WO2020090232A1 - Vehicle control system - Google Patents

Vehicle control system Download PDF

Info

Publication number
WO2020090232A1
WO2020090232A1 PCT/JP2019/035360 JP2019035360W WO2020090232A1 WO 2020090232 A1 WO2020090232 A1 WO 2020090232A1 JP 2019035360 W JP2019035360 W JP 2019035360W WO 2020090232 A1 WO2020090232 A1 WO 2020090232A1
Authority
WO
WIPO (PCT)
Prior art keywords
vehicle
control
lock
mobile terminal
control device
Prior art date
Application number
PCT/JP2019/035360
Other languages
French (fr)
Japanese (ja)
Inventor
知輝 柴田
Original Assignee
株式会社ジゴワッツ
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社ジゴワッツ filed Critical 株式会社ジゴワッツ
Publication of WO2020090232A1 publication Critical patent/WO2020090232A1/en

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R25/00—Fittings or systems for preventing or indicating unauthorised use or theft of vehicles
    • B60R25/20—Means to switch the anti-theft system on or off
    • B60R25/24—Means to switch the anti-theft system on or off using electronic identifiers containing a code not memorised by the user
    • E—FIXED CONSTRUCTIONS
    • E05—LOCKS; KEYS; WINDOW OR DOOR FITTINGS; SAFES
    • E05B—LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
    • E05B49/00—Electric permutation locks; Circuits therefor ; Mechanical aspects of electronic locks; Mechanical keys therefor
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00—Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
    • G06Q50/10—Services
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09C—CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
    • G09C1/00—Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M11/00—Telephonic communication systems specially adapted for combination with other electrical systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q9/00—Arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station, in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom

