Control apparatus, server, control method and program

Abstract

To provide a control apparatus, a server, a control method and a program which can prevent illegal operations such as a relay attack utilizing a smart key and can reduce the impact of communication delays between an ECU (Electronic Control Unit) and an external server.SOLUTION: An ECU 3 acquires fingerprint information for matching with user's fingerprint information from an administrative server 2 for saving the fingerprint information for matching at the time of initial user authentication and stores the same in a storage unit 33 within a vehicle, and further, utilizes the fingerprint information for matching appropriately for user authentication after the storage of the fingerprint information for matching in the storage unit 33 within the vehicle.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present invention relates to the technical field of a control device mounted on a vehicle equipped with a biological information detection sensor that detects biological information from a user's body. [Background technology]

[0002] In recent years, smart key systems, mainly for vehicles, are becoming mainstream. For example, there are systems that remotely perform operations such as unlocking car doors by linking with a smartphone. In addition, electronic (digital) license has been a hot topic in recent years, and it is expected that in the future, it will no longer be necessary to carry a paper license. Patent Document 1 discloses a vehicle management system that enables management of vehicles according to local conditions without requiring items for user authentication such as a license or IC card that may be lost. In this vehicle management system, a fingerprint reader provided on the operation surface of the engine start switch in the vehicle reads the fingerprint of the user, and the fingerprint information is sent to an external server by the vehicle's ECU via an Internet communication unit. Then, the external server checks the fingerprint information from the vehicle's ECU against the fingerprint information of the user stored in advance, and this check is communicated to the vehicle's ECU via the communication function of the external server and the Internet communication unit. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-12537 Summary of the Invention [Problem to be solved by the invention]

[0004] However, in the technology of Patent Document 1, fingerprint information is sent from the vehicle's ECU to an external server, and biometric authentication is performed by the external server, so there is a concern that it may be affected by communication delays between the ECU and the external server.In addition, in recent years, unauthorized operations (unauthorized use of vehicles) such as relay attacks using smart keys have become a problem.

[0005] Therefore, the present invention has been made in consideration of the above points and has as one of its objectives to provide a control device, server, control method, and program that can prevent unauthorized operations such as relay attacks using a smart key and reduce the effects of communication delays between an ECU and an external server. [Means for solving the problem]

[0006] In order to solve the above problem, the invention described in claim 1 is a control device mounted on a vehicle equipped with a biometric information detection sensor that detects biometric information from a user's body, comprising: a communication means for communicating with a server located outside the vehicle and storing matching biometric information to be matched with the biometric information; an acquisition means for acquiring the biometric information detected by the biometric information detection sensor; a first determination means for determining whether the matching biometric information is stored in a storage means in the vehicle; a storage control means for acquiring the matching biometric information from the server via the communication means and storing the acquired matching biometric information in the storage means when the first determination means determines that the matching biometric information is not stored; an authentication means for authenticating the user by matching the biometric information acquired by the acquisition means with the matching biometric information; and an equipment control means for controlling equipment of the vehicle depending on a result of the authentication.

[0007] The invention described in claim 2 is characterized in that, in the control device described in claim 1, the acquisition means acquires the biometric information detected by the biometric information detection sensor when the user boards the vehicle, and the equipment control means unlocks the door of the vehicle when the authentication result indicates successful authentication.

[0008] The invention described in claim 3 is characterized in that, in the control device described in claim 2, the server stores at least one of electronic information indicating the vehicle inspection certificate of the vehicle and electronic information indicating the user's driver's license in association with the biometric information for matching, and the storage control means, when the first determination means determines that the biometric information for matching has not been stored, acquires the electronic information associated with the biometric information for matching together with the biometric information for matching from the server via the communication means, and stores the acquired electronic information in association with the biometric information for matching in the storage means, and further includes a second determination means for determining whether or not control in accordance with the operation instruction can be executed based on the electronic information when an operation instruction is received from the user who has boarded the vehicle after the doors of the vehicle are unlocked.

[0009] The invention described in claim 4 is characterized in that, in the control device described in claim 3, the second judgment means judges that execution is possible if the expiration date included in the electronic information has not passed.

[0010] The invention recited in claim 5 is the control device recited in claim 3, characterized in that the control in response to the operation instruction is control for starting the vehicle so that it can run.

[0011] The invention described in claim 6 is characterized in that, in the control device described in claim 3, the control in response to the operation instruction is control to display at least one of the vehicle inspection certificate and the driver's license on a display inside the vehicle.

[0012] The invention described in claim 7 is a server capable of communicating with the control device described in claim 1, and is characterized in that it comprises: a storage means for storing matching biometric information for matching with the user's biometric information in association with specific information that can identify the matching biometric information; an acquisition means for transmitting a list including the specific information to an electronic device used by the user in response to an information request from the electronic device, and acquiring from the electronic device at least one of electronic information indicating the vehicle inspection certificate of the vehicle and electronic information indicating the user's driver's license, which is associated with the matching biometric information identified by the specific information selected from the list by the user; and a storage control means for storing the acquired electronic information in association with the matching biometric information identified by the selected specific information.

[0013] The invention described in claim 8 is characterized in that, in the server described in claim 7, the storage means of the server stores the matching biometric information in association with the specific information corresponding to each of the multiple users, and the list includes the specific information corresponding to each of the multiple users.

[0014] The invention described in claim 9 is a control method executed by a control device mounted on a vehicle equipped with a biometric information detection sensor that detects biometric information from a user's body, the control device having a communication means for communicating with a server located outside the vehicle that stores matching biometric information to be matched with the biometric information, and the control method includes a step of acquiring the biometric information detected by the biometric information detection sensor, a step of determining whether the matching biometric information is stored in a storage means in the vehicle, a step of acquiring the matching biometric information from the server via the communication means and storing the acquired matching biometric information in the storage means when it is determined that the matching biometric information is not stored, a step of authenticating the user by matching the acquired biometric information with the matching biometric information, and a step of controlling equipment of the vehicle depending on a result of the authentication.

