Vehicle operation device, vehicle operation method, and non-volatile storage medium

Abstract

The present invention prevents a situation where a vehicle cannot be operated when communication with a server is interrupted. The vehicle operation device includes a memory and a processor. The processor causes a token received from a server and used for authentication with a vehicle to be stored in the memory, and when communication with the server is possible and the vehicle is operated, the token is used to authenticate the vehicle, and when communication with the server is interrupted and a prescribed operation is performed on the vehicle, the token is not used to authenticate the vehicle.

Description

Technical Field

[0001] The invention relates to a vehicle operating device, a vehicle operating method and a non-volatile storage medium. Background Art

[0002] For example, Japanese Patent Application Publication No. 2015-215663 discloses an authentication device for authenticating an application that controls an external device. In the authentication device, an access token of the application is issued, and the access token is used to authenticate an operation signal input from the application to operate the external device and to which the access token is attached. Then, when the access token is authenticated, a new access token is generated to update the access token, and the access token and the new access token are sent to the application.

[0003] For example, in a case where a terminal receives a token from a server and uses the token for authentication between the terminal and the vehicle when performing vehicle operations such as locking and unlocking the vehicle door locks, as in a shared car, if the technology disclosed in Japanese Patent Application Laid-Open No. 2015-215663 is applied, if the communication between the terminal and the server is interrupted and the token is missing, the vehicle cannot be operated. In addition, when the user holding the terminal is in an underground parking lot or in the suburbs, the communication interruption between the terminal and the server may occur frequently. Summary of the invention

[0004] The present invention can prevent a situation in which the vehicle cannot be operated when communication with a server is interrupted.

[0005] The terminal involved in the first method includes a storage unit and an authentication unit, the storage unit storing a token received from a server for authentication with a vehicle, the authentication unit using the token to authenticate with the vehicle when the terminal is in a state where communication with the server is possible and an operation is performed on the vehicle, and authenticating with the vehicle without using the token when communication with the server is interrupted and a prescribed operation is performed on the vehicle.

[0006] In the first mode, when the communication with the server is enabled and the vehicle is operated, the token is used to authenticate the vehicle, and when the communication with the server is disconnected and the vehicle is operated, the token is not used to authenticate the vehicle. Thus, when the communication with the server is disconnected, the use of the token can be saved, so that the vehicle can be prevented from being unable to operate.

[0007] A second aspect is that, in the first aspect, the predetermined operation is an operation with a low safety risk to the vehicle.

[0008] In the second aspect, since the authentication with the vehicle without using a token is performed in a state where communication with the server is interrupted and an operation with low safety risk for the vehicle is performed, the safety of the vehicle can be improved.

[0009] In a third aspect, in the first aspect, when communication with the server is disconnected and an operation other than the predetermined operation is performed on the vehicle, the authentication unit performs authentication with the vehicle using the token.

[0010] In the third method, when communication with the server is interrupted and operations other than prescribed operations are performed on the vehicle, a token is used to authenticate the vehicle. Therefore, when communication with the server is interrupted, it is possible to perform operations other than prescribed operations on the vehicle while ensuring the safety of the vehicle.

[0011] A fourth aspect is that, in the first aspect, when an operation for the vehicle is input via the input unit of the terminal, the authentication unit transmits an operation instruction to the vehicle.

[0012] In the fourth aspect, when an operation for the vehicle is input via the input unit of the terminal, an operation instruction is transmitted to the vehicle, so that the vehicle can recognize that an operation for the vehicle is input via the input unit of the terminal.

[0013] A fifth aspect is the first aspect, further comprising a notification unit configured to notify that the remaining number of the tokens is small when communication with the server is disconnected and the remaining number of the tokens stored in the storage unit is equal to or less than a predetermined value.

[0014] In the fifth aspect, when communication with the server is interrupted and the remaining number of stored tokens is less than a predetermined value, the user holding the terminal is informed that the remaining number of tokens is small, thereby guiding the user holding the terminal to resolve the interruption of communication with the server as soon as possible.

[0015] A sixth aspect is that, in the fifth aspect, the notification unit performs the notification by causing a display on a display unit of the terminal or by outputting a sound from a sound output unit of the terminal.

[0016] In the sixth aspect, by notifying the user holding the terminal that the number of remaining tokens is small by acting on the user's visual or auditory sense, the user can be made aware that the number of remaining tokens is small.

