Digital key system

Abstract

The invention relates to a digital key system for a vehicle. The purpose of the present disclosure is to provide a technology capable of improving the convenience of use of a digital key for a vehicle. In a digital key system, vehicle-side key information is registered in a control device of a vehicle, and terminal-side key information is registered in a user terminal, whereby the user terminal can use a digital key of the vehicle. Furthermore, in the digital key system, when the use contract period of the digital key of the user expires, the key function of the user terminal is restricted without deleting the vehicle-side key information registered in the control device and the terminal-side key information registered in the user terminal.

Description

Technical Field

[0001] This disclosure relates to a digital key system for vehicles. Background Technology

[0002] Patent Document 1 discloses a vehicle system utilizing an electronic key. In the system disclosed in Patent Document 1, a server device acquires the usage status of electronic keys issued to two or more portable terminals. Then, if there is no usage record of the first electronic key issued to a first portable device in the past first period, the server device invalidates the first electronic key. The server device invalidates the first electronic key by deleting the authentication information corresponding to the first electronic key from the vehicle.

[0003] Existing technical documents

[0004] Patent documents

[0005] Patent Document 1: Japanese Patent Application Publication No. 2021-189849 Summary of the Invention

[0006] The purpose of this disclosure is to provide technology that can improve the convenience of using digital keys for vehicles.

[0007] In the digital key system disclosed herein, vehicle-side key information distributed from a server device is registered to the vehicle's control device, and terminal-side key information distributed from the server device is registered to the user's terminal of the vehicle. Thus, the user terminal can utilize the vehicle's digital key. However, when the user's digital key utilization contract expires, the vehicle-side key information registered to the control device and the terminal-side key information registered to the user terminal are not deleted; instead, the key function of the user terminal is restricted.

[0008] Invention Effects

[0009] According to this disclosure, the convenience of using digital keys for vehicles can be improved. Attached Figure Description

[0010] Figure 1 This is a diagram showing the processing in a digital key system at the start of digital key utilization.

[0011] Figure 2 This is a diagram showing the processing in a digital key system at the end of the use of a digital key.

[0012] Figure 3 It is a block diagram that roughly represents the structure of the control device and the user terminal.

[0013] Figure 4This is a sequence diagram illustrating the process of registering key information in user terminals and control devices.

[0014] Figure 5 (a) is a sequence diagram representing the process of restricting the key function of a user terminal. Figure 5 (b) is a sequence diagram representing the process of removing the restrictions on the key function of the user terminal.

[0015] Figure 6 This is a sequence diagram representing the process of deleting terminal-side key information registered in the user terminal.

[0016] Explanation of reference numerals in the attached figures:

[0017] 1: Digital key system; 10: Vehicle; 100: Control device; 110, 210: Control unit; 120, 220: Storage unit; 130, 230: Communication module; 140, 240: Short-range communication module; 150: Authentication module; 200: User terminal; 300: Smart key; 400: Management server. Detailed Implementation

[0018] To enable users to operate vehicles using user terminals, a digital key system has been developed. In the digital key system disclosed herein, vehicle-side key information and terminal-side key information are distributed from a server device. The vehicle-side key information is then registered with the vehicle's control device, and the terminal-side key information is registered with the vehicle user's user terminal, thereby enabling the user terminal to utilize the vehicle's digital key.

[0019] Furthermore, when registering vehicle-side key information with the vehicle's control unit, a smart key associated with the vehicle is required. The smart key functions as a vehicle key by communicating with the associated vehicle. To set the control unit to a registration mode capable of registering vehicle-side key information, a smart key is used. Specifically, authentication processing of the smart key associated with the vehicle is performed in the control unit, thereby setting the control unit to registration mode. Moreover, the smart key authentication process is performed through communication between the smart key residing in the vehicle and the control unit. Then, the vehicle-side key information received while the control unit is in registration mode is registered with the control unit.

[0020] In some cases, users need a digital key usage contract to utilize the digital key. For example, in services like car-sharing where a vehicle is rented to a user for a specified period, the digital key usage contract period is set based on the rental period. In such cases, if the digital key usage contract expires, the user cannot use the digital key through their user terminal. Therefore, if the user wants to continue using the vehicle, a new contract for digital key usage is required.

