Key information sharing system, transmission device and user terminal

Abstract

This application relates to a key information sharing system, a transmission device, and a user terminal. The key information sharing system includes: a server for transmitting first information and a first terminal for receiving the first information transmitted from the server. The server adds second information, allowing the first information to be transferred between the first terminal and a second terminal without going through the server, to the first information. When the server receives the first information with the added second information, the first terminal sends the first information to the second terminal in response to user input. The server sets restrictions on predetermined controls based on a function restriction request and adds third information containing the restrictions to the first information. The server also adds fifth information, allowing the first information to be transferred only between the first and a specific second terminal without going through the server, to the first information. When the server receives the first information with the added second and fifth information, the first terminal sends the first information only to the specific second terminal.

Description

[0001] This application is a divisional application of Chinese invention patent application No. 201811340560.6, filed on November 12, 2018, entitled "Key Information Sharing System, Transmission Device and User Terminal". Technical Field

[0002] The present invention relates to a key information sharing system that allows key information for a control device equipped in an object to be shared, a transmission device for transmitting key information, and a user terminal for receiving key information transmitted from the transmission device. Background Technology

[0003] In recent years, a system (hereinafter also referred to as a "key system") has been developed that utilizes a user terminal (such as a smartphone) to send key information from the outside to a control device equipped in an object (such as a vehicle or facility), thereby enabling the control device to perform predetermined control over the object. Here, key information is information associated with the object and is used to put the object into an available state.

[0004] As such a key system, for example, one known system sends key information from a user terminal to an onboard device installed in the vehicle, thereby causing the onboard device to perform predetermined controls, such as lock-unlock control for locking or unlocking the doors. Japanese Patent Application Publication No. 2015-169008 discloses a system that allows vehicle operation if key authentication is successfully performed between the electronic key (smart key) and the vehicle by comparing it with identification information sent from the electronic key to the vehicle, and if terminal authentication is successfully performed between the vehicle and the portable terminal that is being paired.

[0005] Furthermore, Japanese Patent Application Publication No. 2012-41709 discloses a technique for transferring key information about a specific vehicle, included in a user-owned electronic key, to a third party. In the technique disclosed in JP2012-41709A, firstly, a user-owned user terminal receives key information from the user's electronic key via short-range wireless communication. Next, the user terminal sends the key information to a third-party terminal owned by the third party. Then, the third party's electronic key receives the key information received by the third-party terminal via short-range wireless communication. Therefore, the third party's electronic key can be used as a key for a specific vehicle. Summary of the Invention

[0006] In some cases, the key information used in the aforementioned key system is transmitted from the transmission device to the user terminal. In this case, when utilizing a specific object, the user receives key information (i.e., key information associated with the specific object) from the transmission device via the user terminal for the control device equipped in the object. Thus, the user can utilize the specific object using the user terminal.

[0007] In this scenario, where a user shares or lends a specific object to a third party, if only the user's terminal possesses the key information while the third party's terminal lacks it, the user must lend their own terminal to the third party before the third party can use the object. This significantly reduces the convenience of sharing and lending objects.

[0008] Furthermore, to share key information between user terminals and third-party terminals, key information for lending can be generated in the user terminal and then transferred from the user terminal to the third-party terminal. However, when key information is generated in the user terminal and then transferred to the third-party terminal, there is a possibility of reduced security for the object.

[0009] This invention provides a technique that allows key information for control devices equipped in an object to be shared by user terminals and third-party terminals while ensuring security.

[0010] A key information sharing system according to a first aspect of the present invention relates to a key information sharing system that allows key information as first information to be shared. The first information is associated with an object equipped with a control device, which performs predetermined control on the object when it receives the first information from an external terminal. The key information sharing system according to the first aspect of the present invention includes: a transmission device configured to transmit the first information; and a user terminal configured to receive the first information transmitted from the transmission device. The transmission device includes an information generation unit configured to add second information to the first information transmitted to the user terminal, the second information being information that allows the first information to be transferred between the user terminal and a third-party terminal without passing through the transmission device. The user terminal includes an inter-terminal communication unit configured to send the first information to the third-party terminal in response to a user input operation when the user terminal receives the first information with the second information added from the transmission device.

[0011] In the key information sharing system according to the present invention, when a control device equipped in an object receives first information associated with that object from a terminal outside the object, the control device performs predetermined control on that object. Here, the control device can perform predetermined authentication processing on the first information received from the external terminal. In this case, when the authentication of the first information is successful, the control device performs predetermined control on that object. The external terminal is not limited to a user terminal, and the control device can perform predetermined control on that object even when it receives the first information from a third-party terminal.

[0012] The predetermined control is a control that is permitted to be executed when the control device receives first information. For example, the predetermined control may include a lock-unlock control for locking or unlocking an object. In the case of a vehicle, the predetermined control may include a control that allows starting the vehicle's drive source (internal combustion engine or electric motor). In the case of a facility, the predetermined control may include a control that turns on the power supply to electrical products in the facility.

[0013] In a key information sharing system according to this aspect, first information is transmitted from a transmission device. Then, a user receives the first information transmitted by the transmission device through a user terminal. At this time, in the transmission device, an information generation unit adds second information to the first information transmitted to the user terminal. This second information allows the first information to be transferred between the user terminal and a third-party terminal without going through the transmission device. That is, by adding the second information to the first information, the first information is allowed to be transferred from the user terminal to the third-party terminal. In other words, when the user terminal receives first information without the second information added, the user terminal cannot send the first information to the third-party terminal. Therefore, only when the user terminal receives first information with the second information added, the user terminal, in response to the user's input operation, sends the first information to the third-party terminal through the inter-terminal communication unit.

[0014] By using the key information sharing system according to this aspect, only the first information, for which second information has already been added on the transmission device side, is sent or received between the user terminal and the third-party terminal. That is, the first information to be transferred to the third-party terminal is also transmitted from the transmission device. Thus, the first information to be transferred from the user terminal to the third-party terminal can be recorded or managed on the transmission device side. Therefore, the first information can be shared by the user terminal and the third-party terminal while ensuring security.

[0015] In a key information sharing system according to this aspect, when the information generation unit adds the second information to the first information, the information generation unit further adds third information to the first information, the third information being information that restricts the predetermined control allowed to be performed on the object when the control device receives the first information. Then, when the user terminal receives the first information with the second and third information added from the transmission device, the user terminal sends the first information with the third information added to it from the inter-terminal communication unit to the third-party terminal. Thus, the third-party terminal receives the first information with the third information added. Therefore, when the first information is sent from the third-party terminal to the control device, the predetermined control allowed to be performed on the object by the control device is restricted. Therefore, when a third party uses the third-party terminal to utilize the object, the predetermined control allowed to be performed on the object by the control device can be restricted.

[0016] The information generation unit can set restriction content for the predetermined control based on a function restriction request sent from the user terminal to the transmission device, and can add the third information containing the restriction content to the first information. Thus, the user sets the content of the function restriction request sent from the user terminal to the transmission device, and therefore, when a third party sends the first information from a third-party terminal to the control device, the user can determine the restriction content regarding the predetermined control allowed to be performed by the control device on an object.

[0017] Here, the user terminal may further include a registration unit configured to register the plurality of third-party terminals while grouping them into multiple groups. The user terminal can then set the restriction content in the function restriction request for each group and send the function restriction request to the transmission device. In this case, the information generation unit adds the third information corresponding to the function restriction request set for each group to the first information. Thus, for each group, the user can set restrictions regarding predetermined controls allowed to be performed by the control device on the object when the first information is sent from the third-party terminal to the control device.

[0018] In a key information sharing system according to this aspect, when the information generation unit adds the second information to the first information, in the transmission device, the information generation unit can further add fourth information to the first information, the fourth information being information restricting the third-party terminal's use of the first information. Then, when the user terminal receives the first information with the second and fourth information added from the transmission device, the user terminal can send the first information with the fourth information added to it from the inter-terminal communication unit to the third-party terminal. Thus, the third-party terminal receives the first information with the fourth information added to it. Therefore, when the third-party terminal sends the first information from the third-party terminal to the control device, restrictions on the use of the object can be provided.

[0019] The information generation unit can set restriction content for the first information based on a usage restriction request sent from the user terminal to the transmission device, and can add the fourth information containing the restriction content to the first information. Thus, the user sets the content of the usage restriction request sent from the user terminal to the transmission device, and therefore, when a third party sends the first information from its terminal to the control device, the user can determine the restriction content regarding the use of the object.