[0015] The invention described in claim 10 is characterized in that a computer included in a control device mounted on a vehicle equipped with a biometric information detection sensor that detects biometric information from a user's body is made to function as a communication means for communicating with a server located outside the vehicle and storing matching biometric information for matching with the biometric information, an acquisition means for acquiring the biometric information detected by the biometric information detection sensor, a first determination means for determining whether the matching biometric information is stored in a storage means in the vehicle, a storage control means for acquiring the matching biometric information from the server via the communication means and storing the acquired matching biometric information in the storage means when the first determination means determines that the matching biometric information is not stored, an authentication means for authenticating the user by comparing the biometric information acquired by the acquisition means with the matching biometric information, and an equipment control means for controlling equipment of the vehicle depending on a result of the authentication. Effect of the Invention

[0016] According to the present invention, it is possible to prevent unauthorized operations such as relay attacks using a smart key, and to reduce the influence of communication delays between an ECU and an external server. [Brief description of the drawings]

[0017] [Figure 1] 1 is a diagram illustrating an example of a schematic configuration of a communication system S according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a diagram illustrating an example of a schematic configuration of a management server 2. [Diagram 3] FIG. 4 is a diagram showing an example of the configuration of information included in a vehicle information data list. [Figure 4] FIG. 2 is a diagram illustrating an example of a schematic configuration of an ECU 3. [Diagram 5] 11 is a sequence diagram showing an example of the operation of the communication system S when fingerprint information for verification is registered in a vehicle information data list from the ECU 3. FIG. [Figure 6]FIG. 4 is a sequence diagram showing an example of the operation of the communication system S when electronic information from the electronic device 1 is registered in the vehicle information data list. [Figure 7] 10 is a sequence diagram showing an example of the operation of the communication system S when user authentication and door unlocking are performed. FIG. [Figure 8] 4 is a sequence diagram showing an example of an operation of the communication system S when vehicle equipment is controlled in accordance with an operation instruction. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment in which the present invention is applied to an ECU (Electronic Control Unit) mounted on a vehicle equipped with a fingerprint sensor that detects fingerprint information from a user's finger. Here, the ECU is an example of a control device. The fingerprint sensor is an example of a biometric information detection sensor that detects biometric information from the user's body. Examples of vehicles include engine vehicles such as gasoline vehicles and diesel vehicles, EV (Electric Vehicle) vehicles, and hybrid vehicles.

[0019] [1. Overview of communication system S] First, a schematic configuration of a communication system S according to the present embodiment will be described with reference to FIG. 1 and the like. FIG. 1 is a diagram showing a schematic configuration example of the communication system S according to the present embodiment. As shown in FIG. 1, the communication system S includes an electronic device 1 used by a user who is a passenger of the vehicle, a management server 2 (an example of a server) located outside the vehicle, an ECU 3 mounted in the vehicle, and a wireless communication device 4 mounted in the vehicle. The wireless communication device 4 may be a component of the ECU 3. The electronic device 1, the management server 2, and the wireless communication device 4 are each connectable to a network NW. The network NW is composed of, for example, a wireless communication network (including a base station) and the Internet. The electronic device 1 may be, for example, a mobile terminal such as a smartphone owned by a user, or a personal computer placed at the user's home or workplace. The electronic device 1 includes a display and an operation unit. The passenger of the vehicle may be the owner of the vehicle, the owner's family, or a person who rents the vehicle through car sharing or rental, or a passenger who drives the vehicle. Furthermore, when the owner of the vehicle lends the vehicle to, for example, an acquaintance or friend, the acquaintance or friend becomes a passenger in the vehicle.

[0020] The vehicle is also provided with fingerprint sensors 5a and 5b electrically connected to the ECU 3. The fingerprint sensor 5a is provided on the outside of the vehicle (for example, on a door handle or a side mirror) and on the inside of the vehicle (for example, on a center console or an instrument panel). The fingerprint sensor 5a on the outside of the vehicle is provided for acquiring fingerprint information used for user authentication (biometric authentication) for unlocking the vehicle door. The fingerprint sensor 5a may be provided on each of the handles of a plurality of doors of the vehicle (for example, the driver's door, the passenger's door, and the rear seat door). In this case, the identifier of each fingerprint sensor 5a may be associated with the identifier of the door on which it is provided and managed by the ECU 3. On the other hand, the fingerprint sensor 5b on the inside of the vehicle is provided for acquiring (pre-registering) fingerprint information for matching to be matched with fingerprint information in the above-mentioned user authentication.

[0021] The fingerprint sensors 5a and 5b detect (read) fingerprint information from the pad of a user's finger. For example, the fingerprint sensors 5a and 5b have tens of thousands of electrodes and a contact surface that the pad of a user's finger contacts. When the pad of a user's finger properly contacts this contact surface, an amount of charge corresponding to the proximity of the unevenness of the pad of the user's finger (i.e., the unevenness that constitutes a fingerprint) to the contact surface is accumulated in the electrodes. The fingerprint sensors 5a and 5b then detect fingerprint information by converting the amount of charge accumulated in each electrode into a numerical value (i.e., a numerical value corresponding to the amount of charge). The fingerprint information thus detected is output to the ECU 3. The fingerprint sensors 5a and 5b may detect fingerprint information by a method other than the above. Also, an operation panel (display) provided in a navigation device in a vehicle may have the function of the fingerprint sensor 5b.

[0022] FIG. 2 is a diagram showing an example of a schematic configuration of the management server 2. As shown in FIG. 2, the management server 2 includes a communication unit 21, a storage unit 22, a control unit 23, and the like. The management server 2 has a clock function and is capable of recognizing the current time. The communication unit 21 has a function of connecting to a network NW. The storage unit 22 (an example of a storage means) is, for example, a hard disk drive or the like, and stores an operating system, a vehicle information management program, and the like. The storage unit 22 has a record assigned to each vehicle. The record stores a vehicle information data list. In addition, a URL (Uniform Resource Locator) including a vehicle ID unique to each vehicle is assigned to the record. For example, a user who is a passenger of the vehicle can access the vehicle information data list (i.e., access from the electronic device 1) by logging in by inputting the vehicle ID of the vehicle into a login screen provided from the management server 2 to the electronic device 1.

[0023] FIG. 3 is a diagram showing an example of the configuration of information included in the vehicle information data list. The example in FIG. 3 is a vehicle information data list for a case where a vehicle is used by one family. In the vehicle information data list shown in FIG. 3, a vehicle ID, vehicle inspection information, fingerprint information for verification (1) to (3), user names (names or nicknames) (1) to (3), storage dates (registration dates) (1) to (3) of the fingerprint information for verification, expiration dates (1) to (3) of the fingerprint information for verification, and license information (1) and (2) are registered. In the vehicle information data list shown in FIG. 3, the fingerprint information for verification (1) to (3) are associated (linked) with the vehicle ID and the vehicle inspection information. Here, the vehicle ID is, for example, a vehicle identification number (VIN (Vehicle Identification Number)). The vehicle inspection information is electronic information (digital information) indicating the vehicle inspection certificate of the vehicle. The vehicle inspection information includes the expiration date of the vehicle inspection certificate. In the example in FIG. 3, the fingerprint information for verification (1) to (3) are not associated with each other.