Definitions

  • the present invention configures a control device mounted on a vehicle by using a substrate of a remote control key such as an existing smart key or a keyless entry key, and issues a command to the control device via a mobile terminal such as a smart phone to thereby control the vehicle.
  • a vehicle control system capable of controlling operations such as lock / unlock of a lock.
  • Patent Document 1 Conventionally, as an example of a vehicle control system, there is a vehicle control system related to car sharing as shown in Patent Document 1.
  • the lock of the vehicle reserved by the user can be unlocked using the user's mobile terminal.
  • the vehicle control system for car sharing described in Patent Document 1 must be installed in the vehicle by preparing a dedicated control device for mounting on the vehicle to configure the vehicle control system.
  • a dedicated control device communicates directly with the control unit of the vehicle to control the behavior of the vehicle, so it is provided by a person other than the development manufacturer of each vehicle or a person who is familiar with the specifications of each vehicle. Is difficult to do.
  • car sharing companies first install a dedicated control device in the vehicle, connect it to the vehicle so that they can communicate with each other, and then perform a series of operations such as setting to enable communication between the control device and the server. Must. It is difficult for the car-sharing company to perform these series of operations because it is technically difficult and the work load is large. Further, the dedicated control device is generally expensive, and if a specialist is asked to perform the series of operations, the labor cost is also increased.
  • the present invention configures a control device mounted on a vehicle by using a substrate of remote control keys such as existing smart keys and keyless entry keys, and commands the control device via a mobile terminal such as a smartphone.
  • An object of the present invention is to provide a vehicle control system capable of controlling operations such as lock / unlock of a vehicle lock.
  • a vehicle control system of the present invention for achieving the above object uses a control server capable of communicating with a mobile terminal of a user of a vehicle through a communication line, and a board of a remote control key for locking / unlocking a vehicle lock. And a control device for controlling the operation of the vehicle, wherein the control server stores a vehicle ID and a secret key associated with the ID, and a secret key corresponding to the vehicle ID.
  • a control data generator that generates a one-time password based on the time or the value of the counter, adds a vehicle command to the generated one-time password, and generates control data that controls the operation of the vehicle, and encrypts the control data.
  • a communication unit for transmitting the encrypted control data to the mobile terminal and the mobile terminal is capable of transmitting the encrypted control data transmitted by the communication unit to the control device.
  • the control device is provided in the vehicle and is capable of short-range wireless communication with the mobile terminal, and receives the encrypted control data transmitted via the mobile terminal from the mobile terminal.
  • the verification unit for verifying the one-time password generated by the secret key stored by the control unit, the one-time password included in the control data after the combination, and the secret key stored by the storage unit of the control device. It has a command execution part that executes the command included in the control data when the one-time password matches and does not execute the command when the one-time password does not match. .
  • the vehicle control system of the present invention since the control device mounted on the vehicle is configured by using the substrate of the remote control key such as the existing smart key or keyless entry key, the control device dedicated to the vehicle is prepared. do not have to. Further, since the control device can be configured by effectively utilizing the limon conkey of the vehicle, the vehicle control system can be inexpensive. Further, since the control server and the control device communicate with each other via the mobile terminal of the user of the vehicle, it is sufficient that the mobile terminal has an application for communication, and the control device has a function for communicating with the control server. There is no need to prepare. Further, since the setting for the control device to communicate with the control server is unnecessary, the construction of the vehicle control system becomes easy. Further, the vehicle control system of the present invention can easily modify an existing vehicle as a vehicle for car sharing.
  • FIG. 1 is a schematic configuration diagram of a vehicle control system of Embodiment 1.
  • FIG. 1 is a schematic block diagram of the control server of FIG.
  • FIG. 5 is a diagram provided for explaining operations of a control data generation unit and an encryption unit in FIG. 4.
  • FIG. 4 is a diagram for explaining the operation of the control device of FIG. 3.
  • 4 is a flowchart of an unlocking operation of the vehicle control system of FIG. 4 is a flowchart of a lock operation of the vehicle control system of FIG.
  • 11 is an operation flowchart of the vehicle control system of FIG. 10.
  • FIG. 1 is an explanatory diagram of a mounting process of a control device of a vehicle control system.
  • the owner of the vehicle 10 sends the remote control keys 20 such as the smart key and the keyless entry key of the vehicle 10 to the dealer, and the vehicle for the remote control key 20 of the vehicle 10 is sent from the actual store or the store on the Internet.
  • the vehicle connection device 30 may be prepared, for example, for each manufacturer or vehicle type of the vehicle 10.
  • the vehicle connection device 30 is connected to both the constant power line and the ACC line of the vehicle 10 as shown in the figure.
  • the constant power line is a line to which the voltage of the battery is always supplied regardless of whether the engine is started.
  • the constant power line serves as a power source for the vehicle connection device 30, the board 40, and the key connection device 50, that is, the control device 140.
  • the ACC line is a line to which the battery voltage is supplied when the engine start button is pressed, the key position is set to ACC, or when the engine is running.
  • the vehicle connection device 30 can determine whether or not the engine has started depending on the presence or absence of the voltage on the ACC line.
  • the dealer disassembles the existing remote control key 20 sent from the owner of the vehicle 10 and takes out the substrate 40 from the remote control key 20.
  • the board 40 has a function of locking / unlocking the lock of the vehicle 10.
  • the key connection device 50 for the remote control key 20 is wired and connected to the board 40.
  • the key connection device 50 has a function of outputting a command for locking / unlocking the lock of the vehicle 10 on the substrate 40, a command for stopping the power supply to the substrate 40, and the like.
  • the key unit 60 in which the board 40 and the key connection device 50 are integrated is sent to the owner of the vehicle 10.
  • the owner of the vehicle 10 connects the key unit 60 sent from the dealer to the vehicle connection device 30 attached to the vehicle 10.
  • the functions of the board 40, the key connection device 50, and the vehicle connection device 30 will be described later.
  • the hardware configuration of the vehicle control system is completed.
  • the control device 140 mounted on the vehicle 10 can be configured by using the substrate 40 of the remote control keys 20 such as the existing smart keys and keyless entry keys. Therefore, unlike the conventional case, it is not necessary to prepare a dedicated control device for configuring the vehicle control system, and the vehicle control system can be configured easily and inexpensively.
  • the owner of the vehicle 10 performs a simple wiring work to attach the vehicle connection device 30 purchased from the store to the constant power line and the ACC line of the vehicle 10, and attaches the vehicle connection device 30 to the key unit 60 sent from the vendor.
  • the vehicle control system can be configured by performing a simple connection work of connecting the. Therefore, even if the user does not have specialized knowledge about the vehicle 10, the user can easily configure the vehicle control system.
  • FIG. 2 is a schematic configuration diagram of the control device 140 of FIG.
  • the board 40 and the key connection device 50 form a key unit 60
  • the key connection device 50 and the vehicle connection device 30 form a control device 140.
  • the board 40 performs operations such as locking / unlocking the lock of the vehicle 10.
  • the key connection device 50 is connected to the board 40 and outputs a command such as lock / unlock to the board 40.
  • the vehicle connection device 30 is connected to the key connection device 50 of the key unit 60, causes the key connection device 50 to perform lock / unlock of the lock, and controls on / off of electric power to the substrate 40.
  • FIG. 3 is a schematic configuration diagram of the vehicle control system of the first embodiment.
  • the vehicle control system 100 includes a control server 130 capable of communicating with a mobile terminal 110 of a user of the vehicle 10 (see FIG. 1) via a network line (communication line) 120, and a remote controller for locking / unlocking the lock of the vehicle 10.
  • the controller 40 controls the board 40 of the key 20 to control the operation of the vehicle 10.
  • the mobile terminal 110 is a terminal owned by a user who uses the vehicle 10. For example, it is a commonly used portable terminal device such as a smartphone or a tablet terminal.
  • the mobile terminal 110 and the control device 140 can bidirectionally communicate with each other using a short-range wireless communication system such as Bluetooth (registered trademark).
  • the network line 120 is a communication line that functions as a communication unit and connects the mobile terminal 110 and the control server 130 by wire or wirelessly.
  • the network line 120 includes communication lines such as mobile communication that communicates via a telephone company, the Internet that communicates via a connection provider such as a provider, an intranet, and a LAN.
  • the control server 130 has a function of generating control data for controlling the operation of the vehicle 10 and transmitting the control data to the mobile terminal 110.
  • control data for controlling the control of the operation of the vehicle 10 the lock / unlock of the lock of the vehicle 10 and the turning on of the power to the board 40 included in the key unit 60 installed in the vehicle 10 are performed. / OFF is illustrated.
  • the control data is not limited to lock / unlock of the lock and power on / off, and may include operations such as starting and stopping the engine of the vehicle 10. The detailed configurations of the control server 130 and control data will be described later.
  • the control device 140 controls lock / unlock of the lock of the vehicle 10 and ON / OFF of electric power to the board 40 included in the key unit 60 installed in the vehicle 10 based on the control data generated by the control server 130.
  • FIG. 4 is a schematic configuration diagram of the control server 130 of FIG.
  • the control server 130 includes an ID / secret key storage unit 132, a control data generation unit 134, an encryption unit 136, and a wireless communication unit 138.
  • the ID / secret key storage unit 132 that functions as a storage unit stores the ID of the vehicle 10 and the secret key associated with the ID. When there are a plurality of vehicles 10, the ID / secret key storage unit 132 stores, for each vehicle 10, the ID of the vehicle 10 and the secret key associated with the ID as a table.
  • the control data generator 134 uses the ID of the vehicle 10 and the secret key associated with the ID to generate control data for controlling the operation of the vehicle 10. Further, the encryption unit 136 encrypts the generated control data.
  • the generation of control data and the structure of control data will be described.
  • FIG. 5 is a diagram provided for explaining operations of the control data generation unit 134 and the encryption unit 136 of FIG.
  • the control data generation unit 134 first generates a one-time password (hereinafter, referred to as OTP) based on the secret key corresponding to the ID of the vehicle 10 stored in the ID / secret key storage unit 132 and the time ticked by its own clock. To do.
  • OTP is generated by calculating the binary data indicating the secret key and the binary data indicating the time T according to a predetermined calculation procedure.
  • a predetermined calculation procedure for example, an algorithm for calculating various hash values such as MD5, SHA-1, SHA-256 can be used. It should be noted that the OTP can be generated using the value of the counter instead of the time ticked by the own clock.
  • the control data is generated by adding the command of the vehicle 10 to the generated OTP.
  • the time T is set to a value that is updated at predetermined intervals, such as every 30 seconds, in consideration of the time difference between the control server 130 on the transmitting side and the control device 140 on the receiving side. You can Further, the time T when the OTP is generated may be added to the control data. Therefore, the control data includes the command for operating the vehicle 10 and the OTP generated by the secret key and the time T.
  • the encryption unit 136 encrypts the control data. As shown in FIG. 5, the encryption unit 136 encrypts the control data in which the command and the OTP information are concatenated using a common key encryption method such as AES.
  • a secret key for AES is used to encrypt the control data. Note that the OTP secret key used when generating the OTP and the AES secret key may be the same, but considering security, the OTP secret key and the AES secret key are different. Is preferably used.
  • the wireless communication unit 138 transmits the encrypted control data to the mobile terminal 110 shown in FIG. This transmission is performed from the control server 130 via the network line 120 and the mobile communication line.
  • the mobile terminal 110 can transmit the encrypted control data transmitted by the wireless communication unit 138 to the control device 140 using short-range wireless communication.
  • FIG. 6 is a schematic configuration diagram of the control device 140 of FIG.
  • FIG. 7 is a diagram for explaining the operation of the control device 140 of FIG.
  • the control device 140 includes a wireless communication unit 142, a decryption unit 144, an ID / secret key storage unit 145, a collation unit 146, and a command execution unit 148.
  • the command execution unit 148 includes a lock / unlock control unit 147 that controls lock / unlock of the vehicle 10 and a power supply control unit 149 that controls power on / off.
  • the control device 140 is provided in the vehicle 10 and is capable of short-range wireless communication with the mobile terminal 110.
  • the wireless communication unit 142 receives the encrypted control data transmitted via the mobile terminal 110 from the mobile terminal 110.
  • the mobile terminal 110 has a function of causing the control device 140 to transmit the encrypted control data transmitted by the wireless communication unit 138 (see FIG. 4) of the control server 130.
  • the decryption unit 144 decrypts the encrypted control data using the AES private key. Here, decoding of control data will be described.
  • the wireless communication unit 142 receives the encrypted control data via the mobile terminal 110.
  • the decryption unit 144 decrypts the received encrypted control data using a common key encryption method such as AES (using a secret key for AES).
  • AES using a secret key for AES.
  • the control data after decryption becomes the control data before encryption shown in FIG.
  • the OTP is separated from the decrypted control data.
  • the ID / secret key storage unit 145 that functions as a storage unit stores the ID of the vehicle 10 and the secret key.
  • the ID and the secret key of the vehicle 10 stored in the ID / secret key storage unit 145 are the ID and the secret key of the vehicle 10 stored in the ID / secret key storage unit 132 of the control server 130 of FIG. It is the same.
  • the collation unit 146 collates the OTP included in the decrypted control data with the OTP generated based on the secret key stored in the ID / secret key storage unit 145.
  • the OTP collation will be described.
  • the collating unit 146 first generates an OTP using the time T clocked by its own clock and the secret key stored in the ID / secret key storage unit 145. Subsequently, the matching unit 146 extracts the OTP included in the control data. Then, the collation unit 146 collates the generated OTP with the OTP of the transmitted control data.
  • the matching unit 146 may generate a plurality of OTPs for a predetermined range of times before and after the time T that the clock of the control server 130 and the control device 140 engrave in consideration of the time difference. .. In this case, the matching unit 146 may determine that the OTPs match when any of the OTPs matches the OTP of the control data. When the control data includes the time T when the OTP is generated, the time T may be used to generate the OTP.
  • the command execution unit 148 executes the command included in the control data when the OTP included in the control data and the OTP generated by the matching unit 146 match, and does not execute the command when they do not match. Specifically, if the command included in the control data is unlock, the lock / unlock control unit 147 unlocks the lock of the vehicle 10, and if the command included in the control data is lock, the lock / unlock control unit 147 locks the lock. / The unlock control unit 147 locks the lock of the vehicle 10.
  • the lock / unlock control unit 147 is realized, for example, by connecting a control terminal to a lock / unlock switch provided on the substrate 40, and an electric signal for controlling the switch is transmitted via the terminal. Sent.
  • the power supply control unit 149 controls ON / OFF of the power supplied to the substrate 40 according to the lock / unlock operation of the lock controlled by the lock / unlock control unit 147.
  • the power supply control unit 149 is realized, for example, by connecting a power control terminal to a power supply wiring provided on the substrate 40, and supplies or cuts off power to the substrate 40 via the terminal.
  • FIG. 8 is a flowchart of the unlocking operation of the vehicle control system 100 of FIG. The operation of the vehicle control system 100 will be described with reference to FIGS. 3 to 7. Before performing the unlocking operation described below, the power supply control unit 149 of the control device 140 turns off the power supply of the board 40.
  • the mobile terminal 110 receives the ID of the vehicle 10 from the control device 140 mounted on the vehicle 10 (S100).
  • the control device 140 transmits the ID of the vehicle 10, which is stored in the ID / secret key storage unit 145, within a predetermined range at regular time intervals using short-range wireless communication. That is, the control device 140 broadcasts the ID of the vehicle 10 at regular time intervals. Therefore, the mobile terminal 110 can receive the ID being broadcast.
  • the mobile terminal 110 establishes a connection with the control device 140 transmitting the ID.
  • the ID of the vehicle reserved by the user is stored in advance in the mobile terminal 110.
  • a short-distance wireless communication method for example, Bluetooth Low Energy (BLE) can be used.
  • the control device 140 can transmit the ID of the vehicle 10 to the surroundings at regular time intervals by the advertisement function.
  • the short-range wireless communication system is not limited to the above, and various short-range wireless communication systems can be adopted.
  • the mobile terminal 110 that has received the ID of the vehicle 10 executes the installed application (S101).
  • This application is distributed by a car sharing company, and can be executed by a user who is permitted to use the vehicle 10 by the car sharing company.
  • the application may be automatically executed or may be executed based on a user instruction.
  • the application may be executed in the background in advance, or may be executed in the background when the ID of the reserved vehicle 10 is acquired.
  • the mobile terminal 110 transmits the ID transmitted from the control device 140 to the control server 130 via the network line 120 (S102).
  • the control data generation unit 134 of the control server 130 retrieves the secret key corresponding to the transmitted ID from the ID / secret key storage unit 132.
  • the control data generation unit 134 generates a one-time password (OTP) based on the extracted secret key and the time engraved by its own clock.
  • OTP one-time password
  • the control data generation unit 134 adds an unlock command to the generated OTP to generate control data as shown in FIG.
  • the encryption unit 136 encrypts the generated control data using a common key encryption method such as AES (S103).
  • the wireless communication unit 138 transmits the encrypted control data to the mobile terminal 110 via the network line 120 (S104).
  • the entire control data is encrypted, and the encrypted control data contains OTP. Therefore, even if the control data is intercepted, it cannot be reused. Moreover, even if the AES secret key is leaked, it is difficult to generate correct control data.
  • the mobile terminal 110 transmits the received control data as it is to the control device 140 installed in the vehicle 10 by short-range wireless communication using Bluetooth (registered trademark) or the like.
  • the wireless communication unit 142 of the control device 140 receives the encrypted control data via the mobile terminal 110 (S105). Communication between the mobile terminal 110 and the control device 140 is performed by short-range wireless communication using Bluetooth (registered trademark) or the like. Therefore, unless the distance between the mobile terminal 110 and the vehicle 10 is visually short, the control data is not received, and the lock of the vehicle 10 can be prevented from being unlocked by a hacker or the like.
  • the decryption unit 144 decrypts the received control data using a common key encryption method such as AES (S106).
  • the matching unit 146 uses the time T and the secret key stored in the ID / secret key storage unit 145 to generate an OTP. Further, the collating unit 146 takes out the OTP included in the control data and collates the generated OTP with the OTP of the transmitted control data (S107).
  • the collating unit 146 determines whether the generated OTP and the OTP of the transmitted control data match (S108). If both OTPs match (S108: YES), the power supply control unit 149 turns on the power supply of the board 40, and the lock / unlock control unit 147 executes the command included in the control data to execute the command of the vehicle 10. The lock is unlocked (S109). On the other hand, if the two OTPs do not match (S108: NO), the command included in the control data is not executed and the process ends.
  • the lock of the vehicle 10 can be unlocked simply by approaching the vehicle 10 with the mobile terminal 110. Therefore, if the vehicle 10 is not in front of the eyes, the lock of the vehicle 10 cannot be unlocked, and it can be prevented that the person other than the owner of the vehicle 10 uses the vehicle 10.
  • FIG. 9 is a flowchart of the lock operation of the vehicle control system 100 of FIG.
  • control server 130 is notified of the start of the engine via the mobile terminal 110, and the control device 140 is in the lock standby state by the lock command transmitted from the control server 130 via the mobile terminal 110. Is set to.
  • control device 140 locks the lock of the vehicle 10 when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected in the lock standby state.
  • the control device 140 determines whether the engine has been started within a predetermined time after the unlock (S200). If the engine is not started within the predetermined time (S200: NO), the lock / unlock control unit 147 locks the lock of the vehicle 10 and turns off the power of the control device 140 (S208).
  • the control device 140 notifies the mobile terminal 110 of the owner of the vehicle 10 by short-range wireless communication to start the engine (S201).
  • the mobile terminal 110 notified of the start of the engine requests a lock command as control data from the control server 130 via the network line 120 (S202).
  • the control server 130 generates and encrypts a lock command (S203), and the control server 130 transmits the encrypted lock command to the mobile terminal 110 via the network line 120 (S204).
  • the mobile terminal 110 directly transmits the lock command transmitted from the control server 130 to the control device 140 by short-range wireless communication.
  • the wireless communication unit 142 of the control device 140 receives the lock command via the mobile terminal 110 (S205).
  • the control device 140 sets the control device 140 to the lock standby state by the transmitted lock command (S206).
  • control device 140 determines whether or not the connection with the mobile terminal 110 has been disconnected (S207). If the connection is not disconnected (S207: NO), the system waits in the lock standby state, and if the connection is disconnected (S207: YES), the lock / unlock control unit 147 locks the lock of the vehicle 10 and controls it. The power of the device 140 is turned off (S208).
  • the door lock is automatically locked. Further, even if the engine is started, the lock of the vehicle 10 is automatically locked when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected. The disconnection is because it is considered that the user has left the vehicle 10.
  • the lock / unlock of the lock of the vehicle 10 as well as the turning on / off of the power supply of the control device 140, to be more precise, the key unit 60 are performed by the user even when the key unit 60 is left in the vehicle 10. This is so that the vehicle can be separated from the vehicle 10.
  • FIG. 10 is a schematic configuration diagram of the vehicle control system of the second embodiment.
  • the vehicle control system 200 of the second embodiment is different from the vehicle control system 100 of the first embodiment in that a reservation server 210 is provided.
  • the vehicle control system 200 includes a control server 130 capable of communicating with a mobile terminal 110 of a user of the vehicle 10 via a network line (communication line) 120, and a vehicle 10. It has a control device 140 capable of short-range wireless communication with the mobile terminal 110, which is configured by using the substrate 40 of the remote control key 20 for locking / unlocking the lock and controls the operation of the vehicle 10. These operations are the same as in the first embodiment.
  • the reservation server 210 stores reservation data in which the user has reserved the use of the vehicle 10.
  • FIG. 11 is an operation flowchart of the vehicle control system of FIG.
  • the operations of S300, S301, and S305 to S311 in the operation flowchart of FIG. 11 are the same as the operations of S100, S101, and S103 to S109 of the operation flowchart of FIG.
  • the user of the car-sharing vehicle 10 approaches the vehicle 10 to a distance where short-range wireless communication such as Bluetooth (registered trademark) is possible.
  • the mobile terminal 110 receives the ID of the vehicle 10 from the control device 140 mounted on the vehicle 10 (S300).
  • the control device 140 transmits the ID of the vehicle 10 stored in the ID / secret key storage unit 145 to the mobile terminal 110 using short-range wireless communication.
  • the mobile terminal 110 that has received the ID of the vehicle 10 executes the installed application (S301).
  • This application is distributed by a rental company, and can be executed by a user who is permitted to use the vehicle 10 by the rental company.
  • the mobile terminal 110 transmits the received ID to the reservation server 210 via the network line 120 (S302).
  • the reservation server 210 checks whether the received ID matches the reserved ID (S303).
  • the reservation server 210 ends the process as it is because the vehicle 10 corresponding to the ID is not reserved. To do. On the other hand, if the received ID matches the reserved ID (S304: YES), the reservation server 210 transmits the reserved ID to the control data generation unit 134 of the control server 130.
  • the reservation server There are various methods for the operation of the reservation server, but any of the methods currently implemented may be used.
  • the control data generation unit 134 adds an unlock command to the generated OTP to generate control data as shown in FIG.
  • the encryption unit 136 encrypts the generated control data using a common key encryption method such as AES (S305).
  • the wireless communication unit 138 transmits the encrypted control data to the mobile terminal 110 via the network line 120 (S306).
  • the entire control data is encrypted, and the encrypted control data contains OTP. Therefore, even if the control data is intercepted, it cannot be reused. Moreover, even if the AES secret key is leaked, it is difficult to generate correct control data.
  • the mobile terminal 110 transmits the received control data as it is to the control device 140 installed in the vehicle 10 by short-range wireless communication using Bluetooth (registered trademark) or the like.
  • the wireless communication unit 142 of the control device 140 receives the encrypted control data via the mobile terminal 110 (S307). Communication between the mobile terminal 110 and the control device 140 is performed by short-range wireless communication using Bluetooth (registered trademark) or the like. Therefore, unless the distance between the mobile terminal 110 and the vehicle 10 is visually short, the control data is not received, and the lock of the vehicle 10 can be prevented from being unlocked by a hacker or the like.
  • the decryption unit 144 decrypts the received control data using a common key encryption method such as AES (S308).
  • the matching unit 146 uses the time T and the secret key stored in the ID / secret key storage unit 145 to generate an OTP. Further, the collating unit 146 extracts the OTP included in the control data, and collates the generated OTP with the OTP of the transmitted control data (S309).
  • the collating unit 146 determines whether or not the generated OTP and the OTP of the transmitted control data match (S310). If both OTPs match (S310: YES), the lock / unlock control unit 147 executes the command included in the control data to unlock the vehicle 10. Further, the power supply control unit 149 turns on the power supply of the control device 140 (S311). On the other hand, if the two OTPs do not match (S310: NO), the command included in the control data is not executed and the process ends.
  • the flowchart of FIG. 9 is executed as in the first embodiment. Therefore, when the engine of the vehicle 10 has not been started even after a predetermined time has elapsed after unlocking the lock of the vehicle 10, or between the control device 140 and the mobile terminal 110 after the engine has been started. When the short-range wireless communication connection is disconnected, the lock of the vehicle 10 is locked. In addition, after the engine is started, the mobile terminal 110 is notified of the start of the engine, the mobile terminal 110 requests a lock command from the control server 130, and the lock is transmitted by the lock command transmitted from the control server 130 via the mobile terminal 110. Set to standby state. Further, the control device 140 can lock the lock of the vehicle 10 when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected in the lock standby state.
  • the lock of the vehicle 10 is automatically unlocked only when the user of the vehicle 10 approaches the vehicle 10.
  • the lock standby state is entered, and when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected, the lock of the vehicle 10 is locked. Therefore, the user of the vehicle can use the vehicle 10 simply by approaching the vehicle 10 with the mobile terminal. Further, when returning the vehicle 10, it is automatically locked simply by leaving the vehicle. Therefore, it is possible to construct the vehicle control system 200 which is very easy to use.
  • the power supply of the key unit 60 left inside the vehicle is turned off together with the lock / unlock of the lock of the vehicle 10, so that the key unit 60 is separated from the vehicle 10 from the viewpoint of the vehicle,
  • the key unit 60 can be placed in the vehicle 10 to be rented, and rental can be performed without handing over keys and cards.
  • control device 140 does not need to directly communicate with the control server 130, the number of components of the control device 140 can be reduced and the control device 140 can be manufactured at low cost. Further, the control device 140 can be downsized.
  • the vehicle control system of the present invention can easily modify the existing vehicle 10 into the vehicle 10 for car sharing. Therefore, for example, it is very effective when carrying out a car-sharing / car-rental business in an emerging country such as Africa where many used Japanese cars are used.
  • the method of making and installing the control device 140 is not limited to the method shown in FIG. 1, and a user or a service provider may perform all the steps, or an arbitrary part may be given to a third party. You may entrust it.
  • control device 140 can send to the board 40 is not limited to lock / unlock, but can send instructions related to various operations such as ringing of the horn.
  • control system 110 mobile terminals, 120 network lines, 130 control server, 132 ID / secret key storage unit, 134 a control data generator, 136 encryption unit, 138 wireless communication unit, 140 controlled device (key device), 142 wireless communication unit, 144 decoding unit, 145 ID / secret key storage unit, 146 collation unit, 148 Command execution part, 210 reservation server.

