Vehicle control system and center
The vehicle control system uses a digital key and an information gathering center to compare instructed and actual vehicle states, addressing the challenge of detecting unauthorized access by mimicked signals, thereby accurately identifying vehicle theft.
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- TOYOTA JIDOSHA KK
- Filing Date
- 2024-12-13
- Publication Date
- 2026-06-25
AI Technical Summary
Existing vehicle theft detection methods fail to accurately identify unauthorized access due to mimicked legitimate commands and signals, as the vehicle's electronic control unit cannot differentiate between legitimate and mimicked signals.
A vehicle control system that includes a digital key, an information gathering center, and a vehicle, where the digital key periodically transmits the last instructed state to the center, and the center detects abnormalities by comparing this state with the actual state of the vehicle, using consistency checks.
Accurately detects vehicle abnormalities, such as theft, by utilizing information from both the vehicle and the digital key, enabling real-time notification of the user or administrator.
Smart Images

Figure 2026103942000001_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to a vehicle control system including a vehicle, an information processing device capable of instructing to change the locked / unlocked state of a vehicle door, and a center communicable with the vehicle and the information processing device.
Background Art
[0002] Patent Document 1 discloses an anti-theft device that can perform its own fault diagnosis by an operation from outside the vehicle.
Prior Art Documents
Patent Documents
[0003]
Patent Document 1
Summary of the Invention
Problems to be Solved by the Invention
[0004] In recent years, vehicle theft has evolved from physical means to sophisticated means that exploit electronic systems. In thefts that exploit such electronic systems, since unauthorized access is made to the vehicle by mimicking legitimate commands and signals, the vehicle's electronic control unit (ECU) cannot detect the mimicked signals as abnormal. Therefore, there is a problem that it is difficult to detect vehicle theft using the method of fault diagnosis inside the vehicle as described in Patent Document 1 above.
[0005] Therefore, there is room for further study on a method for accurately detecting the occurrence of abnormalities in a vehicle such as theft.
[0006] The present disclosure has been made in view of the above problems, and an object thereof is to provide a vehicle control system and the like that can accurately detect the occurrence of abnormalities in a vehicle.
Means for Solving the Problems
[0007] To solve the above problems, one aspect of the disclosed technology is a vehicle control system comprising a vehicle, an information processing device capable of instructing a change in a first state of the vehicle, and a center capable of communicating with the vehicle and the information processing device, wherein the information processing device periodically transmits the last instructed first state to the vehicle to the center, the vehicle transmits the changed second state to the center if there is a change in the vehicle's second state, and the center detects an abnormality in the vehicle based on the consistency between the first state and the second state. [Effects of the Invention]
[0008] According to the vehicle control system described above, since it uses not only vehicle information but also information from the information processing device, it can accurately detect the occurrence of abnormalities in the vehicle. [Brief explanation of the drawing]
[0009] [Figure 1] Schematic diagram of a vehicle control system according to one embodiment of the present disclosure. [Figure 2] Processing sequence for anomaly detection control in the first example when the vehicle is functioning normally [Figure 3] Processing sequence of anomaly detection control in the first example when a vehicle is abnormal [Figure 4] Flowchart of the first example of anomaly detection control implemented by the information gathering center [Figure 5] Processing sequence for abnormality detection control in the second example when the vehicle is functioning normally [Figure 6] Processing sequence for abnormal vehicle detection control in the second example. [Figure 7] Processing flowchart for the second example of anomaly detection control performed by the information gathering center [Modes for carrying out the invention]
[0010] The vehicle control system disclosed in this document proposes a service that notifies the vehicle owner or manager in real time when it detects abnormal vehicle behavior, in response to vehicle theft methods that exploit electronic systems. The embodiments of this disclosure will be described in detail below with reference to the drawings.
[0011] <Embodiment> [composition] Figure 1 is a schematic diagram showing the overall configuration of a vehicle control system 100 according to one embodiment of the present disclosure. The vehicle control system 100 illustrated in Figure 1 includes a digital key 110, an information gathering center 120, and a vehicle 130. The digital key 110, the information gathering center 120, and the vehicle 130 are connected to each other in a communicative manner.