[0024] The fingerprint information for comparison (1) is fingerprint information of a user A (e.g., a father). The fingerprint information for comparison (1) is associated with the user A's user name (1), the storage date (1) of the fingerprint information for comparison (1), the expiration date (1) of the fingerprint information for comparison (1), and the license information (1) of the user A. The user name (1) and the storage date (1) are each an example of identifying information capable of identifying the fingerprint information for comparison (1). The storage date (1) indicates, for example, a date and a time. The expiration date (1) of the fingerprint information for comparison (1) is set, for example, to about several months to a year after the storage date (1). The license information (1) is electronic information (digital information) indicating the driver's license of the user A (hereinafter simply referred to as a "license"). The license information (1) includes the expiration date of the license of the user A.

[0025] The fingerprint information for comparison (2) is fingerprint information of a user B (e.g., a mother). The fingerprint information for comparison (2) is associated with the user name (2) of the user B, the storage date (2) of the fingerprint information for comparison (2), the expiration date (2) of the fingerprint information for comparison (2), and the license information (2) of the user B. The user name (2) and the storage date (2) are each an example of identifying information capable of identifying the fingerprint information for comparison (2). The storage date (2) indicates, for example, a date and a time. The expiration date (2) of the fingerprint information for comparison (2) is set, for example, to about several months to a year after the storage date (2). The license information (2) is electronic information indicating the license of the user B. The license information (2) includes the expiration date of the license of the user B.

[0026] The fingerprint information for comparison (3) is fingerprint information of a user C (e.g., a child). The fingerprint information for comparison (3) is associated with the user name (3) of the user C, the storage date (3) of the fingerprint information for comparison (3), and the expiration date (3) of the fingerprint information for comparison (3). The user name (3) and the storage date (3) are each an example of identifying information capable of identifying the fingerprint information for comparison (3). The storage date (3) indicates, for example, a date and a time. The expiration date (3) of the fingerprint information for comparison (3) is set, for example, from several months to about a year after the storage date (3). Note that since the user C does not have a driver's license, the license information of the user C is not registered in the vehicle information data list.

[0027] The vehicle information data list may also register the family relationship (father, mother, children, etc.) of the person using the vehicle. In this case, the family relationship can be used as specific information that can identify the fingerprint information for comparison. The vehicle inspection information and license information are link information that should be linked to the fingerprint information for comparison. The vehicle information data list may also register electronic information (link information) required for unlocking the doors, etc., in association with the fingerprint information for comparison.

[0028] The control unit 23 is configured with, for example, a CPU (Central Processing Unit), a RAM (Random Access Memory), and a ROM (Read Only Memory), and functions as an acquisition means and a storage control means in the present invention according to a vehicle information management program. The control unit 23 executes a process for storing a vehicle information data list. For example, when a user applies for registration before using a vehicle, such as when the vehicle is delivered or rented, a registration request for fingerprint information for verification detected from the pad of a user's finger by a fingerprint sensor provided in a dedicated terminal of a business (for example, an automobile dealer or a store that rents out vehicles) is transmitted from the dedicated terminal to the management server 2. In response to the registration request from the dedicated terminal, the control unit 23 generates a vehicle information data list (record generation), and registers the vehicle ID, vehicle inspection information, user name, fingerprint information for verification, the storage date of the fingerprint information for verification, and the expiration date of the fingerprint information for verification in the vehicle information data list in association with each other. The fingerprint information for verification, the user name, the storage date, and the expiration date registered at the store that rents out the vehicle may be configured to be deleted from the vehicle information data list when the user who rented the vehicle returns the vehicle. In this case, the user may be notified of information indicating that the fingerprint information for verification, etc. has been deleted.

[0029] Alternatively, the fingerprint sensor 5b may detect the fingerprint information for verification from the pad of the user's finger when the user uses the vehicle, such as after the vehicle is started for the first time (for example, after the engine is started for the first time). In this case, a registration request for the detected fingerprint information for verification may be transmitted from the ECU 3 to the management server 2 via the wireless communication device 4. Alternatively, the fingerprint information for verification detected by the fingerprint sensor 5b may be transmitted to the electronic device 1 when the user uses the vehicle. In this case, a registration request for the fingerprint information for verification is transmitted from the electronic device 1 to the management server 2. Alternatively, when the owner of the vehicle lends the vehicle to a user such as an acquaintance or friend, the fingerprint information for verification detected by the fingerprint sensor 5b, for example, from the user who borrowed the vehicle may be transmitted from a predetermined terminal (for example, the electronic device 1) to the management server 2 with the permission (approval) of the owner of the vehicle. In response to the registration request from the ECU 3 or the electronic device 1, the control unit 23 generates a vehicle information data list, and registers the vehicle ID, vehicle inspection information, user name, fingerprint information for verification, storage date of the fingerprint information for verification, and expiration date of the fingerprint information for verification in the vehicle information data list in association with each other. Even after the vehicle information data list is generated, the control unit 23 can register in the vehicle information data list, in response to a registration request from the ECU 3 or the electronic device 1, the user name, the fingerprint information for comparison, the storage date of the fingerprint information for comparison, and the expiration date of the fingerprint information for comparison, in association with each other.

[0030] Thereafter, in response to an information request from the electronic device 1 that has accessed the vehicle information data list identified by the vehicle ID input by the user from the login screen, the control unit 23 transmits to the electronic device 1 a specific information list corresponding to the vehicle information data list. Here, the specific information list includes a user name associated with the fingerprint information for matching registered in the vehicle information data list. When multiple pieces of fingerprint information for matching are registered in the vehicle information data list, the specific information list includes a user name associated with each of the multiple pieces of fingerprint information for matching. The specific information list including one or more user names is displayed on the display of the electronic device 1.

[0031] Then, when a user designates electronic information to be associated with matching fingerprint information identified by one user name selected by the user from the specific information list in the electronic device 1, a registration request for the designated electronic information is transmitted from the electronic device 1 to the management server 2. In this manner, the control unit 23 acquires the selected user name and the designated electronic information from the electronic device 1, and registers the electronic information in the vehicle information data list in association with the matching fingerprint information identified by the user name (i.e., stores the electronic information in the storage unit 22). Note that data (matching fingerprint information and electronic information) exchanged between the electronic device 1 and the management server 2 and between the management server 2 and the ECU 3 is encrypted at the source and decrypted at the destination.