[0020] Here, the fourth information may include information restricting the time period or number of times a third-party terminal is allowed to effectively use the first information. When a third-party terminal receives first information with the fourth information added, the time period or number of times a predetermined control over the object is allowed to be performed by the control device when the third-party terminal sends the first information to the control device is restricted. Therefore, it is possible to restrict the time period or number of times a third party is allowed to use the object. Further, when the object is a moving body such as a vehicle, the fourth information may include information restricting the area where the third-party terminal is allowed to effectively use the first information. When a third-party terminal receives first information with the fourth information added, the area where a predetermined control is allowed to be performed by the control device on the moving body (object) when the third-party terminal sends the first information to the control device is restricted. Therefore, it is possible to restrict the area where a third party is allowed to use the moving body (object).

[0021] If the user terminal further includes a registration unit configured to register the multiple third-party terminals while grouping them into multiple groups, the user terminal can set the restriction content in the usage restriction request for each group and can send the usage restriction request to the transmission device. In this case, in the transmission device, the information generation unit adds the fourth information corresponding to the usage restriction request set for each group to the first information. Thus, for each group, when a third party sends the first information from the third-party terminal to the control device, the user can set the restriction content regarding the use of the object.

[0022] In a key information sharing system according to this aspect, when the information generation unit adds the second information to the first information, the information generation unit can further add a fifth piece of information to the first information. This fifth piece of information allows the first information to be transferred only between the user terminal and a specific third-party terminal belonging to a specific group, without going through the transmission device. Therefore, when the user terminal receives the first information, which has been supplemented with the second and fifth information, from the transmission device, the user terminal can send the first information only to the specific third-party terminal. This allows the sharing of the first information to be limited to only specific third-party terminals.

[0023] The information generation unit can generate the fifth information based on information about the specific third-party terminal sent from the user terminal to the transmission device, and can add the fifth information to the first information. Thus, the user can identify a specific group sharing the first information.

[0024] In a key information sharing system according to this aspect, on the user terminal side, third information can be added to the first information sent from the user terminal to the third-party terminal. In this case, when the user terminal receives the first information, to which the second information has been added, from the transmitting device, the user terminal adds the third information to the first information and sends the first information to the third-party terminal.

[0025] At this point, if the user terminal further includes a registration unit configured to register the plurality of third-party terminals while grouping them into multiple groups, the user terminal may set restriction content included in the third information for each group.

[0026] In a key information sharing system according to this aspect, on the user terminal side, fourth information can be added to the first information sent from the user terminal to the third-party terminal. In this case, when the user terminal receives the first information, to which the second information has been added, from the transmitting device, the user terminal adds the fourth information to the first information and sends the first information to the third-party terminal.

[0027] At this point, if the user terminal further includes a registration unit configured to register the plurality of third-party terminals while grouping them into multiple groups, the user terminal may set restriction content included in the fourth information for each group.

[0028] In a key information sharing system according to this aspect, on the user terminal side, fifth information can be added to first information. In this case, when the user terminal receives first information from the transmission device, which has already been supplemented with second information, the user terminal adds fifth information to the first information and sends the first information only to a specific third-party terminal.

[0029] According to a second aspect of the present invention, a transmission apparatus includes: an information transmitting unit configured to transmit key information as first information to a user terminal; and an information generating unit configured to add second information to the first information transmitted to the user terminal, the second information being information that allows the first information to be transferred between the user terminal and a third-party terminal without passing through the transmission apparatus. The first information is associated with an object equipped with a control device, and the control device performs predetermined control on the object when it receives the first information from an external terminal.

[0030] In the transmission apparatus according to this aspect, when the information generation unit adds the second information to the first information, the information generation unit may further add third information to the first information. At this time, the information generation unit may set restriction content for the predetermined control based on a function restriction request sent from the user terminal, and may add the third information containing the restriction content to the first information.

[0031] In the transmission apparatus according to this aspect, when the information generation unit adds the second information to the first information, the information generation unit may further add fourth information to the first information. At this time, the information generation unit may set restriction content on the first information based on a function restriction request sent from the user terminal, and may add the fourth information containing the restriction content to the first information.

[0032] In the transmission apparatus according to this aspect, when the information generation unit adds the second information to the first information, the information generation unit may further add fifth information to the first information. At this time, the information generation unit may further generate fifth information based on information about a specific group transmitted from the user terminal, and may add the fifth information to the first information.

[0033] A user terminal according to a third aspect of the present invention includes an inter-terminal communication unit configured to send the first information to the third-party terminal in response to a user input operation when the user terminal receives the first information, which has been added with the second information, from a transmission device according to a second aspect of the present invention.

[0034] According to the present invention, while ensuring security, first information for the control device equipped in the object can be shared by the user terminal and the third-party terminal. Attached Figure Description

[0035] The features, advantages, and technical and industrial significance of exemplary embodiments of the present invention will now be described with reference to the accompanying drawings, wherein like reference numerals denote like elements, and wherein:

[0036] Figure 1 This is a view showing an outline of a key system according to an embodiment;

[0037] Figure 2 This schematically illustrates a portable terminal, a server device, and an installation... Figure 1 A block diagram illustrating an example configuration of the vehicle control unit on a vehicle shown;

[0038] Figure 3 It is a view showing the processing and data flow when the car door is unlocked;

[0039] Figure 4 This is a view used to describe the authentication information transferred from the user terminal to the third-party terminal according to the first embodiment;

[0040] Figure 5 This is a view illustrating the processing and data flow when authentication information is transferred from a user terminal to a third-party terminal according to the first embodiment;

[0041] Figure 6 This is a view showing an operation screen of a touch panel display included in the input / output unit of a user terminal according to a second embodiment;

[0042] Figure 7 This is a view used to describe the transfer of authentication information from a user terminal to a third-party terminal according to the second embodiment;

[0043] Figure 8This is a view illustrating the processing and data flow when authentication information is transferred from a user terminal to a third-party terminal according to the second embodiment;

[0044] Figure 9 This is a view illustrating the processing and data flow when the vehicle door is unlocked according to the second embodiment;

[0045] Figure 10 This is a first view showing an operation screen including a touch panel display in the input / output unit of a user terminal according to a third embodiment;

[0046] Figure 11 This is a second view showing an operation screen including a touch panel display in the input / output unit of a user terminal according to a third embodiment;

[0047] Figure 12 This is a view used to describe the transfer of authentication information from a user terminal to a third-party terminal according to the third embodiment;

[0048] Figure 13 This is a view illustrating the processing and data flow when authentication information is transferred from a user terminal to a third-party terminal according to a third embodiment;

[0049] Figure 14 This is a view showing an operation screen including a touch panel display in the input / output unit of a user terminal according to a fourth embodiment;

[0050] Figure 15 This is a view used to describe the transfer of authentication information from a user terminal to a third-party terminal according to the fourth embodiment; and

[0051] Figure 16 This is a view illustrating the processing and data flow when authentication information is transferred from a user terminal to a third-party terminal according to the fourth embodiment. Detailed Implementation

[0052] In the following description, specific embodiments of the invention will be based on the accompanying drawings. Unless otherwise stated, the dimensions, materials, shapes, relative arrangements, and other details of the constituent parts described in the embodiments are not intended to limit the scope of the invention to the embodiments.

[0053] First Embodiment

[0054] Here, an embodiment of the invention will be described in the following case: The invention is applied to a system that allows user terminals and third-party terminals to share authentication information for utilizing a specific vehicle.

[0055] Overview of the key system

[0056] Figure 1This is a view illustrating an outline of a key system according to an embodiment. The key system according to this embodiment is configured to include a vehicle control device 11 installed on a vehicle 10, a portable terminal 200, and a server device 400. The portable terminal 200 is a terminal owned by a person using the vehicle 10. The server device 400 is a transmission device for transmitting authentication information associated with the vehicle 10.

[0057] In the key system according to this embodiment, the portable terminal 200 and the server device 400 are connected to each other via a network such as the Internet, which serves as a public communication network. When the server device 400 receives a transmission request from the portable terminal 200, the server device 400 transmits authentication information to the portable terminal 200. Additionally, the portable terminal 200 transmits the authentication information received from the server device 400 to a vehicle control device 11 installed on the vehicle 10 via short-range wireless communication. The vehicle control device 11 authenticates the authentication information received from the portable terminal 200. When the authentication is successful, the vehicle control device 11 can control the vehicle 10. In this embodiment, the vehicle 10 corresponds to an "object," and the vehicle control device 11 corresponds to a "control device." Furthermore, in this embodiment, the authentication information corresponds to "key information" (first information), and the server device 400 corresponds to a "transmission device."

[0058] Key system configuration

[0059] Based on Figure 2 Each component of the key system according to this embodiment is described. Figure 2 The portable terminal 200, server device 400, and the device installed are schematically shown. Figure 1 The diagram shows a schematic configuration of the vehicle control unit 11 on the vehicle 10. The vehicle control unit 11 includes a key unit 100 for communicating with a portable terminal 200 and a control unit 300 for performing various controls on the vehicle 10.

