Vehicle control device, vehicle, vehicle control method and recording medium
By setting a timeout period for digital key actions, the problem of malfunctions in smart key systems under frequent smartphone use was solved, thereby improving the safety and reliability of vehicle control.
Patent Information
- Application Number
- CN202211317079.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Priority Date
- 2021-12-15
- Filing Date
- 2022-10-26
- Publication Date
- 2025-10-31
- Estimated Expiration
- 2042-10-26
AI Technical Summary
Existing smart key systems and smartphone keys cannot effectively prevent malfunctions when vibrations are not detected, especially in environments where smartphones are frequently used, raising concerns that they cannot prevent malfunctions as effectively as smart keys.
By setting a timeout period for digital key actions, if user operation is detected within this time, vehicle control will not be allowed regardless of whether the smartphone is vibrating; vehicle control will only be allowed outside the timeout period if the phone is vibrating.
It effectively suppresses malfunctions of information processing devices, prevents misoperations such as relay attacks, and improves the safety and reliability of vehicle control.
Smart Images

Figure CN116264022B_ABST
Abstract
Description
Technical Field
[0001] This disclosure relates to vehicle control devices, vehicles, vehicle control methods, and procedures. Background Technology
[0002] Japanese Patent Application Publication No. 2017-160703 discloses an electronic key system that rejects authentication requests from a vehicle when no vibration of the smart key is detected. In this electronic key system, since the continuous operation of the portable device for a certain period is a condition for successful authentication, it can prevent unintentional malfunctions caused by the user's actions when the portable device remains stationary for extended periods, such as when the vehicle and the portable device are stored together.
[0003] While smartphones registered with digital keys have the same functionality, there are concerns that they may not achieve the same level of protection against malfunctions as smart keys, since smartphones are likely to be used frequently at home. Summary of the Invention
[0004] In view of the above circumstances, the purpose of this disclosure is to suppress the malfunction of information processing devices used for vehicle control.
[0005] The first method is a vehicle control device, comprising: a receiving unit that receives a setting process from a user, the setting process being used to set a time for suppressing control of a vehicle using an information processing device; a detection unit that detects a prescribed user operation for controlling the vehicle; and a control enabling unit that, when the prescribed user operation is detected at a time different from the time for suppressing control of the vehicle, allows control of the vehicle based on whether the information processing device is vibrating or moving, and when the prescribed user operation is detected during the time for suppressing control of the vehicle, does not allow control of the vehicle regardless of whether the information processing device is vibrating or moving.
[0006] In the vehicle control device of the first embodiment, the receiving unit receives a user setting process for setting a time limit for suppressing control of the vehicle using the information processing device. Furthermore, the detection unit detects a specified user operation for controlling the vehicle. When the specified user operation is detected at a time different from the time when vehicle control is suppressed, the control enabling unit allows vehicle control based on whether the information processing device is vibrating or moving. When the specified user operation is detected during the time when vehicle control is suppressed, the control enabling unit does not allow vehicle control regardless of whether the information processing device is vibrating or moving. Based on this vehicle, malfunction of the information processing device used for vehicle control can be suppressed.
[0007] The second type of vehicle control device is completed based on the first type of vehicle control device. The receiving unit receives the setting process for setting the time from the user according to each digital key registered in the information processing device.
[0008] In the vehicle control device of the second type, the receiving unit receives settings from the user for setting the aforementioned time based on each digital key registered in the aforementioned information processing device. According to this vehicle, malfunctions of the information processing device can be appropriately suppressed based on each digital key.
[0009] The third type of vehicle control device is based on the second type of vehicle control device and also includes a communication detection unit that detects a communicable information processing device. The receiving unit can accept setting processing for setting the time for the digital key registered in the detected communicable information processing device.
[0010] In the vehicle control device of the third type, the communication detection unit detects a communicable information processing device. The receiving unit receives a setting process for setting the time for the digital key registered with the detected communicable information processing device. According to this vehicle, when it is communicable with the information processing device registered with the digital key, it is possible to set a time for suppressing vehicle control.
[0011] The vehicle control device of the fourth type is based on any one of the vehicle control devices of the first to third types. When a user operation as specified above is detected at a time different from the time when vehicle control is suppressed, the control enabling unit does not allow vehicle control based on the fact that the information processing device does not vibrate or move. According to this vehicle, malfunction of the information processing device used for vehicle control can be effectively suppressed.
[0012] The vehicle control device of the fifth method is based on any one of the vehicle control devices of the first to third methods, and also includes a reporting unit that reports that the vehicle is in the period of suppressing control when the user operation specified above is detected during the period of suppressing control of the vehicle.
