Control system for vehicle
The vehicle control system addresses vulnerabilities in existing systems by authenticating both a key and a passcode from a portable device before allowing the vehicle to start, thereby enhancing security and preventing unauthorized use.
Patent Information
- Application Number
- JP2023147610
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2023-09-12
- Publication Date
- 2025-03-25
AI Technical Summary
Existing vehicle start control systems are vulnerable to theft and unauthorized startup due to the potential for stolen or compromised portable devices to unlock doors and start the vehicle.
A vehicle control system that incorporates a vehicle control unit, a key for authentication, an entry key for locking and unlocking doors and starting the vehicle, and a portable communications device for managing a passcode. The system authenticates the key and verifies the passcode from the portable device before allowing the powertrain to be driven.
The system effectively performs user authentication to ensure that only authorized individuals can start the vehicle, thereby preventing theft and unauthorized use.
Smart Images

Figure 2025040673000001_ABST
Abstract
Description
[Technical field]
[0001] The present invention relates to a control system for a vehicle. [Background technology]
[0002] Patent document 1 describes a start-up control device that locks and unlocks the door lock device and sets a first start-up permission flag when an identification code received from a portable device matches an identification code on the vehicle-mounted device, sets a third start-up permission flag upon detection of rotation of a key rotation switch that detects when a key inserted in the key cylinder has been turned, and permits starting of the vehicle's power source only when both the first start-up permission flag and the third start-up permission flag are set. [Prior art documents] [Patent documents]
[0003] [Patent Document 1] JP 2012-250584 A Summary of the Invention [Problem to be solved by the invention]
[0004] However, in this type of start-up control device, the door lock device is unlocked and the vehicle's power source is started by matching the identification code using a single portable device, so there is a risk that the door lock device will be unlocked and the vehicle's power source will be started if the portable device is stolen or if a relay attack is carried out in which the radio waves output from the portable device are relayed.
[0005] SUMMARY OF THE PRESENT EMBODIMENTS An object of the present invention is to provide a vehicle control system that can suitably perform user authentication for permitting operation of a powertrain. [Means for solving the problem]
[0006] In order to solve the above problems, the present invention provides a vehicle control system comprising a vehicle control unit that controls a vehicle system of a vehicle, an entry key that generates a key necessary for authentication with the vehicle system, locks and unlocks the vehicle's doors, and requests the startup of the vehicle system, and a portable communication device that manages a passcode necessary to allow the operation of the vehicle's powertrain, wherein the vehicle control unit allows the operation of the powertrain when it determines that the key is authenticated in response to a request from the entry key to start the vehicle system and that the passcode entered from the portable communication device is legitimate. Effect of the Invention
[0007] In this way, according to the present invention, user authentication for permitting operation of the powertrain can be suitably performed. [Brief description of the drawings]
[0008] [Figure 1] FIG. 1 is a schematic diagram of a vehicle control system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a flowchart showing a procedure of a vehicle system startup process of the vehicle control system according to one embodiment of the present invention. [Diagram 3] FIG. 3 is a flowchart showing a procedure of a vehicle system startup process of a vehicle control system according to another aspect of the embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0009] A vehicle control system according to one embodiment of the present invention is a vehicle control system including a vehicle control unit that controls the vehicle system of the vehicle, an entry key that generates a key required for authentication with the vehicle system, locks and unlocks the vehicle doors, and requests the startup of the vehicle system, and a portable communication device that manages a passcode required to allow operation of the vehicle's powertrain, and the vehicle control unit is configured to allow operation of the powertrain when, in response to a request to start the vehicle system from the entry key, the key is authenticated and the passcode entered from the portable communication device is determined to be legitimate.
[0010] As a result, the vehicle control system according to the embodiment of the present invention can suitably perform user authentication for permitting operation of the powertrain. EXAMPLES
[0011] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A vehicle control system according to an embodiment of the present invention will be described in detail below with reference to the drawings.