[0060] Specifically, the control unit 300 performs locking / unlocking control of the doors of the vehicle 10 by controlling the door lock actuator 12 of the vehicle 10. Furthermore, the control unit 300 performs engine control, such as starting the engine 13, which serves as the drive source for the vehicle 10. Within the vehicle 10, the control unit 300 performs various controls by sending / receiving radio waves in the RF and low-frequency (LF) bands to / from the key unit 100.

[0061] The control unit 300 is configured to include an LF transmitter 301, an RF receiver 302, a verification ECU 303, a body ECU 304, and an engine ECU 305. The LF transmitter 301 is a means of transmitting radio waves in the LF frequency band (e.g., 100 kHz to 300 kHz) for searching (polling) the key unit 100. The RF receiver 302 is a means of receiving radio waves in the RF frequency band (e.g., 100 MHz to 1 GHz) transmitted from the key unit 100.

[0062] The verification ECU 303 is a computer that controls the body ECU 304 and engine ECU 305 based on command signals transmitted from the key unit 100 via radio waves in the RF band. For example, the verification ECU 303 may be composed of a microcomputer. The verification ECU 303 authenticates the command signal transmitted from the key unit 100 based on whether the command signal is transmitted from a valid device. Specifically, the verification ECU 303 determines whether the key ID contained in the command signal matches the key ID pre-stored in the storage unit included in the verification ECU 303.

[0063] When key ID authentication is successful, the verification ECU 303 sends commands corresponding to the command signals to the body ECU 304 and engine ECU 305 via an in-vehicle network such as a Controller Area Network (CAN). Specifically, when the command signal received from the key unit 100 is a lock signal, the verification ECU 303 sends a lock command to the body ECU 304 to lock the doors of the vehicle 10. When the command signal received from the key unit 100 is an unlock signal, the verification ECU 303 sends an unlock command to the body ECU 304 to unlock the doors of the vehicle 10. When the command signal received from the key unit 100 is an engine start permission signal, the verification ECU 303 sends an engine start permission command to the engine ECU 305 to allow the engine 13 of the vehicle 10 to start.

[0064] The body ECU 304 is a computer that performs body control for the vehicle 10. The body ECU 304 is electrically connected to the door lock actuator 12 that performs locking and unlocking of the doors of the vehicle 10. The body ECU 304 has the function of locking and unlocking the doors of the vehicle 10 by controlling the door lock actuator 12 based on locking or unlocking commands received from the verification ECU 303.

[0065] Engine ECU 305 is a computer that controls engine 13 of vehicle 10. Engine ECU 305 is electrically connected to various devices for controlling engine 13, such as fuel injection valves, spark plugs, throttle valves, and starters (all not shown). When engine ECU 305 receives an engine start permission command from verification ECU 303, engine ECU 305 enters an engine start permission state, which allows starting and stopping of engine 13. The engine start permission state is the state in which engine ECU 305 can perform start control for engine 13 when the ignition switch (or start switch) is turned on in vehicle 10.

[0066] Next, the key unit 100 will be described. The key unit 100 is a device disposed at a predetermined location (e.g., inside the storage compartment) in the passenger compartment of the vehicle 10. The key unit 100 has the function of authenticating the portable terminal 200 by performing short-range wireless communication with the portable terminal 200, and the function of transmitting a command signal to the control device 300 using radio waves in the RF band based on the authentication result. The key unit 100 is configured to include an LF receiver 101, an RF transmitter 102, a short-range communication unit 103, and a control unit 104.

[0067] LF receiver 101 is a device for receiving polling signals transmitted from control device 300 via radio waves in the LF band. RF transmitter 102 is a device for transmitting command signals to control device 300 via radio waves in the RF band. Short-range communication unit 103 is a device for communicating with a portable terminal 200 outside the vehicle 10. Short-range communication unit 103 performs communication at a short distance (the distance that allows communication between the interior and exterior of the vehicle) using a predetermined wireless communication standard. Examples of communication standards that can be used for communication by short-range communication unit 103 include Bluetooth (registered trademark), Low Energy Standard, Near Field Communication (NFC), Ultra Wideband (UWB), and WiFi (registered trademark).

[0068] The control unit 104 is a computer that performs processes for short-range wireless communication with the portable terminal 200, for authenticating the portable terminal 200, and for sending command signals to the control device 300. For example, the control unit 104 is composed of a microcomputer.

[0069] The control unit 104 has the function of controlling the LF receiver 101, the RF transmitter 102, and the short-range communication unit 103. Furthermore, the control unit 104 authenticates the authentication information contained in the control request sent from the portable terminal 200 via short-range wireless communication. Specifically, the control unit 104 determines whether the authentication information sent from the portable terminal 200 matches the authentication information pre-stored in the storage unit included in the control unit 104. When authentication is successful, the control unit 104 sends a command signal corresponding to the control request received from the portable terminal 200 to the control device 300 via the RF transmitter 102. Specifically, when the control request received from the portable terminal 200 is a lock request, the control unit 104 sends a lock signal to the control device 300. When the control request received from the portable terminal 200 is an unlock request, the control unit 104 sends an unlock signal and an engine start permission signal to the control device 300.

[0070] At this time, the key unit 100 sends the key ID along with the command signal to the control device 300. The key ID can be pre-stored in plaintext in the key unit 100, or it can be stored while being encrypted using a password specific to the portable terminal 200. If the key ID is stored while being encrypted, the encrypted key ID can be decrypted by the authentication information sent from the portable terminal 200, thereby obtaining the original key ID.

[0071] Next, portable terminal 200 will be described. For example, portable terminal 200 is a compact computer, such as a smartphone, mobile phone, tablet terminal, personal information terminal, and wearable computer (smartwatch, etc.). The portable terminal 200 is configured to include a short-range communication unit 201, a communication unit 202, an inter-terminal communication unit 205, a control unit 203, and an input / output unit 204.

[0072] The short-range communication unit 201 is a device that performs communication with the key unit 100 of the vehicle control device 11 using the same communication standard as the short-range communication unit 103. The communication unit 202 is a device that connects the portable terminal 200 to a network for performing communication with the server device 400. For example, the communication unit 202 can use mobile communication services such as 3G or LTE to perform communication with the server device 400 via the network. The inter-terminal communication unit 205 is a device for performing communication with different mobile terminals. The inter-terminal communication unit 205 can be a device that performs short-range wireless communication with different portable terminals using the same communication standard as the short-range communication unit 201. Similar to the communication unit 202, the inter-terminal communication unit 205 can be a device that performs communication with different portable terminals via a network.

[0073] Control unit 203 is a computer that controls portable terminal 200. For example, control unit 203 is composed of a microcomputer. Control unit 203 controls short-range communication unit 201, communication unit 202, and inter-terminal communication unit 205 in response to user input operations on input / output unit 204. For example, control unit 203 performs the process of requesting the transmission of authentication information corresponding to vehicle 10 to server device 400 and receiving the transmitted authentication information via communication unit 202. The authentication information received from server device 400 is stored in a storage unit included in control unit 203. In addition, control unit 203 performs the process of generating a control request corresponding to user input operations and sending the control request together with the authentication information stored in the storage unit to key unit 100 via short-range communication unit 201. In addition, control unit 203 transmits the authentication information received from server device 400 to different portable terminals via inter-terminal communication unit 205. The transfer of authentication information between portable terminals via inter-terminal communication unit 205 will be described in detail later.

[0074] The input / output unit 204 serves as a means for receiving input operations performed by a user and also for presenting information to the user. Specifically, the input / output unit 204 is configured to include a touchpad display and control means for the touchpad display. The input / output unit 204 may include hardware switches or the like operated by the user.

[0075] Key system characteristics

[0076] Here, the operation of the key system when a user controls the vehicle 10 using a portable terminal 200 will be described by example of unlocking the door of the vehicle 10. Figure 3 This is a view showing the processing and data flow when the door of vehicle 10 is unlocked.

[0077] When a user performs an operation to unlock the door of vehicle 10 using portable terminal 200, portable terminal 200 sends an unlock request and authentication information to key unit 100 of vehicle control device 11 (S101). Then, key unit 100 performs authentication processing based on the authentication information received from portable terminal 200 (S102). When authentication is successful, key unit 100 sends the key ID along with an unlock signal and an engine start permission signal to control device 300 (S103). Then, control device 300 performs authentication processing based on the key ID received from key unit 100 (S104). When authentication of the key ID is successful, control device 300 performs unlock control to unlock the door of vehicle 10 and engine start permission control to put engine ECU 305 into engine start state (S105).

[0078] In this embodiment, the lock-unlock control and the engine start permission control correspond to the “predetermined control”. However, the “predetermined control” is not limited to these controls, but may include another control that is permitted to be executed when the vehicle control unit 11 receives authentication information from the portable terminal 200.