[0013] In the vehicle control device of the fifth method, when a user operation as specified above is detected during the time when vehicle control is suppressed, the reporting unit reports that the time when vehicle control is suppressed has elapsed. Based on this vehicle, it is possible to notify a user who wishes to control the vehicle using the aforementioned information processing device that the time when vehicle control is suppressed has elapsed.
[0014] The vehicle control device of the sixth method is completed based on any one of the vehicle control devices of the first to fifth methods. The above setting process is used to set either the activation or deactivation of the setting of the time for suppressing the control of the vehicle using the above information processing device, and the start time and end time of the suppression time.
[0015] The seventh type is a vehicle equipped with any one of the vehicle control devices in the first to sixth types and a door lock device for unlocking and locking the doors.
[0016] The eighth method is a vehicle control method in which the receiving unit receives a user setting process for setting a time for suppressing the control of a vehicle using an information processing device. The detection unit detects a specified user operation for controlling the vehicle. When the specified user operation is detected at a time different from the time for suppressing the control of the vehicle, the control enabling unit enables the control of the vehicle based on whether the information processing device is vibrating or moving. When the specified user operation is detected during the time for suppressing the control of the vehicle, the control of the vehicle is not enabled regardless of whether the information processing device is vibrating or moving.
[0017] In the vehicle control method of the eighth aspect, the receiving unit receives a user setting process, which sets a time for suppressing control of the vehicle using the information processing device. Furthermore, the detection unit detects a prescribed user operation for controlling the vehicle. When the prescribed user operation is detected at a time different from the time of suppressing vehicle control, the control enabling unit allows vehicle control based on whether the information processing device is vibrating or moving. When the prescribed user operation is detected during the time of suppressing vehicle control, the control enabling unit does not allow vehicle control regardless of whether the information processing device is vibrating or moving. According to this vehicle control method, malfunction of the information processing device used for vehicle control can be suppressed.
[0018] The ninth method is a non-transitory recording medium that records a program for causing a computer in a vehicle to perform the following processes: receiving a user setting process for setting a time for suppressing control of the vehicle using an information processing device; detecting a prescribed user operation for controlling the vehicle; when the prescribed user operation is detected at a time different from the time for suppressing control of the vehicle, allowing control of the vehicle based on whether the information processing device is vibrating or moving; when the prescribed user operation is detected during the time for suppressing control of the vehicle, disallowing control of the vehicle regardless of whether the information processing device is vibrating or moving.
[0019] In the program recorded on the non-transitory recording medium of the ninth method, the computer receives a user-received setting process for setting a time for suppressing control of the vehicle using the information processing device. Furthermore, the computer detects a prescribed user operation for controlling the vehicle. If the prescribed user operation is detected at a time different from the time of suppressing vehicle control, the computer allows control of the vehicle based on whether the information processing device is vibrating or moving. If the prescribed user operation is detected during the time of suppressing vehicle control, the computer does not allow control of the vehicle regardless of whether the information processing device is vibrating or moving. According to this program, malfunction of the information processing device used for vehicle control can be suppressed.
[0020] According to this disclosure, it is possible to suppress the malfunction of information processing devices used for vehicle control. Attached Figure Description
[0021] Embodiments of this disclosure will be described in detail with reference to the following accompanying drawings, wherein:
[0022] Figure 1 This is a diagram showing a simplified structure of the vehicle system involved in this embodiment.
[0023] Figure 2 This is a block diagram illustrating the hardware structure of the vehicle involved in this embodiment.
[0024] Figure 3 This is a block diagram illustrating an example of the functional structure of the CPU of the digital key control ECU in the vehicle-mounted device of this embodiment.
[0025] Figure 4 This is an example of a screen used to set the timeout period for digital key actions.
[0026] Figure 5 This is a block diagram illustrating the hardware structure of the smartphone according to this embodiment.
[0027] Figure 6 This is a flowchart illustrating an example of the digital key vehicle control processing executed in the CPU of the digital key control ECU of the vehicle in this embodiment.
[0028] Figure 7 This is a flowchart illustrating an example of the digital key lookup process executed in the CPU of the smartphone control device in this embodiment.
[0029] Figure 8 This is a timing diagram illustrating an example of the processing flow in the vehicle system of this embodiment.
[0030] Figure 9 This is a flowchart illustrating an example of the digital key vehicle control processing flow executed in the CPU of the digital key control ECU of a modified vehicle device in this embodiment.
[0031] Figure 10 This is an example of a screen used to set the allowed time for digital key actions. Detailed Implementation
[0032] use Figures 1-10 The vehicle system involved in the embodiments of this disclosure will be described below.
[0033] [Implementation of this disclosure]
[0034] Figure 1 This is a block diagram illustrating a simplified structure of the vehicle system 10 according to this embodiment.