[0021] However, in the past, when the digital key usage contract expired, the registered terminal-side key information was generally deleted from the user's terminal. Additionally, the registered vehicle-side key information might also be deleted from the vehicle's control unit upon the expiration of the digital key usage contract. Therefore, with the re-signing of the digital key usage contract, in order to reuse the digital key, it is necessary to register the re-registered vehicle-side key information with the vehicle's control unit and the re-registered terminal-side key information with the user's terminal. At this time, similar to the initial registration of the vehicle-side key information with the vehicle's control unit, if the control unit is set to registration mode to allow the re-registration of the vehicle-side key information, the smart key authentication process needs to be performed again in the control unit. That is, the user needs to possess the smart key to enter the vehicle. Thus, if the smart key authentication process is required at the start of the reuse of the digital key, just like at the start of the initial use, the convenience of using the vehicle's digital key is reduced.

[0022] Therefore, in the digital key system disclosed herein, when the user's digital key usage contract expires, the vehicle-side key information registered in the control device and the terminal-side key information registered in the user terminal are not deleted; instead, the key function of the user terminal is restricted. Here, key function refers to the function that enables the user terminal, which has registered terminal-side key information, to act as a vehicle key.

[0023] Even when the vehicle-side key information is registered with the control device and the terminal-side key information is registered with the user terminal, the user cannot use the vehicle's digital key through the user terminal if the key function of the user terminal is restricted. However, if the restriction on the user terminal's key function is lifted through a re-signing agreement for digital key use, the user can then use the vehicle's digital key through the user terminal. In other words, even if the user does not perform the necessary operations to re-register the key information with the vehicle's control device and user terminal when a digital key use agreement is signed, the user can still use the vehicle's digital key through the user terminal.

[0024] As described above, according to the digital key system disclosed herein, when a new contract for the use of a digital key is signed after the expiration of the contract, the user can resume using the vehicle's digital key without having to perform the work of re-registering key information with the vehicle's control device and user terminal. Therefore, the convenience of using the vehicle's digital key is improved.

[0025] Hereinafter, specific embodiments of the present disclosure will be described based on the accompanying drawings. Unless otherwise specified, the dimensions, materials, shapes, and relative arrangements of the constituent components described in this embodiment are not intended to limit the technical scope of the present disclosure.

[0026] <Implementation Method>

[0027] (System Overview)

[0028] Figure 1 and Figure 2 This diagram illustrates an overview of the digital key system according to this embodiment. A digital key system is a system that enables a user terminal to utilize a vehicle's digital key. Figure 1 This is a diagram showing the processing in a digital key system at the start of digital key utilization. Figure 2 This is a diagram showing the processing in a digital key system at the end of the use of a digital key.

[0029] The digital key system 1 includes a control device 100, a user terminal 200, and a management server 400. The digital key system 1 is used, for example, in a service where a vehicle is rented to a user for a specified period, such as a car-sharing service. In this embodiment, vehicle 10 is a vehicle rented to a user for a specified period. The user is a signatory to a digital key usage contract for vehicle 10. The usage contract period for the digital key is set according to the rental period of vehicle 10. The control device 100 is a device mounted on vehicle 10. The user terminal 200 is a terminal carried by the user of vehicle 10.

[0030] The control device 100, user terminal 200, and management server 400 are interconnected via a network. Here, the network can be, for example, a WAN (Wide Area Network) such as the Internet, or a telephone communication network such as a portable telephone. Alternatively, the network may include a telephone communication network such as a portable telephone, or a wireless communication network such as Wi-Fi (registered trademark).

[0031] Management server 400 is a server device that manages information related to the digital key. Management server 400 manages the vehicle-side key information Kv and terminal-side key information Kt related to the digital key of vehicle 10. Both vehicle-side key information Kv and terminal-side key information Kt are information corresponding to vehicle 10. At the start of digital key usage, management server 400 distributes vehicle-side key information Kv and terminal-side key information Kt. Figure 1 As shown, when the management server 400 publishes vehicle-side key information Kv and terminal-side key information Kt, the management server 400 sends a dataset containing this information to the user terminal 200. When the user terminal 200 receives the dataset from the management server 400, it temporarily stores the received dataset.

