Mobile body control device and mobile body control method

Abstract

A mobile body control device and a mobile body control method are provided. In a mobile body, in a state in which identification information used in authentication of a user is not stored, a power supply can be started up by a structure in which cost is suppressed. The mobile body control device includes a first ECU connected to a power supply switch, which, in a case in which authentication of the user by the identification information stored in a storage section is successful when the mobile body is in a power supply off state, causes the mobile body to be in a power supply on state in accordance with an operation of the power supply switch; and a second ECU connected to a terminal device, which communicates with the first ECU 10. The first ECU, in a case in which a prescribed operation of the power supply switch is recognized when the mobile body is in the power supply off state in a state in which the identification information is not stored in the storage section, establishes communication between the first ECU and the second ECU, so that the terminal device can perform an operation of the first ECU 10 via the second ECU 20.

Description

Technical Field

[0001] This invention relates to a mobile body control device and a mobile body control method. Background Technology

[0002] Previously, there were known techniques for performing fault diagnosis in vehicle fault diagnosis systems when the vehicle was before delivery and the vehicle identification number had not yet been stored in the vehicle, under conditions different from the usual fault modes when the vehicle identification number had been stored (for example, see Patent Document 1).

[0003] Existing technical documents

[0004] Patent Document 1: Japanese Patent Application Publication No. 2012-126331 Summary of the Invention

[0005] The problem that the invention aims to solve

[0006] When a vehicle is handed over, the vehicle key is associated with the vehicle. To enable the vehicle to be used only with a specific vehicle key, the vehicle key's identification information is stored in the vehicle. Furthermore, the following structure is becoming increasingly common: for the vehicle key held by the user, if authentication based on the identification information stored in the vehicle is successful, the vehicle's power is turned on by the user's operation of the vehicle's power switch.

[0007] With this structure, the vehicle's key identification information is not stored in the vehicle before delivery, making it impossible to start the vehicle by operating the power switch. Therefore, there are drawbacks: for vehicles before delivery, it is impossible to start the vehicle by operating the power switch for purposes such as storing the vehicle key identification information or performing vehicle diagnostics to improve traffic safety. Adding a dedicated component to the vehicle to start it without relying on a power switch could be considered, but this is not preferred due to increased cost.

[0008] The present invention was made in view of the following background, and its object is to provide a mobile body control device and a mobile body control method that, in a mobile body such as a vehicle, enables the power supply of the mobile body to be turned on in a cost-effective structure without storing identification information for user authentication.

[0009] Methods for solving problems

[0010] As a first method for achieving the above-mentioned objectives, a mobile device control apparatus is provided, comprising: a storage unit storing identification information used in the authentication of a user of the mobile device; a first ECU connected to a power switch for indicating that the mobile device is powered on, wherein, when the user authentication using the identification information stored in the storage unit is successful while the mobile device is powered off, the first ECU sets the mobile device to a powered-on state according to the operation of the power switch; and a second ECU capable of connecting to a terminal device and communicating with the first ECU, wherein, when the first ECU recognizes a predetermined operation of the power switch while the mobile device is powered off and the identification information is not stored in the storage unit, communication is established between the first ECU and the second ECU, enabling the terminal device connected to the second ECU to perform operations of the first ECU via the second ECU.

[0011] In the above-mentioned mobile body control device, it can also be configured such that when the mobile body is in a power-off state, even if the second ECU is connected to the terminal device, as long as the first ECU has not established communication between the first ECU and the second ECU, the second ECU will not accept the operation instructions of the terminal device to the second ECU.

[0012] In the above-described mobile body control device, the specified operation may also be configured such that the power switch is continuously operated for a specified time or more, and when the first ECU recognizes that the power switch has been continuously operated for a specified time or more while the mobile body is in a power-off state and the identification information is not stored in the storage unit, the communication establishment process between the first ECU and the second ECU is initiated, and when the operation of the power switch cannot be recognized before the establishment process is completed, the first ECU terminates the establishment process.

[0013] In the aforementioned mobile control device, the first ECU and the terminal device may not be able to communicate directly.