[0035] (Overall structure)
[0036] like Figure 1 As shown, the vehicle system 10 according to this embodiment is configured to include a vehicle 12 and a smartphone 14 as an information processing device for controlling the vehicle 12.
[0037] Vehicle 12 is configured to directly receive local communications from smartphone 14 without going through a network. These communications include wireless communications and infrared communications.
[0038] The door locking device 28 installed in the vehicle 12 locks and unlocks the driver's side door, passenger side door, rear door, and tailgate. Locking and unlocking of each door covered by the door locking device 28 can be achieved by a user holding a smartphone 14 interacting with the door handle 13 and by operating the smartphone 14.
[0039] like Figure 2 As shown, the on-board unit 11 installed in vehicle 12 includes an Electronic Control Unit (ECU) 20, a digital key control ECU 21, a touch panel 24, an engine ECU 25, and a BLE (Bluetooth Low Energy) communication unit 26. The digital key control ECU 21 is an example of a vehicle control device.
[0040] The touch panel 24 is located, for example, in the head unit, instrument panel, etc., to display images related to the current location, driving route, and attention information, and to accept various inputs.
[0041] The engine ECU25 performs various engine controls, including starting and stopping the engine.
[0042] BLE communication unit 26 is a communication unit that performs wireless communication using Bluetooth (registered trademark) and communicates with BLE communication unit 14C described later.
[0043] Vehicle 12 is equipped with an engine switch (SW) 27. The engine SW27 is a switch used to indicate the start and stop of the engine.
[0044] The control ECU 20 is configured to include a CPU (Central Processing Unit) 20A, a ROM (Read Only Memory) 20B, a RAM (Random Access Memory) 20C, and an input / output (I / F) 20D. The CPU 20A, ROM 20B, RAM 20C, and I / F 20D are connected to each other via an internal bus (not shown) and are able to communicate with each other.
[0045] CPU20A is the central processing unit, which executes various programs and controls other components. Specifically, CPU20A reads programs from ROM20B and uses RAM20C as its working area to execute the programs.
[0046] ROM20B stores various programs and data.
[0047] RAM20C is used as a working area to temporarily store programs or data.
[0048] The input / output I / F20D is an interface used to communicate with the engine ECU25, engine SW27, and door lock device 28 respectively.
[0049] Furthermore, the control ECU20 may include a storage unit in addition to or in place of the ROM20B. This storage unit may be, for example, an HDD (Hard Disk Drive) or an SSD (Solid State Drive).
[0050] The control ECU 20 executes a program via the CPU 20A to perform vehicle control functions, including locking and unlocking the doors via the door lock device 28, turning on the power to the vehicle 12, and starting the engine via the engine ECU 25, when the comparison with the smartphone 14 is successful.
[0051] The digital key control ECU 21 is configured to include, as an example, a processor (CPU 21A), ROM 21B, RAM 21C, and input / output I / F 21D. The CPU 21A, ROM 21B, RAM 21C, and input / output I / F 21D are interconnected and can communicate with each other via an internal bus (not shown). RAM 21C is an example of a memory.
[0052] The functions of CPU21A, ROM21B, RAM21C, and I / F21D are the same as those of CPU20A, ROM20B, RAM20C, and I / F20D mentioned above.
[0053] ROM 21B stores an information processing program 22 for vehicle control related to user operations using a digital key.
[0054] CPU 21A reads information processing program 22 from ROM 21B and uses RAM 21C as the working area to execute information processing program 22.
[0055] The input / output I / F21D is an interface used for communication with the BLE communication unit 26.
[0056] Furthermore, the digital key control ECU21 may also include a storage unit in addition to the ROM21B, or it may replace the ROM21B with a storage unit. This storage unit may be, for example, an HDD or an SSD.
[0057] It is known that there is a relay attack technique that uses radio waves from vehicles to cause smart keys at home to misrepresent their signals. This mostly occurs at night in the parking lot. Existing smart keys prevent relay attacks by using vibration sensors for vibration detection.
[0058] While it's assumed that smartphones registered with digital keys have the same functionality, there are concerns that smartphones might not achieve the same effect as smart keys, given their frequent use at home. This is because smartphones are used extensively at home.
[0059] Therefore, in this embodiment, a digital key action prohibition time can be set. Outside of this prohibition time, vehicle control is allowed based on the smartphone vibrating; inside the prohibition time, vehicle control is not allowed regardless of whether the smartphone is vibrating. Furthermore, the digital key action prohibition time can be set.
[0060] Specifically, such as Figure 3 As shown, the CPU21A functions as the communication detection unit 109, the receiving unit 110, the detection unit 111, the control and permission unit 112, and the reporting unit 114 by executing the information processing program 22.
