Vehicle control system

Abstract

Provided is a vehicle control system in which, in an application execution device provided in a vehicle, a function restriction appropriate for a current user can be performed without requiring a special operation by each user. The vehicle control system includes: a processing device provided in a vehicle; an application section (application program section) that implements an application program by the processing device; a function restriction judgment section that judges whether to perform a function restriction of the application section according to a key code of an electronic key used; and a function restriction application section that instructs the application section to apply a judgment result of the judgment. The function restriction judgment section judges whether to perform the function restriction of the application section according to the key code of the electronic key used at a plurality of predetermined timings from the start of use of the vehicle by a user to the end of use. The function restriction application section instructs the application section to apply the judgment result at the start of the application section and after the start, when a notification of the judgment result is received from the function restriction judgment section.

Description

TECHNICAL FIELD

[0001] The present application relates to a vehicle control system that controls an action of an application execution device, and an application execution device used in the vehicle control system, the application execution device being mounted on a vehicle and exerting various functions by executing an application program. The present application particularly relates to a vehicle control system and an application execution device used in the vehicle control system, in which, in a plurality of vehicles used by users, a part of a function provided by execution of a specific application by an application execution device can be limited according to a current user. BACKGROUND

[0002] Conventionally, a navigation device that stores and uses a personal setting of each user according to each user among a plurality of users is known (for example, refer to Patent Literature 1). In the navigation device, each user has a key having an inherent key code, and when the navigation device is used, the key code is transmitted from the key to the navigation device. The navigation device stores the received key code in a storage device thereof when the key code is not stored in the storage device, and ensures an independent storage area corresponding to the key code in the storage device, and saves the content set in the navigation device by the user in the independent storage area. On the other hand, when the key code received from the key is already stored in the storage device, the navigation device refers to the setting content saved in the independent storage area corresponding to the key code, and provides various functions to the user using the setting.

[0003] However, in a case where a plurality of users use a vehicle, an application execution device mounted on the vehicle and providing various functions to the user by executing an application program, that is, a so-called display screen audio, a connected audio, or the like, can also be used by the plurality of users. In such an application execution device, since an application accompanied by a charge such as a paid download of a music piece and an animation is also executed, it is possible that a user himself / herself of the vehicle will be requested to pay for the use of the charged application executed by a friend.

[0004] Therefore, with respect to the use of such an application execution device, it is desirable to limit the function of the executed application according to the user of the vehicle. However, if a special operation such as a key operation is required in association with a change of the user as in the above-described prior art, it is also possible that the owner who can be adversely affected must instruct the replaced user not to forget the operation. Therefore, it is desirable that, in the use of the application execution device as described above, the replacement of the user is automatically recognized, and the execution of an application accompanied by a charge or the like (and thus the function provided by the application) is limited.

[0005] PRIOR ART DOCUMENT

[0006] PATENT LITERATURE

[0007] Patent Literature 1: Japanese Patent Application Laid-Open (JP A) No. 2006-178643 SUMMARY

[0008] PROBLEMS TO BE SOLVED BY THE INVENTION

[0009] The present application has been achieved in view of the above-described background, and aims to be able to restrict, in a vehicle used by a plurality of users, a function provided by an application execution device provided in the vehicle by executing an application, without requiring a special operation by the user and without increasing a processing load of the vehicle-mounted device, according to a current user.

[0010] MEANS FOR SOLVING THE PROBLEMS

[0011] One embodiment of the present application is a vehicle control system including a processing device provided in a vehicle that can be used by each of a plurality of electronic keys, an application section implemented by executing an application program by the processing device, a function restriction judgment section that judges whether or not to perform function restriction of the application section according to a key code of the electronic key used in the vehicle, and a function restriction application section that instructs the application section to apply a result of judgment in the function restriction judgment section. The function restriction judgment section judges whether or not to perform function restriction of the application section according to the key code of the electronic key used at a plurality of predetermined timings at which any of the plurality of electronic keys is used during a period from start to end of use of the vehicle, and the function restriction application section instructs the application section to apply the result of judgment in the function restriction judgment section at a time when the application section is started and after the start, when a notification of the result of judgment from the function restriction judgment section is received.

[0012] According to another embodiment of the present application, the application section transmits, at a time when the application section is started, a notification request to the function restriction application section, the notification request instructing the function restriction application section to transmit an instruction to apply the result of judgment to itself when the function restriction application section receives a notification of the result of judgment from the function restriction judgment section after the application section is started.

[0013] According to another embodiment of the present application, the function restriction judgment section judges whether or not to perform function restriction of the application section according to whether or not a holder of the electronic key used in the vehicle is a specific user including an owner of the vehicle or a person having a predetermined relationship with the owner, or a non-specific user other than the specific user.

[0014] According to another embodiment of the present application, the key code of at least one of the electronic keys includes information indicating whether or not a holder of the electronic key is the specific user or the non-specific user.

[0015] According to another aspect of the present application, the prescribed timing includes a time when any of the plurality of electronic keys is used to start the vehicle.

[0016] According to another aspect of the present application, the prescribed timing includes a time when any of the plurality of electronic keys is used to start the vehicle.

[0017] According to another aspect of the present application, the function restriction application section measures an elapsed time after the vehicle is started, and when a result of the judgment is not received from the function restriction judgment section before a prescribed time elapses from the elapsed time, instructs the application section to apply the result of the judgment received from the function restriction judgment section before the vehicle is started.

[0018] According to another aspect of the present application, the application section instructed by the function restriction application section to apply the result of the judgment of the function restriction judgment section includes content that can incur a cost, or content related to personal information of a specific user including an owner of the vehicle or a person having a prescribed relationship with the owner.

[0019] According to another aspect of the present application, the function restriction application section constitutes a part of an operating system executed by the processing device, or constitutes middleware between the operating system and the application section, or constitutes a background application executed on the operating system.

[0020] Another aspect of the present application is an application execution device including the processing device and the function restriction application section that constitute any of the vehicle control systems described above.

[0021] Effects of the Invention

[0022] According to the present application, in a vehicle used by a plurality of users, no special operation is required by the user, and the processing load of the in-vehicle device is not increased, and the function provided by the application execution device included in the vehicle can be limited according to the current user. BRIEF DESCRIPTION OF DRAWINGS

[0023] Figure 1 FIG. 1 is a diagram showing the structure of a vehicle control system according to an embodiment of the present application.

[0024] Figure 2 FIG. 2 is a diagram showing the structure of a user management server in the vehicle control system shown in FIG. 1. Figure 1

[0025] Figure 3 FIG. 3 is a diagram showing the structure of an in-vehicle system in the vehicle control system shown in FIG. 1. Figure 1

[0026] ​​Figure 4 is a diagram illustrating Figure 2 the electronic key database held by the utilization management server.

[0027] Figure 5 is a diagram illustrating Figure 3 the flowchart of the steps of the processing in the communication control section relating to the application function restriction.

[0028] Figure 6 is a diagram illustrating Figure 5 the flowchart of the steps of the function restriction judgment processing in the flowchart.

[0029] Figure 7 is a diagram illustrating Figure 3 the flowchart of the steps of the processing in the function restriction application section of the application execution device relating to the application function restriction.

[0030] Figure 8 is a diagram illustrating Figure 3 the flowchart of the steps of the processing in the application section of the application execution device relating to the application function restriction.

[0031] Figure 9 is a sequence diagram illustrating Figure 1 the first example of the action in the vehicle control system.

[0032] Figure 10 is a sequence diagram illustrating Figure 1 the second example of the action in the vehicle control system. DETAILED DESCRIPTION

[0033] Hereinafter, an embodiment of the present application will be described with reference to the drawings.

[0034] [1. Structure of vehicle control system 100]

[0035] Figure 1 is a diagram illustrating the structure of the vehicle control system 100 of the present application. The vehicle control system 100 (hereinafter also simply referred to as system 100) is constituted by a vehicle 102 and a utilization management server 106 communicably connected with the vehicle 102 via a network 104. In the present embodiment, the vehicle 102 is, for example, an electric vehicle. Further, in the present embodiment, the network 104 is, for example, the Internet connected via a public line or the like.

[0036] In the present embodiment, the users of the vehicle 102 are classified into specific users and non-specific users. Here, the specific users include the owner 130 of the vehicle 102, and a person who has a prescribed relationship with the owner 130, and the non-specific users refer to persons other than the specific users. The prescribed relationship is, for example, a family relationship, a blood relationship, a joint purchaser of the vehicle 102, or the like, but is not limited thereto. The prescribed relationship can be defined by the owner 130 of the vehicle 102, or a prescribed group such as a company or a club to which the owner 130 belongs can be the prescribed relationship.

[0037] In the present embodiment, the vehicle 102 is used by the owner 130 who is a specific user, the family user 132 who is a family of the owner 130, and the guest users 134, 136. Further, in the present embodiment, the family user 132 is a specific user. Further, the guest users 134, 136 are, for example, non-specific users who use the vehicle 102 by borrowing it from the owner 130. In addition, all the persons who use the vehicle 102 are "users", and the "users" can include the owner 130. Therefore, in the present embodiment, the owner 130 is also included in the "users" unless specifically described.

[0038] The use management server 106 generates, with the approval of the owner 130 of the vehicle 102, an inherent electronic key of the user other than the owner 130, which contains user attribute information indicating whether the user is a specific user or a non-specific user, and transmits it to the portable terminal of the user. In addition, whether the user other than the owner 130 is a specific user or a non-specific user can be instructed by the owner 130 to the use management server 106, or the use management server 106 can determine it based on information provided by the owner 130.

[0039] Thus, the vehicle 102 is used by the family user 132, the guest users 134, 136 using the electronic keys 152, 154, 156 issued by the use management server 106 and transmitted to the portable terminals 142, 144, 146, in addition to the owner 130 using the electronic key 150 stored in the FOB key 160.

[0040] Hereinafter, the "electronic key" and the "key code" are used synonymously, and in particular, the term "key code" is used together with or separately from the term "electronic key" when it is explicitly indicated that the key code is the entity of the electronic key. Further, in the present embodiment, the "electronic key" means the key code 150 of the FOB key 160 owned by the owner 130, in addition to the electronic key issued by the use management server 106, unless specifically described.