[0012] Although Figure 1 shows an example where there is only one digital key 110 and one vehicle 130, in a realistic configuration, multiple digital keys 110 and multiple vehicles 130 are connected to the information gathering center 120 in a way that allows them to communicate with each other.
[0013] The digital key 110 is an information processing device capable of issuing instructions to change the locked / unlocked state (first state) of the doors of the vehicle 130. This digital key 110 includes at least a communication unit 111 that transmits and receives information with other components. An example of the digital key 110 is a smartphone with a dedicated key application installed.
[0014] When the digital key 110 receives an operation from the user to lock or unlock the doors of the vehicle 130, it can send an instruction to the vehicle 130 to change the lock / unlock state. The digital key 110 can also periodically send the last lock / unlock state instructed to the vehicle 130 to the information collection center 120. Furthermore, the digital key 110 can send the last lock / unlock state instructed to the vehicle 130 to the information collection center 120 upon request from the information collection center 120. The information sent from the digital key 110 to the information collection center 120 and the vehicle 130 includes unique identification information that can uniquely identify the digital key 110.
[0015] The information gathering center 120 is a management center that collects various information from multiple digital keys 110 and multiple vehicles 130, and can detect the occurrence of abnormalities in vehicles 130 that meet predetermined conditions. The information gathering center 120 includes, at least, a communication unit 121 that transmits and receives information with other components, a request unit 122 that requests information from the digital keys 110, and a detection unit 123 that detects abnormalities in the vehicles 130.
[0016] The information gathering center 120 can receive an IG-ON notification from the vehicle 130 when the ignition state (second state) of the vehicle 130 is changed to ON (IG-ON). The information gathering center 120 can also request the digital key 110 to transmit the last locked / unlocked state (first state) of the doors that was instructed to the vehicle 130. The information gathering center 120 can also receive the last locked / unlocked state transmitted by the digital key 110 in response to this request. Furthermore, the information gathering center 120 can detect abnormalities in the vehicle 130 based on the consistency between the locked / unlocked state (first state) and the ignition state (second state). In addition, if the information gathering center 120 detects an abnormality in the vehicle 130, it can notify the user (digital key 110) of this fact.
[0017] Vehicle 130 is an automobile capable of traveling based on a user's operation. This vehicle 130 includes at least a communication unit 131 that transmits and receives other components and information, an ECU 132 capable of detecting IG-ON (engine start / power on), and an ECU 133 having a remote diagnosis function in its configuration.
[0018] Vehicle 130 can receive a request for locking and unlocking the door from the user via the digital key 110. Also, vehicle 130 can receive a request for an ignition operation from the user. Further, vehicle 130 can receive an instruction for changing the locked state from the digital key 110. Also, when vehicle 130 changes the ignition to ON (IG-ON), it can transmit an IG-ON notification to the information collection center 120.
[0019] [Control] Next, referring further to FIGS. 2 to 7, the operations performed by the vehicle control system 100 according to an embodiment of the present disclosure will be described.
[0020] (1) First example FIG. 2 is a processing sequence of the first example of abnormality detection control executed in the vehicle control system 100 when vehicle 130 is normal. FIG. 3 is a processing sequence of the first example of abnormality detection control executed in the vehicle control system 100 when vehicle 130 is abnormal. FIG. 4 is a flowchart for explaining the processing procedure of the first example of abnormality detection control executed by the information collection center 120.
[0021] (1-1) Normal case When instructing the vehicle 130 to the locked state (door lock state) of the door, the digital key 110 transmits to the vehicle 130 a lock instruction for changing the door to the locked state together with identification information (KEY-ID) (FIG. 2: S21). Also, the digital key 110 periodically transmits to the information collection center 120 that it has instructed the vehicle 130 of the door lock state together with the identification information (FIG. 2: S22, FIG. 4: S401).