[0017] A seventh aspect is that, in the first aspect, the storage unit stores a plurality of tokens received from the server in a state where communication with the server is possible.

[0018] In the seventh aspect, the time until the remaining number of tokens stored in the storage unit becomes equal to or less than a predetermined value can be extended.

[0019] According to an eighth aspect, in the first aspect, when the token is used to perform authentication with the vehicle, the authentication unit uses the token that is not used for authentication with the vehicle.

[0020] In the eighth aspect, since an unused token is used every time a token is used for authentication with the vehicle, the safety of the vehicle can be improved.

[0021] The vehicle operating system involved in the ninth embodiment includes a terminal of the first embodiment and a vehicle-side system, wherein the vehicle-side system is arranged in the vehicle, and when an operation is performed on the vehicle, the vehicle-side system controls the operation of the vehicle-side equipment through authentication with the terminal, and when the communication between the terminal and the server is interrupted and a prescribed operation is performed on the vehicle, authentication with the terminal is performed without using the token.

[0022] The ninth aspect includes the terminal and the vehicle-side system according to any one of claims 1 to 8, and thus, like the first aspect, it is possible to prevent the vehicle from being unable to be operated when communication with the server is interrupted.

[0023] The vehicle operation method according to the tenth aspect is a method in which a computer performs processing including the following contents: storing a token received from a server and used for authentication with a vehicle in a storage unit, using the token to authenticate with the vehicle when communication with the server is possible and the vehicle is being operated, and authenticating with the vehicle without using the token when communication with the server is interrupted and a prescribed operation is being performed on the vehicle. Thus, as in the first aspect, it is possible to prevent the vehicle from being unable to be operated when communication with the server is interrupted.

[0024] The vehicle operation program according to the eleventh embodiment causes a computer to execute a process including the following contents: storing a token received from a server and used for authentication with a vehicle in a storage unit, using the token to authenticate with the vehicle when communication with the server is possible and an operation is performed on the vehicle, and authenticating with the vehicle without using the token when communication with the server is interrupted and a prescribed operation is performed on the vehicle. Thus, as in the first embodiment, it is possible to prevent the vehicle from being unable to be operated when communication with the server is interrupted.

[0025] The present invention can prevent a situation in which the vehicle cannot be operated when communication with a server is interrupted. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Exemplary embodiments of the present invention are described in detail based on the following drawings, in which:

[0027] Figure 1 is a block diagram showing a schematic configuration of a vehicle operating system according to an embodiment;

[0028] Figure 2 It is a functional block diagram of a smartphone;

[0029] Figure 3 is a flow chart of a token management process performed by a smartphone;

[0030] Figure 4 is a schematic diagram showing an operation screen displayed on a display unit of a smartphone;

[0031] Figure 5 is a schematic diagram showing a message displayed on a display unit of a smartphone, notifying that the remaining number of tokens is low;

[0032] Figure 6 is a flow chart of a vehicle operation process performed by a smartphone;

[0033] Figure 7 This is a flowchart of a vehicle control process executed in the vehicle-side system. DETAILED DESCRIPTION

[0034] Hereinafter, an example of an embodiment of the present invention will be described in detail with reference to the accompanying drawings. Figure 1 The vehicle operation system 10 shown includes a smartphone 12 held by a user who operates a vehicle, and a vehicle-side system 46 provided in the vehicle. The smartphone 12 is an example of a terminal serving as a vehicle operation device.

[0035] The smartphone 12 includes a CPU (Central Processing Unit) 14, a memory 16 such as a ROM (Read Only Memory) and a RAM (Random Access Memory), and a storage unit 18 composed of a non-volatile storage medium or memory such as a HDD (Hard Disk Drive) or an SSD (Solid State Drive). In addition, the smartphone 12 includes a first wireless communication unit 20, a second wireless communication unit 24, a display unit 28 forming a touch panel, an input unit 30, and a sound output unit 32. The CPU 14 as a processor, the memory 16, the storage unit 18, the first wireless communication unit 20, the second wireless communication unit 24, the display unit 28, the input unit 30, and the sound output unit 32 are connected via a bus 34 so as to be able to communicate with each other.