[0014] As a second approach to achieving the aforementioned objective, a mobile body control method is provided, executed by a mobile body control device comprising: a storage unit storing identification information used in the authentication of a user of the mobile body; a first ECU connected to a power switch for indicating that the mobile body is powered on; and a second ECU capable of connecting to a terminal device and communicating with the first ECU. The mobile body control method includes: a normal operation corresponding step, in which, if the user authentication using the identification information stored in the storage unit is successful when the mobile body is in a power-off state, the first ECU sets the mobile body to a power-on state according to the operation of the power switch; and a maintenance corresponding step, in which, if the first ECU recognizes a predetermined operation of the power switch when the identification information is not stored in the storage unit when the mobile body is in a power-off state, communication is established between the first ECU and the second ECU, enabling the terminal device to perform operations of the first ECU via the second ECU.

[0015] Invention Effects

[0016] According to the above-described mobile body control device and mobile body control method, in a mobile body, even without storing identification information for user authentication, the power supply can be started through a cost-effective structure. Attached Figure Description

[0017] Figure 1 This is a structural diagram of the mobile body control device.

[0018] Figure 2 This is a flowchart of the process by which the first ECU establishes communication with the terminal device.

[0019] Figure 3 This is an illustration of the process of establishing communication between the first ECU and the terminal device.

[0020] Explanation of reference numerals in the attached figures

[0021] 1…Mobile control device, 10…First ECU, 11…First processor, 12…First memory, 20…Second ECU, 21…Second processor, 22…Second memory, 30…Third ECU, 31…Third processor, 32…Third memory, 40…SS switch (power switch), 41…Ignition unit, 42…ESL unit, 50…Terminal device, 60…Portable terminal, 61…Portable key, 100…Vehicle (mobile body), W…Operator. Detailed Implementation

[0022] [1. Structure of the moving body control device]

[0023] Reference Figure 1 The structure of the mobile body control device 1 will be described below. The mobile body control device 1 of this embodiment is installed on the vehicle 100 (equivalent to the mobile body of this disclosure) and controls the operation of the vehicle 100. The mobile body control device 1 consists of multiple ECUs (Electronic Control Units) 10, 20, and 30.

[0024] The first ECU 10 is a control unit composed of a first processor 11, a first memory 12, etc. It executes programs stored in the first memory 12 to control the area surrounding the driver's seat of the vehicle 100, and to control the power supply to and from the vehicle 100. The first ECU 10 is connected to a start / stop switch 40 (hereinafter referred to as "SS switch 40," equivalent to the power switch of the present invention), which indicates the power supply to and from the vehicle 100, and an ignition unit 41, which switches between power supply to and from the vehicle 100. Furthermore, the first ECU 10 is connected to an ESL (electric power steering lock) unit 42 via a first CAN (Controller Area Network) 70.

[0025] The second ECU 20 is a control unit composed of a second processor 21, a second memory 22, etc., which controls the overall operation of the vehicle 100 by executing programs stored in the second memory 22. The second ECU 20 is connected to the first ECU 10 via the first CAN bus 70, and is also connected to the vehicle 100's maintenance terminal device 50 via the second CAN bus 71 in a detachable manner. The operator W connects the terminal device 50 to the second ECU 20 to perform maintenance work on the vehicle 100 upon delivery. The terminal device 50 is a laptop PC (personal computer), tablet PC, etc.

[0026] The third ECU 30 is a control unit consisting of a third processor 31, a third memory 32, etc., which performs user authentication processing for the vehicle 100 by executing a program stored in the third memory 32. Specifically, the third ECU 30 authenticates the user by comparing the identification information sent from the portable key 61 held by the user, the portable terminal 60 (more specifically, the virtual key application executed by the portable terminal 60), with the identification information stored in the third memory 32. The portable terminal 60 is, for example, a communication terminal such as a smartphone, a mobile phone, or a tablet.

[0027] In addition, the user's biometric information (fingerprint, iris, facial image, etc.) can also be used as identification information for user authentication. When the vehicle 100 is delivered, the identification information is sent from the terminal device 50 to the third ECU 30 through the operator W's operation of the terminal device 50, and stored in the third memory 32 (equivalent to the storage unit of this invention). The third ECU 30 is connected to the first ECU 10 via the first CAN 70.