[0041] The vehicle 102 is provided with an in-vehicle system 120. The in-vehicle system 120 is provided with an application execution device 300 (to be described later) that provides various functions to a user by executing an application. The application execution device 300 is, for example, a so-called display audio that is provided with a voice reproduction function and the like. In the system 100 of the present embodiment, in particular, the user who is not a specific user is restricted from executing a part of the application execution device 300 provided in the in-vehicle system 120 of the vehicle 102 (i.e., the application function restriction is performed).

[0042] The in-vehicle system 120 of the vehicle 102 performs the application function restriction on the application execution device 300 in accordance with the user attribute information included in the key code of the used electronic key at a plurality of predetermined timings at which the arbitrary electronic key is used during a period from the start of the use of the vehicle 102 to the end of the use. Here, the start of the use of the vehicle 102 refers to a time when the vehicle start switch 310 (to be described later) for starting the vehicle is in an off state and the door of the vehicle 102 is unlocked with no occupant getting on the vehicle, and the end of the use of the vehicle 102 refers to a time when the vehicle start switch 310 is in the off state and the door of the vehicle is locked with no occupant getting on the vehicle.

[0043] In the present embodiment, the above-described predetermined timings are, in particular, a time when the door of the vehicle 102 is unlocked using the electronic key of the arbitrary user and a time when the vehicle 102 is started using the electronic key of the arbitrary user. Here, the starting of the vehicle 102 refers to the start of the operation of the electric power supply system 312 that supplies electric power to the drive motor (not shown) that drives the wheels of the vehicle 102 as an electric vehicle.

[0044] [2. Structure of the use management server 106]

[0045] Figure 2 Fig. 1 is a diagram showing the structure of the use management server 106. The use management server 106 is provided with a processing device 200, a storage device 202, and a communication device 204. The storage device 202 is constituted by, for example, a hard disk device, and stores a user DB (DataBase) 250. The communication device 204 is a transceiver that performs wired communication and / or wireless communication for connecting the processing device 200 with the network 104.

[0046] The processing device 200 is, for example, a computer provided with a processor such as a CPU (Central Processing Unit). The processing device 200 can also be structured with a ROM (Read Only Memory) in which a program is written, a RAM (Random Access Memory) for temporarily storing data, and the like. Further, the processing device 200 is provided with a user management section 220 and an electronic key issuance section 222 as functional elements or functional units.

[0047] These functional elements provided by the processing device 200 are realized, for example, by the processing device 200 as a computer executing a program. In addition, the above computer program can be stored in advance in any storage medium that is readable by a computer. Instead, all or a part of the above functional elements provided by the processing device 200 can be constituted by hardware including one or more electronic circuit components.

[0048] [2.1 User Management Section 220]

[0049] The user management section 220 receives, from the portable terminal of the desired user who desires to use the vehicle 102, an electronic key issuance request requesting issuance of an electronic key used in use of the vehicle 102 via the communication device 204. The electronic key issuance request includes the name or the like of the desired user and user terminal information for the use management server 106 to access the portable terminal of the desired user. The user management section 220 transmits, in response to the case where the electronic key issuance request is received, a user registration approval request including the name or the like of the desired user to the portable terminal 140 of the owner 130. Here, the desired user can transmit the electronic key issuance request to the use management server 106 together with information that specifies his or her own name or the like, for example, via a browser that accesses a Web site provided by the use management server 106.

[0050] When the owner 130 approves the desired user to use the vehicle 102 with respect to the received user registration approval request, an approval response indicating the approval is transmitted from the portable terminal 140 to the use management server 106. At this time, the owner 130 inputs relationship information (for example, "family," "relative," "group A colleague," "friend," "other," and the like) indicating the relationship between the desired user and the owner 130 to the portable terminal 140. Thus, the approval response including the above relationship information input by the owner 130 is transmitted to the use management server 106.

[0051] When the user management section 220 receives the approval response of the approval of the intention from the portable terminal 140 of the owner 130, the user attribute of "specific user" or "non-specific user" is set for the desired user based on the relationship information included in the above-mentioned approval response. Here, the user management section 220 can determine the user attribute from the above-mentioned relationship information in accordance with a predetermined rule. Further, the user management section 220 generates the user ID unique to the desired user and the electronic key basic information unique thereto. Here, the electronic key basic information includes the authentication information used when the vehicle 102 performs authentication of the electronic key.

[0052] Then, the user management section 220 stores the above-mentioned generated user ID, electronic key basic information, above-mentioned set user attribute, and above-mentioned received electronic key issuance request-included user terminal information in association with each other in the user DB 250 held by the storage 202. Thereby, the user management section 220 registers the user in the user DB 250.

[0053] Further, the user management section 220 periodically transmits the electronic key basic information stored in the user DB 250 to the vehicle 102.

[0054] [2.2 User DB 250]

[0055] Figure 4 is a diagram showing an example of the user DB 250 created by the user management section 220. In the illustrated example, the user DB 250 is constituted in a table form, and includes the user ID, electronic key basic information, relationship information, user attribute, and user terminal information in order from the column on the left side of the diagram. Further, in each of the rows from the 2nd row of the illustrated table, the information of each user other than the owner 130 is described. In the 2nd to 4th rows of the illustrated table, the user ID, electronic key basic information, relationship information, user attribute, and user terminal information are shown with respect to, for example, the family user 132, the guest users 134, 136, respectively.

[0056] In addition, instead of inputting the relationship information as described above, the owner 130 can directly input the distinction of "specific user" or "non-specific user" to the portable terminal 140 with respect to the desired user shown in the user registration approval request received from the user management server 106. In this case, the user management section 220 receives the distinction of "specific user" or "non-specific user" input by the owner 130 and the above-mentioned approval response, and can set the user attribute with respect to the desired user in accordance with the distinction.

[0057] [2.3 Electronic Key Issuance Section 222]

[0058] The electronic key issuance unit 222 issues an electronic key to the registered user in response to the case where the user management unit 220 performs the registration of the user other than the owner 130 in the user DB 250. Specifically, the electronic key issuance unit 222 refers to the user DB 250, and acquires the electronic key basic information, the user attribute, and the user terminal information of the registered user. Then, the electronic key issuance unit 222 generates an electronic key including the information of the acquired electronic key basic information and user attribute, and transmits the generated electronic key to the user's portable terminal using the acquired user terminal information.

[0059] [3. Structure of the in-vehicle system 120]

[0060] Figure 3 Fig. 1 is a diagram showing the structure of the in-vehicle system 120 of the vehicle 102. The in-vehicle system 120 is provided with an application execution device 300 that executes various application programs. In the present embodiment, the application execution device 300 is, for example, a so-called display audio (DA) that has both a voice reproduction function and an image reproduction function.

[0061] Further, the in-vehicle system 120 is provided with a vehicle control unit 302 that is an electronic control device (ECU), a communication control unit 304, and a telemetry control unit (TCU) 306. These application execution device 300, vehicle control unit 302, communication control unit 304, and TCU 306 are communicably connected to each other via an in-vehicle network bus 308. Here, the in-vehicle network bus 308 is, for example, a CAN bus in accordance with the CAN (Controller Area Network) communication standard.

[0062] [3.1 Vehicle control unit 302]

[0063] The vehicle control unit 302 communicates with the FOB key 160 to detect the presence of the FOB key 160. Further, the vehicle control unit 302 detects the operation of a vehicle start switch 310, and controls the on / off of a power supply system 312 that supplies power to a drive motor (not shown) and the like of the vehicle 102. Further, the vehicle control unit 302 controls the operation of a door lock mechanism 314 that performs the locking / unlocking of the doors of the vehicle 102.

[0064] Specifically, the vehicle control section 302 is provided with a processing device 320, a wireless device 322, and a communication device 323. The wireless device 322 is a transceiver that performs close-range wireless communication with the FOB key 160. Further, the communication device 323 is, for example, a CAN transceiver that is used to communicate with other devices such as the communication control section 304 via the in-vehicle network bus 308 that is a CAN bus. The processing device 320 is, for example, a computer provided with a processor such as a CPU. The processing device 320 can also be structured with a ROM in which a program is written, a RAM for temporarily storing data, and the like. Further, the processing device 320 is provided with a start operation detection section 324, a FOB communication section 326, a power supply control section 328, and a door lock control section 330 as functional elements or functional units.

[0065] These functional elements provided by the processing device 320 are realized, for example, by the processing device 320 as a computer executing a program. Alternatively, the above-described computer program can be stored in advance in any storage medium that is readable by a computer. Instead, all or a part of the above-described functional elements provided by the processing device 320 can be constituted by hardware including one or more electronic circuit components.

[0066] [3.1.1 Start operation detection section 324]

[0067] The start operation detection section 324 transmits a FOB key detection request to the FOB communication section 326 when it is detected that the vehicle start switch 310 is turned on. Then, the start operation detection section 324 transmits a vehicle start request to the power supply control section 328 when it receives a FOB detection notification indicating that the FOB key 160 is detected from the FOB communication section 326. Then, the start operation detection section 324 transmits a vehicle start notification that does not include a key code to the communication control section 304 when it receives a power-on notification from the power supply control section 328.

[0068] On the other hand, the start operation detection section 324 transmits an electronic key authentication request to the communication control section 304 when it receives a FOB undetected notification indicating that the FOB key 160 is not detected from the FOB communication section 326. The electronic key authentication request is transmitted to the communication control section 304 in the case where the FOB is not detected because the wireless device 322 is only able to communicate with the FOB key 160 and is not able to communicate with the portable terminal 142 or the like. The start operation detection section 324 entrusts the authentication of the key code possessed by the portable terminal present in the vicinity to the communication control section 304 by transmitting the electronic key authentication request to the communication control section 304.

[0069] As described later, when there is a portable terminal that has established pairing due to being present in the vicinity, and authentication is successful based on the electronic key basic information included in the key code acquired from the portable terminal, the communication control section 304 returns an electronic key authentication result notification indicating that the electronic key authentication is successful. When the electronic key authentication result notification indicating that the electronic key authentication has been successful is received from the communication control section 304, the start operation detection section 324 sends a vehicle start request to the power supply control section 328. Then, when a power supply on notification is received from the power supply control section 328, the start operation detection section 324 sends a vehicle start notification including the key code included in the received electronic key authentication result notification to the communication control section 304.