[0032] Fig. 4 is a diagram showing an example of a schematic configuration of the ECU 3. As shown in Fig. 4, the ECU 3 is configured to include an interface (I / F) unit 31, an interface (I / F) unit 32, a storage unit 33, and a control unit 34. The ECU 3 has a clock function and is capable of recognizing the current time. The ECU 3 is mounted, for example, inside the center console of the vehicle. The interface unit 31 serves as an interface with the wireless communication device 4. The interface unit 31 is an example of a communication means for communicating with the management server 2 via the wireless communication device 4. The interface unit 32 serves as an interface with the fingerprint sensors 5a, 5b.

[0033] The memory unit 33 (an example of a storage means) is configured, for example, with a non-volatile semiconductor memory. The memory unit 33 stores an operating system, a vehicle control program (including the program of the present invention), a vehicle ID, and the like. The memory unit 33 also has a secure area. The secure area stores all or part of the information registered in the vehicle information data list in the management server 2. The information stored in the secure area is encrypted. A private key used in the public key cryptography is also stored in the secure area, for example, when the ECU 3 is manufactured. All or part of the information registered in the vehicle information data list in the management server 2 may be stored in a tamper-resistant device (an example of a storage means) mounted on the vehicle, rather than in the secure area of ​​the memory unit 33.

[0034] The control unit 34 is configured with a CPU, RAM, ROM, etc., is electrically connected to the vehicle equipment (hereinafter referred to as "vehicle equipment"), and functions as the acquisition means, first determination means, second determination means, storage control means, authentication means, equipment control means, etc. in the present invention according to a vehicle control program. Here, the vehicle equipment is not particularly limited, but includes, for example, a power supply equipment, a drive mechanism (drive mechanisms such as doors, power windows, engines, and motors), and electrical equipment (air conditioners, instrument panels, and navigation devices). The control unit 34 is capable of receiving operation instructions from a user who is in the vehicle.

[0035] For example, after the matching fingerprint information is registered in the vehicle information data list in the management server 2, the control unit 34 acquires fingerprint information detected from the pad of the user's finger by the fingerprint sensor 5a when the user gets into the vehicle (before the vehicle door is unlocked), and determines whether the matching fingerprint information is stored in the secure area of ​​the storage unit 33. If the control unit 34 determines that the matching fingerprint information is not stored, it acquires the matching fingerprint information from the management server 2 as information to be stored, and stores the acquired matching fingerprint information in the secure area of ​​the storage unit 33.

[0036] Alternatively, when it is determined that the matching fingerprint information is not stored in the secure area of ​​the storage unit 33, the control unit 34 may acquire from the management server 2 electronic information associated with the matching fingerprint information together with the matching fingerprint information as information to be stored, and store the acquired matching fingerprint information and electronic information in the secure area of ​​the storage unit 33 in association with each other. Note that when it is determined that the matching fingerprint information is not stored in the secure area of ​​the storage unit 33, the control unit 34 may acquire a vehicle information data list from the management server 2 as information to be stored, and store the acquired vehicle information data list in the secure area of ​​the storage unit 33.

[0037] The control unit 34 then performs user authentication (user authentication) by comparing the fingerprint information acquired by the fingerprint sensor 5a with the matching fingerprint information stored in the secure area of ​​the storage unit 33, and controls the vehicle equipment according to the result of the user authentication. For example, the control unit 34 unlocks the vehicle door when the result of the user authentication indicates successful authentication. Here, for example, authentication is successful when the degree of match between the fingerprint information acquired by the fingerprint sensor 5a and the matching fingerprint information is equal to or greater than a threshold.

[0038] After the vehicle door is unlocked according to the result of the user authentication, the control unit 34, when receiving an operation instruction from a user who has boarded the vehicle, determines whether or not control (control of vehicle equipment) according to the operation instruction can be executed based on electronic information (e.g., the contents of electronic information or the existence of electronic information) stored in association with the fingerprint information for verification used in the verification, and executes the control according to the operation instruction if it is determined that the control can be executed. For example, it is determined that the control can be executed if the expiration date included in at least one of the electronic information of the vehicle inspection information and the license information has not passed. The operation instruction is issued, for example, via an operation button or the like provided in the vehicle. Examples of the operation button include a power switch, a vehicle start switch, a display switch, a power window operation button, and an air conditioner operation button. Here, examples of the control according to the operation instruction include the following (i) to (v).

[0039] (i) Control of turning on the power source that supplies power to vehicle equipment (ii) Control to start the vehicle so that it can run (for example, start the engine or motor) (iii) Control to display at least one of the vehicle inspection certificate and the driver's license on a display inside the vehicle (iv) Controlling the opening and closing of vehicle power windows (v) Controlling the operation of the vehicle's air conditioner (e.g., turning it on and adjusting the temperature)

[0040] Note that any of the following controls (i) to (v) (for example, controls (i) and (iii)) may be performed as vehicle equipment controls when the result of the user authentication indicates successful authentication.

[0041] [2. Operation of communication system S] Next, the operation of the communication system S according to this embodiment will be described.

[0042] (2.1. Registration of fingerprint information for verification) First, the operation of the communication system S when the fingerprint information for verification is registered in the vehicle information data list from the ECU 3 will be described with reference to Fig. 5. Fig. 5 is a sequence diagram showing an example of the operation of the communication system S when the fingerprint information for verification is registered in the vehicle information data list from the ECU 3. Note that, as a premise for the operation shown in Fig. 5, it is assumed that the vehicle information data list has already been generated by the management server 2 and stored in the storage unit 22, and that the vehicle ID and vehicle inspection information have been registered in the vehicle information data list.

[0043] In Fig. 5, for example, a user unlocks the door with a physical key of the vehicle and gets into the vehicle. After the navigation device becomes operable, the user touches the contact surface of the fingerprint sensor 5b with his / her finger according to the guidance output from the navigation device. Then, the ECU 3 acquires fingerprint information detected from the pad of the user's finger by the fingerprint sensor 5b as fingerprint information for verification via the interface unit 32 (step S1). Next, the ECU 3 acquires a user name inputted, for example, from an operation panel provided in the navigation device (step S2). Next, the ECU 3 transmits a registration request including the vehicle ID stored in the storage unit 33, the fingerprint information for verification acquired in step S1, and the user name acquired in step S2 to the management server 2 via the interface unit 31 and the wireless communication device 4 (step S3).