[0061] The communication detection unit 109 detects a smartphone 14 that can communicate with the vehicle-mounted device 11. For example, the communication detection unit 109 detects a communicable smartphone 14 present in the vehicle 12 based on the wireless communication between the BLE communication unit 26 and the smartphone 14.
[0062] The receiving unit 110 is configured to receive user requests for setting a digital key operation prohibition time for a digital key registered in the detected communicable smartphone 14. Specifically, the receiving unit 110 displays a screen on the touch panel 24 for the user to perform setting processing for setting a digital key operation prohibition time for a digital key registered in the detected communicable smartphone 14.
[0063] For example, make the touch panel 14A display Figure 4 The setting screen 141 shown allows either party to accept the setting of the digital key action prohibition time, which can be either valid or invalidated, as well as the start and end times of the digital key action prohibition time. Figure 4 The settings screen 141 includes: a button 142 for switching between enabling and disabling the setting of the digital key action prohibition time; a box 144 for setting the start time of the digital key action prohibition time; and a box 146 for setting the end time.
[0064] The testing unit 111 tests the prescribed user operations used for vehicle control. Here, "vehicle control" refers to functions such as locking and unlocking the opening and closing mechanism, turning on the power, and starting the engine, which are controlled by operating the smartphone 14. For example, the testing unit 111 tests the user's operation of contacting the door handle 13 to unlock the door, the operation of the engine SW27 to start the engine, and the operation of the power switch (not shown) to turn on the power.
[0065] When a specified user operation for vehicle control is detected at a time different from the digital key operation prohibition time, the control enabling unit 112 enables vehicle control based on the vibration of the smartphone 14. When a specified user operation is detected during the digital key operation prohibition time, vehicle control is not enabled regardless of whether the smartphone 14 is vibrating.
[0066] Specifically, when a user wants to unlock the door by touching the door handle 13 at a time different from the time when the digital key action is prohibited, the digital key control ECU 21 compares the ID of the digital key registered on the smartphone 14 with the pre-registered ID information based on the wireless communication between the BLE communication unit 26 and the smartphone 14, thereby performing digital key authentication processing.
[0067] More specifically, the digital key control ECU 21 sends a signal indicating a verification request for the digital key to the smartphone 14 via the BLE communication unit 26, and receives a signal indicating the verification result from the smartphone 14. At this time, the smartphone 14 also receives vibration information from itself.
[0068] Additionally, if the digital key authentication is successful and the received vibration information indicates that the smartphone 14 is vibrating, the digital key control ECU 21 will allow control of the vehicle.
[0069] Additionally, if the digital key authentication fails or if the received vibration information indicates that the smartphone 14 is not vibrating, the digital key control ECU 21 will not allow vehicle control.
[0070] If a specified user operation is detected during the prohibited time period for digital key operations, the reporting unit 114 reports that the operation is within the prohibited time period for digital key operations.
[0071] For example, when a user attempts to unlock the door by touching the door handle 13 during the digital key action prohibition period, the report indicates an error message indicating that the user is within the digital key action prohibition period.
[0072] (Smartphone)
[0073] The smartphone 14 is a communication terminal held by the user. In this embodiment, the smartphone 14 is configured to, upon successful verification of the registered digital key, handle user operations such as locking and unlocking the door of the door lock device 28, turning on the power to the vehicle 12, and starting the engine through communication with the vehicle-mounted unit 11, thereby enabling the locking and unlocking of the door of the door lock device 28, the turning on of the power to the vehicle 12, and the starting of the engine. Figure 5 As shown, the smartphone 14 is configured to include a control device 70, a touch panel 14A, a communication unit 14B, a BLE communication unit 14C, and a vibration sensor 14D.
[0074] The control device 70 includes a CPU 72, a ROM 73, a RAM 74, a memory 75, and an input / output I / F 76. The CPU 72, ROM 73, RAM 74, memory 75, and input / output I / F 76 are interconnected via a bus 78.
[0075] The functions of CPU 72, ROM 73, RAM 74, and I / O 76 are the same as those of CPU 20A, ROM 20B, RAM 20C, and I / O 20D described above. Furthermore, the storage 75 in this embodiment can be either the internal storage of the smartphone 14 or a micro SD card.
[0076] The ROM73 stores various programs, including applications for vehicle control involved in user operations using the digital key 140.
[0077] CPU 72 reads the program from ROM 73 and uses RAM 74 as the working area to execute the program. In this embodiment, a digital key 140 is registered in storage 75.
[0078] In this embodiment, the control device 70 is connected to a touch panel 14A, a communication unit 14B, a BLE communication unit 14C, and a vibration sensor 14D via an input / output I / F 76. Furthermore, the touch panel 14A, communication unit 14B, BLE communication unit 14C, and vibration sensor 14D can also be directly connected to the bus 78.