[0070] Further, the start operation detection section 324 sends a vehicle stop request to the power supply control section 328 when it detects that the vehicle start switch 310 is turned off. Thereafter, when a power supply off notification is received from the power supply control section 328, the start operation detection section 324 sends a vehicle stop notification to the communication control section 304.

[0071] [3.1.2 FOB communication section 326]

[0072] The FOB communication section 326, in response to a case where a door unlock request including the key code 150 is received from the FOB key 160, collates the key code 150 included in the door unlock request with the authentication key code stored by itself. Then, the FOB communication section 326, when the key code 150 included in the above door unlock request and the stored authentication key code are identical, sends a door lock release instruction including the key code 150 included in the door unlock request to the door lock control section 330.

[0073] Further, the FOB communication section 326, in response to a case where a door lock request including the key code 150 is received from the FOB key 160, collates the key code 150 included in the door lock request with the authentication key code stored by itself. Then, the FOB communication section 326, when the key code 150 included in the above door lock request and the stored authentication key code are identical, sends a door lock setting instruction to the door lock control section 330.

[0074] Further, the FOB communication section 326, in response to a case where a FOB key detection request is received from the start operation detection section 324, attempts communication with the FOB key 160. Then, when communication with the FOB 160 is possible, and the key code 150 acquired from the FOB key 160 is identical to the above authentication key code, the FOB communication section 326 determines that the FOB key 160 is detected.

[0075] Further, the FOB communication section 326 transmits a FOB detection notification to the start operation detection section 324 when the FOB key 160 is detected. In addition, the FOB communication section 326 transmits a FOB non-detection notification to the start operation detection section 324 when the FOB key 160 is not detected.

[0076] [3.1.3 Power supply control section 328]

[0077] The power supply control section 328 causes the power supply system 312 to start operating when a vehicle start request is received from the start operation detection section 324. Thereby, the power supply system 312 starts supplying electric power to a drive motor (not shown) and the like of the vehicle 102, and causes the vehicle 102 to start. In addition, the power supply control section 328 transmits a power on notification to the start operation detection section 324 when causing the power supply system 312 to start operating.

[0078] Further, the power supply control section 328 transmits a power off notification to the start operation detection section 324 after causing the power supply system 312 to stop operating when a vehicle stop request is received from the start operation detection section 324.

[0079] [3.1.4 Door lock control section 330]

[0080] The door lock control section 330 causes the door lock mechanism 314 to operate to release the door lock when a door lock release instruction is received from the FOB communication section 326 or the communication control section 304. In addition, the door lock control section 330 transmits a door unlock notification not including a key code to the communication control section 304 when releasing the door lock according to the door lock release instruction from the FOB communication section 326. On the other hand, a door unlock notification including the key code included in the above-mentioned received door lock release instruction is transmitted to the communication control section 304 when releasing the door lock according to the door lock release instruction from the communication control section 304.

[0081] Further, the door lock control section 330 causes the door lock mechanism 314 to operate to set the door lock (i.e., to lock the door) when a door lock set instruction is received from the FOB communication section 326 or the communication control section 304. In addition, the door lock control section 330 transmits a door lock notification to the communication control section 304 when the door lock is set.

[0082] [3.2 Communication control section 304]

[0083] The communication control section 304 receives and stores the electronic key basic information of the users other than the owner 130, which is periodically transmitted by the use management server 106. Further, in response to a case where the door lock release request is received from the own portable terminal 142, 144, or 146 of the user other than the owner 130, such as the family user 132 or the guest user 134, 136, the communication control section 304 authenticates the key code 152, 154, 156 contained in the door lock release request, based on the above-described periodically received electronic key basic information. Then, the communication control section 304 instructs the vehicle control section 302 to release the door lock when the authentication is successful. Further, in response to a case where the electronic key authentication request is received from the vehicle control section 302, the communication control section 304 acquires the key code from the portable terminal present in the vicinity. Then, the acquired key code is authenticated based on the above-described received electronic key basic information, and the electronic key authentication result including the result of the authentication is notified to the vehicle control section 302.

[0084] Further, the communication control section 304 judges whether or not to perform the application function restriction in the application execution device 300, based on the key code contained in the door unlock notification or the vehicle start notification, when the door unlock notification or the vehicle start notification is received from the vehicle control section 302, respectively, and repeatedly sends the function restriction information as the result of the judgment to the in-vehicle network bus 308 toward the application execution device 300.

[0085] Specifically, the communication control section 304 has a processing device 340, a storage device 342, a wireless device 344, and a communication device 346. The storage device 342 is constituted by, for example, a nonvolatile memory, and stores an electronic key DB 356 for holding the electronic key basic information periodically transmitted by the use management server 106. The wireless device 344 is a transceiver for performing close-range wireless communication with the portable terminal present in the vehicle cabin or the periphery of the vehicle 102. If there is a portable terminal present in the periphery of the vehicle, the wireless device 344 attempts pairing and establishes communication with the portable terminal. Further, the communication device 346 is, for example, a CAN transceiver for performing communication with other devices such as the vehicle control section 302 via the in-vehicle network bus 308 which is a CAN bus. The processing device 340 is, for example, a computer having a processor such as a CPU. The processing device 340 can also be a structure having a ROM in which a program is written, a RAM for temporarily storing data, and the like. Further, the processing device 340 has a door operation reception section 350, an electronic key authentication section 352, and a function restriction judgment section 354 as functional elements or functional units.

[0086] These functional elements possessed by the processing device 340 are realized, for example, by the processing device 340 executing a program as a computer. In addition, the above computer program can be stored in advance in any storage medium that is readable by a computer. Alternatively, all or a part of the above functional elements possessed by the processing device 340 can be constituted by hardware including one or more electronic circuit components.

[0087] [3.2.1 Door operation reception part 350]

[0088] The door operation reception part 350 transmits an electronic key authentication request including the key code included in the door unlocking request to the electronic key authentication part 352 in response to a case where a door unlocking request including the key code 152 or the like is received from the portable terminal 142 or the like existing around the vehicle 102. Then, the door operation reception part 350 transmits a door lock release instruction including the key code included in the above door unlocking request to the vehicle control part 302 upon receiving a notification of an electronic key authentication result meaning that the electronic key authentication is qualified from the electronic key authentication part 352, and causes the door lock mechanism 314 to act to release the door lock.

[0089] In addition, the door operation reception part 350 transmits an electronic key authentication request including the key code included in the door unlocking request to the electronic key authentication part 352 in response to a case where a door unlocking request including the key code 152 or the like is received from the portable terminal 142 or the like existing around the vehicle 102. Then, the door operation reception part 350 transmits a door lock release instruction including the key code included in the above door unlocking request to the vehicle control part 302 upon receiving a notification of an electronic key authentication result meaning that the electronic key authentication is qualified from the electronic key authentication part 352, and causes the door lock mechanism 314 to act to release the door lock.

[0090] [3.2.2 Electronic key authentication part 352]

[0091] The electronic key authentication part 352 receives electronic key basic information of users other than the owner 130 transmitted periodically from the utilization management server 106, and saves it in the electronic key DB 356 stored in the storage device 342.

[0092] Further, the electronic key authentication section 352, when receiving the electronic key authentication request from the door operation accepting section 350, performs authentication of the key code included in the electronic key authentication request. Specifically, the electronic key authentication section 352 extracts the electronic key basic information from the key code included in the received electronic key authentication request, judges whether or not there is electronic key basic information that coincides with the extracted electronic key basic information among the electronic key basic information stored in the electronic key DB 356 stored in the storage device 342. Then, when there is coincident electronic key basic information, the electronic key authentication section 352 transmits an electronic key authentication result notification indicating the meaning that the electronic key authentication is qualified to the door operation accepting section 350. On the other hand, when there is no electronic key basic information that coincides with the extracted electronic key basic information among the electronic key basic information stored in the electronic key DB 356, the electronic key authentication section 352 transmits an electronic key authentication result notification indicating the meaning that the electronic key authentication is not qualified to the door operation accepting section 350.

[0093] Further, the electronic key authentication section 352, when receiving the electronic key authentication request from the door operation accepting section 350, performs authentication of the key code included in the electronic key authentication request. Specifically, the electronic key authentication section 352 extracts the electronic key basic information from the key code included in the received electronic key authentication request, judges whether or not there is electronic key basic information that coincides with the extracted electronic key basic information among the electronic key basic information stored in the electronic key DB 356 stored in the storage device 342. Then, when there is coincident electronic key basic information, the electronic key authentication section 352 transmits an electronic key authentication result notification indicating the meaning that the electronic key authentication is qualified to the door operation accepting section 350. On the other hand, when there is no electronic key basic information that coincides with the extracted electronic key basic information among the electronic key basic information stored in the electronic key DB 356, the electronic key authentication section 352 transmits an electronic key authentication result notification indicating the meaning that the electronic key authentication is not qualified to the door operation accepting section 350.

[0094] [3.2.3 Function restriction judging section 354]

[0095] The function restriction judgment section 354, upon receiving the door unlocking notification from the vehicle control section 302 and upon receiving the vehicle start notification, respectively performs a function restriction judgment process according to the received door unlocking notification or the vehicle start notification, judges whether or not to perform the application function restriction in the application execution device 300. Here, in the function restriction judgment section 354, as to the key code 150 of the FOB key 160, information that the holder of the key code 150 is the meaning of the specific user (i.e., information that the user attribute of the key code 150 is the meaning of the specific user) is given in advance.

[0096] In the function restriction judgment process, the function restriction judgment section 354 first judges whether or not the key code is contained in the above-mentioned received door unlocking notification or the vehicle start notification. Then, when the key code is not contained, it is identified that the key code used in the door unlocking or the vehicle start relating to these notifications is the key code 150 of the FOB key 160. Then, the function restriction judgment section 354 generates the function restriction information indicating "no function restriction" according to the above-mentioned information that the holder of the key code 150 is the meaning of the specific user and the above-mentioned identification that the key code used in the vehicle 102 was the key code 150.