[0044] Next, when the management server 2 receives a registration request from the ECU 3 via the communication unit 21, it acquires the vehicle ID, the fingerprint information for comparison, and the user name from the registration request (step S4). Next, the management server 2 identifies a vehicle information data list by the vehicle ID acquired in step S4 (step S5). Next, the management server 2 sets an expiration date for the fingerprint information for comparison acquired in step S4 (step S6). Next, the management server 2 associates the fingerprint information for comparison and the user name acquired in step S4 with the storage date of the fingerprint information for comparison (e.g., the date of receiving the registration request) and the expiration date set in step S6, and registers them in the vehicle information data list identified in step S5 (step S7).

[0045] In addition, if the acquired user name and the associated matching fingerprint information, etc. have already been registered in the vehicle information data list, the already registered matching fingerprint information, etc. may be updated (overwritten) with the newly acquired matching fingerprint information, etc., or the newly acquired matching fingerprint information, etc. may be registered separately from the already registered matching fingerprint information, etc.

[0046] Next, the management server 2 transmits a registration completion notice indicating the completion of registration of the fingerprint information for verification to the wireless communication device 4 via the communication unit 21 (step S8). Next, when the ECU 3 receives the registration completion notice from the management server 2 via the wireless communication device 4 and the interface unit 31, it notifies the user that the registration is completed (registration completion notice) via, for example, a navigation device (step S9). When a vehicle is used by multiple users, the fingerprint information for verification of each user may be registered in a vehicle information data list identified by the same vehicle ID according to the sequence shown in FIG. 5. In addition, when the expiration date is set as described above, after the expiration date has passed, the fingerprint information for verification is registered in the vehicle information data list in the management server 2 again according to the sequence shown in FIG. 5.

[0047] The fingerprint information for comparison may be encrypted by the ECU 3 and transmitted to the management server 2. For example, when the RSA (Rivest-Shamir-Adleman) encryption method is used, the ECU 3 acquires a public key paired with the private key of the management server 2 in advance, and encrypts and transmits the fingerprint information for comparison using the public key, while the management server 2 decrypts the received fingerprint information for comparison using its own private key. Alternatively, when the ECC (Elliptic Curve Cryptography) method is used, the management server 2 and the ECU 3 generate a common key by sending each other public keys generated by ECDH (Elliptic curve Diffie-Hellman key exchange). As a result, the ECU 3 encrypts and transmits the fingerprint information for comparison using the generated common key, while the management server 2 decrypts the received fingerprint information for comparison using the generated common key.

[0048] (2.2. Registration of Electronic Information) Next, the operation of the communication system S when electronic information is registered in the vehicle information data list from the electronic device 1 will be described with reference to Fig. 6. Fig. 6 is a sequence diagram showing an example of the operation of the communication system S when electronic information is registered in the vehicle information data list from the electronic device 1. Note that, as a prerequisite for the operation shown in Fig. 6, it is assumed that the fingerprint information for verification is registered in the vehicle information data list in the management server 2 according to the sequence shown in Fig. 5. It is also assumed that the electronic device 1 stores vehicle inspection information and user license information as electronic information.

[0049] 6, the electronic device 1 transmits an information request including the vehicle ID inputted on the login screen provided by the management server 2 to the management server 2 (step S11). Next, when the management server 2 receives the information request from the electronic device 1 via the communication unit 21, it acquires the vehicle ID from the information request (step S12). Next, the management server 2 identifies a vehicle information data list by the vehicle ID acquired in step S12 (step S13). Next, the management server 2 extracts one or more user names from the vehicle information data list identified in step S13, and transmits a specific information list including the extracted user names to the electronic device 1 (step S14). Note that the specific information list may include a storage date of the fingerprint information for matching together with or instead of the user name.

[0050] Next, when the electronic device 1 receives the specific information list from the management server 2, it displays on the display a display screen having a selection field for a user name included in the specific information list and a specification field (upload field) for electronic information (step S15). Next, the electronic device 1 transmits to the management server 2 a registration request including a user name selected by the user from the selection field on the display screen and electronic information (e.g., license information) specified by the user from the specification field on the display screen (step S16). Note that the registration request transmitted the first time includes vehicle inspection information and the user's license information. On the other hand, the registration request transmitted the second time and thereafter includes the user's license information.

[0051] Next, when the management server 2 receives a registration request from the electronic device 1 via the communication unit 21, it acquires a user name and electronic information from the registration request (step S17). Next, the management server 2 registers the acquired electronic information in the vehicle information data list (the vehicle information data list identified in step S13) in association with the matching fingerprint information identified by the acquired user name (step S18). Next, the management server 2 transmits a registration completion notice indicating the completion of registration of the electronic information to the electronic device 1 via the communication unit 21 (step S19). Next, when the electronic device 1 receives the registration completion notice from the management server 2, it notifies the user that registration is complete by displaying a message on the display or by voice (registration completion notice) (step S20).

[0052] The electronic information may be encrypted by the electronic device 1 and transmitted to the management server 2. For example, when the RSA encryption method is used, the electronic device 1 obtains a public key paired with the private key of the management server 2 in advance, and encrypts and transmits the electronic information using the public key, while the management server 2 decrypts the received electronic information using its own private key. Alternatively, when the elliptic curve cryptography method is used, the electronic device 1 and the management server 2 each generate a common key by sending each other a public key generated by ECDH. As a result, the electronic device 1 encrypts and transmits the electronic information using the generated common key, while the management server 2 decrypts the received electronic information using the generated common key.

[0053] (2.3. User authentication and door unlocking) Next, the operation of the communication system S when performing user authentication and door unlocking will be described with reference to Fig. 7. Fig. 7 is a sequence diagram showing an example of the operation of the communication system S when performing user authentication and door unlocking. Note that, as a prerequisite for the operation shown in Fig. 7, it is assumed that the fingerprint information for verification and the electronic information are registered in the vehicle information data list in the management server 2 according to the sequence shown in Fig. 6.

[0054] In FIG. 7, when a user gets into a vehicle (before the vehicle door is unlocked), the user touches the finger to the contact surface of the fingerprint sensor 5a. Then, the ECU 3 acquires fingerprint information detected from the pad of the user's finger by the fingerprint sensor 5a via the interface unit 32 (step S21). The fingerprint information acquired in this way is temporarily stored in the RAM of the control unit 34. Next, the ECU 3 refers to the current time using a clock function and determines whether or not matching fingerprint information that has not expired is stored in the secure area of ​​the storage unit 33 (step S22). If it is determined that matching fingerprint information that has not expired is not stored (step S22: NO), the process proceeds to step S23. On the other hand, if it is determined that matching fingerprint information that has not expired is stored (step S22: YES), the process proceeds to step S32. In step S23, the ECU 3 transmits an information request including the vehicle ID stored in the storage unit 33 to the management server 2 via the interface unit 31 and the wireless communication device 4.