Abstract

[Problem] To allow control of operations such as locking and unlocking a vehicle lock via a mobile terminal such as a smart phone. [Solution] The vehicle control system has a control server 130 that can communicate with a mobile terminal 110 of a vehicle user via a network connection 120, and a control device 140 that controls vehicle operation and that is configured using the circuit board of a remote control key for locking and unlocking a vehicle lock. The control server 130 encrypts control data for controlling vehicle operations by using the vehicle ID and a private key associated with the ID and sends the encrypted control data to the mobile terminal. The mobile terminal 110 transmits the encrypted control data sent by a wireless communication unit to the control device 140 using short range wireless communication. The control device 140 decrypts the encrypted control data transmitted via the mobile terminal 110, and then executes the command contained in the control data when the one-time password (OTP) contained in the control data matches the stored one-time password and does not execute the command when the passwords do not match.

Description

車両制御システムVehicle control system
　本発明は、既存のスマートキー、キーレスエントリーキーなどのリモコンキーの基板を利用して車両に搭載する制御装置を構成し、スマートフォンなどの携帯端末を介してその制御装置に指令することにより、車両の錠のロック／アンロックなどの動作が制御できるようにした、車両制御システムに関する。 The present invention configures a control device mounted on a vehicle by using a substrate of a remote control key such as an existing smart key or a keyless entry key, and issues a command to the control device via a mobile terminal such as a smart phone to thereby control the vehicle. The present invention relates to a vehicle control system capable of controlling operations such as lock / unlock of a lock.
　従来、車両制御システムの一例としては、特許文献１に示すような、カーシェアリングに関する車両制御システムがある。 Conventionally, as an example of a vehicle control system, there is a vehicle control system related to car sharing as shown in Patent Document 1.
　このカーシェアリングに関する車両制御システムによれば、使用者が予約した車両の錠を、使用者の携帯端末を用いて開錠させることができる。 According to this vehicle control system for car sharing, the lock of the vehicle reserved by the user can be unlocked using the user's mobile terminal.
特開２０１８－９２３２３号公報JP, 2008-92323, A
　しかし、特許文献１に記載されているカーシェアリングに関する車両制御システムは、その車両制御システムを構成するための車載用の専用の制御装置を用意して車両に設置しなければならない。そのような車載用の専用の制御装置は、車両の制御部と直接通信して車両の挙動を制御するものであるため、各車両の開発製造者または各車両の仕様を熟知した者以外が提供することは困難である。また、カーシェアリング業者などは、まずその専用の制御装置を車両に設置して車両と通信可能に接続し、さらに制御装置とサーバーとを通信可能にするための設定をするなどの一連の作業をしなければならない。これら一連の作業をカーシェアリング業者自身で行なうことは、技術的に難しいこと、および作業負荷が大きいことから困難である。さらに、その専用の制御装置は一般的に高価であり、その一連の作業を専門業者に依頼するとその工賃もまた嵩む。 However, the vehicle control system for car sharing described in Patent Document 1 must be installed in the vehicle by preparing a dedicated control device for mounting on the vehicle to configure the vehicle control system. Such an on-vehicle dedicated control device communicates directly with the control unit of the vehicle to control the behavior of the vehicle, so it is provided by a person other than the development manufacturer of each vehicle or a person who is familiar with the specifications of each vehicle. Is difficult to do. In addition, car sharing companies first install a dedicated control device in the vehicle, connect it to the vehicle so that they can communicate with each other, and then perform a series of operations such as setting to enable communication between the control device and the server. Must. It is difficult for the car-sharing company to perform these series of operations because it is technically difficult and the work load is large. Further, the dedicated control device is generally expensive, and if a specialist is asked to perform the series of operations, the labor cost is also increased.
　そこで、本発明は、既存のスマートキー、キーレスエントリーキーなどのリモコンキーの基板を利用して車両に搭載する制御装置を構成し、スマートフォンなどの携帯端末を介してその制御装置に指令することにより、車両の錠のロック／アンロックなどの動作が制御できるようにした、車両制御システムの提供を目的とする。 Therefore, the present invention configures a control device mounted on a vehicle by using a substrate of remote control keys such as existing smart keys and keyless entry keys, and commands the control device via a mobile terminal such as a smartphone. An object of the present invention is to provide a vehicle control system capable of controlling operations such as lock / unlock of a vehicle lock.
　上記目的を達成するための本発明の車両制御システムは、車両の使用者の携帯端末と通信回線を介して通信可能な制御サーバーと、車両の錠をロック／アンロックさせるリモコンキーの基板を利用して構成され車両の動作を制御する制御装置と、を有し、制御サーバーは、車両のＩＤとＩＤに対応付けた秘密鍵とを記憶する記憶部と、車両のＩＤに対応する秘密鍵と時刻またはカウンタの値とによってワンタイムパスワードを生成し、生成したワンタイムパスワードに車両のコマンドを付加して、車両の動作を制御させる制御データを生成する制御データ生成部と、制御データを暗号化する暗号化部と、暗号化後の制御データを携帯端末に送信する通信部と、を有し、携帯端末は、通信部が送信した暗号化後の制御データを制御装置に近距離無線通信を用いて伝送可能であり、制御装置は、車両に設けられて携帯端末と近距離無線通信可能であり、携帯端末を介して伝送された暗号化後の制御データを携帯端末から受信する無線通信部と、暗号化後の制御データを復号する復号部と、車両のＩＤと秘密鍵とを記憶する記憶部と、復号後の制御データに含まれるワンタイムパスワードと前記制御装置の記憶部が記憶している秘密鍵によって生成したワンタイムパスワードとを照合する照合部と、前記複合後の制御データに含まれるワンタイムパスワードと前記制御装置の記憶部が記憶している秘密鍵によって生成したワンタイムパスワードとが一致しているときには制御データに含まれるコマンドを実行し、一致していないときにはコマンドを実行しないコマンド実行部と、を有する。 A vehicle control system of the present invention for achieving the above object uses a control server capable of communicating with a mobile terminal of a user of a vehicle through a communication line, and a board of a remote control key for locking / unlocking a vehicle lock. And a control device for controlling the operation of the vehicle, wherein the control server stores a vehicle ID and a secret key associated with the ID, and a secret key corresponding to the vehicle ID. A control data generator that generates a one-time password based on the time or the value of the counter, adds a vehicle command to the generated one-time password, and generates control data that controls the operation of the vehicle, and encrypts the control data. And a communication unit for transmitting the encrypted control data to the mobile terminal, and the mobile terminal is capable of transmitting the encrypted control data transmitted by the communication unit to the control device. The control device is provided in the vehicle and is capable of short-range wireless communication with the mobile terminal, and receives the encrypted control data transmitted via the mobile terminal from the mobile terminal. A wireless communication unit, a decryption unit for decrypting the encrypted control data, a storage unit for storing the vehicle ID and a secret key, a one-time password included in the decrypted control data, and a storage unit for the control device. Generated by the verification unit for verifying the one-time password generated by the secret key stored by the control unit, the one-time password included in the control data after the combination, and the secret key stored by the storage unit of the control device. It has a command execution part that executes the command included in the control data when the one-time password matches and does not execute the command when the one-time password does not match. .
　本発明の車両制御システムによれば、既存のスマートキー、キーレスエントリーキーなどのリモコンキーの基板を利用して車両に搭載する制御装置を構成しているので、その車両に専用の制御装置を準備する必要はない。また、その車両のリモンコンキーを有効に活用して制御装置が構成できるため、車両制御システムを安価にできる。また、制御サーバーと制御装置とは車両の使用者の携帯端末を介して通信するので、通信のためのアプリケーションは携帯端末が有していればよく、制御装置は制御サーバーと通信するための機能を備える必要がない。さらに、制御装置が制御サーバーと通信するための設定が不要であるので、車両制御システムの構築が容易になる。さらに、本発明の車両制御システムは既存の車両をカーシェアリング用の車両として容易に改変させることができる。 According to the vehicle control system of the present invention, since the control device mounted on the vehicle is configured by using the substrate of the remote control key such as the existing smart key or keyless entry key, the control device dedicated to the vehicle is prepared. do not have to. Further, since the control device can be configured by effectively utilizing the limon conkey of the vehicle, the vehicle control system can be inexpensive. Further, since the control server and the control device communicate with each other via the mobile terminal of the user of the vehicle, it is sufficient that the mobile terminal has an application for communication, and the control device has a function for communicating with the control server. There is no need to prepare. Further, since the setting for the control device to communicate with the control server is unnecessary, the construction of the vehicle control system becomes easy. Further, the vehicle control system of the present invention can easily modify an existing vehicle as a vehicle for car sharing.
車両制御システムの制御装置の取り付け工程の説明図である。It is explanatory drawing of the attachment process of the control apparatus of a vehicle control system. 図１の制御装置の概略構成図である。It is a schematic block diagram of the control apparatus of FIG. 実施形態１の車両制御システムの概略構成図である。1 is a schematic configuration diagram of a vehicle control system of Embodiment 1. FIG. 図３の制御サーバーの概略構成図である。It is a schematic block diagram of the control server of FIG. 図４の制御データ生成部および暗号化部の動作説明に供する図である。FIG. 5 is a diagram provided for explaining operations of a control data generation unit and an encryption unit in FIG. 4. 図３の制御装置の概略構成図である。It is a schematic block diagram of the control apparatus of FIG. 図３の制御装置の動作説明に供する図である。FIG. 4 is a diagram for explaining the operation of the control device of FIG. 3. 図３の車両制御システムのアンロック動作のフローチャートである。4 is a flowchart of an unlocking operation of the vehicle control system of FIG. 図３の車両制御システムのロック動作のフローチャートである。4 is a flowchart of a lock operation of the vehicle control system of FIG. 実施形態２の車両制御システムの概略構成図である。It is a schematic block diagram of the vehicle control system of Embodiment 2. 図１０の車両制御システムの動作フローチャートである。11 is an operation flowchart of the vehicle control system of FIG. 10.
　実施形態を説明する前に、まず、本発明の車両制御システムの制御装置をどのようにして簡易に、そして安価に作成して取り付けるのか、その工程について説明する。図１は、車両制御システムの制御装置の取り付け工程の説明図である。 Before describing the embodiments, first, the process of how to easily and inexpensively create and attach the control device of the vehicle control system of the present invention will be described. FIG. 1 is an explanatory diagram of a mounting process of a control device of a vehicle control system.
　まず、車両１０の所有者は、その車両１０のスマートキー、キーレスエントリーキーなどのリモコンキー２０を業者に送付し、実店舗、インターネット上の店舗などから、その車両１０のリモコンキー２０用の車両接続装置３０を購入する。車両接続装置３０は、例えば、車両１０のメーカーや車種ごとに用意されていてもよい。 First, the owner of the vehicle 10 sends the remote control keys 20 such as the smart key and the keyless entry key of the vehicle 10 to the dealer, and the vehicle for the remote control key 20 of the vehicle 10 is sent from the actual store or the store on the Internet. Purchase the connection device 30. The vehicle connection device 30 may be prepared, for example, for each manufacturer or vehicle type of the vehicle 10.
　次に、車両１０の所有者は、購入した車両接続装置３０を車両１０に取り付ける。車両接続装置３０は、図に示すように、車両１０の常時電源ラインとＡＣＣラインの両方に接続する。常時電源ラインは、エンジンの始動如何にかかわらずに常にバッテリの電圧が供給されているラインである。常時電源ラインは車両接続装置３０、基板４０、およびキー接続装置５０、すなわち制御装置１４０の電源となる。ＡＣＣラインは、エンジンの起動ボタンが押されたり、キーポジションがＡＣＣに設定されたりしたとき、またはエンジンがかかっているときにバッテリの電圧が供給されるラインである。車両接続装置３０は、ＡＣＣラインの電圧の有無によってエンジンの始動の有無が判断できる。 Next, the owner of the vehicle 10 attaches the purchased vehicle connection device 30 to the vehicle 10. The vehicle connection device 30 is connected to both the constant power line and the ACC line of the vehicle 10 as shown in the figure. The constant power line is a line to which the voltage of the battery is always supplied regardless of whether the engine is started. The constant power line serves as a power source for the vehicle connection device 30, the board 40, and the key connection device 50, that is, the control device 140. The ACC line is a line to which the battery voltage is supplied when the engine start button is pressed, the key position is set to ACC, or when the engine is running. The vehicle connection device 30 can determine whether or not the engine has started depending on the presence or absence of the voltage on the ACC line.
　一方、業者は、車両１０の所有者から送付された既存のリモコンキー２０を分解し、リモコンキー２０から基板４０を取り出す。この基板４０は、車両１０の錠をロック／アンロックさせるなどの機能を備えている。次に、基板４０にリモコンキー２０用のキー接続装置５０を配線して接続する。キー接続装置５０は、基板４０に車両１０の錠をロック／アンロックさせるための指令や、基板４０への電力供給を停止させるための指令などを出力する機能を備えている。そして、基板４０とキー接続装置５０とが一体化されたキーユニット６０を車両１０の所有者に送付する。 Meanwhile, the dealer disassembles the existing remote control key 20 sent from the owner of the vehicle 10 and takes out the substrate 40 from the remote control key 20. The board 40 has a function of locking / unlocking the lock of the vehicle 10. Next, the key connection device 50 for the remote control key 20 is wired and connected to the board 40. The key connection device 50 has a function of outputting a command for locking / unlocking the lock of the vehicle 10 on the substrate 40, a command for stopping the power supply to the substrate 40, and the like. Then, the key unit 60 in which the board 40 and the key connection device 50 are integrated is sent to the owner of the vehicle 10.
　車両１０の所有者は、業者から送付されたキーユニット６０を、車両１０に取り付けた車両接続装置３０に接続する。なお、基板４０、キー接続装置５０、車両接続装置３０の機能については後述する。 The owner of the vehicle 10 connects the key unit 60 sent from the dealer to the vehicle connection device 30 attached to the vehicle 10. The functions of the board 40, the key connection device 50, and the vehicle connection device 30 will be described later.