[0012] In FIG. 1, a vehicle 1 equipped with a vehicle control system according to one embodiment of the present invention includes a powertrain 2, a battery 3, a key communication unit 5, an immobilizer 6, a wireless communication unit 8, an input unit 9, a communication control unit 10, and a vehicle control unit 11.
[0013] The powertrain 2 is a device that transmits rotational energy generated by a power source of the vehicle 1 to the drive wheels 12 .
[0014] The battery 3 supplies power for operating the powertrain 2. The battery 3 is, for example, a lead storage battery, a nickel storage battery, a lithium storage battery, or the like.
[0015] The key communication unit 5 wirelessly communicates with the entry key 4 to transmit and receive various information. The entry key 4 generates keys necessary for locking and unlocking the doors of the vehicle 1 and for starting the vehicle system of the vehicle 1, and transmits the keys and operation information indicating whether the doors are locked or unlocked or the vehicle system is started in response to a user operation to the key communication unit 5. The key communication unit 5 transmits the operation information and the keys received from the entry key 4 to the immobilizer 6.
[0016] The immobilizer 6 collates the key received from the key communication unit 5 with information calculated by itself, and if they match, transmits to the vehicle control unit 11 a request for processing corresponding to the operation information.
[0017] The wireless communication unit 8 transmits and receives various information to and from the mobile communication device 7 via wireless communication such as a wireless communication network, a wireless LAN (Local Area Network), or Bluetooth (registered trademark).
[0018] The mobile communication device 7 manages passcodes such as a preset passcode, a generated passcode, an input passcode, and the like, and transmits the passcode to the wireless communication unit 8 in response to a passcode request from the wireless communication unit 8 if permitted by the user. The mobile communication device 7 is preregistered in the vehicle control unit 11 as the mobile communication device 7 of the manager of the vehicle 1.
[0019] The passcode may be set in advance, or may be generated by an application running on the mobile communication device 7, or obtained via SMS (Short Message Service), etc., as long as it is a passcode that can be managed and confirmed by the mobile communication device 7.
[0020] The wireless communication unit 8 transmits the passcode received from the mobile communication device 7 to the vehicle control unit 11 .
[0021] The input unit 9 receives operational input from the user and outputs the input information to the vehicle control unit 11. The input unit 9 is configured with, for example, a touch panel, a keyboard, a push button, etc. Note that the touch panel of the navigation system may be used as the input unit 9.
[0022] The communication control unit 10 communicates with the server device 100 via a wireless communication network to transmit and receive various information. The server device 100 manages the vehicle 1, manages passcodes such as preset passcodes and generated passcodes, and transmits the passcodes to the communication control unit 10 in response to a request from the communication control unit 10.
[0023] The communication control unit 10 transmits the passcode received from the server device 100 to the vehicle control unit 11 .
[0024] The vehicle control unit 11 is configured by a computer unit including a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), an input port, and an output port.
[0025] The ROM of the vehicle control unit 11 stores various control constants, various maps, and the like, as well as a program for causing the computer unit to function as the vehicle control unit 11. That is, the computer unit functions as the vehicle control unit 11 by the CPU executing the program stored in the ROM.
[0026] To the input port of the vehicle control unit 11, various sensors including the input unit 9 described above are connected.
[0027] To an output port of the vehicle control unit 11, various control targets including the power train 2 described above are connected.
[0028] The vehicle control unit 11, the immobilizer 6, the wireless communication unit 8, and the communication control unit 10 are each connected via an in-vehicle LAN that complies with standards such as CAN (Controller Area Network), and can transmit and receive signals such as control signals between them.
[0029] In this embodiment, if the operation information from the entry key 4 is to start up the vehicle system and the key verification from the entry key 4 matches, the vehicle control unit 11 requests a passcode from the pre-registered mobile communication device 7, collates the passcode received from the mobile communication device 7 with information calculated by the vehicle control unit 11, and if it determines that the passcode is legitimate, allows the powertrain 2 to be driven.