[0055] Next, when the management server 2 receives an information request from the ECU 3 via the communication unit 21, it acquires the vehicle ID from the information request (step S24). Next, the management server 2 identifies a vehicle information data list by the vehicle ID acquired in step S24 (step S25). Next, the management server 2 refers to the current time using a clock function, and determines whether or not matching fingerprint information that has not yet expired is registered in the vehicle information data list identified in step S25 (step S26). If it is determined that matching fingerprint information that has not yet expired is not registered (step S26: NO), the process proceeds to step S27. On the other hand, if it is determined that matching fingerprint information that has not yet expired is registered (step S26: YES), the process proceeds to step S29.

[0056] In step S27, the management server 2 transmits an error notification indicating an error to the wireless communication device 4 via the communication unit 21. Next, when the ECU 3 receives the error notification from the management server 2 via the wireless communication device 4 and the interface unit 31, it notifies the user of the occurrence of an error (error notification) by using some means (vehicle equipment) such as light or sound (step S28).

[0057] On the other hand, in step S29, the management server 2 extracts from the vehicle information data list the fingerprint information for comparison that has not yet expired, as well as the user name associated therewith, the storage date of the fingerprint information for comparison, and the expiration date of the fingerprint information for comparison, as storage information. At this time, if electronic information (including at least one of vehicle inspection information and license information) is registered in the vehicle information data list in association with the extracted fingerprint information for comparison, the electronic information is also extracted as storage information. Next, the management server 2 transmits the extracted storage information to the wireless communication device 4 via the communication unit 21 (step S30). At this time, if multiple pieces of fingerprint information for comparison are registered in the vehicle information data list, each piece of fingerprint information for comparison and / or information associated therewith is included in the storage information and transmitted.

[0058] The storage information may be encrypted by the management server 2 and transmitted to the ECU 3. For example, when RSA encryption is used, the management server 2 obtains a public key that pairs with the private key of the ECU 3 in advance, and encrypts and transmits the storage information using the public key. Alternatively, when elliptic curve cryptography is used, the management server 2 and the ECU 3 generate a common key by sending each other the public keys that they generated using ECDH. As a result, the management server 2 encrypts and transmits the storage information using the generated common key.

[0059] Next, when the ECU 3 receives (acquires) the storage information from the management server 2 via the wireless communication device 4 and the interface unit 31, it stores the matching fingerprint information, user name, storage date of the matching fingerprint information, and expiration date of the matching fingerprint information (or electronic information in addition to the matching fingerprint information, etc.) contained in the storage information in a secure area of ​​the memory unit 33 (step S31), and proceeds to step S32. At this time, it is preferable that the matching fingerprint information and electronic information are encrypted and stored using a private key stored in the secure area. Note that if the received storage information is encrypted, the ECU 3 decrypts the storage information using the private key (or a key shared with the management server 2), verifies it, and then stores it.

[0060] In step S32, the ECU 3 acquires matching fingerprint information that has not yet expired from the secure area, and performs user authentication by comparing the acquired matching fingerprint information with the fingerprint information acquired in step S21. If the matching fingerprint information is encrypted, the matching fingerprint information that is decrypted and verified using the private key stored in the secure area is used. Next, the ECU 3 determines whether the result of the user authentication in step S32 indicates successful authentication (step S33). If it is determined that the result of the user authentication indicates successful authentication (step S33: YES), the ECU 3 unlocks the doors of the vehicle (step S34). For example, the ECU 3 unlocks the door in which the fingerprint sensor 5a that acquired the fingerprint information used for the matching is installed. If the fingerprint sensor 5a is installed in each of a plurality of doors of the vehicle, each door is unlocked based on the fingerprint information acquired by the fingerprint sensor 5a installed in the door. On the other hand, if it is determined that the result of the user authentication does not indicate successful authentication (i.e., authentication has failed) (step S33: NO), the user is notified of an error (error notification) using some means (vehicle equipment) such as light or sound (step S35).

[0061] If it is determined that the result of the user authentication does not indicate successful authentication, the ECU 3 may determine whether or not the matching fingerprint information whose validity has not expired and which has not been used for the matching is still stored in the secure area. If the ECU 3 determines that the matching fingerprint information whose validity has not expired and which has not been used for the matching is still stored in the secure area, the ECU 3 acquires the matching fingerprint information from the secure area and performs user authentication by comparing the acquired matching fingerprint information with the fingerprint information acquired in step S21. This process is repeated until there is no matching fingerprint information whose validity has not expired and which has not been used for the matching, unless the result of the user authentication indicates successful authentication. Then, only when it is determined that the matching fingerprint information whose validity has not expired and which has not been used for the matching is not stored in the secure area, the user is notified of an error by some means (vehicle equipment) such as light or sound.

[0062] Alternatively, when it is determined that the verification fingerprint information that has not expired and is not used for the verification is not stored in the secure area, the ECU 3 may determine whether or not a predetermined time (e.g., 3 to 24 hours) has elapsed since the storage information was acquired (most recently acquired) from the management server 2. When the ECU 3 determines that the predetermined time has elapsed since the storage information was acquired from the management server 2, the ECU 3 may transmit an information request including the vehicle ID to the management server 2 via the interface unit 31 and the wireless communication device 4. The information request may include a user name associated with the stored verification fingerprint information or a storage date of the verification fingerprint information. In this way, the ECU 3 can acquire, from the management server 2, the storage information including the verification fingerprint information (the verification fingerprint information that has not expired) newly registered in the vehicle information data list after the previous acquisition of the storage information, and perform user authentication by comparing the acquired verification fingerprint information with the fingerprint information acquired in step S21.

[0063] (2.4. Control of vehicle equipment according to operation instructions) Next, the operation of the communication system S when the vehicle equipment is controlled in response to an operation instruction will be described with reference to Fig. 8. Fig. 8 is a sequence diagram showing an example of the operation of the communication system S when the vehicle equipment is controlled in response to an operation instruction. Note that, as a premise of the operation shown in Fig. 8, it is assumed that the vehicle door is unlocked according to the sequence shown in Fig. 7 and the user is in the vehicle.