[0028] When the first ECU 10 recognizes the operation of the SS switch 40 after successful authentication of the portable terminal 60 or portable key 61 by the third ECU 30, it sets the vehicle 100 to a power-on state via the ignition unit 41. Here, when in a power-off state, the first ECU 10, second ECU 20, and third ECU 30 enter a sleep state that suppresses power consumption compared to the active state (normal operating state). However, in order to recognize the user's commencement of operation on the vehicle 100, the authentication of the portable terminal 60 or portable key 61 by the third ECU 30 and the recognition of the operation of the SS switch 40 by the first ECU 10 are also performed in the sleep state.

[0029] Therefore, when the power is off, the first ECU 10 and the second ECU 20 cannot communicate. Even if the terminal device 50 is connected to the second ECU 20, communication between the terminal device 50 and the first ECU 10 cannot be established via the second ECU 20. Adding a wiring system 72 to directly connect the terminal device 50 and the first ECU 10 is also considered, but this would increase costs. Therefore, even when identification information such as that prior to vehicle delivery of the vehicle 100 has not been stored in the third memory 32, the first ECU 10 performs processing to enable communication between the terminal device 50 and the first ECU 10. This processing will be explained below.

[0030] [2. Communication establishment process between the terminal device and the first ECU]

[0031] according to Figure 2 The flowchart shown illustrates the process executed by the first ECU 10 to enable communication between the terminal device 50 via the second ECU 20 and the first ECU.

[0032] exist Figure 2 In step S1, when the first ECU 10 detects the operation (press operation) of the SS switch 40, the process proceeds to step S2. In step S3, the first ECU 10 determines whether the authentication of the portable terminal 60 or the portable key 61 by the third ECU 30 is complete (key verification successful). Moreover, the first ECU 10 proceeds to step S3 when key verification is successful, and proceeds to step S10 when key verification fails.

[0033] In step S3, the first ECU10 determines whether the registration verification of the improper use prevention device such as the ESL unit 42 is successful. Furthermore, if the registration verification is successful, the first ECU10 causes the process to proceed to step S4, and if the registration verification is unsuccessful, the process proceeds to step S10.

[0034] Step S4 corresponds to the normal operation of the vehicle 100 by the user, where the first ECU 10 turns on the vehicle 100 via the ignition unit 41. On the other hand, steps S10 to S14, S20, S21, and S30 correspond to cases where identification information is not stored in the third memory 32 of the third ECU 30, or where improper use prevention devices such as the ESL unit 42 are not registered.

[0035] In step S10, the first ECU10 determines whether the operation of the SS switch 40 is a long press state that lasts for a predetermined time (e.g., several seconds). Furthermore, if the operation of the SS switch 40 lasts for a predetermined time or longer, the first ECU10 causes the process to proceed to step S11; if the operation of the SS switch 40 ends before the predetermined time has elapsed, the process returns to step S1.

[0036] In step S11, the first ECU 10 sends a communication start request signal to the second ECU 20, requesting the start of communication based on the first CAN 70. Upon receiving the communication start request signal, the second ECU 20 performs a startup process (wake-up process), transitioning from a sleep state to an active state. In the following step S12, the first ECU 10 sets the retry variable rt to 0 and executes a loop based on steps S13, S14, S20, S21, and S30.

[0037] In step S13, the first ECU 10 sends an activation request signal to the second ECU 20, requesting the activation of communication between the second CAN 71 and the terminal device 50. Upon receiving the activation request signal, the second ECU 20 performs the process of establishing communication with the terminal device 50. In the next step S14, the first ECU 10 determines whether it has received an activation completion response signal from the second ECU 20 indicating that communication between the terminal device 50 and the second ECU 20 based on the second CAN 71 has been activated.

[0038] Then, when the first ECU 10 receives the second CAN activation completion signal, it proceeds to step S15 to complete the activation process of the second CAN 71. On the other hand, if the second CAN activation completion signal is not received, the first ECU 10 proceeds to step S20. In step S20, the first ECU 10 increments the retry variable rt by 1 (rt+1→rt), and in the following step S21, it determines whether the retry variable rt has reached the threshold rt_th (for example, set to 3 to 5).