[0097] On the other hand, when the key code is contained in the above-mentioned received door unlocking notification or the vehicle start notification, the function restriction judgment section 354 extracts the user attribute information from the key code contained in the above-mentioned received door unlocking notification or the vehicle start notification. Then, when the user attribute indicated by the extracted user attribute information is "specific user", the function restriction judgment section 354 generates the function restriction information indicating "no function restriction", and on the other hand, when the user attribute indicated by the above-mentioned extracted user attribute information is "non-specific user", the function restriction judgment section 354 generates the function restriction information indicating "function restriction". Here, the function restriction information corresponds to the result (judgment result) of the judgment as to whether or not to perform the function restriction of the application section 372a (described later) by the function restriction judgment section 354 according to the key code used in the vehicle 102.

[0098] As described above, in the present embodiment, the function restriction judgment section 354 of the communication control section 304 judges whether or not the holder of the key code used in the door unlocking of the vehicle 102 and the vehicle start is the specific user or the non-specific user according to the user attribute information contained in the key code, except for the case where the key code is the key code 150 of the FOB key 160.

[0099] After the function restriction information is generated by the above function restriction judgment processing, the function restriction judging section 354 repeatedly outputs a function restriction notification including the generated function restriction information to the in-vehicle network bus 308 with the application execution device 300 as the destination. Thereby, the application execution device 300 can receive the function restriction notification at the time of door unlocking of the vehicle 102 and at the time of vehicle start, and perform application function restriction according to the key code used in the door unlocking and the vehicle start, respectively.

[0100] In addition, when the function restriction judging section 354 receives the vehicle start notification from the vehicle control section 302, an update advance notification that is a notification of the intention that the function restriction information will be updated is output to the in-vehicle network bus 308 with the application execution device 300 as the destination, before the above function restriction judgment processing is executed. Thereafter, the function restriction judging section 354 executes the above function restriction judgment processing with the key code included in the above received vehicle start notification as the object. Then, as described above, the function restriction judging section 354 repeatedly outputs a function restriction notification including the function restriction information generated by the above function restriction judgment processing to the in-vehicle network bus 308 with the application execution device 300 as the destination.

[0101] Here, the repeated output of the function restriction notification to the in-vehicle network bus 308 can be performed, for example, by the function restriction judging section 354 writing the function restriction notification in a transmission buffer (not shown) of the communication device 346 at a prescribed time interval. For example, in the case where the in-vehicle network bus 308 is a network in accordance with the CAN standard, the function restriction information is written in the transmission buffer together with a priority ID that is defined in advance for the function restriction information, and is sent out to the in-vehicle network bus 308 in order by the communication device 346 at a timing determined by the priority ID.

[0102] [3.3 Application Execution Device 300]

[0103] The application execution device 300 automatically or according to an instruction by the user 120 or the like executes various application programs, and provides various functions to the user. In addition, the application execution device 300 receives the function restriction notification output by the communication control section 304, and notifies the function restriction information included in the received function restriction notification to an application that is in the process of starting or executing. The application interrupts the normal processing of the application in the case where the application itself is the function restriction object, and the notified function restriction information indicates "function restriction is present".

[0104] Specifically, the application execution device 300 is provided with a display device 360, an operation device 362, a processing device 364, a storage device 366, and a communication device 368. The display device 360 is, for example, a liquid crystal display device, and is controlled by the processing device 364 to display images and text. The operation device 362 is, for example, a touch panel provided on a display screen of the display device 360, and receives input operations of instructions, data, and the like from a user, and outputs information of the input operations to the processing device 364. Further, the communication device 368 is, for example, a CAN transceiver, which is used to communicate with other devices such as the communication control section 304 via the in-vehicle network bus 308 as a CAN bus.

[0105] The storage device 366 is constituted by, for example, a volatile and / or non-volatile semiconductor memory, and / or a hard disk device, and the like. The storage device 366 stores an application program executed by the processing device 364, and stores data required for processing in the processing device 364 in advance or in the process of execution.

[0106] The processing device 364 is, for example, a computer provided with a processor such as a CPU. The processing device 364 can also be structured with a ROM in which a program is written, a RAM for temporarily storing data, and the like. Further, the processing device 364 is provided with a function restriction application section 370 and application sections 372a, 372b as functional elements or functional units.

[0107] These functional elements provided in the processing device 364 are realized, for example, by the processing device 364 as a computer executing a program. In addition, the above computer program can be stored in advance in any storage medium readable by a computer.

[0108] The function restriction application section 370 can be realized as a part of an operating system (OS) program as a basic control program stored in the storage device 366 by the processing device 364 executing the OS program. More specifically, the function restriction application section 370 can be realized, for example, by attaching a dedicated API that functions as the function restriction application section 370 to a function library including a standard API provided in an OS such as Android (registered trademark) or the like. Alternatively, the function restriction application section 370 can also be realized as a part of middleware that constitutes an intermediate layer between the OS and the application sections 372a, 372b, or as a part of a background application that is executed on the OS.

[0109] The application sections 372a, 372b are so-called applications that are currently being executed in the processing device 364, which is realized, for example, by executing the corresponding application programs stored in the storage device 366 on the above-described OS, respectively. The application sections 372a, 372b provide the user with the functions described by these application programs.

[0110] The application programs executed by the processing device 364 are classified into application programs to which a function restriction is applied according to the user attribute of the key code used in the vehicle 102 (function restriction target programs) and application programs that are executed regardless of the user attribute of the key code (non-function restriction target programs). In the present embodiment, the application section 372a is a function restriction target application (hereinafter referred to as a function restriction target application) realized by a function restriction target program, and the application section 372b is a non-function restriction target application (hereinafter referred to as a non-function restriction target application) realized by a non-function restriction target program.

[0111] Here, the function restriction target application can be set, for example, as an application that contains content that can incur a charge or content that is related to personal information of a specific user. The "content that can incur a charge" refers to content that relates to, for example, the purchase of goods and services such as mail order, music download, and the like, which require payment of a remuneration. Further, the "content that is related to personal information" refers to content that relates to, for example, services that require the transmission of personal information such as an address, a name, a date of birth, a hobby, and the like of a person.

[0112] [3.3.1 Action of the function restriction application section 370]

[0113] For example, when the power of the application execution device 300 is turned on and the execution is started, first, the function restriction application section 370, which is a part of the OS, receives the function restriction information output to the in-vehicle network bus 308 from the communication control section 304 and saves it in the storage device 366. Then, the function restriction application section 370 transmits the function restriction information stored in the storage device 366 to the application section 372a, which is the transmission source of the function restriction information request, when the function restriction information request is received from the application section 372a. Here, the transmission of the function restriction information by the function restriction application section 370 to the application section 372a corresponds to the case where the application section 372a is instructed to apply the result of the judgment in the function restriction judgment section 354 (i.e., the function restriction information) on whether to perform the function restriction of the application section 372a.

[0114] Further, when the function restriction application section 370 receives the notification registration request from the application section 372a, the application section 372a, which is the transmission source of the notification registration request, is registered as the notification destination (communication object) of the function restriction information hereafter.

[0115] Further, the function restriction application section 370 sends a restriction update notification to the application section 372a that is the function restriction target application in response to the case where the communication control section 304 receives an update notification of output to the in-vehicle network bus 308, and starts measuring the elapsed time t after the reception of the update notification using a timer (not shown) provided in the processing device 364. Further, when the function restriction application section 370 receives a function restriction notification from the communication control section 304 output to the in-vehicle network bus 308 before the elapsed time t elapses for a prescribed time (for example, 3 seconds), the function restriction information stored in the storage device 366 is updated based on the function restriction information included in the received function restriction notification. Then, the function restriction application section 370 sends the updated function restriction information to the application section 372a registered as the notification destination of the function restriction information.

[0116] On the other hand, when the function restriction information is not received from the in-vehicle network bus 308 before the elapsed time t elapses for the prescribed time, the function restriction application section 370 does not update the function restriction information stored in the storage device 366, and sends the function restriction information currently stored in the storage device 366 to the application section 372a registered as the notification destination.

[0117] [3.3.2 Action of the application section 372a]

[0118] The application section 372a that is the function restriction target application is started based on an instruction from the user sent via the operation device 362, or based on an instruction given in advance to the OS. When started, the application section 372a sends a function restriction information request to the function restriction application section 370, and acquires the function restriction information from the function restriction application section 370. At the same time, the application section 372a that is the function restriction target application sends a notification registration request to the function restriction application section 370, requesting that it be registered as the notification destination (communication object) of the function restriction information in the future. Here, the above notification registration request corresponds to a notification request that instructs that, when the function restriction application section 370 receives a notification of the result of the judgment (corresponding to the function restriction notification) from the function restriction judgment section 354 after the application section 372a is started, an instruction to apply the result of the judgment (i.e., the function restriction information) is sent to itself.

[0119] Then, when the above-mentioned function restriction information received from the function restriction application part 370 in response to the function restriction information request indicates "function restriction," the application part 372a interrupts execution of the normal processing for providing the function of the application part 372a as it is. Then, the application part 372a displays a function restriction message indicating that the function is restricted, such as "This application is restricted," on the display device 360. On the other hand, when the function restriction information acquired from the function restriction application part 370 at the start indicates "no function restriction," the application part 372a continues the above-mentioned normal processing, and provides the user with the function of the application part 372a as it is.

[0120] Further, when the application part 372a receives the restriction update advance notice from the function restriction application part 370, a "please wait" waiting machine message is displayed on the display device 360. At this time, the application part 372a interrupts the execution of the normal processing while the normal processing is being executed.

[0121] Then, when the function restriction information is received from the function restriction application part 370 after the update advance notice is received, the application part 372a displays a function restriction message or executes the normal processing in response to the received function restriction information. That is, when the received function restriction information indicates "function restriction," the application part 372a displays a function restriction message on the display device 360, and if the normal processing is being executed, interrupts the execution, or if the execution of the normal processing has been interrupted, continues the interruption. On the other hand, when the received function restriction information indicates "no function restriction," if the normal processing is being executed, the application part 372a continues the execution, and if a function restriction message is displayed, the application part 372a ends the display and starts the normal processing.