[0079] If the application is executed, the CPU 72 causes the touch panel 14A to display icons for locking and unlocking the door of the door lock device 28, turning on the power to the vehicle 12, and starting the engine. If the user operates on the icon, a signal indicating the vehicle control (locking and unlocking the door of the door lock device 28, turning on the power to the vehicle 12, or starting the engine) corresponding to the operated icon is sent to the BLE communication unit 26 of the vehicle unit 11 via the BLE communication unit 14C.
[0080] Upon receiving a signal from vehicle 12 indicating a comparison request for digital key 140, CPU 72 compares the ID information of the digital key included in the comparison request with the ID of digital key 140 stored in memory 75. Additionally, CPU 72 obtains the vibration level detected by vibration sensor 14D over a certain period of time. If the vibration level is above a threshold, it determines that vibration is present; if the vibration level is below the threshold, it determines that there is no vibration. CPU 72 transmits the vibration information signal, representing the comparison result and the determination of the presence or absence of vibration, to vehicle 12 via BLE communication unit 14C.
[0081] (Processing flow)
[0082] Next, use Figures 6-7 The flowchart illustrates the processing flow in the vehicle system 10 of this embodiment.
[0083] First, when the BLE communication unit 26 of vehicle 12 and the BLE communication unit 14C of smartphone 14 are in a communicable state, if the detection unit 111 detects a user's prescribed operation on vehicle 12, the CPU 21A of the digital key control ECU 21 of the vehicle unit 11 executes the information processing program 22 to perform... Figure 6 The digital key vehicle control process is shown below. The following explanation will focus on the case where the detection unit 111 detects that the user intends to unlock the door by contacting the door handle 13. Furthermore, it will be assumed that the receiving unit 110 receives the user's request beforehand and initiates a setting process for setting a digital key operation prohibition time. The following explanation will focus on the case where the digital key operation prohibition time setting is enabled.
[0084] First, in step S100, CPU 21A, acting as control enable unit 112, determines whether the system is within the set digital key operation prohibition period. If the system is within the digital key operation prohibition period, it determines that the matching of the digital key 140 registered with smartphone 14 has failed, disallows door unlocking, and terminates the digital key vehicle control process. On the other hand, if the system is outside the digital key operation prohibition period, CPU 21A proceeds to step S102.
[0085] In step S102, CPU 21A, acting as control enable unit 112, sends a signal indicating a matching request for digital key 140 to BLE communication unit 14C of smartphone 14 via BLE communication unit 26. Here, the signal indicating the matching request for digital key 140 includes ID information representing the ID of digital key 140 pre-registered on vehicle 12.
[0086] Furthermore, if a signal indicating a matching request for the digital key 140 is received via the BLE communication unit 14C of the smartphone 14, the CPU 72 of the control device 70 of the smartphone 14 performs... Figure 7 The digital key comparison process is shown below.
[0087] In step S110, the CPU 72 acquires time-series data of vibration information detected by the vibration sensor 14D over a certain period of time. Furthermore, the CPU 72 determines whether vibration of the smartphone 14 exists based on the acquired time-series data. For example, if the acquired time-series data includes vibration information indicating a vibration of a certain magnitude or greater, it is determined that vibration of the smartphone 14 exists. Conversely, if the acquired time-series data does not include vibration information indicating a vibration of a certain magnitude or greater, it is determined that vibration of the smartphone 14 does not exist.
[0088] In step S112, the CPU 72 sends the vibration information indicating the presence or absence of vibration of the smartphone 14, as determined in step S110, and the comparison result to the vehicle 12 via the BLE communication unit 14C, and then ends the digital key comparison process. Here, if the ID information included in the signal indicating a comparison request for the digital key 140 received from the vehicle 12 matches the ID of the digital key 140 registered on the smartphone 14, a signal indicating a successful comparison is sent to the vehicle 12. On the other hand, if the ID information included in the signal indicating a comparison request for the digital key 140 received from the vehicle 12 does not match the ID of the digital key 140 registered on the smartphone 14, a signal indicating a failed comparison is sent to the vehicle 12.
[0089] Then, in the above Figure 6 In step S104 of the digital key vehicle control process, CPU 21A, acting as the control enable unit 112, determines whether the matching is successful based on the matching result received by BLE communication unit 26 from smartphone 14. If the matching result received by BLE communication unit 26 from smartphone 14 indicates successful matching, the process proceeds to step S106. On the other hand, if the matching result received by BLE communication unit 26 from smartphone 14 indicates failed matching, door unlocking is not allowed, and the digital key vehicle control process ends.