[0039] Then, when the retry variable rt reaches the threshold rt_th, the first ECU 10 causes the process to proceed to step S5. In this case, it is assumed that communication between the terminal device 50 and the second ECU 20 was not established due to reasons such as poor connection of the terminal device 50. On the other hand, when the retry variable rt does not reach the threshold rt_th, the first ECU 10 causes the process to proceed to step S30.

[0040] In step S30, the first ECU10 determines whether the operation of the SS switch 40 has ended. Then, if the operation of the SS switch 40 has ended, the first ECU10 causes the process to proceed to step S5; if the operation of the SS switch 40 continues, the process proceeds to step S13, and the processing after step S13 is executed again.

[0041] pass Figure 2 The flowchart shown illustrates that even if the third memory 32 of the third ECU 30 does not store the identification information for authenticating the user, the operator W can establish communication between the terminal device 50 and the second ECU 20 based on the second CAN 71 by pressing and holding the SS switch 40, thereby enabling communication between the terminal device 50 and the first ECU 10.

[0042] Thus, the operator W can instruct the first ECU 10 to perform operations based on the terminal device 50, and can switch the power supply status of the vehicle 100 based on the ignition unit 41, save the identification information based on the third ECU 30 to the third memory 32, and register the identification information to the ESL unit 42, etc.

[0043] Next, Figure 3 It is represented by a common time axis t, similar to the above. Figure 2 The flowchart shown illustrates the processing progression of the operator W, terminal device 50, second ECU 20, and first ECU 10.

[0044] First, operator W connects terminal device 50 to second ECU 20 and performs a long press operation on SS switch 40 at t11. Based on this long press operation, first ECU 10 performs a startup process (wake-up process) at t41, transitioning from sleep state to active state. Then, at t42, first ECU 10 sends a communication start request signal based on first CAN 70 to second ECU 20.

[0045] When the second ECU 20 receives a communication start request signal based on the first CAN 70 at t31, it performs a startup process (wake-up process), moving from a sleep state to an active state, thereby establishing communication between the first ECU 10 and the second ECU 20. At t43, the first ECU 10 sends an activation request signal for the second CAN 71 to the second ECU 20. When the second ECU 20 receives the activation request signal for the second CAN 71 at t32, it performs the process of activating communication between the terminal device 50 and the second ECU 20 based on the second CAN 71. At t33, when activation is complete, it sends an activation completion response signal to the first ECU 10.

[0046] Here, based on the operator W's operation at t12, the terminal device 50 sends forced ignition (IG ON) and key registration start indication signals to the second ECU 20 at t21 and t22. However, since communication between the terminal device 50 and the second ECU 20 based on the second CAN 71 has not yet been established, the second ECU 20 does not receive the forced ignition and key registration start indication signals. Then, at t34, after communication between the terminal device 50 and the second ECU 20 is established, the second ECU 20 receives the forced ignition and key registration start indication signals sent from the terminal device 50 and sends them to the first ECU 10. In addition to forced ignition and key registration start, the operator W can also instruct the operator to register identification information with the aforementioned ESL unit 42.

[0047] When the first ECU 10 receives the instruction signal for forced ignition start and key registration commencement from the second ECU 20 at t45, it powers on the vehicle 100 via the ignition unit 41 at t46 and performs key registration processing at t47. At t48, the first ECU 10 sends a registration completion signal to the second ECU 20 indicating that key registration is complete. Having received the registration completion signal at t35, the second ECU 20 sends a registration completion signal to the terminal device 50 at t36.

[0048] When the terminal device 50 receives the registration completion signal from the second ECU 20 at t24, it displays a screen indicating that the key registration is complete on the display unit at t25, and reports the completion of the key registration to the operator W.

[0049] [3. Other Implementation Methods]

[0050] In the above embodiments, vehicles (including four-wheeled vehicles, two-wheeled vehicles, vehicles driven by internal combustion engines, electric vehicles, and other types of vehicles) are exemplified as mobile bodies, but the mobile body control device and mobile body control method of the present invention can also be applied to other types of mobile bodies such as aircraft and ships.