[0022] Subsequently, when the digital key 110 receives an unlock request from the legitimate user 140 to unlock the doors of the vehicle 130 (Figure 2: S23), it transmits an unlock instruction to the vehicle 130 along with identification information (KEY-ID) to change the doors to the unlocked state (door unlock state) (Figure 2: S24). The digital key 110 also periodically transmits to the information collection center 120, along with identification information, that it has instructed the vehicle 130 to unlock the doors (Figure 2: S25, Figure 4: S401). In response to this unlock instruction, the vehicle 130 unlocks the doors after undergoing a predetermined authentication process.
[0023] Subsequently, when vehicle 130 receives an IG-ON request from user 140 to turn the ignition on (IG-ON) (Figure 2: S26), it unlocks the doors after a predetermined authentication process. Then, vehicle 130 notifies ECU 133 from ECU 132 that it has transitioned to the IG-ON state, and sends an IG-ON notification indicating that the ignition has been changed to the ON state, along with the identification information (KEY-ID) of the digital key 110 that sent the unlock command, to the information collection center 120 via ECU 133 (Figure 2: S27).
[0024] The information gathering center 120 receives an IG-ON notification from the vehicle 130 (Figure 4: S402, Yes). Next, the information gathering center 120 refers to the identification information (KEY-ID) attached to the IG-ON notification and identifies the door lock / unlock status (first state) that is periodically transmitted from the digital key 110 that matches this identification information. Then, the information gathering center 120 detects an abnormality in the vehicle 130 based on the consistency between the ignition ON state of the vehicle 130 due to the IG-ON notification (second state) and the identified door unlock status (first state).
[0025] In this normal case, the lock / unlock status of the door (first state) identified from the identification information (KEY-ID) is unlocked (Figure 4: S403, No). Therefore, the information gathering center 120 determines that this is a normal operation, as it is a consistent procedure in which the ignition was turned ON after the door was unlocked (Figure 2: S28).
[0026] (1-2) Abnormal Cases When instructing vehicle 130 to lock its doors (door lock state), the digital key 110 transmits a lock command to vehicle 130, along with identification information (KEY-ID), to change the doors to the locked state (Figure 3: S31). The digital key 110 also periodically transmits to the information collection center 120, along with identification information, that it has instructed vehicle 130 to lock its doors (Figure 3: S32, Figure 4: S401).
[0027] Subsequently, when vehicle 130 receives an unlock request from the unauthorized tool 150 to unlock the vehicle's doors and an ignition-on request to turn the ignition on (IG-ON) via unauthorized access (Figure 3: S33), it unlocks the doors after a predetermined authentication process. Then, vehicle 130 notifies ECU 133 from ECU 132 that it has transitioned to the IG-ON state, and sends an IG-ON notification indicating that the ignition has been changed to the ON state, along with the identification information (KEY-ID) of the digital key 110 that sent the lock command, to the information collection center 120 via ECU 133 (Figure 3: S34).
[0028] The information gathering center 120 receives an IG-ON notification from the vehicle 130 (Figure 4: S402, Yes). Next, the information gathering center 120 refers to the identification information (KEY-ID) attached to the IG-ON notification and identifies the door lock / unlock status (first state) that is periodically transmitted from the digital key 110 that matches this identification information. Then, the information gathering center 120 detects an abnormality in the vehicle 130 based on the consistency between the ignition ON state of the vehicle 130 due to the IG-ON notification (second state) and the identified door unlock status (first state).
[0029] In this abnormal case, the lock / unlock state of the door (first state) identified from the identification information (KEY-ID) is the door locked (Figure 4: S403, yes). Therefore, the information gathering center 120 determines that this is an abnormality because the procedure of turning the ignition ON after locking the door is inconsistent (Figure 3: S35). In response to this abnormality determination, it notifies the user that an abnormality has occurred (Figure 3: S36, Figure 4: S404). Note that this notification may be sent to a device other than the digital key 110.
[0030] (2) Second example Figure 5 shows the processing sequence of a second example of anomaly detection control performed by the vehicle control system 100 when the vehicle 130 is functioning normally. Figure 6 shows the processing sequence of a second example of anomaly detection control performed by the vehicle control system 100 when the vehicle 130 is functioning abnormally. Figure 7 is a flowchart illustrating the processing procedure of a second example of anomaly detection control performed by the information gathering center 120.
