a control unit that transmits a second radio signal responding to the first radio signal to the in-vehicle device.
9. The controller is
   When the movement state determination unit determines that the terminal device is in a moving state or a stationary state, invalid information notifying that it is an invalid second wireless signal is included. The terminal device according to claim 8, wherein the second wireless signal transmitted is transmitted to the in-vehicle device.
10. The controller is
    9. The second wireless signal is not transmitted to the in-vehicle device when the movement state determination unit determines that the terminal device is in a moving state or a stationary state. Terminal equipment.
11. A terminal device that is carried by a user of the vehicle, receives a plurality of radio signals transmitted from a plurality of transmission antennas arranged away from each other on the vehicle, and measures the reception strength of the radio signal for each transmission antenna. A determination method performed by a computer included in a vehicle management system including
    The computer reads, from the storage area, reception intensity information indicated for each transmission antenna as a reference value that is obtained from the actual value of the reception intensity of the radio signal when the terminal device is located within a specified range from the vehicle. ,
    The computer evaluates, for each transmission antenna, the degree of coincidence between the measurement value of the reception intensity measured by the terminal device and the reference value indicated in the reception intensity information, and the terminal device determines from the vehicle the regulation. The determination method which determines whether it exists in the range of.
12. A communication method performed by a terminal device, which is a computer carried by a user of the vehicle, receives a first wireless signal transmitted from an in-vehicle device mounted on the vehicle,
    The terminal device determines a movement state of the terminal device;
    When it is determined that when the first wireless signal is received, the moving state of the terminal device has transitioned from a moving state to a stationary state, the terminal device has moved. A communication method in which a terminal device transmits a second radio signal responding to the first radio signal to the in-vehicle device.
13. A terminal device that is carried by a user of the vehicle, receives a plurality of radio signals transmitted from a plurality of transmission antennas arranged away from each other on the vehicle, and measures the reception strength of the radio signal for each transmission antenna. In the computer included in the vehicle management system that includes
    A reading process of reading out from the storage area reception intensity information indicated for each transmission antenna as a reference value obtained from the actual value of the reception intensity of the radio signal when the terminal device is located within a specified range from the vehicle;
    For each transmission antenna, the degree of coincidence between the measurement value of the reception intensity measured by the terminal device and the reference value indicated by the reception intensity information is evaluated, and the terminal device is within the specified range from the vehicle. A determination program for executing a control process for determining whether or not the user is present.
14. In a terminal device that is a computer carried by a user of the vehicle that receives a first radio signal transmitted from an in-vehicle device mounted on the vehicle,
    A movement state determination process for determining a movement state of the terminal device;
    When the first radio signal is received, the movement state determination process determines that the movement state of the terminal device has finished transitioning from a state where the terminal device is moving to a state where it is stationary. And a control program for executing a control process for transmitting a second radio signal in response to the first radio signal to the in-vehicle device.

Images