[0032] Here, in order to utilize the digital key in vehicle 10, the vehicle-side key information Kv needs to be registered in the control device 100 of vehicle 10. Then, in order to register the vehicle-side key information Kv to the control device 100 of vehicle 10, the control device 100 needs to be switched to a registration mode. In the digital key system 1, as a mode-switching process to switch the control device 100 to the registration mode, the control device 100 needs to perform authentication processing of the smart key 300. The smart key 300 is a device associated with vehicle 10 and functions as a key to vehicle 10 by communicating with vehicle 10. That is, if a user holds the smart key 300, they can use vehicle 10 using the smart key 300. On the other hand, if the user terminal 200 in vehicle 10 can utilize the digital key, then even if the user does not hold the smart key 300, they can still use vehicle 10 using the digital key as long as they hold the user terminal 200. However, when the use of the digital key begins, a smart key 300 is required in order to register the vehicle side key information Kv with the control device 100.

[0033] In order to perform the authentication process of the smart key 300 in the control device 100, the user enters the vehicle 10 while holding the smart key. Then, the control device 100 performs the authentication process of the smart key 300 by communicating with the smart key 300 located inside the vehicle 10. At this time, the communication between the control device 100 and the smart key 300 can also be achieved through short-range wireless communication by the user swiping the smart key 300 to the start switch inside the vehicle 10.

[0034] If the control device 100 switches to registration mode by performing authentication processing of the smart key 300 in the control device 100, then the vehicle-side key information Kv can be processed in the control device 100. Then, as... Figure 1As shown, the user terminal 200 sends the vehicle-side key information Kv, which is contained in a temporarily stored dataset, to the control device 100, which is capable of receiving the status of the vehicle-side key information Kv. As a result, the user terminal 200 registers the terminal-side key information Kt, and the control device 100 registers the vehicle-side key information Kv. Thus, the user can utilize the digital key of the vehicle 10 through the user terminal 200.

[0035] On the other hand, in digital key system 1, if the user's digital key usage contract expires, a process is executed to terminate the use of the digital key. Specifically, as follows... Figure 2 As shown, a function restriction command is sent from the management server 400 to the user terminal 200. Upon receiving the function restriction command, the key function is restricted in the user terminal 200. The key function is the function that enables the user terminal 200 to act as a key for the vehicle 10. Specifically, the key function can also be the function of sending control commands to the control device 100 to control the vehicle 10. However, in the digital key system 1, even if the user's digital key usage contract expires, the key information is not deleted from either the control device 100 or the user terminal 200. That is, the control device 100 maintains the state of registering the vehicle-side key information Kv, and the user terminal 200 maintains the state of registering the terminal-side key information Kt. Thus, even if the vehicle-side key information Kv is registered in the control device 100 and the terminal-side key information Kt is registered in the user terminal 200, if the key function of the user terminal 200 is restricted, the user will not be able to use the digital key through the user terminal 200.

[0036] Here, sometimes after the digital key usage contract period temporarily expires, the user wishes to continue using vehicle 10, and therefore re-signs up the digital key usage contract. In this case, the restriction on the key function in user terminal 200 is lifted in digital key system 1. As mentioned above, after the digital key usage contract period expires, key information is also registered in control device 100 and user terminal 200 respectively. Therefore, if the restriction on the key function in user terminal 200 is lifted, the use of digital key by user terminal 200 can be restarted.

[0037] (Hardware Structure)

[0038] Next, based on Figure 3 The structure of the control device 100 and the user terminal 200 in the digital key system 1 will be described. Figure 3 This is a block diagram that schematically shows the structure of the control device 100 and the user terminal 200.

[0039] The control device 100 is a device for controlling the vehicle 10 via a digital key. Control of the vehicle 100 by the control device 100 includes, for example, locking or unlocking the electronic lock of the vehicle 10. The control device 100 includes a control unit 110, a storage unit 120, a communication module 130, a short-range communication module 140, and an authentication module 150.