[0036] The first wireless communication unit 20 is connected to an antenna 22, and wirelessly communicates with a server 82 via a mobile phone network (not shown), and the server 82 generates a token and sends it to the smartphone 12. As a communication method for wireless communication between the first wireless communication unit 20 and the server 82, for example, a 4G (fourth generation) communication standard, i.e., LTE (Long Term Evolution), can be cited, but it is not limited thereto, and wireless communication based on communication standards such as 3G (third generation) or 5G (fifth generation) can also be performed.

[0037] The second wireless communication unit 24 is connected to an antenna 26 and performs wireless communication with the vehicle-side system 46. An example of a communication method for wireless communication between the second wireless communication unit 24 and the vehicle-side system 46 is BLE (Bluetooth (registered trademark) Low Energy), but wireless communication based on other short-range wireless communication standards may also be performed.

[0038] The storage unit 18 is provided with a token storage area 36 for storing a token received from the server 82, and stores (installs) a vehicle operation program 38. The vehicle operation program 38 is read from the storage unit 18 and opened in the memory 16, and is executed by the CPU 14. Thus, the CPU 14 acts as Figure 2 The authentication unit 40 and the notification unit 42 shown in the figure are examples and each functions to perform a token management process and a vehicle operation process described later.

[0039] The vehicle-side system 46 includes a control ECU (Electronic Control Unit) 48, a DCM (Data Communication Module) 62, a door lock ECU 66, a starter ECU 70, a door opening and closing ECU 74, and an operation unit 78. The control ECU 48, the DCM 62, the door lock ECU 66, the starter ECU 70, the door opening and closing ECU 74, and the operation unit 78 are connected via a bus 80 so as to be able to communicate with each other.

[0040] The control ECU 48 includes a CPU 50, a memory 52, a storage unit 54, and a wireless communication unit 56, which are connected to each other in a communicative manner via an internal bus 60. The wireless communication unit 56 is connected to an antenna 58, and wireless communication based on a communication standard such as BLE is performed with the smartphone 12. The control ECU 48 is equipped with logic for generating a token.

[0041] The DCM 62 is connected to an antenna 64 and performs wireless communication with the server 82 via a mobile phone network (not shown) based on a communication standard such as LTE.

[0042] The door lock ECU 66 is configured to include a CPU, a memory, and a storage unit, similarly to the control ECU 48, and is connected to a door lock ACT (actuator) 68. The door lock ACT 68 can switch the door lock to a locked state or an unlocked state, and the operation of the door lock ACT 68 is controlled by the door lock ECU 66. The door lock ECU 66 and the door lock ACT 68 are examples of vehicle-side equipment.

[0043] In addition, the starter ECU 70 is configured to include a CPU, a memory, and a storage unit, similarly to the control ECU 48, and is electrically connected to the engine 72 of the vehicle to control the start of the engine 72. In the present embodiment, the vehicle equipped with the vehicle-side system 46 may be a vehicle using the engine 72 as a driving source or a hybrid vehicle (HV: Hybrid Vehicle). In the case of a vehicle using the engine 72 as a driving source, the starter ECU 70 controls, for example, fuel injection in the engine 72, and in the case of a hybrid vehicle, the starter ECU 70 controls, for example, the start and stop of the engine 72. The starter ECU 70 and the engine 72 are examples of vehicle-side devices.

[0044] The door opening and closing ECU 74 is configured to include a CPU, a memory, and a storage unit, similarly to the control ECU 48, and is connected to a door opening and closing ACT 76. The door opening and closing ACT 76 is provided to be able to open and close a door of the vehicle (e.g., a sliding door of a rear seat of the vehicle or a tailgate), and the operation of the door opening and closing ACT 76 is controlled by the door opening and closing ECU 74. The door opening and closing ECU 74 and the door opening and closing ACT 76 are examples of vehicle-side equipment.

[0045] The operation unit 78 includes a door lock operation button attached to a door handle, an engine start switch provided on a dashboard of the vehicle, and the like.

[0046] The server 82 is configured to include a CPU, a memory, and a storage unit. The server 82 is equipped with logic for generating tokens, and when a token is requested from the smartphone 12 , the server 82 generates a plurality of tokens and transmits them to the smartphone 12 .