　以上の作業によって、車両制御システムのハードの構成は完了である。このように、既存のスマートキー、キーレスエントリーキーなどのリモコンキー２０の基板４０を利用して車両１０に搭載する制御装置１４０が構成できる。このため、従来のように、車両制御システムを構成するための専用の制御装置を準備する必要はなくなり、車両制御システムが簡単かつ安価に構成できる。また、車両１０の所有者は、店舗から購入した車両接続装置３０を車両１０の常時電源ラインとＡＣＣラインとに取り付けるという簡単な配線作業と、業者から送付されたキーユニット６０に車両接続装置３０を接続するという簡単な接続作業と、を行なうことで車両制御システムが構成できる。このため、使用者が車両１０に対する専門的な知識を有していなくとも、使用者自身で車両制御システムを容易に構成できる。 By the above work, the hardware configuration of the vehicle control system is completed. In this way, the control device 140 mounted on the vehicle 10 can be configured by using the substrate 40 of the remote control keys 20 such as the existing smart keys and keyless entry keys. Therefore, unlike the conventional case, it is not necessary to prepare a dedicated control device for configuring the vehicle control system, and the vehicle control system can be configured easily and inexpensively. In addition, the owner of the vehicle 10 performs a simple wiring work to attach the vehicle connection device 30 purchased from the store to the constant power line and the ACC line of the vehicle 10, and attaches the vehicle connection device 30 to the key unit 60 sent from the vendor. The vehicle control system can be configured by performing a simple connection work of connecting the. Therefore, even if the user does not have specialized knowledge about the vehicle 10, the user can easily configure the vehicle control system.
　図２は、図１の制御装置１４０の概略構成図である。図２に示すように、基板４０とキー接続装置５０とでキーユニット６０が形成され、キー接続装置５０と車両接続装置３０とで制御装置１４０が形成される。基板４０は、車両１０の錠をロック／アンロックさせるなどの動作をする。キー接続装置５０は、基板４０に接続され基板４０にロック／アンロックなどの指令を出力する。車両接続装置３０は、キーユニット６０のキー接続装置５０に接続され、キー接続装置５０に錠のロック／アンロックを実行させ、および基板４０への電力のオン／オフを制御する。 2 is a schematic configuration diagram of the control device 140 of FIG. As shown in FIG. 2, the board 40 and the key connection device 50 form a key unit 60, and the key connection device 50 and the vehicle connection device 30 form a control device 140. The board 40 performs operations such as locking / unlocking the lock of the vehicle 10. The key connection device 50 is connected to the board 40 and outputs a command such as lock / unlock to the board 40. The vehicle connection device 30 is connected to the key connection device 50 of the key unit 60, causes the key connection device 50 to perform lock / unlock of the lock, and controls on / off of electric power to the substrate 40.
　次に、本発明の車両制御システムを［実施形態１］と［実施形態２］に分けて詳細に説明する。 Next, the vehicle control system of the present invention will be described in detail by dividing it into [Embodiment 1] and [Embodiment 2].
　［実施形態１］
　図３は、実施形態１の車両制御システムの概略構成図である。 [Embodiment 1]
FIG. 3 is a schematic configuration diagram of the vehicle control system of the first embodiment.
　（制御システムの構成）
　車両制御システム１００は、車両１０（図１参照）の使用者の携帯端末１１０とネットワーク回線（通信回線）１２０を介して通信可能な制御サーバー１３０と、車両１０の錠をロック／アンロックさせるリモコンキー２０の基板４０を制御して車両１０の動作を制御する制御装置１４０とを有する。携帯端末１１０は、車両１０を利用する使用者が所持している端末である。たとえば、スマートフォン、タブレット端末などの一般的に普及している携帯可能な端末装置である。携帯端末１１０と制御装置１４０とは、Ｂｌｕｅｔｏｏｔｈ（登録商標）などの近距離無線通信方式を用いて双方向に通信可能である。 (Control system configuration)
The vehicle control system 100 includes a control server 130 capable of communicating with a mobile terminal 110 of a user of the vehicle 10 (see FIG. 1) via a network line (communication line) 120, and a remote controller for locking / unlocking the lock of the vehicle 10. The controller 40 controls the board 40 of the key 20 to control the operation of the vehicle 10. The mobile terminal 110 is a terminal owned by a user who uses the vehicle 10. For example, it is a commonly used portable terminal device such as a smartphone or a tablet terminal. The mobile terminal 110 and the control device 140 can bidirectionally communicate with each other using a short-range wireless communication system such as Bluetooth (registered trademark).
　ネットワーク回線１２０は、通信部として機能し、有線または無線により携帯端末１１０と制御サーバー１３０とを繋ぐ通信回線である。ネットワーク回線１２０は、電話会社を介して通信するモバイル通信、プロバイダーなどの接続業者を介して通信するインターネット、イントラネット、ＬＡＮなどの通信回線を含む。 The network line 120 is a communication line that functions as a communication unit and connects the mobile terminal 110 and the control server 130 by wire or wirelessly. The network line 120 includes communication lines such as mobile communication that communicates via a telephone company, the Internet that communicates via a connection provider such as a provider, an intranet, and a LAN.
　制御サーバー１３０は、車両１０の動作を制御するための制御データを生成し、携帯端末１１０に送信する機能を有する。なお、本実施形態では、車両１０の動作の制御を制御するための制御データとして、車両１０の錠のロック／アンロック、車両１０に設置したキーユニット６０に含まれる基板４０への電力のオン／オフを例示する。制御データとしては、錠のロック／アンロック、電力のオン／オフに限られず、車両１０のエンジンの始動や停止などの動作を含めても良い。制御サーバー１３０および制御データの詳細な構成は後述する。 The control server 130 has a function of generating control data for controlling the operation of the vehicle 10 and transmitting the control data to the mobile terminal 110. In the present embodiment, as control data for controlling the control of the operation of the vehicle 10, the lock / unlock of the lock of the vehicle 10 and the turning on of the power to the board 40 included in the key unit 60 installed in the vehicle 10 are performed. / OFF is illustrated. The control data is not limited to lock / unlock of the lock and power on / off, and may include operations such as starting and stopping the engine of the vehicle 10. The detailed configurations of the control server 130 and control data will be described later.
　制御装置１４０は、制御サーバー１３０が生成した制御データにより、車両１０の錠のロック／アンロック、車両１０に設置したキーユニット６０に含まれる基板４０への電力のオン／オフを制御する。 The control device 140 controls lock / unlock of the lock of the vehicle 10 and ON / OFF of electric power to the board 40 included in the key unit 60 installed in the vehicle 10 based on the control data generated by the control server 130.
　（制御サーバーの構成）
　図４は、図３の制御サーバー１３０の概略構成図である。制御サーバー１３０は、ＩＤ・秘密鍵記憶部１３２、制御データ生成部１３４、暗号化部１３６、無線通信部１３８を有する。 (Control server configuration)
FIG. 4 is a schematic configuration diagram of the control server 130 of FIG. The control server 130 includes an ID / secret key storage unit 132, a control data generation unit 134, an encryption unit 136, and a wireless communication unit 138.
　記憶部として機能するＩＤ・秘密鍵記憶部１３２は、車両１０のＩＤとそのＩＤに対応付けた秘密鍵とを記憶する。車両１０が複数あるときには、ＩＤ・秘密鍵記憶部１３２は、車両１０ごとに、車両１０のＩＤとそのＩＤに対応付けた秘密鍵とをテーブルとして記憶する。 The ID / secret key storage unit 132 that functions as a storage unit stores the ID of the vehicle 10 and the secret key associated with the ID. When there are a plurality of vehicles 10, the ID / secret key storage unit 132 stores, for each vehicle 10, the ID of the vehicle 10 and the secret key associated with the ID as a table.
　制御データ生成部１３４は、車両１０のＩＤとそのＩＤに対応付けた秘密鍵とを用いて、車両１０の動作を制御させる制御データを生成する。また、暗号化部１３６は、生成された制御データを暗号化する。ここで制御データの生成および制御データの構成について説明する。 The control data generator 134 uses the ID of the vehicle 10 and the secret key associated with the ID to generate control data for controlling the operation of the vehicle 10. Further, the encryption unit 136 encrypts the generated control data. Here, the generation of control data and the structure of control data will be described.
　図５は、図４の制御データ生成部１３４および暗号化部１３６の動作説明に供する図である。制御データ生成部１３４は、まず、ＩＤ・秘密鍵記憶部１３２に記憶されている車両１０のＩＤに対応する秘密鍵と自身の時計が刻む時刻とによってワンタイムパスワード（以下、ＯＴＰという）を生成する。ＯＴＰは、秘密鍵を示すバイナリーデータと時刻Ｔを示すバイナリーデータとを所定の計算手順によって演算することによって生成する。所定の計算手順としては、たとえばＭＤ５、ＳＨＡ－１、ＳＨＡ－２５６等の各種ハッシュ値を算出するアルゴリズムを用いることができる。なお、ＯＴＰは、自身の時計が刻む時刻ではなく、カウンタの値を用いて生成することもできる。 FIG. 5 is a diagram provided for explaining operations of the control data generation unit 134 and the encryption unit 136 of FIG. The control data generation unit 134 first generates a one-time password (hereinafter, referred to as OTP) based on the secret key corresponding to the ID of the vehicle 10 stored in the ID / secret key storage unit 132 and the time ticked by its own clock. To do. The OTP is generated by calculating the binary data indicating the secret key and the binary data indicating the time T according to a predetermined calculation procedure. As the predetermined calculation procedure, for example, an algorithm for calculating various hash values such as MD5, SHA-1, SHA-256 can be used. It should be noted that the OTP can be generated using the value of the counter instead of the time ticked by the own clock.
　次に、生成したＯＴＰに車両１０のコマンドを付加して、制御データを生成する。なお、時刻Ｔは、送信側である制御サーバー１３０および受信側である制御装置１４０それぞれが刻む時刻のずれを考慮して、たとえば３０秒おきなど所定の間隔をおいて更新される値を用いるようにしてもよい。また、制御データにＯＴＰを生成した時点の時刻Ｔを付加してもよい。したがって、制御データは、車両１０を動作させるコマンド、および秘密鍵と時刻Ｔとによって生成したＯＴＰを含む。 Next, the control data is generated by adding the command of the vehicle 10 to the generated OTP. Note that the time T is set to a value that is updated at predetermined intervals, such as every 30 seconds, in consideration of the time difference between the control server 130 on the transmitting side and the control device 140 on the receiving side. You can Further, the time T when the OTP is generated may be added to the control data. Therefore, the control data includes the command for operating the vehicle 10 and the OTP generated by the secret key and the time T.
　暗号化部１３６は、制御データを暗号化する。図５に示すように、暗号化部１３６は、コマンド、およびＯＴＰの情報が連結されている制御データをたとえばＡＥＳなどの共通鍵暗号方式を用いて暗号化する。制御データの暗号化にはＡＥＳ用の秘密鍵を用いる。なお、ＯＴＰを生成するときに用いるＯＴＰ用の秘密鍵とＡＥＳ用の秘密鍵は同一のものを用いても良いが、セキュリティーを考慮すると、ＯＴＰ用の秘密鍵とＡＥＳ用の秘密鍵は異なるものを用いることが好ましい。 The encryption unit 136 encrypts the control data. As shown in FIG. 5, the encryption unit 136 encrypts the control data in which the command and the OTP information are concatenated using a common key encryption method such as AES. A secret key for AES is used to encrypt the control data. Note that the OTP secret key used when generating the OTP and the AES secret key may be the same, but considering security, the OTP secret key and the AES secret key are different. Is preferably used.
　無線通信部１３８は、暗号化後の制御データを図３に示した携帯端末１１０に送信する。この送信は、制御サーバー１３０からネットワーク回線１２０およびモバイル通信回線を介して行われる。なお、携帯端末１１０は、無線通信部１３８が送信した暗号化後の制御データを制御装置１４０に近距離無線通信を用いて伝送可能である。 The wireless communication unit 138 transmits the encrypted control data to the mobile terminal 110 shown in FIG. This transmission is performed from the control server 130 via the network line 120 and the mobile communication line. The mobile terminal 110 can transmit the encrypted control data transmitted by the wireless communication unit 138 to the control device 140 using short-range wireless communication.
　（制御装置１４０の構成）
　図６は、図３の制御装置１４０の概略構成図である。図７は、図３の制御装置１４０の動作説明に供する図である。制御装置１４０は、無線通信部１４２、復号部１４４、ＩＤ・秘密鍵記憶部１４５、照合部１４６、およびコマンド実行部１４８を有する。コマンド実行部１４８は、車両１０の錠のロック／アンロックを制御するロック／アンロック制御部１４７および電力のオン／オフを制御する電源制御部１４９から構成される。制御装置１４０は、車両１０に設けられて携帯端末１１０と近距離無線通信可能である。 (Configuration of control device 140)
FIG. 6 is a schematic configuration diagram of the control device 140 of FIG. FIG. 7 is a diagram for explaining the operation of the control device 140 of FIG. The control device 140 includes a wireless communication unit 142, a decryption unit 144, an ID / secret key storage unit 145, a collation unit 146, and a command execution unit 148. The command execution unit 148 includes a lock / unlock control unit 147 that controls lock / unlock of the vehicle 10 and a power supply control unit 149 that controls power on / off. The control device 140 is provided in the vehicle 10 and is capable of short-range wireless communication with the mobile terminal 110.
　無線通信部１４２は、携帯端末１１０を介して伝送された暗号化後の制御データを携帯端末１１０から受信する。携帯端末１１０は、制御サーバー１３０の無線通信部１３８（図４参照）が送信した暗号化後の制御データを制御装置１４０に伝送させる機能を有している。 The wireless communication unit 142 receives the encrypted control data transmitted via the mobile terminal 110 from the mobile terminal 110. The mobile terminal 110 has a function of causing the control device 140 to transmit the encrypted control data transmitted by the wireless communication unit 138 (see FIG. 4) of the control server 130.
　復号部１４４は、ＡＥＳ用の秘密鍵を用いて暗号化後の制御データを復号する。ここで制御データの復号について説明する。 The decryption unit 144 decrypts the encrypted control data using the AES private key. Here, decoding of control data will be described.
　無線通信部１４２は、暗号化後の制御データを、携帯端末１１０を介して受信する。復号部１４４は、図７に示すように、受信した暗号化後の制御データをＡＥＳなどの共通鍵暗号方式を用いて（ＡＥＳ用の秘密鍵を用いて）復号する。復号後の制御データは、図５に示した暗号化前の制御データとなる。復号された制御データからはＯＴＰが分離される。 The wireless communication unit 142 receives the encrypted control data via the mobile terminal 110. As shown in FIG. 7, the decryption unit 144 decrypts the received encrypted control data using a common key encryption method such as AES (using a secret key for AES). The control data after decryption becomes the control data before encryption shown in FIG. The OTP is separated from the decrypted control data.
　記憶部として機能するＩＤ・秘密鍵記憶部１４５は、車両１０のＩＤと秘密鍵とを記憶する。なお、ＩＤ・秘密鍵記憶部１４５に記憶されている車両１０のＩＤと秘密鍵は、図４の制御サーバー１３０のＩＤ・秘密鍵記憶部１３２に記憶されている車両１０のＩＤと秘密鍵と同一である。 The ID / secret key storage unit 145 that functions as a storage unit stores the ID of the vehicle 10 and the secret key. The ID and the secret key of the vehicle 10 stored in the ID / secret key storage unit 145 are the ID and the secret key of the vehicle 10 stored in the ID / secret key storage unit 132 of the control server 130 of FIG. It is the same.
　照合部１４６は、復号後の制御データに含まれるＯＴＰと、ＩＤ・秘密鍵記憶部１４５が記憶している秘密鍵に基づいて生成されるＯＴＰとを照合する。ここで、ＯＴＰの照合について説明する。 The collation unit 146 collates the OTP included in the decrypted control data with the OTP generated based on the secret key stored in the ID / secret key storage unit 145. Here, the OTP collation will be described.
　図７に示すように、照合部１４６は、まず、自身の時計が刻む時刻ＴとＩＤ・秘密鍵記憶部１４５に記憶されている秘密鍵とを用いてＯＴＰを生成する。続いて、照合部１４６は、制御データに含まれるＯＴＰを取り出す。そして、照合部１４６は、生成したＯＴＰと送信されてきた制御データのＯＴＰとを照合する。なお、照合部１４６は、制御サーバー１３０および制御装置１４０それぞれが刻む時刻のずれを考慮して、自身の時計が刻む時刻Ｔの前後における所定の範囲の時刻について複数のＯＴＰを生成してもよい。この場合、照合部１４６は、いずれかのＯＴＰが制御データのＯＴＰと一致した場合にＯＴＰが一致したと判断してもよい。また、制御データにＯＴＰを生成した時点の時刻Ｔが含まれている場合、当該時刻Ｔを用いてＯＴＰを生成してもよい。 As shown in FIG. 7, the collating unit 146 first generates an OTP using the time T clocked by its own clock and the secret key stored in the ID / secret key storage unit 145. Subsequently, the matching unit 146 extracts the OTP included in the control data. Then, the collation unit 146 collates the generated OTP with the OTP of the transmitted control data. Note that the matching unit 146 may generate a plurality of OTPs for a predetermined range of times before and after the time T that the clock of the control server 130 and the control device 140 engrave in consideration of the time difference. .. In this case, the matching unit 146 may determine that the OTPs match when any of the OTPs matches the OTP of the control data. When the control data includes the time T when the OTP is generated, the time T may be used to generate the OTP.