[0090] In step S106, the CPU 21A, acting as the control enable unit 112, determines whether a vibration signal has been received from the smartphone 14 via the BLE communication unit 26. If a vibration signal is received from the smartphone 14 via the BLE communication unit 26, the process proceeds to step S108. Conversely, if a no-vibration signal is received from the smartphone 14 via the BLE communication unit 26, door unlocking is not permitted, and the digital key vehicle control process ends.
[0091] In step S108, CPU21A, acting as control grant unit 112, requests the control ECU 20 to unlock the doors, thus ending the digital key vehicle control process. Furthermore, the control ECU 20 controls the locking of each door via the door lock device 28.
[0092] Next, use Figure 8 The timing diagram illustrates an example of the processing flow when the aforementioned digital key vehicle control processing and digital key matching processing have been performed. Figure 8 In this example, we will take the case where a user outside the vehicle 12 touches the door handle 13 to unlock the door of the vehicle 12, and the current time is within the time limit for digital key actions to be prohibited.
[0093] First, in step S120, the digital key control ECU21 accepts the operation of a user located outside the vehicle 12 contacting the door handle 13 as an operation to unlock the door of the vehicle 12.
[0094] Then, in step S122, the digital key control ECU21 determines that the current time is within the time limit for digital key action prohibition.
[0095] Then, in step S124, the digital key control ECU21 sends a signal indicating a matching request for the digital key 140 to the BLE communication unit 14C of the smartphone 14 via the BLE communication unit 26.
[0096] Then, in step S126, the smartphone 14 sends a signal indicating the comparison result of the digital key 140 and vibration information to the vehicle 12 via the BLE communication unit 14C. Furthermore, if the vibration information indicates that there is no vibration from the smartphone 14, the digital key control ECU 21 does not unlock the doors of the vehicle 12. On the other hand, if the vibration information indicates that there is vibration from the smartphone 14, the digital key control ECU 21 unlocks the doors of the vehicle 12.
[0097] (Summary of this implementation method)
[0098] The vehicle 12 in this embodiment can set a digital key operation prohibition time. When a specified user operation is detected during the digital key operation prohibition time, vehicle control is not allowed regardless of whether the smartphone 14 is vibrating. This suppresses malfunctions of the smartphone used for vehicle control (e.g., relay attacks).
[0099] In addition, for smartphones registered with digital keys, from a security point of view or to prevent malfunctions, it is possible to prevent the control of the vehicle by using the smartphone at any time period set by the user.
[0100] In addition, when a digital key action prohibition time is set, if a specified user operation is detected within the digital key action prohibition time, the vehicle cannot be unlocked by using the digital key because the overall judgment is that the digital key matching has failed.
[0101] (Modified Example)
[0102] Furthermore, this embodiment describes an example where the vibration of the smartphone 14 is determined after determining whether the digital key operation is prohibited during the digital key vehicle control process, but it is not limited to this. In the digital key vehicle control process, it is also possible to determine whether the digital key operation is prohibited during the digital key operation after determining whether the smartphone 14 is vibrating.
[0103] For example, the CPU 21A of the digital key control ECU 21 of the vehicle unit 11 performs information processing program 22. Figure 9 The digital key vehicle control process is shown. Processes identical to those described in the above embodiments are labeled with the same reference numerals, and detailed descriptions are omitted.
[0104] First, in step S102, the CPU 21A, as the control enable unit 112, sends a signal indicating a matching request for the digital key 140 to the BLE communication unit 14C of the smartphone 14 via the BLE communication unit 26.
[0105] Furthermore, if a signal indicating a matching request for the digital key 140 is received via the BLE communication unit 14C of the smartphone 14, the CPU 72 of the control device 70 of the smartphone 14 performs the aforementioned actions. Figure 7 The digital key comparison process is shown below.
[0106] Then, in step S104, CPU 21A, acting as control enable unit 112, determines whether the matching is successful based on the matching result received from smartphone 14 via BLE communication unit 26. If the matching result received from smartphone 14 via BLE communication unit 26 indicates successful matching, the process proceeds to step S106. On the other hand, if the matching result received from smartphone 14 via BLE communication unit 26 indicates failed matching, door unlocking is not allowed, and the digital key vehicle control process ends.
[0107] In step S106, the CPU 21A, acting as the control enable unit 112, determines whether a vibration signal has been received from the smartphone 14 via the BLE communication unit 26. If a vibration signal is received from the smartphone 14 via the BLE communication unit 26, the process proceeds to step S100. Conversely, if a no-vibration signal is received from the smartphone 14 via the BLE communication unit 26, door unlocking is not permitted, and the digital key vehicle control process ends.
[0108] In step S100, CPU 21A, acting as control enable unit 112, determines whether the system is within a pre-defined digital key operation prohibition period. If the system is within the digital key operation prohibition period, it determines that the matching of the digital key 140 registered with smartphone 14 has failed, disallows door unlocking, and terminates the digital key vehicle control process. Conversely, if the system is outside the digital key operation prohibition period, CPU 21A proceeds to step S108.