[0079] Sharing of authentication information

[0080] In the aforementioned key system, when a user receives authentication information corresponding to vehicle 10 from server device 400 via their own portable terminal (hereinafter also referred to as "user terminal"), the user terminal can be used as a key for vehicle 10. In this case, if the user shares vehicle 10 with a third party or lends vehicle 10 to a third party, and the third party uses vehicle 10, if only the user terminal has authentication information while the portable terminal handled by the third party (hereinafter also referred to as "third-party terminal") does not, the user needs to lend their own user terminal to the third party. However, lending the user terminal to a third party significantly reduces convenience. Therefore, in the key system according to this embodiment, authentication information can be shared by the user terminal and the third-party terminal.

[0081] Figure 4 This is a view used to describe the transfer of authentication information from a user terminal to a third-party terminal according to this embodiment. Figure 4 In the attached drawing, reference numeral 200a represents a user terminal, while reference numeral 200b represents a third-party terminal. User terminal 200a and third-party terminal 200b have the same... Figure 2 The portable terminal 200b shown has the same configuration. Therefore, the third-party terminal 200b can also perform short-range wireless communication with the vehicle control device 11 of the vehicle 10. Thus, when the third-party terminal 200b obtains authentication information corresponding to the vehicle 10, the third party can use the third-party terminal 200b as a key to the vehicle 10. Therefore, in this embodiment, the user terminal 200a obtains authentication information for lending from the server device 400, and the user terminal 200a transfers the authentication information to the third-party terminal 200b.

[0082] The configuration of server device 400 will be described here. Server device 400 is a computer including a microprocessor, storage devices, input / output devices, and communication devices, and performs the following functions when the microprocessor executes a program. However, some or all of these functions can be implemented using hardware circuits such as ASICs and FPGAs. Furthermore, server device 400 does not necessarily have to be implemented by a single computer, but can be implemented through the collaboration of multiple computers.

[0083] like Figure 4As shown, the server device 400 includes a request receiving unit 401, an information generation unit 402, an information sending unit 403, and a management unit 404. The request receiving unit 401 is used to receive a request for the transmission of authentication information sent from the user terminal 200a. The request receiving unit 401 receives the transmission request sent from the user terminal 200a via a network.

[0084] The information generation unit 402 is an apparatus for generating authentication information corresponding to a transmission request received by the request receiving unit 401 from the user terminal 200a. The information generation unit 402 generates authentication information associated with the vehicle 10, which is the target of use. The information sending unit 403 is an apparatus for sending the authentication information generated by the information generation unit 402 to the user terminal 200a. The information sending unit 403 sends the authentication information to the user terminal 200a via a network. The management unit 404 is an apparatus for managing the transmission status of authentication information from the server device 400. For example, the management unit 404 stores the authentication information to be transmitted and the user terminal as the transmission destination in association.

[0085] Here, when a user shares vehicle 10 with a third party or lends vehicle 10 to a third party, the user sends a request to transmit authentication information for lending from user terminal 200a to server device 400 by operating user terminal 200a. In server device 400, when request receiving unit 401 receives the request to transmit authentication information for lending, information production unit 402 adds transfer permission information (DR) I2 (second information) to authentication information I1 associated with vehicle 10. Then, information sending unit 403 sends authentication information I1 with the added transfer permission information I2 to user terminal 200a. Here, transfer permission information I2 is information that allows authentication information I1 to be transferred between user terminal 200a and third-party terminal 200b without going through server device 400. That is, by adding transfer permission information I2 to authentication information I1, authentication information I1 is allowed to be sent from user terminal 200a to third-party terminal 200b. In other words, when user terminal 200a receives authentication information I1 without the addition of handover permission information I2, user terminal 200a cannot send authentication information I1 to third-party terminal 200b. When server device 400 transmits authentication information with the addition of handover permission information, management unit 404 similarly stores the authentication information in association with the user terminal as the destination.

[0086] When user terminal 200a receives authentication information I1 with handover permission information I2 added, user terminal 200a responds to user input by sending authentication information I1 to third-party terminal 200b via inter-terminal communication unit 205a. Then, third-party terminal 200b stores the authentication information I1 received from user terminal 200a via inter-terminal communication unit 205b in a storage unit included in control unit 203. Thus, authentication information I1 associated with vehicle 10 can be shared by user terminal 200a and third-party terminal 200b. Consequently, a third party can use third-party terminal 200b as a key to vehicle 10. Handover permission information I2 is not added to authentication information I1 sent from user terminal 200a to third-party terminal 200b. Therefore, authentication information I1 cannot be sent from third-party terminal 200b to different portable terminals. Thus, subleasing of authentication information can be prevented.

[0087] Figure 5 This is a view illustrating the processing and data flow when authentication information is transferred from user terminal 200a to third-party terminal 200b. When the user performs an operation via input / output unit 204 to request user terminal 200a to obtain authentication information for lending, user terminal 200a sends a transmission request for the authentication information for lending to server device 400 (S201). When server device 400 receives the transmission request, in server device 400, information generation unit 402 generates authentication information associated with vehicle 10 and adds transfer permission information (DR) to the authentication information (S202). Then, server device 400 sends the authentication information with the added transfer permission information to user terminal 200a (S203). Thereafter, the user performs an operation via input / output unit 204 to send authentication information to third-party terminal 200b, so that user terminal 200a sends the authentication information to third-party terminal 200b (S204).

[0088] Third-party terminal 200b stores the authentication information received from user terminal 200a. Then, when the third party uses third-party terminal 200b to control vehicle 10, the authentication information stored in third-party terminal 200b is sent to vehicle control device 11. As a result, key unit 100 and control device 300 of vehicle control device 11 operate as if they had received authentication information from user terminal 200a.

[0089] As described above, in this embodiment, the authentication information for lending is transmitted from server device 400 to user terminal 200a, and the authentication information is also sent from user terminal 200a to third-party terminal 200b. That is, the authentication information transferred to third-party terminal 200b is also information transmitted from server device 400. Therefore, it is possible to avoid generating authentication information in user terminal 200a without restrictions, and to avoid the generated authentication information being transferred to third-party terminal 200b. Therefore, while ensuring security, authentication information can be shared by user terminal 200a and third-party terminal 200b. Furthermore, since the authentication information for lending is transmitted from server device 400, the authentication information to be transferred from user terminal 200a to third-party terminal 200b can be recorded or managed on the server device 400 side.

[0090] Variation Example

[0091] In the first embodiment, the vehicle control device 11 includes a key unit 100. Furthermore, authentication information is sent from the portable terminal 200 to the key unit 100, and then the key ID is sent from the key unit 100 to the control device. However, a configuration where the key unit 100 does not intervene between the portable terminal 200 and the control device 300 can be adopted. In this case, the key ID is transmitted from the server device 400 to the portable terminal 200. Then, the key ID is sent from the portable terminal 200 to the control device 300. At this time, the key ID corresponds to "key information". Similarly, with this configuration, by adding transfer permission information that allows the key ID to be transferred between the user terminal 200a and the third-party terminal 200b without going through the server 400 to the key ID to be transmitted from the server device 400, the key ID can be shared by the user terminal 200a and the third-party terminal 200b while ensuring security.

[0092] Second Embodiment

[0093] The key system according to this embodiment is similar in structure to the key system according to the first embodiment. In this embodiment, it is possible to restrict the control of the vehicle performed by a third party using a third-party terminal. The differences between this embodiment and the first embodiment will be mainly described below.

[0094] User terminal operation

[0095] When a user shares vehicle 10 with a third party, the user may sometimes allow the third party to enter and exit the passenger compartment (or luggage compartment) of vehicle 10 (i.e., the user allows the third party to lock and unlock the doors of vehicle 10), but may not allow the third party to drive vehicle 10. In this embodiment, in this situation, when the user requests the server device 400 to transmit the authentication information used for lending, the user requests that functional restriction information (third information) be added to the authentication information used for lending.

[0096] Figure 6 This is a view of an operation screen 2040, which is included in the input / output unit 204a of the user terminal 200a and operates when the user requests the transmission of authentication information for lending to the server device 400. The operation screen 2040 includes a "Permit to Drive" button 2041 and a "Demit to Drive" button 2042 as operation buttons (UI elements).

[0097] If the user allows a third party to drive vehicle 10, the user selects the "Permit to Drive" button 2041 on the operation screen 2040. When the "Permit to Drive" button 2041 is selected, no request is made to the server device 400 to add functional restriction information to the authentication information used for lending. Conversely, if the user does not allow a third party to drive vehicle 10, the user selects the "Disallow Driving" button 2042 on the operation screen 2040. When the "Disallow Driving" button 2042 is selected, a request is made to the server device 400 to add functional restriction information to the authentication information used for lending. Figure 6 The diagram shows the following state: Because the user selected the "Do Not Drive" button 2042, the checkbox for the "Do Not Drive" button 2042 has been checked.