[0047] Next, the operation of this embodiment will be described. For example, when a user performs some operation on a vehicle equipped with the vehicle-side system 46 in order to use a shared car, the user downloads the vehicle operation program 38 from the server 82 to the smartphone 12 and installs it. Then, when the installation of the vehicle operation program 38 is completed, the user starts the vehicle operation program 38. As a result, the smartphone 12 executes the following operation: Figure 3 Token management process shown.

[0048] In step 100 of the token management process, the authentication unit 40 requests the server 82 to send a token, and downloads X1 (e.g., 100) tokens generated in the server 82 in response to the request from the server 82. Then, the authentication unit 40 stores the tokens downloaded from the server 82 in the token storage area 36 of the storage unit 18.

[0049] In the next step 102, the authentication unit 40 causes the display unit 28 of the smartphone 12 to display, for example, Figure 4 The operation screen 84 shown in FIG. 84 displays an icon 85 for instructing that the door locks of the vehicle are switched to a locked state, and an icon 86 for instructing that the door locks of the vehicle are switched to an unlocked state. In addition, the operation screen 84 displays an icon 87 for instructing the opening and closing of the left sliding door of the vehicle, an icon 88 for instructing the opening and closing of the right sliding door of the vehicle, an icon 89 for instructing the opening of the back door of the vehicle, and a message 90 for notifying the remaining number of tokens stored in the token storage area 36. In addition, the processing when the icons of the operation screen 84 are touched will be described later.

[0050] In step 104, the authentication unit 40 obtains the radio wave reception state between the smartphone 12 and the server 82 from the first wireless communication unit 20, and sends the obtained radio wave reception state to the control ECU 48 of the vehicle-side system 46. Thereby, the control ECU 48 can identify whether it is in a state where the smartphone 12 and the server 82 can communicate (the operation mode is the online mode) or in a state where the communication between the smartphone 12 and the server 82 is interrupted (the operation mode is the offline mode).

[0051] In step 106, the authentication unit 40 determines whether it is in a state where the communication between the smartphone 12 and the server 82 is interrupted based on the radio wave reception state obtained from the first wireless communication unit 20 in step 104. If the determination in step 106 is negative, it jumps to step 108. In step 108, the authentication unit 40 determines whether the remaining number of tokens stored in the token storage area 36 is less than or equal to a specified number X2 (where X2 < X1).

[0052] If the determination in step 108 is negative, it returns to step 102. In addition, if the determination in step 108 is affirmative, it returns to step 100. Thereby, during the period when the operation mode of the smartphone 12 is the online mode (the period when the determination in step 106 is negative), tokens are appropriately downloaded from the server 82 so that the remaining number of tokens stored in the token storage area 36 is more than the specified number X2.

[0053] On the other hand, for example, when the user holding the smartphone 12 is in an underground parking lot or the like, it becomes a state where the communication between the smartphone 12 and the server 82 is interrupted, so the determination in step 106 is affirmative and it jumps to step 110.

[0054] In step 110, the authentication unit 40 changes the operation mode of the smartphone 12 to the offline mode. In step 112, the notification unit 42 determines whether the remaining number of tokens stored in the token storage area 36 is less than or equal to a specified number X3 (where X3 < X1). If the determination in step 112 is negative, it jumps to step 116.

[0055] In step 116, the authentication unit 40 determines whether it is in a state where the communication between the smartphone 12 and the server 82 is interrupted. If the determination in step 116 is affirmative, it returns to step S112. During the period when the operation mode of the smartphone 12 is the offline mode (the period when the determination in step 116 is affirmative), it monitors whether the remaining number of tokens becomes less than or equal to the specified number X3.

[0056] If the remaining number of tokens is less than or equal to the predetermined number X3, the determination in step 112 is affirmative and the process jumps to step 114. In step 114, the notification unit 42 causes the display unit 28 of the smartphone 12 to display, for example, Figure 5 The message 91 notifying that the remaining number of tokens is small is shown. Then, the notification unit 42 causes the sound output unit 32 to output an alarm sound. Thus, the user holding the smartphone 12 can be guided to quickly eliminate the state of communication interruption with the server 82. After the processing of step 114, the process jumps to step 116.

[0057] If the smartphone 12 and the server 82 are able to communicate, the determination in step 116 is negative and the process jumps to step 118. In step 118, the authentication unit 40 cancels the offline mode and switches the operation mode of the smartphone 12 to the online mode. Then, the process jumps to step 108.