[0064] In FIG. 8, when a user issues an operation instruction from, for example, an operation button provided in the vehicle, the ECU 3 accepts the operation instruction (for example, an instruction to start the engine of the vehicle) (step S41), and judges whether or not electronic information is stored in a secure area of ​​the storage unit 33 in association with the fingerprint information for matching used in the above step S32 for matching with the fingerprint information (step S42). If it is judged that electronic information is not stored in association with the fingerprint information for matching (step S42: NO), the process proceeds to step S43. On the other hand, if it is judged that electronic information is stored in association with the fingerprint information for matching (step S42: YES), the process proceeds to step S52. In step S43, the ECU 3 transmits an information request including the vehicle ID stored in the storage unit 33 to the management server 2 via the interface unit 31 and the wireless communication device 4. The information request may include specific information (for example, a user name, a storage date of the fingerprint information for matching) that can identify the fingerprint information for matching used in matching with the fingerprint information.

[0065] Next, when the management server 2 receives an information request from the ECU 3 via the communication unit 21, the management server 2 acquires the vehicle ID and the specific information from the information request (step S44). Next, the management server 2 identifies a vehicle information data list by the vehicle ID acquired in step S44 (step S45). Next, the management server 2 determines whether or not electronic information is registered in the vehicle information data list identified in step S45 in association with the specific information acquired in step S44 (step S46). If it is determined that the electronic information is not registered (step S46: NO), the process proceeds to step S47. On the other hand, if it is determined that the electronic information is registered (step S46: YES), the process proceeds to step S49.

[0066] In step S47, the management server 2 transmits an error notification indicating an error to the wireless communication device 4 via the communication unit 21. Next, when the ECU 3 receives the error notification from the management server 2 via the wireless communication device 4 and the interface unit 31, it notifies the user of the error (error notification) by using some means (vehicle equipment) such as light or sound (step S48). Meanwhile, in step S49, the management server 2 extracts electronic information associated with the specific information acquired in step S44 from the vehicle information data list. Next, the management server 2 transmits the electronic information extracted in step S49 to the wireless communication device 4 via the communication unit 21 (step S50). For example, when the fingerprint information and electronic information for verification of each of a plurality of users A to C are registered in the vehicle information data list, electronic information (e.g., license information) of the specific information acquired in step S44 (e.g., the user name of user A) is extracted.

[0067] The electronic information may be encrypted by the management server 2 and transmitted to the ECU 3. For example, when the RSA encryption method is used, the management server 2 obtains a public key that pairs with the private key of the ECU 3 in advance, and encrypts and transmits the electronic information using the public key. Alternatively, when the elliptic curve cryptography method is used, the management server 2 and the ECU 3 generate a common key by sending each other the public keys that they have generated using ECDH. As a result, the management server 2 encrypts and transmits the electronic information using the generated common key.

[0068] Next, when the ECU 3 receives electronic information from the management server 2 via the wireless communication device 4 and the interface unit 31, the ECU 3 stores the electronic information in a secure area of ​​the storage unit 33 in association with the fingerprint information for matching used in the above matching (step S51), and proceeds to step S52. At this time, the electronic information is preferably encrypted and stored using a private key stored in the secure area. If the received electronic information is encrypted, the ECU 3 decrypts the electronic information using the private key (or a key shared with the management server 2), verifies it, and then stores it.

[0069] In step S52, the ECU 3 acquires electronic information associated with the fingerprint information for matching used in the above matching from the secure area, and determines whether or not control corresponding to the operation instruction can be executed based on the acquired electronic information. If the electronic information is encrypted, the electronic information that is decrypted and verified using the private key stored in the secure area is used. If the operation instruction accepted in step S41 is an instruction to start the vehicle so that it can run (for example, start the engine or start the motor), the ECU 3 may determine whether or not the fingerprint information used in the above matching has been acquired from a fingerprint sensor 5a installed on the driver's door (for example, the steering wheel).

[0070] Then, when the ECU 3 determines that the operation instruction received in step S41 is an instruction to start the vehicle so that it can run, and the fingerprint information used in the above comparison is acquired from the fingerprint sensor 5a installed on the driver's door, it may determine whether or not the expiration date (e.g., the expiration date of the driver's license) included in the acquired electronic information (e.g., the license information) has passed. When the ECU 3 determines that the expiration date has not passed, it determines that the control to start the vehicle so that it can run is executable. Alternatively, in this case, the ECU 3 may determine whether or not the vehicle type (e.g., large, medium, normal) included in the acquired electronic information (e.g., the license information) includes a vehicle type (e.g., stored in advance in the storage unit 33) that the user can drive. When the ECU 3 determines that the vehicle type includes a vehicle type that the user can drive, it determines that the control to start the vehicle so that it can run is executable.

[0071] On the other hand, if the operation instruction accepted in step S41 is an instruction to display the license on a display in the vehicle, the ECU 3 may determine whether or not the fingerprint information used in the above matching is acquired from the fingerprint sensor 5a installed in the driver's door. If the ECU 3 determines that the operation instruction accepted in step S41 is an instruction to display the license on a display in the vehicle and that the fingerprint information used in the above matching is acquired from the fingerprint sensor 5a installed in the driver's door, the ECU 3 determines that it is possible to execute control to display the license on a display in the vehicle based on the acquired electronic information (e.g., license information).

[0072] In addition, if the operation instruction received in step S41 is neither an instruction to start the vehicle so that it can be driven nor an instruction to display the driver's license on a display inside the vehicle, the ECU 3 may determine that control corresponding to the operation instruction (e.g., an instruction to open and close the vehicle's power window) can be executed based on the acquired electronic information (i.e., based on the fact that the electronic information has been registered), without determining whether the fingerprint information used in the above comparison was acquired from the fingerprint sensor 5a installed in the driver's door.

[0073] If it is determined that the control corresponding to the operation instruction can be executed (step S52: YES), the ECU 3 executes the control corresponding to the operation instruction (step S53). On the other hand, if it is determined that the control corresponding to the operation instruction cannot be executed (step S52: NO), some means (vehicle equipment) such as light or sound is used to notify the user of an error (error notification) (step S54). Note that the operable state corresponding to the operation instruction is released at any timing, and the vehicle doors are locked thereafter. Then, the vehicle equipment cannot be operated unless the sequence shown in FIG. 7 is executed. In addition, the timing at which the user authentication using the fingerprint information is released may be any action or period, such as the timing when the user gets off the vehicle and locks the doors, but may also be based on a setting by the vehicle equipment after the user authentication or a setting on the electronic device 1 owned by the user.