[0109] In step S108, CPU21A, acting as control grant unit 112, requests the control ECU 20 to unlock the doors, thus ending the digital key vehicle control process. Furthermore, the control ECU 20 controls the locking of each door via the door lock device 28.
[0110] [Remark]
[0111] The above embodiments are described using the case of setting a digital key action prohibition time as an example, but are not limited to this. For example, a digital key action allowance time can also be set. In this case, when a specified user operation for vehicle control is detected within the digital key action allowance time, the control allowance unit 112 allows vehicle control based on the vibration of the smartphone 14. When a specified user operation is detected outside the digital key action allowance time, the control allowance unit 112 does not allow vehicle control regardless of whether the smartphone 14 is vibrating.
[0112] In addition, the receiving unit 110 receives settings from the user for setting the allowed time for digital key actions. Specifically, the receiving unit 110 displays a screen on the touch panel 24 for the user to perform settings for setting the allowed time for digital key actions.
[0113] For example, make the touch panel 24 display Figure 10 The settings screen 240 shown allows either the validation or invalidation of the digital key action permission time setting, as well as the start and end times of the digital key action permission time. Figure 10 The settings screen 240 includes: a button 242 for switching between enabling and disabling the digital key action permission time setting; a box 244 for setting the start time of the digital key action permission time; and a box 246 for setting the end time.
[0114] Furthermore, in this embodiment, the following example is provided: when a prescribed user operation for vehicle control is detected at a time different from the digital key operation prohibition time, the vehicle unit 11 allows vehicle control based on the vibration of the smartphone 14; when a prescribed user operation is detected during the digital key operation prohibition time, the vehicle unit 11 does not allow vehicle control regardless of whether the smartphone 14 is vibrating, but this is not a limitation. For example, when a prescribed user operation for vehicle control is detected at a time different from the digital key operation prohibition time, the vehicle unit 11 allows vehicle control based on the movement of the smartphone 14; when a prescribed user operation is detected during the digital key operation prohibition time, the vehicle unit 11 does not allow vehicle control regardless of whether the smartphone 14 is moving. For example, if the change in the intensity of the radio waves emitted from the vehicle 12 to the smartphone 14 is above a threshold, it is considered that the smartphone 14 is moving. On the other hand, if the change in the intensity of the radio waves emitted from the vehicle 12 to the smartphone 14 is less than the threshold, it is considered that the smartphone 14 is not moving.
[0115] Furthermore, this embodiment describes an example where the vehicle unit 11 determines whether the user is within the digital key operation prohibition period when the user wants to unlock the door by touching the door handle 13, but it is not limited to this. For example, the vehicle unit 11 may also determine whether the user is within the digital key operation prohibition period when the user wants to start the engine by operating the engine SW27.
[0116] Alternatively, a digital key operation prohibition time can be set for each digital key 140 registered to each smartphone 14. In this case, the receiving unit 110 only needs to process the setting of the digital key operation prohibition time for the digital key 140 registered to the communicable smartphone 14 detected by the communication detection unit 109. Furthermore, when the detection unit 111 detects a specified user operation, the control enabling unit 112 only needs to determine whether it is within the digital key operation prohibition time set for the digital key 140 registered to the communicable smartphone 14 detected by the communication detection unit 109.
[0117] Alternatively, a digital key action prohibition time can be set for each specified user operation. In this case, the receiving unit 110 only needs to process the setting of the digital key action prohibition time for each specified user operation. Furthermore, when a specified user operation is detected by the detection unit 111, the control enabling unit 112 only needs to determine whether it is within the digital key action prohibition time set for the detected specified user operation.
[0118] Furthermore, in the above embodiments, the case where the vehicle unit 11 is equipped with a control ECU 20 and a digital key control ECU 21 respectively has been described as an example, but it is not limited to this, and the control ECU 20 and the digital key control ECU 21 may also be configured as a single ECU.
[0119] In addition, in the above embodiments, the information processing device registered with the digital key is a smartphone 14, but it is not limited to this. The digital key 140 can also be registered on a device with communication function such as a tablet computer or a wearable computer.
[0120] Furthermore, in each embodiment, the example described is that the smartphone 14 uses Bluetooth (registered trademark) to wirelessly communicate with the vehicle-mounted device 11, but this is not a limitation. For example, the smartphone 14 may also use NFC or UWB to wirelessly communicate with the vehicle-mounted device 11.
[0121] In the above embodiment, the example described is a vehicle 12 that is driven by an engine powered by gasoline, but it is not limited to this. Vehicle 12 can also be an electric vehicle such as HEV (Hybrid Electric Vehicle), PHEV (Plug-in Hybrid Electric Vehicle), FCEV (Fuel Cell Electric Vehicle), or BEV (Battery Electric Vehicle).