[0058] Next, refer to Figure 6 , the vehicle operation processing performed by the smartphone 12 while the vehicle operation program 38 is executed in the smartphone 12 will be described.

[0059] In step 130 of the vehicle operation process, the authentication unit 40 determines whether any operation for the vehicle is input via the input unit 30 on the smartphone 12 side based on the fact that any icon on the operation screen 84 is touched. If the determination in step 130 is negative, the process jumps to step 132.

[0060] In step 132, the authentication unit 40 determines whether a password request has been received from the control ECU 48 of the vehicle-side system 46. In addition, when the operation unit 78 of the vehicle-side system 46 is operated and some operation for the vehicle is input on the vehicle side, the smartphone 12 receives a password request from the control ECU 48. In addition, the password request includes information indicating the type of operation input on the vehicle side. If the determination in step 132 is negative, the process returns to step 130, and steps 130 and 132 are repeated until the determination in step 130 or step 132 is positive.

[0061] If the smartphone 12 inputs some operation to the vehicle, the determination in step 130 is affirmative and the process jumps to step 134. If the vehicle inputs some operation to the vehicle, the determination in step 132 is affirmative and the process jumps to step 134.

[0062] In step 134 , the authentication unit 40 determines whether the current operation mode of the smartphone 12 is the offline mode. If the current operation mode of the smartphone 12 is the online mode, the determination in step 134 is negative and the process jumps to step 138 .

[0063] In step 138, the authentication unit 40 reads the token from the token storage area 36. In the next step 140, the authentication unit 40 generates a password using the token read in step 138. Then, in step 142, the authentication unit 40 deletes the token used to generate the password in step 140 from the token storage area 36, ​​and jumps to step 146.

[0064] On the other hand, when the current operation mode of the smartphone 12 is the offline mode, the determination of step S134 is affirmative and the process jumps to step 136. In step 136, the authentication unit 40 determines whether the operation for the vehicle input on the smartphone 12 side or the vehicle side is a prescribed operation with a low safety risk for the vehicle. In addition, as an example of a prescribed operation with a low safety risk for the vehicle, an operation of switching the door locks of the vehicle to a locked state can be listed. In addition, as an example of an operation other than the prescribed operation with a high safety risk for the vehicle, an operation of switching the door locks of the vehicle to an unlocked state, an operation of starting the engine 72, etc. can be listed.

[0065] If the determination in step 136 is affirmative, the process jumps to step 144, in which the authentication unit 40 generates a password without using a token, and the process jumps to step 146. In this way, when the current operation mode of the smartphone 12 is the offline mode and the input operation for the vehicle is a prescribed operation with a low safety risk for the vehicle, a password is generated without using a token, so that although the security of the generated password is slightly reduced, the use of tokens is saved.

[0066] In addition, if the judgment of step 136 is negative, jump to step 138, and as described above, perform a series of processing such as reading the token from the token storage area 36 (step 138), using the read token to generate a password (step 140), and deleting the used token (step 142).

[0067] In step 146, the authentication unit 40 determines whether the location where the operation for the vehicle is input is the smartphone 12 side or the vehicle side, and branches according to the determination result. When the location where the operation for the vehicle is input is the smartphone 12 side, the process branches from step 146 to step 148. Then, in step 148, the authentication unit 40 sends the previously generated password to the control ECU 48 of the vehicle-side system 46, and sends an operation instruction indicating the content of the operation for the vehicle input on the smartphone 12 side.

[0068] If the position where the operation on the vehicle is input is on the vehicle side, the process branches from step 146 to step 150. Then, in step 150, the authentication unit 40 sends the previously generated password to the control ECU 48 of the vehicle-side system 46. After performing the processing of step 148 or step 150, the process returns to step 130.

[0069] Next, refer to Figure 7 Next, a vehicle control process executed by the control ECU 48 while the ignition switch of the vehicle is turned on will be described.

[0070] In step 160, the control ECU 48 determines whether the operation unit 78 of the vehicle-side system 46 is operated and some operation for the vehicle is input on the vehicle side. If the determination in step 160 is negative, the process jumps to step 164, and in step 164, the control ECU 48 determines whether at least a password is received from the smartphone 12. If the determination in step 164 is negative, the process returns to step 160, and steps 160 and 164 are repeated until the determination in step 160 or step 164 is positive.