[0098] Sharing of authentication information

[0099] Figure 7 It is used to describe situations where the user does not allow a third party to drive the vehicle (i.e., such as...). Figure 6 The image shown shows the transfer of authentication information from user terminal 200a to third-party terminal 200b in the key system according to this embodiment, when the user selects the "Do not drive" button 2042 on the operation screen 2040 of user terminal 200a. Figure 8 This is a view showing the processing and data flow when authentication information is transferred from user terminal 200a to third-party terminal 200b in that situation.

[0100] When a user selects the "Disallow Driving" button 2042 on the operation screen 2040 of the user terminal 200a, the user terminal 200a sends a function restriction request for the authentication information used for lending, along with a transmission request for the authentication information used for lending, to the server device 400. Figure 8 (S301 in the example). In the server device 400, when the request receiving unit 401 receives a request, the information generation unit 402 generates authentication information I1 associated with the vehicle 10. Furthermore, the information generation unit 402 adds a Function Restriction Request (RF) I3 along with Transfer Permission Information (DR) I2 to the authentication information I1. Figure 8 (S302 in the middle).

[0101] At this time, function restriction information I3 is generated based on the function restriction request received from user terminal 200a. That is, the restriction content to be restricted by function restriction information I3 is set according to the request content of the function restriction request. Here, since the "Do Not Drive" button 2042 is selected on the operation screen 2040 of user terminal 200a, a function restriction request is sent from user terminal 200a. That is, in this function restriction request, the user requests that engine start permission control not be performed in the vehicle control device 11 of vehicle 10. Therefore, function restriction information I3 is generated as information for restricting the vehicle control device 11 of vehicle 10 from performing engine start permission control. The operation of vehicle control device 11 of vehicle 10 when it receives authentication information I1 with function restriction information I3 added will be described in detail later.

[0102] Then, the information sending unit 403 of the server device 400 sends the authentication information I1, which has been supplemented with handover permission information I2 and function restriction information I3, to the user terminal 200a. Figure 8 (S303 in the example). Then, when user terminal 200a receives authentication information I1 with handover permission information I2 and function restriction information I3 added, user terminal 200a, in response to the user's input operation, sends the authentication information I1 with function restriction information I3 added to the third-party terminal 200b through inter-terminal communication unit 205a. Figure 8 (S304 in the example). The third-party terminal 200b stores the authentication information I1, which has been modified with functional restriction information I3, received from the user terminal 200a via the inter-terminal communication unit 205b, in the storage unit included in the control unit 203.

[0103] Key system characteristics

[0104] Next, the operation of the key system in an embodiment will be described when a third party uses a third-party terminal 200b with authentication information I1 that has been added with functional restriction information I3 to unlock the door of the vehicle 10. Figure 9 This is a view showing the processing and data flow when the door of vehicle 10 is unlocked.

[0105] When a third party performs an operation to unlock the door of vehicle 10 using third-party terminal 200b, third-party terminal 200b sends authentication information with added Function Restriction Information (RF) along with the unlock request to key unit 100 of vehicle control device 11 (S401). Then, key unit 100 performs authentication processing based on the authentication information received from third-party terminal 200b (S402). The authentication processing in S402 itself is related to... Figure 3 The authentication process in S102 is the same. However, even if the authentication information is successfully authenticated in the authentication process of S402 when the function restriction information has already been added, the engine start permission signal is not sent from the key unit 100. That is, only the unlock signal is sent from the key unit 100 to the control device 300 along with the key ID (S403). Then, the control device 300 receives the key ID and the unlock signal, and performs the authentication process based on the key ID (S404). When the key ID is successfully authenticated, the control device 300 performs the unlocking control to unlock the door of the vehicle 10 (S405). Because the control device 300 does not receive the engine start permission signal, the control device 300 does not perform the engine start permission control that puts the engine ECU 305 into the engine start permission state.

[0106] As described above, when functional restriction information is added to the authentication information sent from the third-party terminal 200b to the key unit 100 of the vehicle control unit 11, the engine ECU 305 is not placed in the engine start-allowed state. Therefore, a third party possessing the third-party terminal 200b cannot start the engine 13 of the vehicle 10, even though the third party can lock and unlock the doors of the vehicle 10. That is, a third party cannot use the third-party terminal 200b to drive the vehicle 10.

[0107] In this way, when functional restriction information is added to the authentication information transferred from user terminal 200a to third-party terminal 200b, it is possible to restrict the controls that the vehicle control unit 11 is allowed to perform on the vehicle 10 when the authentication information is sent from the third-party terminal 200b to the vehicle control unit 11. That is, it is possible to restrict the controls that a third party is allowed to perform on the vehicle 10 using the third-party terminal 200b. In the above description, the control restricted by adding functional restriction information to the authentication information is engine start permission control, but another control that is allowed to be performed when the vehicle control unit 11 receives authentication information from a portable terminal can also be restricted.

[0108] First variant example

[0109] In the second embodiment, the server device 400 adds functional restriction information to the authentication information for lending based on a request sent from the user terminal 200a. Then, the authentication information with the added functional restriction information is sent from the server device 400 to the user terminal 200a. However, the addition of functional restriction information to the authentication information for lending can also be performed on the user terminal 200a side. Similarly, in this case, in response to a request sent from the user terminal 200a, the authentication information for lending with added transfer permission information is sent from the server device 400 to the user terminal 200a. Then, in response to a request from the user... Figure 6 The input operation performed by the operation screen 2040 of the user terminal 200a shown adds function restriction information to the authentication information for lending in the user terminal 200a. The addition of the function restriction information to the authentication information for lending is performed by the control unit 203. Then, similar to the second embodiment, the user terminal 200a sends the authentication information with the added function restriction information to the third-party terminal 200b. Again, in this case, similar to the second embodiment, it is possible to restrict the control that a third party is allowed to perform on the vehicle 10 using the third-party terminal 200b.

[0110] Second variant example

[0111] Adding functional restriction information to the authentication information used for lending does not always need to be done based on a request from the user. That is, when the server device 400 transmits the authentication information for lending, the server device 400 may automatically add pre-determined functional restriction information to the authentication information at the same time as adding transfer permission information.

[0112] Third Embodiment

[0113] The key system according to this embodiment is similar in structure to the key system according to the first embodiment. In this embodiment, it is possible to restrict the time periods or areas during which third parties are allowed to use a third-party terminal to access the vehicle. The main differences between this embodiment and the first embodiment will be described below.

[0114] User terminal operation

[0115] When a user shares vehicle 10 with a third party or lends vehicle 10 to a third party, the user sometimes restricts the time period or area during which the third party is allowed to use vehicle 10. In this embodiment, when the user requests the server device 400 to transmit authentication information for lending, the user requests that usage restriction information (fourth information) be added to the authentication information for lending. Here, the usage restriction information may be time period restriction information for restricting the time period during which the third party is allowed to use vehicle 10, or it may be area restriction information for restricting the area during which the third party is allowed to use vehicle 10. In addition, the usage restriction information may include time period restriction information and area restriction information.

[0116] Figure 10 and Figure 11 This is a view showing the operation screen of a touchpad display included in the input / output unit 204a of the user terminal 200a and which operates when the user requests the transmission of authentication information for lending to the server device 400. Figure 10 The diagram shows an operation screen 2043 when a user requests to add time-limited information as usage restriction information. The operation screen 2043 includes an operation button (UI element) 2044 for inputting the validity period. The validity period entered here is the time limit during which the authentication information can be effectively used by the third-party terminal 200b after the authentication information is transferred from the user terminal 200a to the third-party terminal 200b. Based on the validity period entered on the operation screen 2043, the valid usage period of the authentication information for lending, restricted by the time-limited information, is set. That is, the time-limited information restricts the usage period during which the third-party terminal 200b is allowed to effectively use the authentication information. The valid usage period for the authentication information for lending can be directly entered on the operation screen 2043 instead of the validity period. Furthermore, instead of allowing the third-party terminal 200b to effectively use the authentication information, the number of times the third-party terminal 200b can effectively use the authentication information can be limited.

[0117] Figure 11 An operation screen 2045 is shown when a user requests to add area restriction information as usage restriction information. The operation screen 2045 includes operation buttons (UI elements) 2046 for inputting a valid area. On this operation screen 2045, the valid area is input by selecting from a plurality of pre-defined areas (areas A, B, C, D). The method for inputting the valid area is not limited to this method; for example, the valid area can be set on a map displayed on the screen. The valid usage area restricted by the area restriction information for authentication information used for lending is set based on the valid area input on this operation screen 2045. That is, the area restriction information is information that restricts the area where the third-party terminal 200b is allowed to effectively use the authentication information.