　コマンド実行部１４８は、制御データに含まれるＯＴＰと照合部１４６によって生成されたＯＴＰとが一致しているときには制御データに含まれるコマンドを実行し、一致していないときにはコマンドは実行しない。具体的には、制御データに含まれるコマンドがアンロックであれば、ロック／アンロック制御部１４７は車両１０の錠をアンロックさせ、また、制御データに含まれるコマンドがロックであれば、ロック／アンロック制御部１４７は車両１０の錠をロックさせる。ロック／アンロック制御部１４７は、たとえば基板４０に設けられたロック／アンロック用のスイッチに制御用の端子を接続することによって実現し、当該端子を介してスイッチを制御するための電気信号が送信される。さらに、電源制御部１４９は、ロック／アンロック制御部１４７によって制御される錠のロック／アンロック動作に応じて、基板４０に供給する電力のオン、オフを制御する。電源制御部１４９は、たとえば基板４０に設けられた電源供給用の配線に電力制御用の端子を接続することによって実現し、当該端子を介して基板４０に電力を供給したり遮断したりする。 The command execution unit 148 executes the command included in the control data when the OTP included in the control data and the OTP generated by the matching unit 146 match, and does not execute the command when they do not match. Specifically, if the command included in the control data is unlock, the lock / unlock control unit 147 unlocks the lock of the vehicle 10, and if the command included in the control data is lock, the lock / unlock control unit 147 locks the lock. / The unlock control unit 147 locks the lock of the vehicle 10. The lock / unlock control unit 147 is realized, for example, by connecting a control terminal to a lock / unlock switch provided on the substrate 40, and an electric signal for controlling the switch is transmitted via the terminal. Sent. Further, the power supply control unit 149 controls ON / OFF of the power supplied to the substrate 40 according to the lock / unlock operation of the lock controlled by the lock / unlock control unit 147. The power supply control unit 149 is realized, for example, by connecting a power control terminal to a power supply wiring provided on the substrate 40, and supplies or cuts off power to the substrate 40 via the terminal.
　（車両制御システムの動作）
　図８は、図３の車両制御システム１００のアンロック動作のフローチャートである。車両制御システム１００の動作を図３から図７を参照しながら説明する。なお、下記のアンロック動作を行う前は、制御装置１４０の電源制御部１４９は、基板４０の電源をオフしている。 (Operation of vehicle control system)
FIG. 8 is a flowchart of the unlocking operation of the vehicle control system 100 of FIG. The operation of the vehicle control system 100 will be described with reference to FIGS. 3 to 7. Before performing the unlocking operation described below, the power supply control unit 149 of the control device 140 turns off the power supply of the board 40.
　まず、レンタルまたはカーシェアリングした車両１０の使用者が、その車両１０に、Ｂｌｕｅｔｏｏｔｈ（登録商標）などの近距離無線通信ができる距離まで近づく。すると、携帯端末１１０は、車両１０に搭載されている制御装置１４０から、その車両１０のＩＤを受信する（Ｓ１００）。制御装置１４０は、ＩＤ・秘密鍵記憶部１４５に記憶されている、車両１０のＩＤを、近距離無線通信を用いて一定時間間隔で所定の範囲内に送信する。つまり、制御装置１４０は、車両１０のＩＤを一定時間間隔でブロードキャストしている。したがって、携帯端末１１０は、ブロードキャストされているＩＤを受信できる。携帯端末１１０は、受信したＩＤの中に、使用者が予約した車両のＩＤが含まれている場合、当該ＩＤを送信している制御装置１４０との接続を確立する。使用者が予約した車両のＩＤは、携帯端末１１０に予め記憶されている。近距離無線通信の方式としては、たとえばＢｌｕｅｔｏｏｔｈ　Ｌｏｗ　Ｅｎｅｒｇｙ（ＢＬＥ）を使用することができる。この場合、制御装置１４０はアドバタイズ機能により車両１０のＩＤを一定時間間隔で周囲に送信することができる。なお、近距離無線通信の方式は上記に限定されず、各種の近距離無線通信方式を採用することができる。 First, the user of the rented or car-shared vehicle 10 approaches the vehicle 10 to a distance where short-range wireless communication such as Bluetooth (registered trademark) is possible. Then, the mobile terminal 110 receives the ID of the vehicle 10 from the control device 140 mounted on the vehicle 10 (S100). The control device 140 transmits the ID of the vehicle 10, which is stored in the ID / secret key storage unit 145, within a predetermined range at regular time intervals using short-range wireless communication. That is, the control device 140 broadcasts the ID of the vehicle 10 at regular time intervals. Therefore, the mobile terminal 110 can receive the ID being broadcast. When the received ID includes the ID of the vehicle reserved by the user, the mobile terminal 110 establishes a connection with the control device 140 transmitting the ID. The ID of the vehicle reserved by the user is stored in advance in the mobile terminal 110. As a short-distance wireless communication method, for example, Bluetooth Low Energy (BLE) can be used. In this case, the control device 140 can transmit the ID of the vehicle 10 to the surroundings at regular time intervals by the advertisement function. The short-range wireless communication system is not limited to the above, and various short-range wireless communication systems can be adopted.
　次に、車両１０のＩＤを受信した携帯端末１１０は、インストール済みのアプリケーションを実行する（Ｓ１０１）。このアプリケーションは、カーシェアリング業者などが配信しているものであり、そのカーシェアリング業者から車両１０の使用を許可された使用者が実行できる。アプリケーションは、自動的に実行されてもよく、使用者の指示に基づいて実行されてもよい。また、アプリケーションは、予めバックグラウンドで実行されていてもよく、あるいは、予約した車両１０のＩＤを取得した際にバックグラウンドで実行されてもよい。 Next, the mobile terminal 110 that has received the ID of the vehicle 10 executes the installed application (S101). This application is distributed by a car sharing company, and can be executed by a user who is permitted to use the vehicle 10 by the car sharing company. The application may be automatically executed or may be executed based on a user instruction. The application may be executed in the background in advance, or may be executed in the background when the ID of the reserved vehicle 10 is acquired.
　携帯端末１１０は、制御装置１４０から伝送されたＩＤを、ネットワーク回線１２０を介して制御サーバー１３０に送信する（Ｓ１０２）。制御サーバー１３０の制御データ生成部１３４は、送信されてきたＩＤに対応する秘密鍵をＩＤ・秘密鍵記憶部１３２から取り出す。制御データ生成部１３４は、取り出した秘密鍵と自身の時計が刻む時刻とによってワンタイムパスワード（ＯＴＰ）を生成する。 The mobile terminal 110 transmits the ID transmitted from the control device 140 to the control server 130 via the network line 120 (S102). The control data generation unit 134 of the control server 130 retrieves the secret key corresponding to the transmitted ID from the ID / secret key storage unit 132. The control data generation unit 134 generates a one-time password (OTP) based on the extracted secret key and the time engraved by its own clock.
　制御データ生成部１３４は、生成したＯＴＰにアンロックコマンドを付加して、図５に示したような制御データを生成する。暗号化部１３６は、生成された制御データを、ＡＥＳなどの共通鍵暗号方式を用いて暗号化する（Ｓ１０３）。 The control data generation unit 134 adds an unlock command to the generated OTP to generate control data as shown in FIG. The encryption unit 136 encrypts the generated control data using a common key encryption method such as AES (S103).
　無線通信部１３８は、暗号化された制御データを、ネットワーク回線１２０を介して携帯端末１１０に送信する（Ｓ１０４）。制御データは、その全体が暗号化され、さらに暗号化された制御データにはＯＴＰが含まれているので、制御データが万が一盗聴されたとしても再使用は不可能である。また、万が一ＡＥＳの秘密鍵が漏洩しても正しい制御データを生成することは困難である。 The wireless communication unit 138 transmits the encrypted control data to the mobile terminal 110 via the network line 120 (S104). The entire control data is encrypted, and the encrypted control data contains OTP. Therefore, even if the control data is intercepted, it cannot be reused. Moreover, even if the AES secret key is leaked, it is difficult to generate correct control data.
　携帯端末１１０は、受信した制御データをそのままブルートゥース（登録商標）などを用いた近距離無線通信によって、車両１０の車内に設置されている制御装置１４０に送信する。制御装置１４０の無線通信部１４２は、携帯端末１１０を介して暗号化された制御データを受信する（Ｓ１０５）。携帯端末１１０と制御装置１４０との通信はブルートゥース（登録商標）などを用いた近距離無線通信によって行っている。このため、携帯端末１１０と車両１０との距離が目視できるほどに近くなければ、制御データが受信されることがなく、ハッカーなどによって、車両１０の錠がアンロックされてしまうことを防止できる。 The mobile terminal 110 transmits the received control data as it is to the control device 140 installed in the vehicle 10 by short-range wireless communication using Bluetooth (registered trademark) or the like. The wireless communication unit 142 of the control device 140 receives the encrypted control data via the mobile terminal 110 (S105). Communication between the mobile terminal 110 and the control device 140 is performed by short-range wireless communication using Bluetooth (registered trademark) or the like. Therefore, unless the distance between the mobile terminal 110 and the vehicle 10 is visually short, the control data is not received, and the lock of the vehicle 10 can be prevented from being unlocked by a hacker or the like.
　復号部１４４は、受信した制御データをＡＥＳなどの共通鍵暗号方式を用いて復号する（Ｓ１０６）。 The decryption unit 144 decrypts the received control data using a common key encryption method such as AES (S106).
　照合部１４６は、時刻ＴとＩＤ・秘密鍵記憶部１４５に記憶されている秘密鍵とを用いてＯＴＰを生成する。また、照合部１４６は、制御データに含まれるＯＴＰを取り出し、生成したＯＴＰと送信されてきた制御データのＯＴＰとを照合する（Ｓ１０７）。 The matching unit 146 uses the time T and the secret key stored in the ID / secret key storage unit 145 to generate an OTP. Further, the collating unit 146 takes out the OTP included in the control data and collates the generated OTP with the OTP of the transmitted control data (S107).
　照合部１４６は、生成したＯＴＰと送信されてきた制御データのＯＴＰとが一致しているか否かを判断する（Ｓ１０８）。両ＯＴＰが一致していれば（Ｓ１０８：ＹＥＳ）、電源制御部１４９は、基板４０の電源をオンし、ロック／アンロック制御部１４７は、制御データに含まれるコマンドを実行して車両１０の錠をアンロックする（Ｓ１０９）。一方、両ＯＴＰが一致していなければ（Ｓ１０８：ＮＯ）、制御データに含まれるコマンドは実行せずに処理を終了する。 The collating unit 146 determines whether the generated OTP and the OTP of the transmitted control data match (S108). If both OTPs match (S108: YES), the power supply control unit 149 turns on the power supply of the board 40, and the lock / unlock control unit 147 executes the command included in the control data to execute the command of the vehicle 10. The lock is unlocked (S109). On the other hand, if the two OTPs do not match (S108: NO), the command included in the control data is not executed and the process ends.
　このように、使用者が車両１０の錠をアンロックしようとしたときには、携帯端末１１０を持って車両１０に近づくだけで、その車両１０の錠をアンロックさせることができる。したがって、車両１０が目の前になければその車両１０の錠をアンロックさせることはできず、車両１０の所有者以外の者に車両１０を使用されてしまうようなことを防止できる。 Thus, when the user tries to unlock the lock of the vehicle 10, the lock of the vehicle 10 can be unlocked simply by approaching the vehicle 10 with the mobile terminal 110. Therefore, if the vehicle 10 is not in front of the eyes, the lock of the vehicle 10 cannot be unlocked, and it can be prevented that the person other than the owner of the vehicle 10 uses the vehicle 10.
　以上は車両１０のアンロック動作であるが、次に、車両１０のロック動作について説明する。図９は、図３の車両制御システム１００のロック動作のフローチャートである。 The above is the unlocking operation of the vehicle 10. Next, the locking operation of the vehicle 10 will be described. FIG. 9 is a flowchart of the lock operation of the vehicle control system 100 of FIG.
　このフローチャートでは、車両１０の錠をアンロックさせてから所定の時間を経過しても車両１０のエンジンが始動されなかったとき、または、エンジンが始動された後に制御装置１４０と携帯端末１１０との間で近距離無線通信のコネクションが切断したときには、車両１０の錠をロックさせている。 In this flowchart, when the engine of the vehicle 10 has not been started even after a predetermined time has elapsed after the lock of the vehicle 10 has been unlocked, or after the engine has been started, the control device 140 and the portable terminal 110 When the short-distance wireless communication connection is cut off, the lock of the vehicle 10 is locked.
　また、エンジンが始動された後、エンジンの始動を、携帯端末１１０を介して制御サーバー１３０に報知し、制御サーバー１３０から携帯端末１１０を介して伝送されるロックコマンドにより制御装置１４０をロックスタンバイ状態に設定している。 Also, after the engine is started, the control server 130 is notified of the start of the engine via the mobile terminal 110, and the control device 140 is in the lock standby state by the lock command transmitted from the control server 130 via the mobile terminal 110. Is set to.
　さらに、制御装置１４０は、ロックスタンバイ状態のときに、制御装置１４０と携帯端末１１０との間で近距離無線通信のコネクションが切断したときには、車両１０の錠をロックさせている。 Further, the control device 140 locks the lock of the vehicle 10 when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected in the lock standby state.
　図８のフローチャートが実行されてアンロックが完了すると、制御装置１４０は、アンロック後所定時間内にエンジンが始動されたか否かを判断する（Ｓ２００）。所定時間内にエンジンが始動されなければ（Ｓ２００：ＮＯ）、ロック／アンロック制御部１４７は、車両１０の錠をロックさせ、制御装置１４０の電源をオフにする（Ｓ２０８）。 When the unlock is completed by executing the flowchart of FIG. 8, the control device 140 determines whether the engine has been started within a predetermined time after the unlock (S200). If the engine is not started within the predetermined time (S200: NO), the lock / unlock control unit 147 locks the lock of the vehicle 10 and turns off the power of the control device 140 (S208).
　一方、所定時間内にエンジンが始動されれば（Ｓ２００：ＹＥＳ）、制御装置１４０が、車両１０の所有者の携帯端末１１０に近距離無線通信によりエンジンの始動を報知する（Ｓ２０１）。エンジンの始動が報知された携帯端末１１０は、ネットワーク回線１２０を介して制御サーバー１３０に制御データとしてロックコマンドを要求する（Ｓ２０２）。 On the other hand, if the engine is started within the predetermined time (S200: YES), the control device 140 notifies the mobile terminal 110 of the owner of the vehicle 10 by short-range wireless communication to start the engine (S201). The mobile terminal 110 notified of the start of the engine requests a lock command as control data from the control server 130 via the network line 120 (S202).
　制御サーバー１３０は、ロックコマンド生成して暗号化し（Ｓ２０３）、制御サーバー１３０は、暗号化したロックコマンドを、ネットワーク回線１２０を介して携帯端末１１０に送信する（Ｓ２０４）。携帯端末１１０は、制御サーバー１３０から送信されてきたロックコマンドをそのまま制御装置１４０に近距離無線通信により送信する。制御装置１４０の無線通信部１４２は、携帯端末１１０を介してロックコマンドを受信する（Ｓ２０５）。制御装置１４０は、送信されてきたロックコマンドにより、制御装置１４０をロックスタンバイ状態に設定する（Ｓ２０６）。 The control server 130 generates and encrypts a lock command (S203), and the control server 130 transmits the encrypted lock command to the mobile terminal 110 via the network line 120 (S204). The mobile terminal 110 directly transmits the lock command transmitted from the control server 130 to the control device 140 by short-range wireless communication. The wireless communication unit 142 of the control device 140 receives the lock command via the mobile terminal 110 (S205). The control device 140 sets the control device 140 to the lock standby state by the transmitted lock command (S206).
　次に、制御装置１４０は、携帯端末１１０とのコネクションが切れたか否かを判断する（Ｓ２０７）。コネクションが切断されていなければ（Ｓ２０７：ＮＯ）、ロックスタンバイ状態のまま待機し、コネクションが切断されたら（Ｓ２０７：ＹＥＳ）、ロック／アンロック制御部１４７は、車両１０の錠をロックさせ、制御装置１４０の電源をオフにする（Ｓ２０８）。 Next, the control device 140 determines whether or not the connection with the mobile terminal 110 has been disconnected (S207). If the connection is not disconnected (S207: NO), the system waits in the lock standby state, and if the connection is disconnected (S207: YES), the lock / unlock control unit 147 locks the lock of the vehicle 10 and controls it. The power of the device 140 is turned off (S208).