[0071] If the operation unit 78 is operated and some operation for the vehicle is input on the vehicle side, the determination of step 160 is affirmative and the process jumps to step 162. In step 162, the control ECU 48 sends a password request including information indicating the type of operation input on the vehicle side to the smartphone 12. After the process of step 162 is performed, the process jumps to step 164.

[0072] As described above, when some operation for the vehicle is input on the smartphone 12 side, the password and the operation instruction are sent from the smartphone 12 to the control ECU 48, and when some operation for the vehicle is input on the vehicle side, the password is sent from the smartphone 12 to the control ECU 48 in response to the password request sent by the control ECU 48 to the smartphone 12. In this way, when the information including at least the password is received from the smartphone 12, the determination of step 164 is affirmative and the process jumps to step 166.

[0073] In step 166, the control ECU 48 determines whether the current operation mode of the smartphone 12 is the offline mode. If the current operation mode of the smartphone 12 is the online mode, the determination of step 166 is negative and the process jumps to step 170. In step 170, the control ECU 48 generates a token by the token generation logic, and performs authentication processing corresponding to the password received from the smartphone 12, that is, the password generated using the token. Then, if the authentication is successful (OK), the process jumps to step 174.

[0074] On the other hand, when the current operation mode of the smartphone 12 is the offline mode, the determination in step 166 is affirmative and the process jumps to step 168. In step 168, the control ECU 48 determines whether the operation for the vehicle inputted on the smartphone 12 side or the vehicle side is a prescribed operation with a low safety risk for the vehicle.

[0075] If the determination of step 168 is affirmative, the process jumps to step 172, in which the authentication unit 40 does not generate a token by the token generation logic, but performs authentication processing corresponding to the password received from the smartphone 12, that is, the password generated without using a token. Then, if the authentication is successful (OK), the process jumps to step 174. In addition, if the determination of step 168 is negative, the process jumps to step 170, and as described above, authentication processing corresponding to the password received from the smartphone 12 and generated using a token is performed.

[0076] If the authentication is successful (OK) in step 170 or step 172 , the control ECU 48 executes a process corresponding to the operation on the vehicle inputted from the smartphone 12 or the vehicle in step 174 , and the process returns to step 160 .

[0077] For example, when an operation of switching the door lock of the vehicle to a locked state or an unlocked state is input, the control ECU 48 performs a process of instructing the door lock ECU 66 to switch the door lock of the vehicle to a locked state or an unlocked state. In addition, for example, when an operation of starting or stopping the engine 72 is input, the control ECU 48 performs a process of instructing the start ECU 70 to start or stop the engine 72. In addition, for example, when an operation of opening or closing a door of the vehicle (for example, a sliding door of a rear seat of the vehicle or a tailgate) is input, the control ECU 48 performs a process of instructing the door opening and closing ECU 74 to open or close the door of the vehicle.

[0078] As described above, in the present embodiment, the storage unit 18 of the smartphone 12 stores the token received from the server 82 and used for authentication with the vehicle. In addition, when the authentication unit 40 of the smartphone 12 is in a state where communication with the server 82 is possible and the vehicle is being operated, the authentication unit 40 uses the token to authenticate with the control ECU 48 of the vehicle-side system 46. In addition, when the communication with the server 82 is interrupted and a predetermined operation is being performed on the vehicle, the authentication unit 40 of the smartphone 12 authenticates with the control ECU 48 of the vehicle-side system 46 without using the token. Thus, when communication with the server 82 is interrupted, the use of the token can be saved, so that it is possible to prevent the vehicle from being unable to be operated.

[0079] In addition, in the present embodiment, the prescribed operation is set to an operation with low safety risk for the vehicle. Thus, when the authentication with the vehicle is performed without using a token, the communication with the server 82 is interrupted and the operation with low safety risk for the vehicle is performed, thereby improving the safety of the vehicle.

[0080] Furthermore, in the present embodiment, when the communication with the server 82 is interrupted and an operation other than the prescribed operation is performed on the vehicle, the authentication unit 40 uses the token to perform authentication with the control ECU 48 of the vehicle-side system 46. Thus, when the communication with the server 82 is interrupted, it is possible to perform an operation other than the prescribed operation on the vehicle while ensuring the safety of the vehicle.