[0118] Sharing of authentication information

[0119] Figure 12 This is used to describe situations where the user provides restrictions regarding the use of vehicle 10 by a third party (i.e., in...). Figure 10 When the validity period is entered on the operation screen 2043 of the user terminal 200a shown, and / or when the validity period is entered on the operation screen 2043, the validity period is entered on the user terminal 200a shown. Figure 11 The view shown is of the transfer of authentication information from user terminal 200a to third-party terminal 200b in the key system according to this embodiment, when a valid area is input on the operation screen 2045 of user terminal 200a. Figure 13 This is a view showing the processing and data flow when authentication information is transferred from user terminal 200a to third-party terminal 200b in this situation.

[0120] If the user enters the validity period on the operation screen 2043 and / or the user enters the valid area on the operation screen 2045, the user terminal 200a sends a user restriction request for authentication information for lending, along with a transmission request for authentication information for lending, to the server device 400. Figure 13 (S501 in the above). In the server device 400, when the request receiving unit 401 receives the request, the information generation unit 402 generates authentication information I1 associated with the vehicle 10. Furthermore, the information generation unit 402 adds usage restriction information (RU) I4 along with transfer permission information (DR) I2 to the authentication information I1. Figure 13 (S502 in the text).

[0121] At this time, the usage restriction information I4 is generated based on the usage restriction request received from the user terminal 200a. That is, the restriction content imposed by the usage restriction information I4 is set according to the request content of the usage restriction request. Here, because... Figure 10 The user terminal 200a shown in the figure shows the user inputting the validity period and / or entering it on the operation screen 2043 and / or on the operation screen 2043. Figure 11 The user terminal 200a, as shown, inputs a valid area on its operation screen 2045, and sends a usage restriction request from the user terminal 200a. That is, in this usage restriction request, the user requests the authentication information used for lending to set the valid usage period and / or valid usage area as described above. Thus, usage restriction information I4 is generated based on the valid usage period and / or valid usage area set as described above.

[0122] Then, the information sending unit 403 of the server device 400 sends the authentication information I1, which has been accompanied by handover permission information I2 and usage restriction information I4, to the user terminal 200a. Figure 13(S503). When user terminal 200a receives authentication information I1 with handover permission information I2 and usage restriction information I4 added, in response to the user's input operation, user terminal 200a sends the authentication information I1 with usage restriction information I4 added to third-party terminal 200b through inter-terminal communication unit 205a. Figure 13 (S504). The third-party terminal 200b stores the authentication information I1, which has been received from the user terminal 200a through the inter-terminal communication unit 205b and has been accompanied by the usage restriction information I4, in the storage unit included in the control unit 203.

[0123] Key system characteristics

[0124] When the third-party terminal 200b receives authentication information with added usage restriction information, it allows the third party to use the third-party terminal 200b to utilize the vehicle 10. That is, by transmitting the authentication information along with the control request from the third-party terminal 200b to the vehicle control device 11 of the vehicle 10, the vehicle control device 11 can execute control corresponding to the control request.

[0125] However, when the usage restriction information includes time-limited restrictions, the authentication information stored in the control unit 203 of the third-party terminal 200b expires when the set valid usage period has elapsed. Therefore, when the valid usage period has elapsed, the third party is not allowed to use the third-party terminal 200b to use the vehicle 10. Before the valid usage period expires, the third-party terminal 200b can notify the third party of the expiration of the set valid usage period. Furthermore, when the usage restriction information includes information limiting the number of times the valid usage authentication information can be used, the authentication information stored in the control unit 203 of the third-party terminal 200b expires when the authentication information sent from the third-party terminal 200b to the vehicle control device of the vehicle 10 reaches the set number of valid uses.

[0126] Furthermore, when the usage restriction information includes area restriction information, if a third party driving the vehicle 10 moves it outside the designated valid usage area, the third-party terminal 200b is not allowed to send authentication information to the vehicle control device 11. Therefore, outside the valid usage area, a third party is not allowed to use the vehicle 10 using the third-party terminal 200b. The location of the third-party terminal 200b can be obtained by a location information acquisition device such as GPS installed on the third-party terminal 200b or the vehicle 10. Then, whether the third-party terminal 200b and the vehicle 10 exist within the valid usage area can be determined based on the acquired location information. When it is desired to move the third-party terminal 200b and the vehicle 10 outside the valid usage area, or when they have already been moved outside the valid usage area, the third-party terminal 200b can notify the third party of this effect.

[0127] As described above, by adding usage restriction information to the authentication information transferred from user terminal 200a to third-party terminal 200b, the use of authentication information by third-party terminal 200b can be restricted. That is, when the third party sends authentication information from third-party terminal 200b to vehicle control device 11, restrictions on the use of vehicle 10 can be provided.

[0128] First variant example

[0129] Together with the usage restriction information, the functional restriction information described in the second embodiment can be added to the authentication information transferred from user terminal 200a to third-party terminal 200b.

[0130] Second variant example

[0131] In the second embodiment, the server device 400 adds usage restriction information to the authentication information for lending based on a request sent from the user terminal 200a. Then, the server device 400 sends the authentication information with the added usage restriction information to the user terminal 200a. However, the addition of usage restriction information to the authentication information for lending can also be performed on the user terminal 200a side. In this case, the server device 400, in response to a request sent from the user terminal 200a, sends the authentication information for lending, with the added transfer permission information, to the user terminal 200a. Then, in the user terminal 200a, in response to a user's request... Figure 10 and / or Figure 11The input operations performed on the operation screens 2043 and 2045 of the user terminal 200a shown in the diagram involve adding usage restriction information to the authentication information. This addition of usage restriction information to the authentication information is performed by the control unit 203. Then, similar to the third embodiment, the user terminal 200a sends the authentication information with the added usage restriction information to the third-party terminal 200b. Also in this case, similar to the third embodiment, when the third party sends the authentication information from the third-party terminal 200b to the vehicle control device 11, restrictions regarding the use of the vehicle 10 can be provided.

[0132] Third variant example

[0133] It is not always necessary to add usage restriction information to the authentication information used for lending based on user requests. That is, when the server device 400 transmits the authentication information used for lending, the server device 400 can automatically add usage restriction information with predetermined usage restriction content to the authentication information at the same time as adding transfer permission information.

[0134] Fourth embodiment

[0135] The outline of the key system according to this embodiment is the same as that according to the key system according to the first embodiment. In this embodiment, by restricting third-party terminals to the destinations from which authentication information is sent from the user terminal, the scope of third parties with whom the user shares authentication information can be limited to third-party terminals belonging to a specific group. The differences between this embodiment and the first embodiment will be mainly described below.

[0136] User terminal operation

[0137] By limiting the third-party terminals to which authentication information can be sent from the user terminal to specific third-party terminals, it is possible to prevent authentication information from being sent to terminals to which the user does not intend to send authentication information. Therefore, in this embodiment, when the user requests the server device 400 to transmit authentication information for lending, the user requests that sharer restriction information (fifth information) be added to the authentication information for lending.

[0138] Figure 14This is a view of an operation screen 2047, which is included in the input / output unit 204a of the user terminal 200a and is operated when a user requests the transmission of authentication information for lending to the server device 400. The operation screen 2047 includes operation buttons (UI elements) 2048 for inputting groups of shared authentication information. On the operation screen 2047, a specific group is input by selecting from a plurality of previously set groups (groups A, B, C, D, ...). Here, in the user terminal 200a, multiple candidates who can be sharers of authentication information are registered in a registration unit included in the control unit 203 and simultaneously grouped into multiple groups (groups A, B, C, D, ...). That is, multiple third-party terminals corresponding to the candidates are registered and simultaneously grouped into multiple groups. In this embodiment, the registration unit included in the control unit 203 corresponds to a "registration unit". On the operation screen 2047, a specific group is selected from the plurality of groups registered in the registration unit of the control unit 203. Figure 14 The diagram illustrates the state where group A has been selected as a specific group. The method for setting a specific group is not limited to this method; for example, a specific group can be set by selecting candidates from a list of names (address book, etc.) included in a pre-defined application in user terminal 200a.

[0139] Sharing of authentication information

[0140] Figure 15 This is used to describe situations where a user restricts the sharing of authentication information to specific third-party terminals belonging to a specific group (i.e., when the user...). Figure 14 The view showing the transfer of authentication information from user terminal 200a to third-party terminal 200b in the key system according to this embodiment (when a specific group is entered on the operation screen 2047 of user terminal 200a). Figure 16 This is a view illustrating the processing and data flow when authentication information is transferred from user terminal 200a to third-party terminal 200b in this scenario. In the following description, it is assumed that... Figure 14 On the operation screen 2047 of the user terminal 200a shown, group A is selected as a specific group.