[0122] [3.3.3 Action of the application part 372b]

[0123] The application part 372b, which is not a function restriction target application, does not request the function restriction information from the function restriction application part 370, but starts the normal processing on the OS immediately after the application part 372b is started, as in the prior art.

[0124] [4. Effects of the vehicle control system 100]

[0125] The vehicle control system 100 having the above-described structure performs function restriction of an application in the application execution device 300 provided in the vehicle 102, in accordance with the user attribute associated with the electronic key used in the door unlocking of the vehicle 102 and / or the vehicle start. Therefore, in the system 100, no special key operation is required by the user, and no increase in processing load of the in-vehicle devices such as the application execution device 300, the vehicle control section 302, the communication control section 304, and the like is caused, and the function provided to the user by the execution of the application by the application execution device 300 can be automatically restricted in accordance with the current user of the vehicle 102. Further, in the vehicle control system 100, the application restriction is performed in accordance with the two user attributes of "specific user" and "non-specific user", and therefore, the application restriction function can be realized with only a minimum storage device. Therefore, the cost due to the addition of the application restriction function can be reduced.

[0126] Generally, in the case of an internal combustion engine vehicle that drives the wheels using only an internal combustion engine, even if the power supply of an electrical device such as an application execution device that is a display screen audio is turned on before the internal combustion engine is started, at the time of the start of the internal combustion engine (i.e., at the time of the start of the vehicle), in order to secure the power supply to the motor used in the kickback start, the power supply of these electrical devices is also turned on after being temporarily turned off. Therefore, in the internal combustion engine vehicle, if the user attribute of the electronic key of the user of the vehicle is judged only when the power supply of the application execution device is turned on, and it is determined whether or not the application function restriction is required, appropriate application restriction that is appropriate for the user of the vehicle can be performed.

[0127] On the other hand, in the case of the vehicle 102 being an electric vehicle as in the present embodiment, the application execution device 300 whose power supply is turned on before the start of the supply of power to the motor for driving the wheels (i.e., the start of the vehicle) is maintained in the state where the power supply is turned on at the time of the start of the vehicle. Therefore, if the user attribute of the electronic key of the user of the vehicle is judged only when the power supply of the application execution device 300 is turned on, and it is determined whether or not the application function restriction is required, in the case where the user of the vehicle is replaced during the period from the door unlocking to the start of the vehicle, a situation where appropriate application restriction that is appropriate for the current user of the vehicle cannot be performed can occur. Such replacement of the user of the vehicle can occur, for example, in the case where the guest user 134 who is a non-specific user uses the electronic key to unlock the door of the vehicle 102, and then the owner 130 uses the FOB key 160 to start the vehicle.

[0128] On the other hand, in the vehicle control system 100, at the time of door unlocking of the vehicle 102 and at the time of vehicle start of the vehicle 102, it is judged whether or not the application function restriction in the application execution device 300 needs to be applied in accordance with the user attribute of the electronic key used at the door unlocking and at the vehicle start, respectively. Therefore, in the system 100, even in the case where the user of the vehicle 102 is changed during the period from the door unlocking to the vehicle start, appropriate application function restriction in accordance with the current user can be performed.

[0129] Further, in the vehicle control system 100 of the present embodiment, until a predetermined time elapses from the update notification after the vehicle start, in the case where the function restriction judging section 354 does not receive new function restriction information from the communication control section 304, the state of the application function restriction based on the function restriction information received before (i.e., in accordance with the user having used the key code before) continues. Thus, in the system 100, the user's discomfort caused by the application restriction in accordance with the current user being reflected after the vehicle start with delay is avoided.

[0130] The reception delay of such function restriction information can occur, for example, in the case where, in a special situation where the communication of information having higher priority is generated on the in-vehicle network bus 308 at a high frequency in order to cope with some kind of abnormality at the time of vehicle start, the output of function restriction information having lower priority is held for a long time. In this case, as an abnormality-time coping operation, for example, the current user who is the owner 130 of the specific user can cancel the state of the application function restriction set at the time of the previous door unlocking by restarting the application section 372a after a lapse of a certain time after the vehicle start. This is because, as described above, the application section 372a after the start transmits a function restriction information request to the function restriction application section 370 at the time of the start, acquires new function restriction information, and performs function restriction in accordance with the acquired function restriction information.

[0131] [5. Vehicle control system 100]

[0132] Next, the processing in the function restriction judging section 354 of the communication control section 304 and the application execution device 300 related to the application function restriction will be described.

[0133] [5.1 Processing in the communication control section 304]

[0134] First, the function restriction judging section 354 of the communication control section 304 uses the function restriction information received from the function restriction application section 370 to judge whether or not the application function restriction needs to be applied in accordance with the user attribute of the electronic key used at the door unlocking and at the vehicle start. Figure 5The flowchart shown explains the processing in the function restriction judging section 354 of the communication control section 304, which involves application function restriction. This processing starts when the power of the communication control section 304 is turned on, and ends when the power of the communication control section 304 is turned off. The communication control section 304, for example, has its power turned on at the time of shipment of the vehicle 102, and maintains the state of the power being on during the period in which the operation of the power supply system 312 of the vehicle 102 is not started.

[0135] In Figure 5 When the processing is started, first, the function restriction judging section 354 of the communication control section 304 judges whether or not a door opening notification including a key code is received from the vehicle control section 302 (S100). Then, when a door opening notification is not received from the vehicle control section 302 (S100, "No"), the processing is repeated by returning to step S100. On the other hand, when a door opening notification is received from the vehicle control section 302 (S100, "Yes"), the function restriction judging section 354 executes the function restriction judging processing (S102) with the received door opening notification as the "processing target".

[0136] Figure 6 is a flowchart showing the steps of the function restriction judging processing. In the function restriction judging processing, the function restriction judging section 354 first judges whether or not a key code is included in the notification that is the above-described processing target (S200). Then, when a key code is not included (S202, "No"), it is judged that a key code 150 having the user attribute of "specific user" is used (S202), function restriction information indicating "no function restriction" is generated (S204), and the function restriction judging processing is ended.

[0137] On the other hand, when a key code is included in the notification that is the above-described processing target in step S200 (S200, "Yes"), the function restriction judging section 354 extracts the user attribute information from the key code, and acquires the user attribute (S206). Next, the function restriction judging section 354 judges whether or not the acquired user attribute is "non-specific user" (S208). Then, when the user attribute is "non-specific user" (S208, "Yes"), the function restriction judging section 354 generates function restriction information indicating "function restriction", and ends the function restriction judging processing. On the other hand, when the above-described acquired user attribute is "specific user" (S208, "No"), the function restriction judging section 354 causes the processing to branch to step S204, generates function restriction information indicating "no function restriction", and ends the processing.

[0138] Returning to Figure 5After performing the function limitation determination process in step S102, the function limitation determination unit 354 begins to output a function limitation notification (S104) containing the function limitation information generated in the function limitation determination process to the communication device 346, and repeatedly outputs the function limitation notification to the communication device 346. For example, the output function limitation notification is stored in, for example, a transmission buffer (not shown) of the communication device 346, and is output by the communication device 346 to the vehicle network bus 308 at an appropriate time based on the priority ID given to the function limitation notification.

[0139] Next, the function limitation determination unit 354 determines whether a vehicle start notification containing the key code has been received from the vehicle control unit 302 (S106). Then, when the vehicle start notification is received from the vehicle control unit 302 (S106: "Yes"), the function limitation determination unit 354 outputs an update warning notification to the communication device 346 (S108). The output update warning notification is stored, for example, in the transmission buffer of the communication device 346 and output to the vehicle network bus 308 by the communication device 346 at an appropriate time. In addition, it is preferable to set the priority ID of the update warning notification to a priority at least the same as or higher than that of the function limitation notification, so that even if the communication frequency of higher priority information in the vehicle network bus 308 increases, it can be sent to the vehicle network bus within a specified time after being stored in the transmission buffer.

[0140] Next, the function limitation determination unit 354 compares the key code contained in the received vehicle start notification with the function limitation determination unit 354 and executes the function limitation determination unit 354. Figure 5 The function limitation determination process (S110) shown begins by outputting a function limitation notification (S112) containing function limitation information generated through the function limitation determination process to the communication device 346, and repeatedly outputs this function limitation notification to the communication device 346. Each output function limitation notification, like the function limitation information output in step S110, is stored, for example, in the transmission buffer (not shown) of the communication device 346, and is output by the communication device 346 to the vehicle network bus 308 at an appropriate time based on the priority ID given to the function limitation notification.

[0141] Therefore, the function restriction information is updated based on the key code used to start the vehicle 102, and a function restriction notification containing the updated function restriction information is output to the vehicle network bus 308. Then, the application execution device 300 that receives the output function restriction notification performs the processing described later, thereby implementing application function restrictions adapted to the current user.

[0142] Next, the function limitation determination unit 354 determines whether a vehicle stop notification has been received from the vehicle control unit 302 (S114). If no vehicle stop notification has been received (S114: "No"), the process returns to step S114 and waits for a vehicle stop notification to be received.

[0143] On the other hand, when a vehicle stop notification is received from the vehicle control unit 302 in step S114 (S114, "Yes"), the function limitation determination unit 354 determines whether a door lock notification has been received from the vehicle control unit 302 (S116). Then, if no door lock notification is received from the vehicle control unit 302 (S116, "No"), the door operation acceptance unit 350 returns the processing to step S106.

[0144] On the other hand, when a door lock notification is received from the vehicle control unit 302 (S116: "Yes"), that is, when the vehicle 102 is not started and the door is locked, the function limitation determination unit 354 determines that the use of the vehicle 102 has ended, returns to step S100, and waits for the next use of the vehicle.

[0145] [5.2 Processing in the application execution device 300]

[0146] Next, the processing involving application function restrictions in the application execution device 300 will be described. This processing consists, for example, of the processing in the function restriction application unit 370, which is implemented as part of the OS, and the processing in the application unit 372a, which is the application subject to function restrictions.