[0081] In addition, in the present embodiment, when an operation to the vehicle is input via the input unit 30 of the smartphone 12, the authentication unit 40 sends an operation instruction to the control ECU 48 of the vehicle-side system 46. Thus, the control ECU 48 of the vehicle-side system 46 can recognize that an operation to the vehicle is input via the input unit 30 of the smartphone 12.

[0082] Furthermore, in the present embodiment, when the communication with the server 82 is interrupted and the remaining number of tokens stored in the storage unit 18 is less than a predetermined value, the notification unit 42 of the smartphone 12 notifies that the remaining number of tokens is small. This can guide the user holding the smartphone 12 to resolve the interrupted communication with the server 82 as soon as possible.

[0083] In addition, in the present embodiment, the notification unit 42 notifies that the remaining number of tokens is low by displaying on the display unit 28 of the smartphone 12 or outputting a sound on the sound output unit 32 of the smartphone 12. Thus, by acting on the visual or auditory sense of the user holding the smartphone 12, the user can clearly know that the remaining number of tokens is low.

[0084] Furthermore, in this embodiment, the storage unit 18 of the smartphone 12 stores a plurality of tokens received from the server 82 while being able to communicate with the server 82. This can extend the time until the remaining number of tokens stored in the storage unit 18 becomes equal to or less than a predetermined value.

[0085] In addition, in the present embodiment, when the authentication unit 40 performs authentication with the control ECU 48 of the vehicle-side system 46 using a token, the authentication unit 40 uses a token that is not used for authentication with the control ECU 48 , thereby improving the safety of the vehicle.

[0086] In addition, the above description explains that the radio wave reception status ( Figure 3 Step 104) is performed to realize that the control ECU 48 of the vehicle-side system 46 identifies whether the operation mode of the smartphone 12 is the offline mode. However, this is not limited to this. For example, since the smartphone 12 and the control ECU 48 receive and send each other's states during wireless communication, the control ECU 48 can also automatically detect the operation mode of the smartphone 12 at this time. In addition, the vehicle-side system 46 is equipped with a function of wireless communication with the server 82, so based on whether the vehicle-side system 46 is able to communicate with the server 82, the control ECU 48 can also infer whether the smartphone 12 is in a state where it can communicate with the server 82.

[0087] In addition, the "operation" in the present invention is not limited to the operation of the user input instruction, for example, the operation of taking the smartphone 12 outside the vehicle while the engine 72 is started is also included in the "operation" of the present invention. The operation of taking the smartphone 12 outside the vehicle while the engine 72 is started is an operation that meets the low safety risk, and when this operation is performed, the vehicle-side system 46 may also perform processing such as outputting an alarm.

[0088] In addition, the above content describes a method in which the vehicle operation program 38 involved in the present invention is pre-stored (installed) in the storage unit 18, but the vehicle operation program involved in the present invention can also be recorded in a non-volatile storage medium such as a CD-ROM or DVD-ROM and provided for execution by a processor such as the CPU 14.

Claims

1. A vehicle operating device, Its composition is, including memory and processor, The processor causes the token received from the server and used for authentication with the vehicle to be stored in the memory, determining whether the communication with the server through the first wireless communication unit is in a state where communication is possible or in a state where communication is interrupted, When the communication between the server and the vehicle can be communicated through the first wireless communication unit and an operation is performed on the vehicle through the second wireless communication unit, the token is used to generate a password for authentication and authentication is performed with the vehicle. When the communication between the server and the vehicle through the first wireless communication unit is interrupted and a prescribed operation is performed on the vehicle through the second wireless communication unit, the token is not used but a password for authentication is generated and authentication is performed with the vehicle.

2. The vehicle operating device according to claim 1, wherein: The prescribed operation is an operation with a low safety risk to the vehicle.

3. The vehicle operating device according to claim 1 or 2, wherein: When communication with the server via the first wireless communication unit is interrupted and an operation other than the prescribed operation is performed on the vehicle via the second wireless communication unit, the processor generates a password for authentication using the token and performs authentication with the vehicle.

4. The vehicle operating device according to claim 1 or 2, wherein: When an operation for the vehicle is input through the second wireless communication unit, the processor transmits an operation instruction to the vehicle.