[0051] In the above embodiment, the standard operation of the SS switch 40 (the power switch of the present invention) is exemplified by a long press operation in which the SS switch 40 is continuously operated for a specified time or more. However, the standard operation may also be other operation methods such as the SS switch 40 being operated multiple times within a specified time.

[0052] also, Figure 1 This is a schematic diagram showing the structure of the mobile body control device 1 based on the main processing content for ease of understanding of the invention. The mobile body control device 1 can also be configured with other distinctions. Furthermore, the processing of each component can be performed by one hardware unit or by multiple hardware units. Figure 2 The processing of each component shown can be performed by one program or by multiple programs.

[0053] [4. Structures supported by the above embodiments]

[0054] The above implementation is a specific example of the following structure.

[0055] (Structure 1) A mobile device control apparatus comprising: a storage unit storing identification information used for authenticating a user of the mobile device; a first ECU connected to a power switch for indicating that the mobile device is powered on, wherein, when the user authentication performed using the identification information stored in the storage unit is successful while the mobile device is powered off, the first ECU sets the mobile device to a powered-on state according to the operation of the power switch; and a second ECU capable of connecting to a terminal device and communicating with the first ECU, wherein, when the first ECU recognizes a predetermined operation of the power switch while the mobile device is powered off and the identification information is not stored in the storage unit, communication is established between the first ECU and the second ECU, such that the terminal device connected to the second ECU can perform the operation of the first ECU via the second ECU.

[0056] According to the mobile body control device of structure 1, in the mobile body, in a state where no identification information for user authentication is stored, the power supply can be started by a structure that suppresses costs.

[0057] (Structure 2) According to the mobile body control device of Structure 1, when the mobile body is in a power-off state, even if the second ECU is connected to the terminal device, as long as the first ECU has not established communication between the first ECU and the second ECU, the second ECU will not accept the operation instructions of the terminal device to the second ECU.

[0058] According to the mobile body control device of structure 2, as long as communication between the first ECU and the second ECU corresponding to the specified operation of the power switch is not established, even if the terminal device is connected to the second ECU, the first ECU cannot be operated through the terminal device. Therefore, the security against improper operation of the mobile body control device by the terminal device can be improved.

[0059] (Structure 3) According to the mobile body control device of Structure 1 or Structure 2, wherein the prescribed operation means that when the power switch is continuously operated for a prescribed time or more, and the first ECU recognizes that the power switch has been continuously operated for a prescribed time or more when the mobile body is in a power-off state and the identification information is not stored in the storage unit, the first ECU starts the communication establishment process between the first ECU and the second ECU. When the operation of the power switch is not recognized before the establishment process is completed, the first ECU stops the establishment process.

[0060] According to the moving body control device of structure 3, the communication establishment process between the first ECU and the second ECU is performed under the condition of continuous operation of the power switch, thereby improving the reliability of maintenance based on the terminal device.

[0061] (Structure 4) According to any one of Structures 1 to 3, the first ECU and the terminal device cannot have a direct communication connection.

[0062] According to the moving body control device of structure 4, by eliminating the structure that directly connects the first ECU to the terminal device, the cost can be reduced and the improper connection of the terminal device to the first ECU can be prevented.

[0063] (Structure 5) A mobile body control method, executed by a mobile body control device, the mobile body control device comprising: a storage unit storing identification information used in the authentication of a user of the mobile body; a first ECU connected to a power switch for indicating that the power of the mobile body is turned on; and a second ECU capable of connecting to a terminal device and communicating with the first ECU, wherein the mobile body control method includes: a normal operation corresponding step, in which, if the user authentication performed using the identification information stored in the storage unit is successful when the mobile body is in a power-off state, the first ECU sets the mobile body to a power-on state according to the operation of the power switch; and a maintenance corresponding step, in which, if the first ECU recognizes a predetermined operation of the power switch when the identification information is not stored in the storage unit when the mobile body is in a power-off state, communication is established between the first ECU and the second ECU, such that the terminal device can perform the operation of the first ECU via the second ECU.

[0064] By executing the movement control method of structure 5 by the movement control device, the same effect as the movement control device of structure 1 can be obtained.