[0147] [5.2.1 Processing in the Functional Limitation Application Unit 370]

[0148] First, according to Figure 7 The flowchart shown illustrates the processing related to application function restrictions in the function restriction application unit 370. This processing begins when the power to the application execution device 300 is turned on and the execution of the OS program in the processing device 364 begins, and ends when the execution of the OS program ends. Furthermore, in this embodiment, the function restriction target application currently executing in the application execution device 300 is only application unit 372a; therefore, the function restriction application unit 370 performs this processing related to application function restrictions only on application unit 372a as described below. However, multiple function restriction target applications can be executed in parallel in the application execution device 300. In this case, the function restriction application unit 370 can perform the following processing for each of these multiple function restriction target applications executed in parallel.

[0149] When the processing is started, first, the function restriction application section 370 receives the function restriction notification outputted by the communication control section 304 from the in-vehicle network bus 308 (S300), and stores the function restriction information included in the received function restriction notification in the storage device 366 (S302). Next, the function restriction application section 370 judges whether or not a function restriction information request is received from the application section 372a that is an application section of which the function restriction is an object (S304). Then, when the function restriction information request is not received from the application section 372a (S304: Yes), the function restriction application section 370 shifts the processing to the step S312 described later, and judges whether or not an update notice outputted by the communication control section 304 is received.

[0150] On the other hand, when the function restriction information request is received from the application section 372a (S304: Yes), the function restriction application section 370 transmits the function restriction information stored in the storage device 366 to the application section 372a that is a transmission source of the function restriction information request (S306). Further, the function restriction application section 370 stores and registers the application section 372a that is a transmission source of the notification registration request as a notification object of the function restriction information hereafter in the storage device 366 in response to the case where the notification registration request is received from the application section 372a (S308) (S310).

[0151] Next, the function restriction application section 370 judges whether or not an update notice outputted by the communication control section 304 is received from the in-vehicle network bus 308 (S312). Then, when the update notice is received (S312: Yes), the elapsed time t after the update notice is received is started to be measured (S314), and the application section 372a registered as a notification object in the step S310 is transmitted the restriction update notice (S316).

[0152] Next, the function restriction application section 370 judges whether or not a function restriction notification outputted by the communication control section 304 is received from the in-vehicle network bus 308 (S318). Then, when the function restriction notification is received (S318: Yes), the function restriction application section 370 updates the function restriction information stored in the storage device 366 based on the function restriction information included in the received function restriction notification (S320).

[0153] Next, the function restriction application section 370 transmits the updated function restriction information to the application section 372a registered as a notification object in the step S310 (S322), and returns to the step S300, and the processing is repeated.

[0154] On the other hand, if no function restriction information is received in step S318 (S318, "No"), the function restriction application unit 370 determines whether the elapsed time t has exceeded a predetermined time (S324). Then, if the elapsed time t has not exceeded the predetermined time (S324, "No"), the function restriction application unit 370 returns to step S318 and waits for the function restriction information to be received. On the other hand, if the elapsed time t has exceeded the predetermined time (S324, "Yes"), the function restriction application unit 370 does not update the function restriction information stored in the storage device 366, but instead sends the function restriction information currently stored in the storage device 366 to the application unit 372a registered as the notification recipient (S326), and returns to step S300, repeating the process.

[0155] [5.2.2 Processing in Application Unit 372a]

[0156] Next, according to Figure 8 The flowchart shown illustrates the processing related to application function restrictions in application unit 372a, which is an application subject to function restrictions. In this processing, for example, when application unit 372a, which is an application subject to function restrictions, is launched by the user through operation of the operating device 362 of the application execution device 300, or according to instructions given in advance by the OS program executed by the processing device 364 of the application execution device 300, operation begins in application unit 372a. Furthermore, when multiple application units that are application units subject to function restrictions are executed in parallel in the application execution device 300, this processing is performed in each of these parallel-executed application units.

[0157] When processing begins, application unit 372a sends a function restriction information request to function restriction application unit 370 (S400) and a notification registration request to function restriction application unit 370 (S402). Next, application unit 372a determines whether it has received function restriction information sent by function restriction application unit 370 as a response to the function restriction information request (S404). Then, if no function restriction information is received, application unit 372a returns to step S404 and waits for the function restriction information to be received.

[0158] On the other hand, when a function restriction message is received (S404, "Yes"), the application unit 372a determines whether the received function restriction message indicates "there is a function restriction" (S406). Then, when the received function restriction message indicates "there is a function restriction" (S406, "Yes"), the application unit 372a displays the function restriction message on the display device 360 ​​(S408) and interrupts the execution of normal processing for providing the original function of the application unit 372a, other than the display of the function restriction message (S410).

[0159] After that, the application section 372a determines whether or not the restriction update advance notice is received (S412), and when the restriction update advance notice is not received, returns to step S412 and waits for the reception of the restriction update advance notice. On the other hand, when the restriction update advance notice is received (S412: "Yes"), the application section 372a displays the standby message on the display device 360 (S414) and then returns to step S404 and waits for the reception of the function restriction information.

[0160] Further, on the other hand, when the acquired function restriction information indicates "no function restriction" in step S406 (S406: "No"), the application section 372a causes the processing to branch to step S412 after starting the execution of the normal processing (S416) and waits for the reception of the restriction update advance notice.

[0161] [6. Action example of vehicle control system 100]

[0162] Next, as examples of the action of the vehicle control system 100, two examples of cases in which the user who performed the door unlocking of the vehicle 102 and the user who performed the vehicle start are different are described.

[0163] [6.1 First example]

[0164] Use Figure 9 The first action example of the vehicle control system 100 is described using the sequence chart shown in FIG. 12. In this example, first, the guest user 134 whose user ID is given as Pt-3 in the user DB 250 shown in FIG. 11 uses the key code 154 ("VK003") stored in the portable terminal 144 to perform the door unlocking of the vehicle 102. Then, after the guest user 134 turns on the power of the application execution device 300 and starts the application section 372a as the function restriction target application, the owner 130 as the specific user performs the vehicle start using the FOB key 160. Figure 4 In FIG. 12, as targets, the vehicle control section 302, the portable terminal 144 of the guest user 134, the communication control section 304, the function restriction application section 370 of the application execution device 300, and the application section 372a as the function restriction target application are shown. The power of the vehicle control section 302 and the communication control section 304 has been turned on.

[0165] Figure 9

[0166] ​​First, when the guest user 134 stands in front of the door of the vehicle 102 and transmits a door unlocking request from the portable terminal 144 (S500), the communication control section 304 confirms that the key code 154 included in the door unlocking request has been registered by the electronic key authentication section 352 (S502), and transmits a door lock release instruction to the vehicle control section 302 through the door operation accepting section 350 (S504).

[0167] The vehicle control section 302 unlocks the door by the door lock control section 330 (S506), and transmits a door unlocking notification to the communication control section 304 (S508). The communication control section 304 subjects the door unlocking notification to the function restriction judgment by the function restriction judgment section 354 (S510). The function restriction judgment section 354 determines that the user attribute is "non-specific user" from the user attribute information of the key code 154 included in the door unlocking notification, and generates function restriction information indicating "function restriction".

[0168] Next, the function restriction judgment section 354 of the communication control section 304 repeatedly outputs a function restriction notification including the above-mentioned generated function restriction information to the communication device 346. Thereby, the function restriction notification is output to the in-vehicle network bus 308 by the communication device 346 (S512). In addition, the illustrated dotted line shows a case where the function restriction notification is repeatedly output.

[0169] After that, when the power of the application execution device 300 is turned on (S514), the function restriction application section 370 of the application execution device 300 starts to operate. After the operation starts, the function restriction application section 370 receives the function restriction notification repeatedly output to the in-vehicle network bus 308 by the communication control section 304, and stores the function restriction information included in the received function restriction notification in the storage device 366 (S516).

[0170] Further, after that, for example, the application section 372a is started as a function restriction target application by the guest user 134 giving a start instruction of the application section 372a to the operation device 362 of the application execution device 300 (S518) (S520). The started application section 372a transmits a function restriction information request to the function restriction application section 370 (S522), and the function restriction application section 370 transmits the function restriction information stored in the storage device 366 to the application section 372a (S524). In addition, the application section 372a transmits a notification registration request to the function restriction application section 370, the notification registration request requesting to register itself as a notification target of the function restriction information to be updated later (S526), and the function restriction application section 370 registers the application section 372a as the notification target (S528).

[0171] Next, the application section 372a displays a function restriction message on the display device 360 in response to a case where the function restriction information indicating "function restriction" transmitted in the sequence S524 is received (S530), and interrupts execution of the normal process (S532).

[0172] After that, when the owner 130 takes the FOB key 160 into the vehicle 102 and turns on the vehicle start switch 310 (S534), the start operation detection section 324 of the vehicle control section 302 performs a search for the FOB key 160 and detects the FOB key 160 (S536). As a result, the power supply control section 328 of the vehicle control section 302 turns on the power supply system 312 and starts power supply (S538), and the start operation detection section 324 transmits a vehicle start notification to the communication control section 304 (S540).

[0173] The function restriction judgment section 354 of the communication control section 304 transmits an update notification in advance to the application execution device 300 in response to a case where the vehicle start notification is received (S542), and starts a function restriction judgment process with the above-mentioned received vehicle start notification as an object (S544). The function restriction application section 370 of the application execution device 300 transmits a restriction update notification to the application section 372a registered as a notification object in the sequence S530 in response to a case where the update notification in advance is received from the communication control section 304 (S546), and starts measuring the elapsed time t after the update notification in advance is received (S548). The application section 372a displays a standby message on the display device 360 in place of the function restriction message in response to a case where the restriction update notification is received (S550).

[0174] Then, before the elapsed time t elapses for a prescribed time, the communication control section 304 sends out a function restriction notification containing new function restriction information to the vehicle-mounted network bus 308 through the function restriction judgment section 354 (S552), and the function restriction application section 370 updates the function restriction information stored in the storage device 366 according to the function restriction information contained in the function restriction notification when the notification is received (S554). Then, the updated function restriction information is transmitted to the application section 372a registered as a notification object in the sequence S530 (S556).

[0175] Here, since the key code is not included in the vehicle start notification transmitted in the sequence S540, in the function restriction judgment in the sequence S544, it is judged that the vehicle start is performed by the FOB key 160, and based on the pre-given information that the user attribute of the key code 150 possessed by the FOB key 160 is "specific user", the function restriction information indicating "no function restriction" is generated. Therefore, in the sequence S554, the function restriction information stored in the storage device 366 is updated based on the function restriction information indicating "no function restriction".