[0030] Permitting the driving of the powertrain 2 means permitting the powertrain 2 to be put into a state in which it can be driven, such as permitting the supply of power to the powertrain 2.
[0031] If the vehicle control unit 11 determines that the passcode received from the mobile communication device 7 is invalid, it cuts off power to the vehicle system.
[0032] Cutting off power to the vehicle system means, for example, turning off the ignition or key.
[0033] The vehicle control unit 11 may obtain a passcode from the server device 100 via the communication control unit 10, and compare the passcode received from the mobile communication device 7 with the passcode obtained from the server device 100 to authenticate the passcode received from the mobile communication device 7.
[0034] If the correct passcode is not entered, the vehicle control unit 11 may notify the mobile communication device 7 of a preset manager of the vehicle 1.
[0035] If the passcode from the mobile communication device 7 does not match, the vehicle control unit 11 may notify the registered mobile communication device 7 of a drive permission request, and if there is a reply from the mobile communication device 7, may permit the drive of the powertrain 2. The reply from the mobile communication device 7 may include a password, such as a preset password, a generated password, or a password obtained by SMS, and permit the drive of the powertrain 2 when the passwords match.
[0036] The vehicle system startup process performed by the vehicle control system according to the present embodiment configured as described above will be described with reference to Fig. 2. The vehicle system startup process described below is started when a request to start the vehicle system is made from the entry key 4 and the key received from the entry key 4 matches.
[0037] In step S1, the vehicle control unit 11 determines whether or not the passcode acquired from the registered mobile communication device 7 matches the passcode.
[0038] If it is determined that the passcode has been matched, the vehicle control unit 11 executes the process of step S2. If it is determined that the passcode has not been matched, the vehicle control unit 11 executes the process of step S3.
[0039] In step S2, the vehicle control unit 11 permits the supply of power to the powertrain 2. After executing the process of step S2, the vehicle control unit 11 ends the vehicle system startup process.
[0040] In step S3, the vehicle control unit 11 notifies a drive permission request to the registered mobile communication device 7. After executing the process of step S3, the vehicle control unit 11 executes the process of step S4.
[0041] In step S4, the vehicle control unit 11 determines whether or not there is a reply from the mobile communication device .
[0042] If it is determined that there is a reply from the mobile communication device 7, the vehicle control unit 11 executes the process of step S5. If it is determined that there is no reply from the mobile communication device 7, the vehicle control unit 11 executes the process of step S6.
[0043] In step S5, the vehicle control unit 11 determines, based on the information received from the mobile communication device 7, whether or not to permit the driving of the powertrain 2.
[0044] If it is determined that the driving of the powertrain 2 is permitted, the vehicle control unit 11 executes the process of step S2. If it is determined that the driving of the powertrain 2 is not permitted, the vehicle control unit 11 executes the process of step S6.
[0045] In step S6, the vehicle control unit 11 cuts off the power supply to the power train 2. After executing the process of step S6, the vehicle control unit 11 ends the vehicle system startup process.
[0046] Thus, in this embodiment, if the operation information from the entry key 4 is to start up the vehicle system and the key verification from the entry key 4 matches, the vehicle control unit 11 requests a passcode from the pre-registered mobile communication device 7, compares the passcode received from the mobile communication device 7 with information calculated by the vehicle control unit 11, and if it determines that the passcode is legitimate, allows the powertrain 2 to be driven.
[0047] As a result, if the key verification from the entry key 4 matches and the passcode received from the mobile communication device 7 is valid, operation of the powertrain 2 is permitted. Therefore, by performing authentication using different hardware, user authentication for permitting operation of the powertrain 2 can be suitably performed.
[0048] Furthermore, if the vehicle control unit 11 determines that the passcode received from the mobile communication device 7 is invalid, it cuts off power to the vehicle system.
[0049] As a result, if the passcode received from the mobile communication device 7 is determined to be unauthorized, power to the vehicle system is cut off. Therefore, if an unauthorized passcode is used, the vehicle 1 can be immobilized.