[0141] When a user enters a specific group on the operation screen 2047 (selecting group A in this example), the user terminal 200a sends information about each specific third-specific terminal belonging to group A (hereinafter also referred to as "A terminal ID") along with a request to transmit authentication information for lending to the server device 400. Figure 16(S601 in the above). In the server device 400, when the request receiving unit 401 receives a transmission request for authentication information for lending and a terminal ID, the information generation unit 402 generates authentication information I1 associated with the vehicle 10. Furthermore, the information generation unit 402 adds sharer restriction information (RG) I5 along with transfer permission information (DR) I2 to the authentication information I1. Figure 16 (S602 in the example). The sharer restriction information I5 to be added at this time is information generated in association with the A terminal ID received from user terminal 200a.

[0142] Then, the information sending unit 403 of the server device 400 sends the authentication information I1, which has been updated with handover permission information I2 and sharer restriction information I5, to the user terminal 200a. Figure 16 (S603 in the example). Since user terminal 200a receives authentication information I1 with shared user restriction information I5 added, the destination to which authentication information I1 is allowed to be sent is limited to a specific third-party terminal belonging to group A. That is, when user terminal 200a receives authentication information I1 with shared user restriction information I5 added, user terminal 200a is not allowed to send authentication information I1 to a third-party terminal that does not belong to group A, even if handover permission information I2 has been added to authentication information I1. Then, in response to the user's input operation, user terminal 200a sends authentication information I1 with shared user restriction information I5 added to third-party terminal 200b belonging to group A through inter-terminal communication unit 205a. Figure 16 (S604 in the original text). It is possible to configure third-party terminals that do not belong to group A so that when user terminal 200a sends authentication information I1 with shared user restriction information I5 added, third-party terminals that do not belong to group A cannot receive authentication information I1.

[0143] First variant example

[0144] The functional restriction information described in the second embodiment and / or the usage restriction information described in the third embodiment can be added to the authentication information transferred from user terminal 200a to third-party terminal 200b belonging to a specific group.

[0145] Second variant example

[0146] In the fourth embodiment, the server device 400 adds sharer restriction information to the authentication information for lending based on a request sent from the user terminal 200a. Then, the server device 400 sends the authentication information with the added sharer restriction information to the user terminal 200a. However, adding the sharer restriction information to the authentication information for lending can also be performed on the user terminal 200a side. In this case, the server device 400, in response to a request sent from the user terminal 200a, sends the authentication information for lending, with the added transfer permission information, to the user terminal 200a. Then, in the user terminal 200a, in response to a user's request... Figure 14 The input operation performed on the operation screen 2047 of the user terminal 200a shown indicates that sharer restriction information is added to the authentication information. The addition of the sharer restriction information to the authentication information is performed by the control unit 203. Similarly, in this case, as in the fourth embodiment, the third-party terminal 200b to which authentication information is allowed to be sent from the user terminal 200a can be restricted to only specific third-party terminals.

[0147] Third variant example

[0148] Adding sharer restriction information to the authentication information used for lending does not always need to be done based on a request from a user. That is, when the server device 400 transmits the authentication information for lending, the server device 400 can automatically add sharer restriction information that predetermines a specific third-party terminal to the authentication information at the same time as adding transfer permission information.

[0149] Fifth Embodiment

[0150] The outline of the key system according to this embodiment is the same as that of the key system according to the first embodiment. In this embodiment, similar to the fourth embodiment, in user terminal 200a, multiple candidates who can be sharers of authentication information are registered in a registration unit included in control unit 203 and grouped into multiple groups. Furthermore, in the key system according to this embodiment, similar to the second embodiment, functional restriction information can be added to the authentication information transmitted from user terminal 200a to third-party terminal 200b. Moreover, in the key system according to this embodiment, similar to the third embodiment, usage restriction information can be added to the authentication information transmitted from user terminal 200a to third-party terminal 200b.

[0151] In this embodiment, when authentication information is shared by user terminal 200a and third-party terminal 200b, restriction content for functional restriction information and / or usage restriction information to be added to the authentication information is set for each of the aforementioned groups (groups composed of multiple third-party terminals) registered in the registration unit included in the control unit 203 of user terminal 200a. Specifically, user terminal 200a sets restriction content for each group in a functional restriction request. Then, when user terminal 200a sends a transmission request for authentication information for lending to server device 400, user terminal 200a sends together a functional restriction request corresponding to the group to which the third-party terminal, which is the destination of the authentication information for lending, belongs. Thus, in server device 400, functional restriction information corresponding to the functional restriction request set for each group is added to the authentication information for lending.

[0152] Furthermore, user terminal 200a sets restriction content for each group in the usage restriction request. Then, when user terminal 200a sends a request to server device 400 to transmit authentication information for lending, user terminal 200a sends along with a usage restriction request corresponding to the group to which the third-party terminal, the destination of the authentication information for lending, belongs. Thus, in server device 400, functional restriction information corresponding to the usage restriction request set for each group is added to the authentication information for lending.

[0153] As described above, authentication information with added functional restriction information and / or usage restriction information can be sent to third-party terminals. This functional restriction information and / or usage restriction information has restriction content corresponding to the group to which the third-party terminal, as the sharer of the authentication information, belongs.

[0154] Variation Example

[0155] Furthermore, in the case of adding functional restriction information and / or usage restriction information to the authentication information for lending as described in the fifth embodiment, wherein the functional restriction information and / or usage restriction information has restriction content corresponding to the group to which the third-party terminal, as the sharer of the authentication information, belongs, the addition of functional restriction information and / or usage restriction information to the authentication information for lending can be performed on the user terminal 200a side rather than on the server device 400 side.

[0156] Other embodiments

[0157] In the above description, the object to be controlled when authentication information is sent from the portable terminal to the control device is a vehicle. However, the system described above can be applied to objects other than vehicles, such as facilities (including buildings and houses), aircraft, ships, etc. By applying the system, user terminals and third-party terminals can share authentication information used to enable a control device equipped in an object other than a vehicle to perform predetermined control over that object.

[0158] In the above description, when the information generation unit adds second information to the first information, the information generation unit further adds third information to the first information. This third information is used to restrict predetermined controls that are allowed to be performed on the object when the control device receives the first information. However, the third information added to the first information by the information generation unit can be information used to additionally permit predetermined controls that are allowed to be performed on the object when the control device receives the first information. Thus, predetermined controls that are allowed to be performed on the object by the control device when a third-party terminal sends the first information to the control device are additionally permitted. Therefore, when a third party uses a third-party terminal to utilize the object, it is possible to additionally permit the control device to perform predetermined controls on the object. This modification is effective when predetermined controls are pre-restricted.

[0159] In the above scenario, the information generation unit can set content included in the third information and additionally permitted in the predetermined control based on the function permission request sent from the user terminal to the transmission device, and can add the third information to the first information. Thus, when the user sets the content of the function permission request sent from the user terminal to the transmission device, the user can determine the content additionally permitted in the predetermined control, and when a third party sends the first information from its terminal to the control device, the control device is allowed to perform the predetermined control on that object.

[0160] In the above scenario, the user terminal may further include a registration unit configured to register multiple third-party terminals while grouping them into multiple groups. The user terminal can set restriction content in a function restriction request for each group and can send the function restriction request to a transmission device. In this case, the information generation unit can add third information corresponding to the function restriction request set for each group to the first information. Thus, for each group, the user can set additional permitted content in a predetermined control that the control device is allowed to perform on the object when the first information is sent from the third-party terminal to the control device.

[0161] In the above description, when the information generation unit adds second information to the first information, the information generation unit further adds fourth information to the first information. This fourth information is used to restrict the use of the first information by a third-party terminal. However, the information generation unit may further add fourth information to the first information as additional permission for the third-party terminal to use the first information. Then, when the user terminal receives the first information with the second and fourth information added from the transmission device, the user terminal can send the first information with the fourth information added to it from the inter-terminal communication unit to the third-party terminal. Thus, the third-party terminal receives the first information with the fourth information added to it. Therefore, when the third-party terminal sends the first information from itself to the control device, additional permission for the use of the object can be provided.

[0162] In the above scenario, the information generation unit can set the content of additional permission for the first information included in the fourth information based on the usage permission request sent from the user terminal to the transmission device, and can add the fourth information to the first information. Thus, when the user sets the content of the usage permission request sent from the user terminal to the transmission device, the user can determine the content of additional permission for the use of the object when a third party sends the first information from a third-party terminal to the control device.