[0040] The control unit 110 has the function of performing arithmetic processing for controlling the control device 100. The control unit 110 includes a processor such as a CPU (Central Processing Unit), main storage devices such as RAM (Random Access Memory), and auxiliary storage devices such as ROM (Read Only Memory). Furthermore, the CPU is an example of a processor / resource. RAM and ROM are examples of memory / resources. The control unit 110 can perform arbitrary information processing based on various programs and various data. However, some or all of the functions of the control unit 110 can also be implemented using hardware circuits such as ASICs and FPGAs.

[0041] The storage unit 120 is composed of any storage device such as RAM, ROM, hard disk drive, or flash memory. The storage unit 120 may also include a removable medium (removable recording medium). Here, the removable medium is, for example, a USB memory, SD card, or a disc recording medium such as a CD-ROM, DVD, or Blu-ray disc. The storage unit 120 stores the program executed by the control unit 110 and various data for program execution. Furthermore, in the control device 100, vehicle-side key information is registered by storing vehicle-side key information in the storage unit 120.

[0042] Communication module 130 is a communication interface for connecting control device 100 to a network. Communication module 130 is, for example, a LAN (Local Area Network) interface board or a wireless communication circuit for wireless communication. Control device 100 communicates with management server 400 via communication module 130. Short-range communication module 140 is an interface for control device 100 to communicate directly with user terminal 200 using a specified short-range wireless communication standard. Examples of specified short-range wireless communication standards include Bluetooth Low Energy and WiFi. Authentication module 150 has the function of authenticating smart key 300. Authentication module 150 receives signals sent from smart key 300 and authenticates smart key 300. Furthermore, in this embodiment, control device 100 does not necessarily need to be implemented through a single physical structure.

[0043] User terminal 200 is, for example, a smartphone, tablet computer, mobile computer, or wearable computer. User terminal 200 includes a control unit 210, a storage unit 220, a communication module 230, and a near-field communication module 240.

[0044] The control unit 210 has the function of performing arithmetic processing for controlling the user terminal 200. Similar to the control unit 110 of the control device 100, the control unit 210 includes a processor such as a CPU (Central Processing Unit), a main storage device such as RAM (Random Access Memory), and an auxiliary storage device such as ROM (Read Only Memory).

[0045] The storage unit 220 is composed of any storage device such as RAM, ROM, or flash memory. The storage unit 220 may also include a removable medium (removable recording medium). The storage unit 220 stores the program executed by the control unit 210 and various data used for program execution. Furthermore, in the user terminal 200, terminal-side key information is registered by storing terminal-side key information in the storage unit 220.

[0046] Communication module 230 is a communication interface for connecting user terminal 200 to a network. Communication module 230 is, for example, a wireless communication circuit for mobile communication. User terminal 200 communicates with management server 400 via communication module 230. Near Field Communication (NFC) module 240 is an interface for user terminal 200 to communicate directly with control device 100 using the same near field communication standard as control device 100's NFC module 140.

[0047] Furthermore, the management server 400 is composed of a computer equipped with a control unit, a storage unit, and a communication module. The management server 400 communicates with the control device 100 and the user terminal 200 via the communication module.

[0048] (Registration and processing of key information)

[0049] Next, based on Figure 4 The process of registering key information with the user terminal 200 and the control device 100 in the digital key system 1 so that the user can use the digital key of the vehicle 10 through the user terminal 200 is described. Figure 4 This is a sequence diagram illustrating the process of registering key information in the user terminal 200 and the control device 100. Furthermore, Figure 4 The process shown is performed while the user has signed a contract to use the digital key of vehicle 10.

[0050] During key information registration, in the digital key system 1, the user operates the user terminal 200 and sends a key information distribution request corresponding to the vehicle 10 to the management server 400 (S101). At this time, the distribution request sent from the user terminal 200 may include a user ID for identifying the user and a vehicle ID for identifying the vehicle 10.