[0176] The application part 372a, in response to the case where the updated function restriction information, i.e., the function restriction information indicating "no function restriction" is received, deletes the standby message displayed on the display device 360 (S558), and starts the normal processing (S560).

[0177] On the other hand, when the function restriction notification is not received from the communication control part 304 before the elapse of the prescribed time at the elapse time t due to the load condition of the in-vehicle network bus 308 or the like, the function restriction application part 370 transmits the previous function restriction information, i.e., the function restriction information indicating "function restriction" stored in the storage device 366 to the application part 372a registered as the notification object in the sequence S530 (S562). The application part 372a, in response to the case where this function restriction information is received, displays the function restriction message on the display device 360 in place of the standby message, and continues the interruption of the normal processing (S564).

[0178] According to the above sequence, during the period from the door unlocking by the guest user 134 to the vehicle start, the guest user 134 who is the user of the vehicle 102 during the period is restricted from executing the application part 372a in the application execution device 300. Further, after the vehicle start by the owner 130, the owner 130 who is the user of the vehicle 102 after that is not restricted from executing the application part 372a in the application execution device 300. Further, even after the vehicle start by the owner 130, in the case where the function restriction judgment part 354 delays the application of the function restriction judgment to the application part 372a for more than the prescribed time due to the load condition of the in-vehicle network bus 308 or the like, the state of the application function restriction in the application execution device 300 is not changed, so that the case where the owner 130 who is the current user is given the discomfort caused by the delay is avoided.

[0179] [6.2 Second Example]

[0180] Next, using Figure 10The sequence diagram shown explains a second example of the action of the vehicle control system 100 in a case where the user who performed the door unlocking of the vehicle 102 and the user who performed the vehicle start of the vehicle 102 are different.

[0181] In this example, first, after the owner 130, who is the specific user, unlocked the door of the vehicle 102 using the key code 150 of the FOB key 160, turned on the power of the application execution device 300, and started the application part 372a, which is the function restriction target application, the owner 130 turned on the power of the portable terminal 144 and started the application part 372b, which is the function restriction application, using the key code 150 of the FOB key 160. Figure 4 The guest user 134, whose user ID is given as Pt-3 in the user DB 250 shown, gets on the vehicle 102. After that, the guest user 134 performs the vehicle start using the key code 154 "VK002" stored in the portable terminal 144.

[0182] In Figure 10 In the same way as in Figure 9 Also, as targets, the vehicle control part 302, the portable terminal 144 of the guest user 134, the communication control part 304, the function restriction application part 370 of the application execution device 300, and the application part 372a, which is the function restriction target application, are shown. The power of the vehicle control part 302 and the communication control part 304 has already been turned on.

[0183] When the owner 130 stands in front of the door of the vehicle 102 and transmits a door unlocking request from the FOB key 160 to the vehicle 102 (S600), the FOB communication part 326 of the vehicle control part 302 judges that the FOB key 160 is valid by collating the key code 150 of the FOB key 160 included in the received door unlocking request with the authentication key code stored by itself. Then, the FOB communication part 326 instructs the door lock control part 330 to unlock the door (S602). Then, the door lock control part 330 of the vehicle control part 302 transmits a door unlocking notification not including the key code to the communication control part 304 (S604).

[0184] The communication control part 304, which received the door unlocking notification, subjects the door unlocking notification to the function restriction judgment by the function restriction judgment part 354 (S606). Since the door unlocking notification does not include the key code, the function restriction judgment part 354 recognizes that the key code used for the door unlocking is the key code 150 of the FOB key 160. Then, the function restriction judgment part 354 generates the function restriction information indicating "no function restriction" based on the information given in advance that the user attribute associated with the key code 150 is "specific user".

[0185] Next, the function restriction judgment section 354 of the communication control section 304 repeatedly outputs a function restriction notification including the above-mentioned generated function restriction information to the communication device 346. Thereby, the function restriction notification is output to the in-vehicle network bus 308 by the communication device 346 (S608). In addition, the illustrated dotted line shows a case where the function restriction notification is repeatedly output.

[0186] After that, when the power of the application execution device 300 is turned on (S610), the function restriction application section 370 of the application execution device 300 starts operation. After the start of the operation, the function restriction application section 370 receives the function restriction notification repeatedly output to the in-vehicle network bus 308 by the communication control section 304, and stores the function restriction information included in the received function restriction notification in the storage device 366 (S612).

[0187] Further, after that, for example, the application section 372a is started as a function restriction target application by giving a start instruction of the application section 372a to the operation device 362 of the application execution device 300 by the owner 130 (S614) (S616). The started application section 372a transmits a function restriction information request to the function restriction application section 370 (S618), and the function restriction application section 370 transmits the function restriction information stored in the storage device 366 to the application section 372a (S620). In addition, the application section 372a transmits a notification registration request to the function restriction application section 370, the notification registration request requesting registration of itself as a notification target of the function restriction information to be updated later (S622), and the function restriction application section 370 registers the application section 372a as a notification target (S624).

[0188] Next, the application section 372a, in response to a case where the function restriction information indicating "no function restriction" transmitted in sequence S620 is received, does not perform function restriction, and continues normal processing (S626).

[0189] Later, the guest user 134 gets in the vehicle 102 with the portable terminal 144, and the owner 130 gets out of the vehicle 102 while holding the FOB key 160, and leaves the vehicle 102 to the guest user 134.

[0190] After that, the guest user 134 turns on the vehicle start switch 310 in order to start the vehicle 102 (S628). In response to a case where the vehicle start switch 310 is turned on, first, the FOB communication section 326 of the vehicle control section 302 performs search for the FOB key 160, but the FOB key 160 is not detected (S630). Therefore, the start operation detection section 324 of the vehicle control section 302 transmits an electronic key authentication request (S632), and entrusts the communication control section 304 to perform authentication of the key code possessed by the portable terminal existing in the vicinity.

[0191] The communication control section 304 that received the electronic key authentication request from the vehicle control section 302 acquires the key code 154 from the portable terminal 144 present in the cabin of the vehicle 102 with the electronic key authentication section 352, and performs the key authentication process (S634). The electronic key authentication section 352 refers to the electronic key DB 356 of the storage device 342, finds the electronic key basic information that coincides with the electronic key basic information "VK002" of the key code 154 of the portable terminal 144 within the electronic key DB 356, and transmits an electronic key authentication result notification that indicates that the electronic key authentication is successful to the vehicle control section 302 (S636). In response to the case where this electronic key authentication result notification is received, the start operation detection section 324 of the vehicle control section 302 instructs the power supply control section 328 to start the operation of the power supply system 312 (S638), and transmits a vehicle start notification to the communication control section 304 (S640).

[0192] The function restriction judgment section 354 of the communication control section 304, in response to the case where the vehicle start notification is received, transmits an update advance notification to the application execution device 300 (S642), and starts the function restriction judgment process according to the key code 154 included in the vehicle start notification (S644). The function restriction application section 370 of the application execution device 300, in response to the case where the update advance notification is received from the communication control section 304, transmits a restriction update advance notification to the application section 372a registered as a notification object in sequence S530 (S646), and starts the measurement of the elapsed time t after the update advance notification is received (S648). The application section 372a, in response to the case where the restriction update advance notification is received, displays a standby message on the display device 360 (S650).

[0193] Then, before the elapsed time t elapses for the prescribed time, the communication control section 304 sends out a function restriction notification that includes new function restriction information to the in-vehicle network bus 308 through the function restriction judgment section 354 (S652), and the function restriction application section 370, upon receiving this function restriction notification, updates the function restriction information stored by the storage device 366 according to the function restriction information included in the function restriction notification (S654). Then, the updated function restriction information is transmitted to the application section 372a registered as a notification object in sequence S624 (S656).

[0194] Here, the key code included in the vehicle start notification transmitted in the sequence S640 is the key code 154 of the portable terminal 144 associated with the user attribute "non-specific user", and therefore, in the function restriction judgment of the sequence S644, function restriction information indicating "function restriction" is generated. Therefore, in the sequence S654, the function restriction information stored in the storage device 366 is updated according to the function restriction information indicating "function restriction".

[0195] The application part 372a displays a function restriction message on the display device 360 (S658) and interrupts the normal processing (S660) in response to the case where the updated function restriction information, i.e., the function restriction information indicating "function restriction" is received.

[0196] On the other hand, when the function restriction notification is not received from the communication control part 304 before the elapse of the prescribed time at the elapse time t due to the load condition of the in-vehicle network bus 308 or the like, the function restriction application part 370 transmits the previous function restriction information, i.e., the function restriction information indicating "no function restriction" stored in the storage device 366 to the application part 372a registered as the notification object in the sequence S624 (S662). The application part 372a deletes the display of the standby message on the display device 360 and continues the normal processing (S664) in response to the case where the function restriction information is received.

[0197] According to the above sequence, during the period from the door unlocking by the owner 130 to the vehicle start by the owner 130, the owner 130 who is the user of the vehicle 102 during the period is not restricted from executing the application in the application execution device 300. Further, after the vehicle 102 is started by the guest user 134 thereafter, the function restriction of the application part 372a in the application execution device 300 is performed on the guest user 134 who is the user of the vehicle 102 thereafter. Further, even in the case where the function restriction judgment part 354 delays the function restriction judgment of the application part 372a by more than the prescribed time due to the load condition of the in-vehicle network bus 308 or the like after the vehicle start by the guest user 134, the state of the function restriction of the application in the application execution device 300 is not changed, and therefore, the case where the guest user 134 who is the current user feels discomfort due to the delay is avoided.

[0198] [7. SUMMARY]

[0199] As described above, the vehicle control system 100 of this embodiment is provided with a processing device 364 provided in the vehicle 102 that can be used using each of a plurality of electronic keys 150 and the like, and application sections 372a, 372b realized by the processing device 364 executing an application program. Further, the vehicle control system 100 is provided with a function restriction judgment section 354 that judges whether or not to perform function restriction of the application section 372a that is an object of function restriction, based on a key code of the electronic key 150 and the like used in the vehicle 102. Further, the vehicle control system 100 is provided with a function restriction application section 370 that instructs the application section 372a and the like to apply function restriction information that is a result of judgment of the function restriction judgment section 354.