[0163] Here, the fourth information may include information authorizing a third-party terminal to effectively use the first information for a specified period or number of uses. When the third-party terminal receives the first information to which the fourth information has been added, it sends the first information to the control device, thereby authorizing the control device to perform predetermined control over the object for a specified period or number of uses. Therefore, it is possible to additionally authorize a third party to utilize the object for a specified period or number of uses. Furthermore, when the object is a moving body such as a vehicle, the fourth information may include information for authorizing a region to effectively use the first information. When the third-party terminal receives the first information to which the fourth information has been added, it additionally authorizes a region to which the control device is allowed to perform predetermined control over the moving body (object) when the first information is sent from the third-party terminal to the control device. Therefore, it is possible to additionally restrict the region where a third party is allowed to utilize the moving body (object).

[0164] When the user terminal further includes a registration unit configured to register multiple third-party terminals while grouping them into multiple groups, the user terminal can set the license content in the license request for each group and can send the license request to the transmission device. In this case, in the transmission device, the information generation unit adds fourth information corresponding to the license request set for each group to the first information. Thus, for each group, when a third party sends the first information from the third-party terminal to the control device, the user can set the license content for the use of the object.

[0165] For example, when the object is a facility, by sending authentication information from a portable terminal to a control device equipped in the facility, the control device can perform lock-unlock control (locking or unlocking the facility's doors), power-on control (connecting the power to electrical products in the facility), etc. In this case, similar to the second embodiment, by adding function restriction information for restricting power-on control to the authentication information transmitted from the user terminal to the third-party terminal, a third party can be allowed to use the third-party terminal to lock and unlock the facility's doors, but is not allowed to use the electrical products in the facility. Furthermore, if the authentication information transmitted from the user terminal to the third-party terminal only pre-includes authentication information for locking and unlocking the facility's doors, by adding function permission information for authorizing power-on control of electrical products in the facility to the authentication information transferred from the user terminal to the third-party terminal, a third party can be allowed to use the third-party terminal to lock and unlock the facility's doors and utilize the electrical products in the facility.

Claims

1. A key information sharing system which allows key information as first information associated with an object equipped with a control device to be shared, the control device performing a predetermined control on the object when the control device receives the first information from an external terminal, the key information sharing system comprising: a server configured to transmit the first information; and a first portable terminal possessed by a user, the first portable terminal configured to receive the first information transmitted from the server, wherein the server includes a processor configured to add second information to the first information transmitted to the first portable terminal, the second information being information which allows the first information to be handed over between the first portable terminal and a second portable terminal possessed by a third party without passing through the server, the first portable terminal includes an inter-terminal communication interface circuit configured to transmit the first information to the second portable terminal in response to an input operation of a user when the first portable terminal receives the first information to which the second information has been added from the server; the processor of the server sets a limitation content of the predetermined control based on a function limitation request transmitted from the first portable terminal to the server, and adds third information to the first information, the limitation content being contained in the third information, when the processor of the server adds the second information to the first information, the processor of the server further adds fifth information to the first information, the fifth information being information which allows the first information to be handed over only between the first portable terminal and a specific second portable terminal belonging to a specific group without passing through the server; and when the first portable terminal receives the first information to which the second information and the fifth information have been added from the server, the first portable terminal transmits the first information only to the specific second portable terminal.

2. The key information sharing system according to claim 1, wherein: when the processor of the server adds the second information to the first information, the processor of the server further adds the third information to the first information, the third information being information which limits the predetermined control allowed to be performed on the object when the control device receives the first information; and when the first portable terminal receives the first information to which the second information, the third information, and the fifth information have been added from the server, the first portable terminal transmits the first information to which the third information has been added from the inter-terminal communication interface circuit to the specific second portable terminal.

3. The key information sharing system according to claim 1, wherein: When the processor of the server adds the second information to the first information, the processor of the server further adds fourth information to the first information, the fourth information being information that restricts use of the first information by the specific second portable terminal; and When the first portable terminal receives the first information to which the second information, the fourth information, and the fifth information have been added from the server, the first portable terminal transmits the first information to which the fourth information has been added from the inter-terminal communication interface circuit to the specific second portable terminal.

4. The key information sharing system according to claim 3, wherein The processor of the server sets a restriction content in the first information based on a use restriction request transmitted from the first portable terminal to the server, and adds the fourth information to the first information, the restriction content being included in the fourth information.

5. The key information sharing system according to claim 4, wherein: The first portable terminal further includes a processor configured to register a plurality of the second portable terminals while grouping the plurality of the second portable terminals into a plurality of groups, and the first portable terminal sets the restriction content in the use restriction request for each of the groups and transmits the use restriction request to the server; and The processor of the server adds the fourth information corresponding to the use restriction request set for each of the groups to the first information.

6. The key information sharing system according to claim 3, wherein The fourth information includes information that restricts a use period or a use number of times that allows the second portable terminal to effectively use the first information.

7. The key information sharing system according to claim 3, wherein: The object is a mobile body; and The fourth information includes information that restricts an area that allows the second portable terminal to effectively use the first information.

8. The key information sharing system according to claim 1, wherein The processor of the server generates the fifth information based on information about the specific second portable terminal transmitted from the first portable terminal to the server, and adds the fifth information to the first information.

9. The key information sharing system according to claim 1, wherein: The first portable terminal further includes a processor configured to register a plurality of the second portable terminals while grouping the plurality of the second portable terminals into a plurality of groups, and the first portable terminal sets the restriction content in the function restriction request for each of the groups and transmits the function restriction request to the server; and The processor of the server adds the third information corresponding to the function restriction request set for each of the groups to the first information.

10. The key information sharing system according to claim 1, wherein When the first portable terminal receives the first information to which the second information and the fifth information have been added from the server, the first portable terminal transmits the first information to which the third information has been added to the specific second portable terminal, the third information being information that restricts the predetermined control that the control device is allowed to perform on the object when the control device receives the first information.

11. The key information sharing system according to claim 10, wherein The first portable terminal includes a processor configured to register a plurality of the second portable terminals while grouping the plurality of the second portable terminals into a plurality of groups, and the first portable terminal sets a restriction content included in the third information for each of the groups.

12. The key information sharing system according to claim 1, wherein When the first portable terminal receives the first information to which the second information and the fifth information have been added from the server, the first portable terminal adds fourth information to the first information and transmits the first information to which the fourth information has been added to the specific second portable terminal, the fourth information being information that restricts use of the first information in the control device.

13. The key information sharing system according to claim 12, wherein The first portable terminal includes a processor configured to register a plurality of the second portable terminals while grouping the plurality of the second portable terminals into a plurality of groups, and the first portable terminal sets a restriction content included in the fourth information for each of the groups.

14. The key information sharing system according to claim 1, wherein: The object is a vehicle; and The predetermined control includes a lock-unlock control of the vehicle and a control that places a drive source of the vehicle in a drivable state.

15. A transmission device, comprising: information transmission circuitry configured to transmit key information as first information to a first portable terminal possessed by a user, the first information being associated with an object equipped with a control device, the control device performing a predetermined control on the object when the control device receives the first information from an external terminal; and processor configured to add second information to the first information transmitted to the first portable terminal, the second information being information that allows the first information to be handed over between the first portable terminal and a second portable terminal possessed by a third party without passing through the transmission device, wherein the processor sets a restriction content of the predetermined control based on a function restriction request transmitted from the first portable terminal, and adds third information to the first information, the restriction content being included in the third information, when the processor adds the second information to the first information, the processor further adds fourth information to the first information, the fourth information being information that restricts use of the first information by the second portable terminal, The object is a mobile body; and The fourth information includes information that restricts an area in which the second portable terminal is allowed to effectively use the first information.

16. The delivery device of claim 15, wherein, When the processor adds the second information to the first information, the processor further adds third information to the first information, the third information being information that restricts the predetermined control allowed to be performed on the object when the control device receives the first information.

17. The delivery device of claim 15, wherein, The processor sets a restriction content to the first information based on a use restriction request transmitted from the first portable terminal, and adds fourth information to the first information, the restriction content being included in the fourth information.

18. The delivery device of claim 15, wherein, The fourth information includes information that restricts a use time period or a use number of times that the second portable terminal is allowed to effectively use the first information.

19. The delivery device of claim 15, wherein, When the processor adds the second information to the first information, the processor further adds fifth information to the first information, the fifth information being information that allows the first information to be handed over only between the first portable terminal and a specific second portable terminal belonging to a specific group without passing through the transfer device.

20. The delivery device of claim 19, wherein, The processor generates the fifth information based on information about the specific group transmitted from the first portable terminal, and adds the fifth information to the first information.

21. The transfer device according to claim 15, wherein: the moving body is a vehicle; and the predetermined control includes a lock-unlock control of the vehicle and a control that places a drive source of the vehicle in a drivable state.

22. A first portable terminal owned by a user, the first portable terminal comprising: a terminal-to-terminal communication interface circuit configured to transmit the first information to a second portable terminal in response to an input operation of the user when the first portable terminal receives the first information to which the second information has been added from the transfer device according to any one of claims 15 to 21.

Images