[0051] When the management server 400 receives a distribution request from the user terminal 200, an authentication process (S102) is then performed between the management server 400 and the user terminal 200. This authentication process verifies that the user who requested the distribution of key information by operating the user terminal 200 is a legitimate user who has signed a digital key usage contract for the vehicle 10. This authentication process can also be performed, for example, through biometric authentication or password input on the user terminal 200.

[0052] When authentication is completed between the management server 400 and the user terminal 200, the key information corresponding to the vehicle 10 is distributed from the management server 400. Specifically, the management server 400 sends a dataset containing terminal-side key information Kt and vehicle-side key information Kv corresponding to the vehicle 10 to the user terminal 200 (S103). At this time, the management server 400 can also determine the user terminal 200 as the destination of the dataset based on the user ID contained in the distribution request. When the user terminal 200 receives the dataset sent from the management server 400, the dataset is stored in the storage unit 220 of the user terminal 200.

[0053] Next, a mode transfer process is performed in the digital key system 1. This mode transfer process is used to transfer the control device 100's mode to the registration mode. Specifically, firstly, the user operates the user terminal 200, sending a registration start instruction to the management server 400 (S104). This registration start instruction is an instruction to begin registering the vehicle-side key information Kv with the control device 100. Similar to the distribution request, the registration start instruction sent from the user terminal 200 may include a user ID for identifying the user and a vehicle ID for identifying the vehicle 10. Then, when the management server 400 receives the registration start instruction sent from the user terminal 200, authentication processing is performed again between the management server 400 and the user terminal 200 (S105).

[0054] When the authentication process is completed between the management server 400 and the user terminal 200, a mode transfer instruction is sent from the management server 400 to the control device 100 (S105). This mode transfer instruction instructs the control device 100 to transfer to the registration mode. At this time, the management server 400 can also determine the control device 100 as the destination of the mode transfer instruction based on the vehicle ID contained in the registration start instruction.

[0055] Next, the smart key 300 is authenticated in the control device 100 (S106). For this authentication, the smart key 300 must be present inside the vehicle 10. That is, the user must be holding the smart key 300 when entering the vehicle 10. Furthermore, if the smart key 300 needs to be swiped on the vehicle 10's ignition switch for communication between the control device 100 and the smart key 300, the user terminal 200 can display a message informing the user of this. Then, when the smart key 300 authentication is completed in the control device 100, the control device 100 switches to the registration mode (S107). That is, in the digital key system 1, if the smart key 300 is not present inside the vehicle 10, the smart key 300 authentication is not performed in the control device 100, and therefore the mode transfer process for switching the control device 100 to the registration mode cannot be completed.

[0056] When the control device 100 switches to the registration mode, pairing between the user terminal 200 and the control device 100 is then performed (S108). Alternatively, pairing between the user terminal 200 and the control device 100 can be performed after the user requests pairing on the user terminal 200. Then, when pairing between the user terminal 200 and the control device 100 is complete, the user terminal 200 sends the vehicle-side key information Kv contained in the temporarily stored dataset to the control device 100 (S109). Next, in the user terminal 200, the terminal-side key information Kt is registered by storing it in the storage unit 220 (S110). Conversely, in the control device 100, the vehicle-side key information Kv is registered by storing it in the storage unit 120 (S111).

[0057] Furthermore, the terminal-side key information Kt and vehicle-side key information Kv contained in the dataset sent from the management server 400 can also be encrypted. In this case, the terminal-side key information Kt is decrypted in the user terminal 200, and the decrypted terminal-side key information Kt is stored in the storage unit 220. Additionally, the encrypted vehicle-side key information Kv is sent from the user terminal 200 to the control device 100. Then, the control device 100 decrypts the vehicle-side key information Kv and stores the decrypted vehicle-side key information Kv in the storage unit 120.

[0058] (Handling restrictions on key functionality)

[0059] Next, based on Figure 5 (a) describes the process in the digital key system 1 where the key function of the user terminal 200 is restricted so that the user cannot use the digital key of the vehicle 10 through the user terminal 200. Figure 5 (a) is a sequence diagram representing the process of restricting the key function of user terminal 200. Furthermore, Figure 5 The process shown in (a) is performed after the expiration of the user’s contract period for using the digital key to vehicle 10.