[0031] (2-1) Normal case When instructing vehicle 130 to lock its doors (door lock state), the digital key 110 transmits a lock command to vehicle 130, along with identification information (KEY-ID), to change the doors to the locked state (Figure 5: S51).
[0032] Subsequently, when the digital key 110 receives an unlock request from the legitimate user 140 to unlock the doors of the vehicle 130 (Figure 5: S52), it sends an unlock instruction to the vehicle 130 along with identification information (KEY-ID) to change the doors to the unlocked state (door unlock state) (Figure 5: S53). In response to this unlock instruction, the vehicle 130 unlocks the doors after undergoing a predetermined authentication process.
[0033] Subsequently, when vehicle 130 receives an IG-ON request from user 140 to turn the ignition on (IG-ON) (Figure 5: S54), it unlocks the doors after a predetermined authentication process. Then, vehicle 130 notifies ECU 133 from ECU 132 that it has transitioned to the IG-ON state, and sends an IG-ON notification indicating that the ignition has been changed to the ON state, along with the identification information (KEY-ID) of the digital key 110 that sent the unlock command, to the information collection center 120 via ECU 133 (Figure 5: S55).
[0034] The information gathering center 120 receives an IG-ON notification from the vehicle 130 (Figure 7: S701, Yes). Next, the information gathering center 120 refers to the identification information (KEY-ID) attached to the IG-ON notification and sends a request to the digital key 110 that has this identification information to confirm the lock / unlock status (first state) of the doors instructing the vehicle 130 (Figure 5: S56, Figure 7: S702).
[0035] Upon receiving this request, the digital key 110 sends back the locked / unlocked status of the doors to the vehicle 130 to the information gathering center 120 (Figure 5: S57).
[0036] The information gathering center 120, having received the lock / unlock status of the door last instructed to the vehicle 130 from the digital key 110, detects an abnormality in the vehicle 130 based on the consistency between the ignition ON state of the vehicle 130 due to the IG-ON notification (second state) and the received unlocked door state (first state).
[0037] In this normal case, the door lock / unlock status (first state) received from the digital key 110 is door unlocked (Figure 7: S703, No). Therefore, the information gathering center 120 determines that this is a normal procedure, as the ignition was turned ON after the door was unlocked (Figure 5: S58).
[0038] (2-2) Abnormal Cases When instructing vehicle 130 to lock its doors (door lock state), the digital key 110 transmits a lock command to vehicle 130, along with identification information (KEY-ID), to change the doors to the locked state (Figure 6: S61).
[0039] Subsequently, when vehicle 130 receives an unlock request from the unauthorized tool 150 to unlock the vehicle's doors and an ignition-on request to turn the ignition on (IG-ON) via unauthorized access (Figure 6: S62), it unlocks the doors after a predetermined authentication process. Then, vehicle 130 notifies ECU 133 from ECU 132 that it has transitioned to the IG-ON state, and sends an IG-ON notification indicating that the ignition has been changed to the ON state, along with the identification information (KEY-ID) of the digital key 110 that sent the lock command, to the information collection center 120 via ECU 133 (Figure 6: S63).
[0040] The information gathering center 120 receives an IG-ON notification from the vehicle 130 (Figure 7: S701, Yes). Next, the information gathering center 120 refers to the identification information (KEY-ID) attached to the IG-ON notification and sends a request to the digital key 110 that has this identification information to confirm the lock / unlock status (first state) of the doors instructing the vehicle 130 (Figure 6: S64, Figure 7: S702).
[0041] Upon receiving this request, the digital key 110 sends back the locked / unlocked status of the door to the vehicle 130 to the information gathering center 120 (Figure 6: S65).
[0042] The information gathering center 120, having received the lock / unlock status of the door last instructed to the vehicle 130 from the digital key 110, detects an abnormality in the vehicle 130 based on the consistency between the ignition ON state of the vehicle 130 due to the IG-ON notification (second state) and the received unlocked door state (first state).