　このように、ドアの錠がアンロックされてから所定の時間内にエンジンが始動されなければ、ドアの錠は自動的にロックされる。また、エンジンが始動されても、制御装置１４０と携帯端末１１０との間で近距離無線通信のコネクションが切断したときには、車両１０の錠が自動的にロックされる。コネクションが切断されることは使用者が車両１０から離れたと考えられるからである。車両１０の錠のロック／アンロックとともに制御装置１４０、正確にはキーユニット６０（図２参照）の電源をオン／オフさせるのは、車両１０にキーユニット６０を置いたままでも、使用者が車両１０から離れることができるようにするためである。 Like this, if the engine is not started within a predetermined time after the door lock is unlocked, the door lock is automatically locked. Further, even if the engine is started, the lock of the vehicle 10 is automatically locked when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected. The disconnection is because it is considered that the user has left the vehicle 10. The lock / unlock of the lock of the vehicle 10 as well as the turning on / off of the power supply of the control device 140, to be more precise, the key unit 60 (see FIG. 2) are performed by the user even when the key unit 60 is left in the vehicle 10. This is so that the vehicle can be separated from the vehicle 10.
　［実施形態２］
　図１０は、実施形態２の車両制御システムの概略構成図である。実施形態２の車両制御システム２００は、予約サーバー２１０を備えている点で実施形態１の車両制御システム１００と異なる。 [Embodiment 2]
FIG. 10 is a schematic configuration diagram of the vehicle control system of the second embodiment. The vehicle control system 200 of the second embodiment is different from the vehicle control system 100 of the first embodiment in that a reservation server 210 is provided.
　（車両制御システムの構成）
　車両制御システム２００も、実施形態１の車両制御システム１００と同様に、車両１０の使用者の携帯端末１１０とネットワーク回線（通信回線）１２０を介して通信が可能な制御サーバー１３０と、車両１０の錠をロック／アンロックさせるリモコンキー２０の基板４０を利用して構成され車両１０の動作を制御する、携帯端末１１０と近距離無線通信が可能な制御装置１４０と、を有する。これらの動作は、実施形態１と同一である。予約サーバー２１０は、使用者が車両１０の使用を予約した予約データを記憶する。 (Vehicle control system configuration)
Similarly to the vehicle control system 100 according to the first embodiment, the vehicle control system 200 includes a control server 130 capable of communicating with a mobile terminal 110 of a user of the vehicle 10 via a network line (communication line) 120, and a vehicle 10. It has a control device 140 capable of short-range wireless communication with the mobile terminal 110, which is configured by using the substrate 40 of the remote control key 20 for locking / unlocking the lock and controls the operation of the vehicle 10. These operations are the same as in the first embodiment. The reservation server 210 stores reservation data in which the user has reserved the use of the vehicle 10.
　（制御システムの動作）
　図１１は、図１０の車両制御システムの動作フローチャートである。図１１の動作フローチャートの内のＳ３００、Ｓ３０１、Ｓ３０５～Ｓ３１１の動作は、図８の動作フローチャートのＳ１００、Ｓ１０１、Ｓ１０３～Ｓ１０９の動作と同一である。 (Operation of control system)
FIG. 11 is an operation flowchart of the vehicle control system of FIG. The operations of S300, S301, and S305 to S311 in the operation flowchart of FIG. 11 are the same as the operations of S100, S101, and S103 to S109 of the operation flowchart of FIG.
　まず、カーシェアリングした車両１０の使用者が、その車両１０に、Ｂｌｕｅｔｏｏｔｈ（登録商標）などの近距離無線通信ができる距離まで近づく。すると、携帯端末１１０は、車両１０に搭載されている制御装置１４０から、その車両１０のＩＤを受信する（Ｓ３００）。制御装置１４０は、ＩＤ・秘密鍵記憶部１４５に記憶されている、車両１０のＩＤを、近距離無線通信を用いて携帯端末１１０に送信する。 First, the user of the car-sharing vehicle 10 approaches the vehicle 10 to a distance where short-range wireless communication such as Bluetooth (registered trademark) is possible. Then, the mobile terminal 110 receives the ID of the vehicle 10 from the control device 140 mounted on the vehicle 10 (S300). The control device 140 transmits the ID of the vehicle 10 stored in the ID / secret key storage unit 145 to the mobile terminal 110 using short-range wireless communication.
　次に、車両１０のＩＤを受信した携帯端末１１０は、インストール済みのアプリケーションを実行する（Ｓ３０１）。このアプリケーションは、レンタル業者が配信しているものであり、そのレンタル業者から車両１０の使用を許可された使用者が実行できる。 Next, the mobile terminal 110 that has received the ID of the vehicle 10 executes the installed application (S301). This application is distributed by a rental company, and can be executed by a user who is permitted to use the vehicle 10 by the rental company.
　携帯端末１１０は、受信したＩＤを予約サーバー２１０に、ネットワーク回線１２０を介して送信する（Ｓ３０２）。 The mobile terminal 110 transmits the received ID to the reservation server 210 via the network line 120 (S302).
　予約サーバー２１０は、受信したＩＤが予約されているＩＤと一致しているか否かを照合する（Ｓ３０３）。 The reservation server 210 checks whether the received ID matches the reserved ID (S303).
　予約サーバー２１０は、照合の結果、受信したＩＤが予約されているＩＤと一致していなければ（Ｓ３０４：ＮＯ）、そのＩＤに対応する車両１０は予約されていないのであるから、そのまま処理を終了する。一方、受信したＩＤが予約されているＩＤと一致していれば（Ｓ３０４：ＹＥＳ）、予約サーバー２１０は制御サーバー１３０の制御データ生成部１３４に、予約されているＩＤを送信する。なお、予約サーバーの動作は様々な方式があるが、現在実施されている方式のいずれを用いても良い。 If the received ID does not match the reserved ID as a result of collation (S304: NO), the reservation server 210 ends the process as it is because the vehicle 10 corresponding to the ID is not reserved. To do. On the other hand, if the received ID matches the reserved ID (S304: YES), the reservation server 210 transmits the reserved ID to the control data generation unit 134 of the control server 130. There are various methods for the operation of the reservation server, but any of the methods currently implemented may be used.
　制御データ生成部１３４は、生成したＯＴＰにアンロックコマンドを付加して、図５に示したような制御データを生成する。暗号化部１３６は、生成された制御データを、ＡＥＳなどの共通鍵暗号方式を用いて暗号化する（Ｓ３０５）。 The control data generation unit 134 adds an unlock command to the generated OTP to generate control data as shown in FIG. The encryption unit 136 encrypts the generated control data using a common key encryption method such as AES (S305).
　無線通信部１３８は、暗号化された制御データを、ネットワーク回線１２０を介して携帯端末１１０に送信する（Ｓ３０６）。制御データは、その全体が暗号化され、さらに暗号化された制御データにはＯＴＰが含まれているので、制御データが万が一盗聴されたとしても再使用は不可能である。また、万が一ＡＥＳの秘密鍵が漏洩しても正しい制御データを生成することは困難である。 The wireless communication unit 138 transmits the encrypted control data to the mobile terminal 110 via the network line 120 (S306). The entire control data is encrypted, and the encrypted control data contains OTP. Therefore, even if the control data is intercepted, it cannot be reused. Moreover, even if the AES secret key is leaked, it is difficult to generate correct control data.
　携帯端末１１０は、受信した制御データをそのままブルートゥース（登録商標）などを用いた近距離無線通信によって、車両１０の車内に設置されている制御装置１４０に送信する。制御装置１４０の無線通信部１４２は、携帯端末１１０を介して暗号化された制御データを受信する（Ｓ３０７）。携帯端末１１０と制御装置１４０との通信はブルートゥース（登録商標）などを用いた近距離無線通信によって行っている。このため、携帯端末１１０と車両１０との距離が目視できるほどに近くなければ、制御データが受信されることがなく、ハッカーなどによって、車両１０の錠がアンロックされてしまうことを防止できる。 The mobile terminal 110 transmits the received control data as it is to the control device 140 installed in the vehicle 10 by short-range wireless communication using Bluetooth (registered trademark) or the like. The wireless communication unit 142 of the control device 140 receives the encrypted control data via the mobile terminal 110 (S307). Communication between the mobile terminal 110 and the control device 140 is performed by short-range wireless communication using Bluetooth (registered trademark) or the like. Therefore, unless the distance between the mobile terminal 110 and the vehicle 10 is visually short, the control data is not received, and the lock of the vehicle 10 can be prevented from being unlocked by a hacker or the like.
　復号部１４４は、受信した制御データをＡＥＳなどの共通鍵暗号方式を用いて復号する（Ｓ３０８）。 The decryption unit 144 decrypts the received control data using a common key encryption method such as AES (S308).
　照合部１４６は、時刻ＴとＩＤ・秘密鍵記憶部１４５に記憶されている秘密鍵とを用いてＯＴＰを生成する。また、照合部１４６は、制御データに含まれるＯＴＰを取り出し、生成したＯＴＰと送信されてきた制御データのＯＴＰとを照合する（Ｓ３０９）。 The matching unit 146 uses the time T and the secret key stored in the ID / secret key storage unit 145 to generate an OTP. Further, the collating unit 146 extracts the OTP included in the control data, and collates the generated OTP with the OTP of the transmitted control data (S309).
　照合部１４６は、生成したＯＴＰと送信されてきた制御データのＯＴＰとが一致しているか否かを判断する（Ｓ３１０）。両ＯＴＰが一致していれば（Ｓ３１０：ＹＥＳ）、ロック／アンロック制御部１４７は、制御データに含まれるコマンドを実行し、車両１０の錠をアンロックする。また、電源制御部１４９は、制御装置１４０の電源をオンする（Ｓ３１１）。一方、両ＯＴＰが一致していなければ（Ｓ３１０：ＮＯ）、制御データに含まれるコマンドは実行せずに処理を終了する。 The collating unit 146 determines whether or not the generated OTP and the OTP of the transmitted control data match (S310). If both OTPs match (S310: YES), the lock / unlock control unit 147 executes the command included in the control data to unlock the vehicle 10. Further, the power supply control unit 149 turns on the power supply of the control device 140 (S311). On the other hand, if the two OTPs do not match (S310: NO), the command included in the control data is not executed and the process ends.
　このように、使用者が車両１０の錠をアンロックしようとしたときには、携帯端末１１０を持って車両１０に近づくだけで、その車両の錠をアンロックさせることができる。したがって、車両１０をレンタルする際に、使用者とレンタル業者との間で鍵やカードの受け渡しは必要ない。 In this way, when the user tries to unlock the lock of the vehicle 10, the lock of the vehicle can be unlocked simply by approaching the vehicle 10 with the mobile terminal 110. Therefore, when renting the vehicle 10, it is not necessary to pass the key or the card between the user and the rental company.
　本実施形態でも、実施形態１と同様に、図９のフローチャートを実行する。したがって、車両１０の錠をアンロックさせてから所定の時間を経過しても車両１０のエンジンが始動されなかったとき、または、エンジンが始動された後に制御装置１４０と携帯端末１１０との間で近距離無線通信のコネクションが切断したときには、車両１０の錠がロックされる。また、エンジンが始動された後にエンジンの始動を携帯端末１１０に報知し、携帯端末１１０は制御サーバー１３０にロックコマンドを要求し、制御サーバー１３０から携帯端末１１０を介して伝送されたロックコマンドによりロックスタンバイ状態に設定される。さらに、制御装置１４０は、ロックスタンバイ状態のときに、制御装置１４０と携帯端末１１０との間で近距離無線通信のコネクションが切断したときには、車両１０の錠をロックさせることができる。 Also in this embodiment, the flowchart of FIG. 9 is executed as in the first embodiment. Therefore, when the engine of the vehicle 10 has not been started even after a predetermined time has elapsed after unlocking the lock of the vehicle 10, or between the control device 140 and the mobile terminal 110 after the engine has been started. When the short-range wireless communication connection is disconnected, the lock of the vehicle 10 is locked. In addition, after the engine is started, the mobile terminal 110 is notified of the start of the engine, the mobile terminal 110 requests a lock command from the control server 130, and the lock is transmitted by the lock command transmitted from the control server 130 via the mobile terminal 110. Set to standby state. Further, the control device 140 can lock the lock of the vehicle 10 when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected in the lock standby state.
　このように、本発明の車両制御システムの場合、車両１０の使用者が車両１０に近づくだけで、自動的に車両１０の錠がアンロックされる。また、エンジンが始動されると、ロックスタンバイ状態になり、制御装置１４０と携帯端末１１０との間で近距離無線通信のコネクションが切断したときには、車両１０の錠がロックされる。したがって、車両の使用者は、携帯端末を持って、車両１０に近づくだけで車両１０を利用できる。また、車両１０を返却するときには、車両から離れるだけで自動的にロックされる。したがって、非常に使い勝手の良い車両制御システム２００を構築できる。 Thus, in the vehicle control system of the present invention, the lock of the vehicle 10 is automatically unlocked only when the user of the vehicle 10 approaches the vehicle 10. When the engine is started, the lock standby state is entered, and when the short-range wireless communication connection between the control device 140 and the mobile terminal 110 is disconnected, the lock of the vehicle 10 is locked. Therefore, the user of the vehicle can use the vehicle 10 simply by approaching the vehicle 10 with the mobile terminal. Further, when returning the vehicle 10, it is automatically locked simply by leaving the vehicle. Therefore, it is possible to construct the vehicle control system 200 which is very easy to use.
　また、車内に取り残されているキーユニット６０は、車両１０の錠のロック／アンロックとともにその電源がオフされるので、車両から見れば、キーユニット６０が車両１０から離れたような状態となり、レンタルする車両１０の中にキーユニット６０を置いておくことができ、キーやカードなどの受け渡しをせずにレンタルが可能となる。 Further, the power supply of the key unit 60 left inside the vehicle is turned off together with the lock / unlock of the lock of the vehicle 10, so that the key unit 60 is separated from the vehicle 10 from the viewpoint of the vehicle, The key unit 60 can be placed in the vehicle 10 to be rented, and rental can be performed without handing over keys and cards.
　さらに、制御装置１４０が制御サーバー１３０と直接通信する必要がないので、制御装置１４０の構成部品を少なくすることができ、制御装置１４０を安価に製造することができる。また、制御装置１４０を小型化できる。 Furthermore, since the control device 140 does not need to directly communicate with the control server 130, the number of components of the control device 140 can be reduced and the control device 140 can be manufactured at low cost. Further, the control device 140 can be downsized.
　本発明の車両制御システムは、既存の車両１０をカーシェアリング用の車両１０に容易に改変できる。したがって、たとえば、アフリカのような日本車の中古車が多く利用されている新興国でカーシェア・カーレンタル事業をする場合には、非常に有効である。 The vehicle control system of the present invention can easily modify the existing vehicle 10 into the vehicle 10 for car sharing. Therefore, for example, it is very effective when carrying out a car-sharing / car-rental business in an emerging country such as Africa where many used Japanese cars are used.
　なお、本発明の技術的範囲は、上記の実施形態に限定されるものではなく、技術的範囲に含まれる範囲内で種々の改変が可能であることは言うまでもない。 Note that it goes without saying that the technical scope of the present invention is not limited to the above-described embodiments, and various modifications can be made within the scope included in the technical scope.
　たとえば、制御装置１４０の作成および取り付け方法は、図１に示される方法に限定されず、使用者またはサービス提供者が全ての工程を実施してもよく、あるいは任意の一部を第三者に委託してもよい。 For example, the method of making and installing the control device 140 is not limited to the method shown in FIG. 1, and a user or a service provider may perform all the steps, or an arbitrary part may be given to a third party. You may entrust it.
　また、制御装置１４０が基板４０に対して送信可能な指示はロック／アンロックに限定されず、ホーンの鳴動などの各種動作に関する指示を送信できる。 Further, the instruction that the control device 140 can send to the board 40 is not limited to lock / unlock, but can send instructions related to various operations such as ringing of the horn.
　１００、２００　制御システム、
　１１０　携帯端末、
　１２０　ネットワーク回線、
　１３０　制御サーバー、
　１３２　ＩＤ・秘密鍵記憶部、
　１３４　制御データ生成部、
　１３６　暗号化部、
　１３８　無線通信部、
　１４０　制御対象装置（鍵デバイス）、
　１４２　無線通信部、
　１４４　復号部、
　１４５　ＩＤ・秘密鍵記憶部、
　１４６　照合部、
　１４８　コマンド実行部、
　２１０　予約サーバー。 100, 200 control system,
110 mobile terminals,
120 network lines,
130 control server,
132 ID / secret key storage unit,
134 a control data generator,
136 encryption unit,
138 wireless communication unit,
140 controlled device (key device),
142 wireless communication unit,
144 decoding unit,
145 ID / secret key storage unit,
146 collation unit,
148 Command execution part,
210 reservation server.