[0060] When the key function of the user terminal 200 is restricted, in the digital key system 1, the management server 400 sends a function restriction command to the user terminal 200 (S201). When the user terminal 200 receives the function restriction command sent from the management server 400, it then restricts the key function in the user terminal 200 (S202). Thus, the function of sending control commands for controlling the vehicle 10 to the control device 100 via the short-range communication module 240 can also be restricted in the user terminal 200. For example, the icon for sending control commands displayed on the user terminal 200, which is operated by the user, can be grayed out. Therefore, the user cannot use the digital key of the vehicle 10 through the user terminal 200. However, the user terminal 200 retains the original state where the terminal-side key information Kt is stored in the storage unit 220.

[0061] When the restriction of the key function in the user terminal 200 is completed, the restriction result is then sent from the user terminal 200 to the management server 400 (S203). The restriction result here is a notification that the restriction of the key function has been completed in the user terminal 200.

[0062] In digital key system 1, such as Figure 5As shown in (a), after the expiration of the user's digital key usage contract, the user terminal 200 maintains the state in which the terminal-side key information Kt is stored in the storage unit 220, and the control device 100 maintains the state in which the vehicle-side key information Kv is stored in the storage unit 120.

[0063] (Handling restrictions on key functionality)

[0064] Next, based on Figure 5 (b) describes the process of removing the restriction on the key function of a temporarily restricted user terminal 200 in the digital key system 1. Figure 5 (b) is a sequence diagram showing the process of removing the restriction on the key function of user terminal 200. Furthermore, Figure 5 The process shown in (b) is performed in the case where the user re-signs up the use of the digital key of the same vehicle 10 after the temporary expiration of the contract for the use of the digital key of the vehicle 10.

[0065] When the restriction on the key function of the user terminal 200 is lifted, in the digital key system 1, the user operates the user terminal 200 to send a request to the management server 400 to lift the restriction on the key function (S301). Then, following this, S102 (the initial registration of key information)... Figure 4 Similarly, in S102, authentication is performed between the management server 400 and the user terminal 200 (S302).

[0066] When the authentication process between the management server 400 and the user terminal 200 is completed, a restriction release command is sent from the management server 400 to the user terminal 200 (S303). At this time, the management server 400 can also determine the user terminal 200 as the destination of the restriction release command based on the user ID included in the key function restriction release request. When the user terminal 200 receives the restriction release command sent from the management server 400, it then releases the restriction on the key function in the user terminal 200 (S304). At this time, in the user terminal 200, if the function of sending control commands for controlling the vehicle 10 via the short-range communication module 240 to the control device 100 is restricted, the restriction is released, thereby enabling the sending of control commands to the control device 100. In addition, if the control command sending icon displayed on the user terminal 200's screen turns gray, the graying is removed, allowing the user to operate the icon.

[0067] As described above, in the digital key system 1 according to this embodiment, when the user's digital key usage contract expires, the key information is not deleted from either the control device 100 or the user terminal 200; instead, the key function of the user terminal 200 is restricted. Then, even if the user does not perform operations such as authentication processing for the smart key 300 associated with the vehicle 10 to re-register key information, the restriction on the key function of the user terminal 200 can be lifted. Therefore, when a digital key usage contract is renewed after its expiration, the user can restart the use of the digital key for the vehicle 10 via the user terminal 200 even without performing operations to re-register key information with the vehicle's control device and the user terminal. Therefore, the convenience of using the digital key for the vehicle 10 can be improved.

[0068] Furthermore, in the above embodiment, when distributing key information corresponding to vehicle 10 from management server 400, a dataset including terminal-side key information and vehicle-side key information is sent from management server 400 to user terminal 200. Then, vehicle-side key information is sent from user terminal 200 to control device 100. However, it is also possible to send terminal-side key information from management server 400 to user terminal 200, and to send vehicle-side key information directly from management server 400 to control device 100.