[0200] Further, the function restriction judgment section 354 judges whether or not to perform function restriction of the application section 372a that is an object of function restriction, based on a key code of any one of the electronic keys 150 and the like used in the vehicle 102, at a plurality of predetermined timings during a period from start of use to end of use of the vehicle 102. Further, the function restriction application section 370 transmits the function restriction information to the application section 372a at the time of start of the application section 372a, and at the time of receiving a function restriction notification that is a notification of the above-mentioned result of judgment from the function restriction judgment section 354 after the start, and instructs the application section 372a to apply the above-mentioned result of judgment of the function restriction judgment section 354.

[0201] According to this structure, it is not necessary to perform a special key operation by the user, and it does not cause an increase in processing load of the in-vehicle device such as the application execution device 300, the vehicle control section 302, the communication control section 304, and the like, and it is possible to automatically restrict a function provided to the user by execution of the application section 372a of the application execution device 300, according to the current user of the vehicle 102.

[0202] Further, in the vehicle control system 100, the application section 372a transmits a notification request that instructs transmission of function restriction information that instructs application of a result of judgment to itself, to the function restriction application section 370 at the time of start of the application section 372a.

[0203] According to this structure, for example, in the case where a plurality of application sections are started, the function restriction application section 370 does not transmit a function restriction notification received thereafter to all of the application sections, but transmits only to the application section that transmitted the above-mentioned notification request, and thus it does not cause an increase in processing load, and it is possible to continue function restriction of the application.

[0204] Further, in the vehicle control system 100, the function restriction judgment section 354 judges whether or not to perform the function restriction of the application section 372a, depending on whether or not the holder of the electronic key 150 or the like used in the vehicle 102 is the owner 130 of the vehicle 102 or a person having a prescribed relationship with the owner 130, i.e., a specific user, or is a non-specific user other than the specific user.

[0205] According to this structure, whether or not to perform the application function restriction is judged depending on whether the user is a specific user or a non-specific user, so the function restriction judgment section 354 does not need to perform a complicated judgment, and thus the processing load does not increase, and the application function restriction can be performed in accordance with the user of the vehicle 102.

[0206] Further, in the vehicle control system 100, the key code of the electronic key 152 or the like of the family user 132 or the like other than the electronic key 150 of the FOB key 160 owned by the owner 130 includes information indicating whether the holder of the electronic key is a specific user or a non-specific user. According to this structure, the function restriction judgment section 354 can judge whether the user of the key code is a specific user or a non-specific user from the key code itself, and thus the processing load can be reduced.

[0207] Further, in the vehicle control system 100, the above prescribed timing includes a time when any one of the plurality of electronic keys 150 or the like is used to unlock the door of the vehicle 102. According to this structure, the application function restriction in accordance with the user who starts using the vehicle can be started first based on the key code used in the door unlocking at the initial stage of the use of the vehicle.

[0208] Further, in the vehicle control system 100, the above prescribed timing includes a time when any one of the plurality of electronic keys 150 or the like is used to start the vehicle 102. According to this structure, at the start of the travel of the vehicle 102, the application function restriction in accordance with the predetermined user who performs the travel or the application restriction in accordance with the user can be switched to or started.

[0209] Further, in the vehicle control system 100, the function restriction application section 370 measures the elapsed time t after the start of the vehicle 102, and instructs the application section 372a to apply the judgment result of the function restriction judgment section 354 received before the start of the vehicle 102, before the elapsed time t elapses a prescribed time.

[0210] According to this structure, the discomfort of the user due to the reflection of the result of the judgment of the function restriction judgment section 354 performed at the start of the vehicle to the application section 372a at a time delayed beyond the time normally required for the judgment can be prevented.

[0211] Further, in the vehicle control system 100, the application part 372a of the application function restriction information, which is indicated by the function restriction application part 370 to the application function restriction judging part 354, contains contents that can incur a charge or contents related to the personal information of the specific user. According to this structure, it is possible to prevent the occurrence of an undesirable situation in which contents accompanied by a charge are used by a non-specific user such as the guest user 134 and the like, and the charge is collected from the owner 130.

[0212] Further, in the vehicle control system 100, the function restriction application part 370 constitutes a part of an operating system executed by the processing device 364, or constitutes middleware interposed between the operating system and the application parts 372a, 372b, or constitutes a background application executed on the operating system.

[0213] According to this structure, it is possible to implement the function restriction application part 370 using a standard operating system without changing the operating system itself, and thus it is possible to easily and inexpensively implement the vehicle control system 100.

[0214] [8. Modification]

[0215] In addition, the present application is not limited to the structures of the above-described embodiments, and can be implemented in various manners without departing from the gist thereof.

[0216] For example, although it is assumed that the key code containing the user attribute information is generated by the management server 106, and the function restriction judging part 354 acquires the user attribute from the key code issued by the management server 106, the present application is not limited thereto. For example, it can be assumed that the management server 106 issues an electronic key containing only the electronic key basic information, and the function restriction judging part 354 inquires the management server 106 about the user attribute associated with the key code contained in the door unlocking notification or the vehicle starting notification. The management server 106 can refer to the user DB 250, and transmit the user attribute associated with the key code involved in the above inquiry to the vehicle 102.

[0217] Further, in the above-described embodiments, although it is assumed that the vehicle control system 100 restricts the execution of the entire application part 372a that is the function restriction target application in the application execution device 300 according to the function restriction information generated by the function restriction judging part 354, the present application is not limited thereto. For example, it can be assumed that the execution of a part of the function of the application part 372a that is the function restriction target application is restricted according to the function restriction information generated by the function restriction judging part 354. In this case, which function is to be restricted can be described in the application program that implements the application part 372a.

[0218] Further, in the present embodiment, although it is provided that the function restriction message and / or the standby message are displayed on the display device 360 when the function restriction information is received by the application section 372a, it is not limited thereto. Instead of or in addition to this, it can be provided that the application section 372a displays the function restriction message or the standby message on the display device 360 according to the function restriction information received previously, with the condition that the user clicks or touches the icon representing the application section 372a displayed on the display device 360.

[0219] Further, it can be provided that, in a case where the FOB key 160 and the portable terminal 142 or the like exist within the communicable range with the vehicle 102, and in a case where a plurality of portable terminals 142 or the like exist, a stage for placing the FOB key 160 and / or the portable terminal 142 or the like used in the vehicle start is provided in a manner that what is used in the vehicle start (the FOB key or which portable terminal) can be determined. In this case, the antenna of the wireless device 322 of the vehicle control section 302 and the antenna of the wireless device 344 of the communication control section 304 are also provided in the vicinity of the above stage, and the wireless devices 322 and 344 can acquire the key code used in the vehicle start from the FOB key 160 or the portable terminal 142 or the like placed on the stage by performing close proximity communication.

[0220] Explanation of Reference Numerals

[0221] 100: vehicle control system; 102: vehicle; 104: network; 106: utilization management server; 120: in-vehicle system; 130: owner; 132: family user; 134, 136: guest user; 140, 142, 144, 146: portable terminal; 150, 152, 154, 156: electronic key (key code); 160: FOB key; 200, 320, 340, 364: processing device; 202, 342, 366: storage device; 204, 323, 346, 368: communication device; 220: user management section; 222: electronic key issuance section; 250: user DB; 300: application execution device; 302: vehicle control section; 304: communication control section; 306: telematics control unit (TCU); 308: in-vehicle network bus; 310: vehicle start switch; 312: power supply system; 314: door lock mechanism; 322, 344: wireless device; 324: start operation detection section; 326: FOB communication section; 328: power supply control section; 330: door lock control section; 350: door operation reception section; 352: electronic key authentication section; 354: function restriction judgment section; 360: display device; 362: operation device; 370: function restriction application section; 372a, 372b: application section.

Claims

1. A vehicle control system, wherein, The vehicle control system includes: a processing device provided in a vehicle that can use each of a plurality of electronic keys; an application section that is implemented by executing an application program by the processing device; a function restriction judgment section that judges whether or not to perform function restriction of the application section according to a key code of the electronic key used in the vehicle; and a function restriction application section that instructs the application section to apply a judgment result in the function restriction judgment section, the function restriction judgment section judges whether or not to perform function restriction of the application section according to the key code of the electronic key used during a period from when a door unlocking notification is received until the door of the vehicle is locked with the vehicle start switch of the vehicle in an off state and no occupant is in the vehicle, the function restriction application section instructs the application section to apply the judgment result of the function restriction judgment section at the time of activation of the application section and after the activation, when a notification of the judgment result is received from the function restriction judgment section, the function restriction application section measures an elapsed time from when the door unlocking notification is received, and instructs the application section to apply the judgment result stored in a memory when a new judgment result is not received from the function restriction judgment section before a predetermined time elapses from the elapsed time.

2. The vehicle control system according to claim 1, wherein at the time of activation of the application section, the application section transmits a notification request to the function restriction application section, the notification request instructing that, after the activation of the application section, when the function restriction application section receives a notification of the judgment result from the function restriction judgment section, the function restriction application section is to transmit an instruction to apply the judgment result to itself.

3. The vehicle control system according to claim 1 or 2, wherein the function restriction judgment section judges whether or not to perform function restriction of the application section according to whether or not a holder of the electronic key used in the vehicle is a specific user including an owner of the vehicle or a person having a predetermined relationship with the owner, or a non-specific user other than the specific user.

4. The vehicle control system according to claim 3, wherein the key code of at least one of the electronic keys includes information indicating whether or not the holder of the electronic key is the specific user or the non-specific user.

5. The vehicle control system according to claim 3, wherein the application section instructed by the function restriction application section to apply the judgment result of the function restriction judgment section includes content that can incur a charge, or content related to personal information of the specific user including the owner of the vehicle or the person having the predetermined relationship with the owner.

6. The vehicle control system according to claim 1, wherein the function restriction application section constitutes a part of an operating system executed by the processing device, or constitutes middleware between the operating system and the application section, or constitutes a background application executed on the operating system.

Images