5. The vehicle operating device according to claim 1 or 2, wherein: When communication with the server via the first wireless communication unit is interrupted and the remaining number of the tokens stored in the storage unit is equal to or smaller than a predetermined value, the processor notifies that the remaining number of the tokens is small.

6. The vehicle operating device according to claim 5, wherein: The processor performs the notification by displaying or outputting sound.

7. The vehicle operating device according to claim 1 or 2, wherein: The processor causes the storage unit to store a plurality of tokens received from the server in a state where communication with the server is possible through the first wireless communication unit.

8. The vehicle operating device according to claim 1 or 2, wherein: When the token is used for authentication with the vehicle, the processor generates a password for authentication using the token that is not used for authentication with the vehicle.

9. A vehicle operating method, The processor stores the token received from the server and used for authentication with the vehicle in the memory. determining whether the communication with the server through the first wireless communication unit is in a state where communication is possible or in a state where communication is interrupted, When the communication between the server and the vehicle can be communicated through the first wireless communication unit and an operation is performed on the vehicle through the second wireless communication unit, the token is used to generate a password for authentication and authentication is performed with the vehicle. When the communication between the server and the vehicle through the first wireless communication unit is interrupted and a prescribed operation is performed on the vehicle through the second wireless communication unit, the token is not used but a password for authentication is generated and authentication is performed with the vehicle.

10. The vehicle operating method according to claim 9, wherein: When communication with the server via the first wireless communication unit is interrupted and an operation other than the prescribed operation is performed on the vehicle via the second wireless communication unit, the processor generates a password for authentication using the token and performs authentication with the vehicle.

11. The vehicle operating method according to claim 9 or 10, wherein: When an operation for the vehicle is input through the second wireless communication unit, the processor transmits an operation instruction to the vehicle.

12. The vehicle operating method according to claim 9 or 10, wherein: When communication with the server via the first wireless communication unit is interrupted and the remaining number of the tokens stored in the storage unit is equal to or less than a predetermined value, the processor notifies that the remaining number of the tokens is small.

13. The vehicle operating method according to claim 12, wherein: The processor performs the notification by displaying or outputting sound.

14. The vehicle operating method according to claim 9 or 10, wherein: The processor causes the storage unit to store a plurality of tokens received from the server in a state where the first wireless communication unit is capable of communicating with the server.

15. A non-volatile storage medium storing a program for causing a processor to execute a vehicle operation process, The vehicle operation processing causes a token received from the server and used for authentication with the vehicle to be stored in a memory, determining whether the communication with the server through the first wireless communication unit is in a state where communication is possible or in a state where communication is interrupted, When the communication between the server and the vehicle can be communicated through the first wireless communication unit and an operation is performed on the vehicle through the second wireless communication unit, the token is used to generate a password for authentication and authentication is performed with the vehicle. When the communication between the server and the vehicle through the first wireless communication unit is interrupted and a prescribed operation is performed on the vehicle through the second wireless communication unit, the token is not used but a password for authentication is generated and authentication is performed with the vehicle.

16. The nonvolatile storage medium according to claim 15, storing a program for causing a processor to execute a vehicle operation process, The vehicle operation processing uses the token to generate a password for authentication and performs authentication with the vehicle when the communication between the first wireless communication unit and the server is interrupted and an operation other than the specified operation is performed on the vehicle through the second wireless communication unit.

17. The nonvolatile storage medium according to claim 15 or 16, storing a program for causing a processor to execute a vehicle operation process, The vehicle operation processing transmits an operation instruction to the vehicle when an operation for the vehicle is input via the second wireless communication unit.

18. The nonvolatile storage medium according to claim 15 or 16, storing a program for causing a processor to execute a vehicle operation process, The vehicle operation process notifies that the remaining number of the tokens is small when the communication with the server via the first wireless communication unit is disconnected and the remaining number of the tokens stored in the storage unit is equal to or smaller than a predetermined value.

19. The nonvolatile storage medium according to claim 18, storing a program for causing a processor to execute a vehicle operation process, The vehicle operation process performs the notification by displaying or outputting sound.

20. The nonvolatile storage medium according to claim 15 or 16, storing a program for causing a processor to execute a vehicle operation process, The vehicle operation process causes the storage unit to store a plurality of tokens received from the server in a state where communication with the server is possible through the first wireless communication unit.

Images