[0069] (Variation Example 1)

[0070] In the digital key system 1, it is also possible to delete the terminal-side key information registered on the user terminal 200 if the user does not re-sign the contract for the use of the digital key after the expiration of the digital key usage contract period. Figure 6 This is a sequence diagram illustrating the process of deleting terminal-side key information registered in user terminal 200. Furthermore, Figure 6 The process shown is performed after the expiration of the user's contract period for using the digital key to vehicle 10.

[0071] In the management server 400, Figure 5 In step (a), after sending the function restriction instruction to the user terminal 200 in S201, it is determined whether a predetermined period t1 has elapsed without receiving a restriction release request from the user terminal 200 (S401). If an affirmative determination is made in S401, it is assumed that the user will not re-sign up for the use of the digital key. Therefore, in this case, the management server 400 then sends a deletion instruction for the registered terminal-side key information Kt to the user terminal 200 (S402).

[0072] When user terminal 200 receives a deletion command from management server 400, it then deletes the terminal-side key information Kt stored in storage unit 220 (S403). After the deletion of terminal-side key information Kt is completed in user terminal 200, a deletion result is sent from user terminal 200 to management server 400 (S404). This deletion result is a notification that the deletion of terminal-side key information Kt has been completed in user terminal 200.

[0073] As described above, by performing a process to delete the terminal-side key information registered in the user terminal 200, it is possible to suppress the state in which the terminal-side key information Kt corresponding to the vehicle 10 is unnecessarily stored in the user terminal 200.

[0074] <Other Implementation Methods>

[0075] The above-described implementation is merely an example, and this disclosure can be appropriately modified and implemented without departing from its spirit. Furthermore, the processes and units described in this disclosure can be freely combined and implemented as long as they do not create technical contradictions.

[0076] Furthermore, a process described as being performed by one device can also be executed by multiple devices. Alternatively, a process described as being performed by different devices can also be executed by a single device. In a computer system, it is possible to flexibly change the hardware architecture (server architecture) used to implement various functions.

[0077] This disclosure can also be implemented by providing a computer program that implements the functions described in the above embodiments to a computer, which has one or more processors that read and execute the program. Such a computer program can be provided to the computer either via a non-transitory computer-readable storage medium connectable to the computer's system bus or via a network. Non-transitory computer-readable storage media include, for example, any type of disk such as a magnetic disk (floppy disk, hard disk drive (HDD)), optical disk (CD-ROM, DVD, Blu-ray disc, etc.), read-only memory (ROM), random access memory (RAM), EPROM, EEPROM, magnetic cards, flash memory, or any type of medium suitable for storing electronic commands, such as optical cards.

Claims

1. A digital key system, wherein, Vehicle-side key information distributed from a server device is registered to a control device of a vehicle, and terminal-side key information distributed from the server device is registered to a user terminal of a user of the vehicle, whereby the user terminal can utilize a digital key of the vehicle, wherein At the expiration of a contract period for utilization of the digital key of the user, the vehicle-side key information registered to the control device and the terminal-side key information registered to the user terminal are not deleted, but a key function of the user terminal is restricted.

2. The digital key system according to claim 1, wherein the key function is restricted in the user terminal when a function restriction instruction is sent from the server device to the user terminal due to the expiration of the contract period for utilization of the digital key of the user.

3. The digital key system according to claim 1 or 2, wherein a restriction release request is sent from the user terminal to the server device at the time of re-subscription of utilization of the digital key of the user, the restriction of the key function is released in the user terminal when a restriction release instruction is sent from the server device that received the restriction release request to the user terminal.

4. The digital key system according to claim 3, wherein in the case where a prescribed period has elapsed since the key function of the user terminal was restricted due to the expiration of the contract period for utilization of the digital key of the user without the server device receiving the restriction release request from the user terminal, a deletion instruction is sent from the server device to the user terminal, and the registered terminal-side key information is deleted in the user terminal.

5. The digital key system according to claim 1, wherein in the case where the vehicle-side key information and the terminal-side key information are distributed from the server device, a data set containing the vehicle-side key information and the terminal-side key information is sent from the server device to the user terminal, and the vehicle-side key information contained in the data set is sent from the user terminal to the control device.

Images