[0043] In this abnormal case, the door lock / unlock status (first state) received from the digital key 110 is that the door is locked (Figure 7: S703, yes). Therefore, the information gathering center 120 determines that this is an abnormality because the procedure of turning the ignition ON after locking the door is inconsistent (Figure 6: S66). In response to this abnormality determination, it notifies the user that an abnormality has occurred (Figure 6: S67, Figure 7: S704). Note that this notification may be sent to a device other than the digital key 110.
[0044] <Effects and Actions> As described above, according to the vehicle control system 100 of one embodiment of the present disclosure, the system determines whether or not there is an abnormality in the vehicle 130 by comparing the result of the operation of the digital key 110 (information processing device) on the vehicle 130 (first state) with the current state of the vehicle 130 (second state) and confirming consistency.
[0045] This control system allows the use of information from both the vehicle 130 and the digital key 110 (information processing device), enabling accurate detection of abnormalities in the vehicle 130. Furthermore, in response to vehicle theft methods that exploit electronic systems, the system can notify the vehicle 130's user and administrator in real time when abnormal operation of the vehicle 130 is detected.
[0046] Although one embodiment of the present disclosure has been described above, the present disclosure can be understood not only as the vehicle control system described above, but also as a digital key included in the vehicle control system, an information gathering center, and various components of the vehicle, methods by which each component performs, programs for those methods, or computer-readable non-temporary recording media storing those programs. [Industrial applicability]
[0047] The vehicle control system disclosed herein is useful when it is desired to accurately detect the occurrence of abnormalities in a vehicle in response to vehicle theft methods that exploit electronic systems. [Explanation of Symbols]
[0048] 100 Vehicle control systems 110 Digital Key 111, 121, 131 Communications Department 120 Information Gathering Center 122 Request part 123 Detection unit 130 vehicles 132, 133 ECU 140 users 150 Unauthorized Tools
Claims
1. Vehicles and, An information processing device capable of issuing an instruction to change the first state of the vehicle, A vehicle control system comprising the vehicle and a center capable of communicating with the information processing device, The information processing device periodically transmits the first state last instructed to the vehicle to the center. If the vehicle's second state changes, it transmits the changed second state to the center. The aforementioned center is a vehicle control system that detects abnormalities in the vehicle based on the consistency between the first state and the second state.
2. Vehicles and, An information processing device capable of issuing an instruction to change the first state of the vehicle, A vehicle control system comprising the vehicle and a center capable of communicating with the information processing device, If the vehicle's second state changes, it transmits the changed second state to the center. A vehicle control system in which the center requests the information processing device to transmit the first state that was last instructed to the vehicle, and detects an abnormality in the vehicle based on the consistency between the first state and the second state.
3. The first state is the state in which the vehicle's doors are locked or unlocked. The second state is the ignition state of the vehicle, The vehicle control system according to claim 1 or 2, wherein the center detects the occurrence of an abnormality in the vehicle when the first state is the door locked state and the second state is the IG-ON state.
4. The first state includes identification information of the information processing device, The second state includes identification information of the device that instructed the change to the second state. The vehicle control system according to claim 1 or 2, wherein the center determines consistency between the first state and the second state, wherein the identification information matches.
5. A vehicle and a center capable of communicating with an information processing device that can issue instructions to change the first state of the vehicle, A communication unit periodically receives the first state last instructed to the vehicle by the information processing device from the information processing device, and receives the changed second state from the vehicle when there is a change in the second state of the vehicle. A center comprising: a detection unit that detects an abnormality in the vehicle based on the consistency between the first state and the second state.
6. A vehicle and a center capable of communicating with an information processing device that can issue instructions to change the first state of the vehicle, A communication unit that receives the changed second state from the vehicle when there is a change in the second state of the vehicle, When the second state is received, a request unit requests the information processing device to transmit the first state which was last instructed to the vehicle, A center comprising: a detection unit that detects an abnormality in the vehicle based on the consistency between the first state and the second state.
Citation Information
Patent Citations
Anti-theft device
JP2010072750A