[0122] Furthermore, the various processes executed by the CPU 21A reading the software (program) in the above embodiments can also be executed by various processors other than the CPU. Examples of processors in this case include FPGAs (Field-Programmable Gate Arrays) and processors with dedicated circuit structures designed for specific processes, such as PLDs (Programmable Logic Devices) and ASICs (Application Specific Integrated Circuits), whose circuit structures can be modified after manufacturing. Additionally, various processes can be executed by one of these various processors, or by a combination of two or more processors of the same or different types (e.g., multiple FPGAs, and a combination of a CPU and an FPGA). Furthermore, the hardware structure of these various processors is more specifically a circuit that incorporates circuit elements such as semiconductor components.
[0123] Furthermore, in the above embodiments, the description assumes that each program is pre-stored (installed) on a computer-readable non-transitory recording medium. For example, the information processing program 22 is pre-stored in ROM 21B in the vehicle unit 11. However, this is not a limitation; each program may also be provided on a non-transitory recording medium such as CD-ROM (Compact Disc Read Only Memory), DVD-ROM (Digital Versatile Disc Read Only Memory), and USB (Universal Serial Bus) memory. Alternatively, each program may be downloaded from an external device via a network.
[0124] The processing flow described in the above embodiments is also an example. Without departing from the main idea, unnecessary steps can be deleted, new steps can be added, and the processing order can be changed.
[0125] In addition, the configurations of each vehicle-mounted device, smartphone, physical key, and management server described in the above embodiments are examples and can be changed according to the circumstances without departing from the main theme.
Claims
1. A vehicle control device, wherein, include: The receiving department receives settings from users, which are used to set the time for suppressing the control of vehicles using information processing devices. The testing department tests the prescribed user operations used for the control of the vehicle. as well as The control enabling unit, when determining that the prescribed user operation is detected at a time different from the time when the control of the vehicle is suppressed, allows the control of the vehicle based on the successful comparison of the information processing device and the information processing device being vibrating or moving; when determining that the prescribed user operation is detected during the time when the control of the vehicle is suppressed, does not allow the control of the vehicle regardless of whether the information processing device is vibrating or moving.
2. The vehicle control device according to claim 1, wherein, The receiving unit processes the user's settings for setting the time based on each digital key registered in the information processing device.
3. The vehicle control device according to claim 2, wherein, It also includes a communication detection unit for detecting communicable information processing devices. The receiving unit is capable of handling the setting process for setting the time for the digital key registered with the detected communicable information processing device.
4. The vehicle control device according to any one of claims 1 to 3, wherein, If the prescribed user operation is detected at a time different from the time when the control of the vehicle is suppressed, the control enabling unit will not allow the control of the vehicle based on the fact that the information processing device is not vibrating or moving.
5. The vehicle control device according to any one of claims 1 to 3, wherein, It also includes a reporting unit that reports that the specified user operation is detected during the time when control of the vehicle is suppressed.
6. The vehicle control device according to any one of claims 1 to 3, wherein, The setting process is used to set either the validity or invalidation of the setting for the suppression time of the vehicle using the information processing device, and the start and end times of the suppression time.
7. A vehicle, wherein, have: The vehicle control device according to any one of claims 1 to 6; and A door lock device for unlocking and locking doors.
8. A vehicle control method, wherein, The receiving department receives settings from the user, which are used to set the time for suppressing control of the vehicle using the information processing device. The testing department tests the prescribed user operations used for controlling the vehicle. When it is determined that the prescribed user operation was detected at a time different from the time when the control of the vehicle was suppressed, the control authorization unit enables the control of the vehicle based on the successful comparison of the information processing device and the vibration or movement of the information processing device. If the specified user operation is detected within the time period during which the control of the vehicle is suppressed, the control authorization unit will not allow the control of the vehicle, regardless of whether the information processing device is vibrating or moving.
9. A non-transitory recording medium, wherein, The system contains a program for instructing the vehicle's computer to perform the following processes: The user receives a setting process, which is used to set the time for suppressing control of the vehicle using the information processing device. Detect the prescribed user operations used for the control of the vehicle. If it is determined that the prescribed user operation was detected at a time different from the time when vehicle control was suppressed, and the information processing device successfully checks the data and allows vehicle control to proceed despite vibration or movement, then... If the specified user operation is detected within the time period during which the control of the vehicle is suppressed, the control of the vehicle shall not be permitted regardless of whether the information processing device is vibrating or moving.
Citation Information
Patent Citations
Electronic key system
JP2017160703A
Communication control system and communication control method
JP2020176442A