Claims

1. A mobile body control device, wherein the mobile body control device is disposed on a mobile body and controls the operation of the mobile body, wherein, The mobile control device includes: The first ECU controls the power supply to and from the moving body by executing a program stored in the first storage unit. The second ECU is connected to the first ECU and an external portable computer via a network; as well as The third ECU executes the authentication process of the user of the mobile body by executing a program stored in the third storage unit; The third storage unit stores the identification information used for authenticating the user of the mobile device. When the mobile body is in a power-off state, the first ECU, the second ECU, and the third ECU enter a sleep state that suppresses power consumption compared to the active state, which is the normal operating state. The first ECU is connected to a power switch for indicating that the mobile body is powered on. When the mobile body is in a powered-off state, if the user authentication performed by the third ECU using the identification information stored in the third storage unit is successful, the first ECU sets the mobile body to a powered-on state according to the operation of the power switch. The authentication of the user by the third ECU and the identification of the operation of the power switch by the first ECU are also performed in the sleep state. If the first ECU recognizes the prescribed operation of the power switch when the moving body is in a power-off state and the identification information is not stored in the third storage unit, it sends a communication start request signal to the second ECU based on the first CAN (Controller Area Network) to request the start of communication. Upon receiving the communication start request signal, the second ECU executes the startup process, transitioning from the sleep state to the active state and establishing communication between the first ECU and the second ECU. The first ECU sends an activation request signal to the second ECU, which requests to activate communication with the portable computer via the second CAN. The first ECU determines that communication has been activated based on whether it receives an activation completion response signal from the second ECU indicating that communication between the portable computer and the second ECU via the second CAN has been activated, so that the portable computer connected to the second ECU can perform the operation of the first ECU through the second ECU.

2. The moving body control device according to claim 1, wherein, When the mobile body is in a power-off state, even if the second ECU is connected to the portable computer, as long as the first ECU has not established communication between the first ECU and the second ECU, the second ECU will not accept the operation instructions from the portable computer to the second ECU.

3. The moving body control device according to claim 1 or 2, wherein, The specified operation refers to the power switch being operated continuously for a specified period of time or more. If the first ECU recognizes that the power switch has been continuously operated for more than the predetermined time when the mobile body is in a power-off state and the identification information is not stored in the storage unit, it starts the communication establishment process between the first ECU and the second ECU. If the operation of the power switch cannot be recognized before the establishment process is completed, the first ECU stops the establishment process.

4. The moving body control device according to claim 1 or 2, wherein, The first ECU cannot establish a direct communication connection with the portable computer.

5. A method for controlling a mobile body, wherein the method is executed by a mobile body control device, the mobile body control device being disposed on the mobile body and controlling the operation of the mobile body, wherein... The moving body control device includes: The first ECU controls the power supply to and from the moving body by executing a program stored in the first storage unit. The second ECU is connected to the first ECU and an external portable computer via a network; as well as The third ECU executes the authentication process of the user of the mobile body by executing a program stored in the third storage unit; The third storage unit stores the identification information used for authenticating the user of the mobile device. When the mobile body is in a power-off state, the first ECU, the second ECU, and the third ECU enter a sleep state that suppresses power consumption compared to the active state, which is the normal operating state. The first ECU is connected to a power switch for indicating that the power to the moving body is on. The authentication of the user by the third ECU and the identification of the operation of the power switch by the first ECU are also performed in the sleep state. If the user authentication performed by the third ECU using the identification information stored in the third storage unit is successful when the mobile device is in a power-off state, the first ECU sets the mobile device to a power-on state according to the operation of the power switch. If the first ECU recognizes the prescribed operation of the power switch when the moving body is in a power-off state and the identification information is not stored in the third storage unit, it sends a communication start request signal to the second ECU based on the first CAN (Controller Area Network) to request the start of communication. Upon receiving the communication start request signal, the second ECU executes the startup process, transitioning from the sleep state to the active state and establishing communication between the first ECU and the second ECU. The first ECU sends an activation request signal to the second ECU, which requests to activate communication with the portable computer via the second CAN. The first ECU determines that communication has been activated based on whether it receives an activation completion response signal from the second ECU indicating that communication between the portable computer and the second ECU via the second CAN has been activated, so that the portable computer connected to the second ECU can perform the operation of the first ECU through the second ECU.

Images