[0074] As described above, according to the above embodiment, the ECU 3 acquires fingerprint information for comparison from the management server 2, which stores fingerprint information for comparison with the fingerprint information of the user, at the timing of the first user authentication and stores the fingerprint information in the storage unit 33 in the vehicle, and uses the fingerprint information for comparison appropriately for user authentication after the fingerprint information for comparison is stored in the storage unit 33 in the vehicle. This makes it possible to prevent unauthorized operations (unauthorized use of the vehicle) such as relay attacks using a smart key, and to reduce the influence of communication delays between the management server 2 and the ECU 3 on control (control of vehicle equipment) performed in accordance with the result of user authentication.

[0075] According to the above embodiment, the ECU 3 stores electronic information associated with the user's fingerprint information for verification, and when the vehicle door is unlocked according to the result of the user authentication and an operation instruction is received from the user who boarded the vehicle, the ECU 3 executes control according to the operation instruction based on the electronic information stored in association with the fingerprint information for verification used for the user authentication, thereby improving the convenience of operation of vehicle equipment. For example, by displaying a driver's license on a display in the vehicle based on the electronic information, the driver's license can be quickly presented to a police officer, for example. Furthermore, according to the above embodiment, electronic information of multiple users such as the driver's family members is stored in the management server 2, and the ECU 3 appropriately acquires the electronic information from the management server 2 and stores it in a secure area of ​​the vehicle for use, so that a user who does not have a physical key or an electronic device for the vehicle can operate a specific vehicle equipment.

[0076] In the above embodiment, a fingerprint sensor that detects fingerprint information as biometric information detected from a user's body has been described as an example. However, a biometric information detection sensor that detects the user's face, the pattern on the user's palm (palm print), the blood vessels (veins) in the user's palm or fingers, or the iris of the user's eye as biometric information may be installed in a vehicle (for example, in a door handle portion, a side mirror portion, or a power window portion), and the present invention can be applied to such cases as well. [Explanation of symbols]

[0077] 1. Electronic Devices 2 Management Server 3 ECU 4. Wireless communication devices 21 Communications Department 22 Memory section 23 Control Unit 31,32 Interface section 33 Storage section 34 Control section S Communication System

Claims

1. A control device mounted on a vehicle having a biological information detection sensor that detects biological information from a user's body, a server that stores biometric information for matching with the biometric information and that is located outside the vehicle; and an acquisition means for acquiring the biological information detected by the biological information detection sensor; a first determination means for determining whether the biometric information for matching is stored in a storage means in the vehicle; a storage control means for acquiring the biometric information for matching from the server via the communication means when the first determination means determines that the biometric information for matching is not stored, and causing the acquired biometric information for matching to be stored in the storage means; an authentication means for authenticating the user by comparing the biometric information acquired by the acquisition means with the biometric information for comparison; an equipment control means for controlling equipment of the vehicle in accordance with a result of the authentication; A control device comprising:

2. the acquiring means acquires the biometric information detected by the biometric information detection sensor when the user gets into the vehicle; 2. The control device according to claim 1, wherein the equipment control means unlocks the doors of the vehicle when the result of the authentication indicates a successful authentication.

3. the server stores at least one of electronic information indicating a vehicle inspection certificate of the vehicle and electronic information indicating a driver's license of the user in association with the biometric information for verification; When the first determination means determines that the biometric information for matching is not stored, the storage control means acquires the electronic information associated with the biometric information for matching together with the biometric information for matching from the server via the communication means, and stores the acquired electronic information in the storage means in association with the biometric information for matching; The control device according to claim 2, further comprising a second determination means for determining whether or not control in accordance with an operation instruction can be executed based on the electronic information when an operation instruction is received from the user who is in the vehicle after the door of the vehicle is unlocked.

4. 4. The control device according to claim 3, wherein the second determination means determines that the electronic information is executable when a validity period included in the electronic information has not elapsed.

5. 4. The control device according to claim 3, wherein the control in response to the operation instruction is a control for starting the vehicle so that it can run.

6. 4. The control device according to claim 3, wherein the control in response to the operation instruction is a control for displaying at least one of the vehicle inspection certificate and the driver's license on a display inside the vehicle.

7. A server capable of communicating with the control device according to claim 1, a storage means for storing biometric information for matching with the biometric information of the user in association with specific information capable of identifying the biometric information for matching; an acquiring means for transmitting a list including the identification information to the electronic device in response to an information request from the electronic device used by the user, and acquiring from the electronic device at least one of electronic information indicating the vehicle inspection certificate of the vehicle and electronic information indicating the driver's license of the user, the electronic information being associated with the biometric information for verification identified by the identification information selected from the list by the user; a storage control means for storing the acquired electronic information in association with the biometric information for matching identified by the selected identification information; A server comprising:

8. The storage means of the server stores the biometric information for matching in association with the specific information corresponding to each of the plurality of users, 8. The server according to claim 7, wherein the list includes the specific information corresponding to each of a plurality of the users.

9. A control method executed by a control device mounted on a vehicle equipped with a biological information detection sensor that detects biological information from a user's body, comprising: the control device includes a communication means for communicating with a server that is located outside the vehicle and that stores biometric information for matching with the biometric information; The control method includes: acquiring the biological information detected by the biological information detection sensor; determining whether the biometric information for verification is stored in a storage means in the vehicle; When it is determined that the biometric information for matching is not stored, acquiring the biometric information for matching from the server via the communication means, and storing the acquired biometric information for matching in the storage means; authenticating the user by matching the acquired biometric information with the matching biometric information; controlling equipment of the vehicle according to a result of the authentication; A control method comprising:

10. A computer included in a control device mounted on a vehicle equipped with a biometric information detection sensor for detecting biometric information from a user's body, a server that stores biometric information for matching with the biometric information and that is located outside the vehicle; and an acquisition means for acquiring the biological information detected by the biological information detection sensor; a first determination means for determining whether the biometric information for matching is stored in a storage means in the vehicle; a storage control means for acquiring the biometric information for matching from the server via the communication means when the first determination means determines that the biometric information for matching is not stored, and causing the acquired biometric information for matching to be stored in the storage means; an authentication means for authenticating the user by comparing the biometric information acquired by the acquisition means with the biometric information for comparison; A program that functions as an equipment control means for controlling equipment of the vehicle depending on a result of the authentication.

Images