Claims (7)

  1. 　車両の使用者の携帯端末と通信回線を介して通信可能な制御サーバーと、前記車両の錠をロック／アンロックさせるリモコンキーの基板を制御して前記車両の動作を制御する制御装置と、を有し、
    　前記制御サーバーは、
    　前記車両のＩＤと前記ＩＤに対応付けた秘密鍵とを記憶する記憶部と、
    　前記車両のＩＤに対応する前記秘密鍵と時刻またはカウンタの値とによってワンタイムパスワードを生成し、生成した前記ワンタイムパスワードに前記車両のコマンドを付加して、前記車両の動作を制御させる制御データを生成する制御データ生成部と、
    　前記制御データを暗号化する暗号化部と、
    　暗号化後の前記制御データを前記携帯端末に送信する通信部と、を有し、
    　前記携帯端末は、
    　前記通信部が送信した暗号化後の前記制御データを前記制御装置に近距離無線通信を用いて伝送可能であり、
    　前記制御装置は、
    　前記車両に設けられて前記携帯端末と近距離無線通信可能であり、前記携帯端末を介して伝送された暗号化後の前記制御データを前記携帯端末から受信する無線通信部と、
    　暗号化後の前記制御データを復号する復号部と、
    　前記車両の前記ＩＤと前記秘密鍵とを記憶する記憶部と、
    　復号後の前記制御データに含まれる前記ワンタイムパスワードと前記制御装置の前記記憶部が記憶している前記秘密鍵によって生成した前記ワンタイムパスワードとを照合する照合部と、
    　復号後の前記制御データに含まれる前記ワンタイムパスワードと前記制御装置の前記記憶部が記憶している前記秘密鍵によって生成した前記ワンタイムパスワードとが一致しているときには前記制御データに含まれる前記コマンドを実行し、一致していないときには前記コマンドを実行しないコマンド実行部と、を有する、車両制御システム。     A control server capable of communicating with a mobile terminal of a user of a vehicle via a communication line, and a control device for controlling an operation of the vehicle by controlling a board of a remote control key for locking / unlocking the lock of the vehicle. Have,
    The control server is
    A storage unit that stores an ID of the vehicle and a secret key associated with the ID;
    Control data for generating a one-time password by the secret key corresponding to the ID of the vehicle and the value of the time or the counter, adding a command of the vehicle to the generated one-time password, and controlling the operation of the vehicle A control data generation unit that generates
    An encryption unit for encrypting the control data,
    A communication unit for transmitting the encrypted control data to the mobile terminal,
    The mobile terminal is
    The encrypted control data transmitted by the communication unit can be transmitted to the control device using short-range wireless communication,
    The control device is
    A wireless communication unit that is provided in the vehicle and is capable of short-range wireless communication with the mobile terminal, and receives the encrypted control data transmitted via the mobile terminal from the mobile terminal;
    A decryption unit that decrypts the control data after encryption,
    A storage unit that stores the ID of the vehicle and the secret key;
    A collation unit that collates the one-time password included in the decrypted control data with the one-time password generated by the secret key stored in the storage unit of the control device,
    When the one-time password included in the control data after decryption and the one-time password generated by the secret key stored in the storage unit of the control device match, the one-time password included in the control data A vehicle control system comprising: a command executing unit that executes a command and does not execute the command when the commands do not match.
  2. 　前記制御装置は、前記車両の前記錠をロック／アンロックさせる前記リモコンキーの前記基板に接続され前記基板に前記錠の前記ロック／アンロックの指令を出力するとともに前記基板に供給する電力のオン／オフの指令を出力するキー接続装置と、
    　前記キー接続装置に接続され前記キー接続装置に前記錠の前記ロック／アンロックを実行させる車両接続装置と、を有する、請求項１に記載の車両制御システム。     The control device is connected to the board of the remote control key for locking / unlocking the lock of the vehicle, outputs the lock / unlock command of the lock to the board, and turns on the power supplied to the board. A key connection device that outputs a command to turn on / off
    The vehicle control system according to claim 1, further comprising a vehicle connection device that is connected to the key connection device and causes the key connection device to perform the lock / unlock of the lock.
  3. 　前記コマンド実行部は、
    　前記錠の前記ロック／アンロックを制御するロック／アンロック制御部と、
    　前記基板に供給する電力のオン／オフを制御する電源制御部と、
    　を有する、請求項２に記載の車両制御システム。     The command execution unit is
    A lock / unlock controller for controlling the lock / unlock of the lock;
    A power supply control unit for controlling on / off of electric power supplied to the substrate;
    The vehicle control system according to claim 2, further comprising:
  4. 　前記制御装置は、前記車両の前記ＩＤを、前記近距離無線通信を用いて所定の範囲内に送信し、
    　前記携帯端末は、前記車両の前記ＩＤを取得すると、当該ＩＤを送信する前記制御装置と接続し、当該制御装置から取得された前記車両の前記ＩＤを、前記通信回線を介して前記制御サーバーに伝送させる、請求項１から３のいずれかに記載の車両制御システム。     The control device transmits the ID of the vehicle within a predetermined range using the short-range wireless communication,
    When the mobile terminal acquires the ID of the vehicle, the mobile terminal connects to the control device that transmits the ID, and transmits the ID of the vehicle acquired from the control device to the control server via the communication line. The vehicle control system according to claim 1, which is transmitted.
  5. 　前記制御装置は、前記車両の前記錠をアンロックさせてから所定の時間を経過しても前記車両のエンジンが始動されなかったとき、または前記エンジンが始動された後に前記制御装置と前記携帯端末との間で前記近距離無線通信のコネクションが切断したときには、前記車両の前記錠をロックさせる、請求項１から４のいずれかに記載の車両制御システム。 The control device includes the control device and the portable terminal when the engine of the vehicle has not been started even after a predetermined time has elapsed after unlocking the lock of the vehicle, or after the engine has been started. The vehicle control system according to any one of claims 1 to 4, wherein the lock of the vehicle is locked when the connection of the short-range wireless communication with the vehicle is disconnected.
  6. 　前記制御装置は、前記エンジンが始動された後、前記エンジンの始動を、前記携帯端末を介して前記制御サーバーに報知し、前記制御サーバーから前記携帯端末を介して伝送されるロックコマンドによりロックスタンバイ状態に設定する、請求項５に記載の車両制御システム。 After the engine has been started, the control device notifies the control server of the start of the engine to the control server via the mobile terminal, and the lock standby is performed by a lock command transmitted from the control server via the mobile terminal. The vehicle control system according to claim 5, wherein the vehicle control system is set to a state.
  7. 　前記制御装置は、前記ロックスタンバイ状態のときに、前記制御装置と前記携帯端末との間で前記近距離無線通信のコネクションが切断したときには、前記車両の前記錠をロックさせる、請求項６に記載の車両制御システム。 The control device locks the lock of the vehicle when the short-range wireless communication connection between the control device and the mobile terminal is disconnected in the lock standby state. Vehicle control system.
PCT/JP2019/035360 2018-10-30 2019-09-09 Vehicle control system WO2020090232A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2018204134A JP6501330B1 (en) 2018-10-30 2018-10-30 Vehicle control system
JP2018-204134 2018-10-30

Publications (1)

Publication Number Publication Date
WO2020090232A1 true WO2020090232A1 (en) 2020-05-07

Family

ID=66166636

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2019/035360 WO2020090232A1 (en) 2018-10-30 2019-09-09 Vehicle control system

Country Status (2)

Country Link
JP (1) JP6501330B1 (en)
WO (1) WO2020090232A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2022550646A (en) * 2020-06-29 2022-12-05 オルリンク カンパニー リミテッド Vehicle door unlocking method using mobile terminal
CN116506830A (en) * 2023-06-28 2023-07-28 小米汽车科技有限公司 Control method, device and system for digital car key and storage medium

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA3116691A1 (en) 2018-10-15 2020-04-23 Paylessgate Corporation Position identifying system, position identifying device, position identifying method, position identifying program, computer readable recording medium, and recorded equipment
JP6678802B1 (en) * 2019-07-29 2020-04-08 株式会社Ｒｏｂｏｔ Ｈｏｍｅ Lock device, lock system, program, and unlocking method
JP6723422B1 (en) * 2019-09-26 2020-07-15 株式会社ジゴワッツ Authentication system
JP2022007918A (en) * 2020-03-04 2022-01-13 株式会社オーガスタス User authentication system used in parking lot and parking lot management system
JP7462359B1 (en) 2023-04-19 2024-04-05 有限会社松橋レンタカー Boat Rental System

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2018003330A (en) * 2016-06-28 2018-01-11 トヨタ自動車株式会社 Lock and unlock system and key unit
JP2018035515A (en) * 2016-08-29 2018-03-08 凸版印刷株式会社 Electronic lock system
JP2018084112A (en) * 2016-11-25 2018-05-31 大日本印刷株式会社 Delivery system, portable terminal, and program
JP2018145765A (en) * 2017-03-09 2018-09-20 トヨタ自動車株式会社 Locking/unlocking system and key unit

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2018003330A (en) * 2016-06-28 2018-01-11 トヨタ自動車株式会社 Lock and unlock system and key unit
JP2018035515A (en) * 2016-08-29 2018-03-08 凸版印刷株式会社 Electronic lock system
JP2018084112A (en) * 2016-11-25 2018-05-31 大日本印刷株式会社 Delivery system, portable terminal, and program
JP2018145765A (en) * 2017-03-09 2018-09-20 トヨタ自動車株式会社 Locking/unlocking system and key unit

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2022550646A (en) * 2020-06-29 2022-12-05 オルリンク カンパニー リミテッド Vehicle door unlocking method using mobile terminal
US11623612B2 (en) 2020-06-29 2023-04-11 Allink Co., Ltd. Method for unlocking vehicle door using mobile terminal
JP7300766B2 (en) 2020-06-29 2023-06-30 オルリンク カンパニー リミテッド Vehicle door unlocking method using mobile terminal
CN116506830A (en) * 2023-06-28 2023-07-28 小米汽车科技有限公司 Control method, device and system for digital car key and storage medium

Also Published As

Publication number Publication date
JP2020072339A (en) 2020-05-07
JP6501330B1 (en) 2019-04-17

Similar Documents

Publication Publication Date Title
WO2020090232A1 (en) Vehicle control system
EP3426528B1 (en) Secure smartphone based access and start authorization system for vehicles
CN110877597B (en) User activated/deactivated short-range wireless communication (SRWC) assisted smart key
JP5999108B2 (en) Vehicle remote operation information providing device, in-vehicle remote operation information acquisition device, and vehicle remote operation system including these devices
US10645578B2 (en) System for using mobile terminals as keys for vehicles
US10755505B2 (en) Locking and unlocking system, key unit, and server
JP5189073B2 (en) Personal property, in particular a method, computer program and personal property for protecting automobiles from unauthorized use
JP5918004B2 (en) Electronic key registration system
JP6717793B2 (en) Car sharing system and car sharing device
JP6588518B2 (en) Car sharing system
JP5437948B2 (en) Electronic key registration system
JP2013234520A (en) Electronic key registration system
CN111845624B (en) Method for starting vehicle without key
JP2006262184A (en) Authority possession apparatus, authority borrowing apparatus, control unit, authority delegation system, authority possession program and authority possession method
JP6633589B2 (en) Car sharing system
KR20120090148A (en) Method and system for controlling a car using smart phone
JP2013258491A (en) Car sharing system and car sharing provisioning method
JP7331563B2 (en) Terminal, vehicle operation system, vehicle operation method and program
JP2019105881A (en) Sharing system
CN106559378B (en) Automobile door lock unlocking device, system and method and intelligent terminal
CN104519047A (en) Methods and systems for secure communication between wireless electronic devices and vehicles
JP5985845B2 (en) Electronic key registration method
JP2013236318A (en) Portable device registration system
CN111475799A (en) Device for authenticating identity of robot and robot
JP2005045582A (en) Radio data communication system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19880760

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19880760

Country of ref document: EP

Kind code of ref document: A1