[0050] In addition, the vehicle control unit 11 obtains a passcode from the server device 100 via the communication control unit 10, and compares the passcode received from the mobile communication device 7 with the passcode obtained from the server device 100 to authenticate the passcode received from the mobile communication device 7.
[0051] As a result, the passcode acquired from the server device 100 is used to verify the passcode received from the mobile communication device 7. Therefore, by not storing the passcode in the vehicle 1, it is possible to prevent the passcode from being leaked even if a malicious third party analyzes the controller in the vehicle 1.
[0052] If the correct passcode is not entered, the vehicle control unit 11 notifies the mobile communication device 7 of the manager of the vehicle 1, which is preset.
[0053] As a result, if a valid passcode is not entered, a notification is sent to the mobile communication device 7 of the manager of the vehicle 1, which has been preset. Therefore, by notifying the user that improper authentication has been performed, it is possible to inform the user of the risk of theft.
[0054] In another aspect of this embodiment, when the passcode from the mobile communication device 7 does not match, the vehicle control unit 11 in Fig. 1 notifies the registered mobile communication device 7 of a drive permission request, and when a password is input to the input unit 9 and the password matches, the vehicle control unit 11 permits the drive of the powertrain 2. The password is managed separately from the passcode. The passcode is received from the mobile communication device 7, and the password is input from the input unit 9.
[0055] The password may be set in advance, or may be generated by an application running on the mobile communication device 7, or may be obtained via SMS or the like.
[0056] A vehicle system startup process by the vehicle control system according to another aspect of the present embodiment configured as above will be described with reference to Fig. 3. The vehicle system startup process described below is started when a request to start the vehicle system is made from the entry key 4 and the key received from the entry key 4 matches.
[0057] As in the previous embodiment, in step S1, the vehicle control unit 11 determines whether or not the passcode of the mobile communication device 7 matches with the passcode, and if it determines that the passcode matches, in step S2, permits the supply of power to the powertrain 2, and if it determines that the passcode does not match, in step S3, notifies the registered mobile communication device 7 of a drive permission request. After executing the process of step S3, the vehicle control unit 11 executes the process of step S11.
[0058] In step S11, the vehicle control unit 11 determines whether or not there is an input from the input unit 9.
[0059] If it is determined that there is an input from the input unit 9, the vehicle control unit 11 executes the process of step S12. If it is determined that there is no input from the input unit 9, the vehicle control unit 11 executes the process of step S6.
[0060] In step S12, the vehicle control unit 11 determines whether or not to permit the driving of the powertrain 2 depending on whether or not the information input from the input unit 9 matches the password.
[0061] If it is determined that the driving of the powertrain 2 is permitted, the vehicle control unit 11 executes the process of step S2. If it is determined that the driving of the powertrain 2 is not permitted, the vehicle control unit 11 executes the process of step S6.
[0062] In step S6, similarly to the above-described embodiment, the vehicle control unit 11 cuts off the power supply to the power train 2. After executing the process of step S6, the vehicle control unit 11 ends the vehicle system startup process.
[0063] Thus, in another aspect of this embodiment, if the passcode from the mobile communication device 7 does not match, the vehicle control unit 11 notifies the registered mobile communication device 7 of a request for permission to drive, and if a password is entered into the input unit 9 and the password matches, the vehicle control unit 11 permits the powertrain 2 to drive.
[0064] As a result, if the passcode from the mobile communication device 7 does not match, a drive permission request is notified to the registered mobile communication device 7, and a password is entered into the input unit 9. If the password matches, drive of the powertrain 2 is permitted. As a result, the user can be notified that inappropriate authentication has been performed, and by notifying the password, even if the user is not in the vehicle 1 and is away from the vehicle 1, a third party can be permitted to remotely drive the powertrain 2.
[0065] The vehicle control unit 11 may be composed of multiple computer units, such as a computer unit that controls the power supply to the powertrain 2 by matching a passcode, and a computer unit that controls the start-up of the powertrain 2 based on a processing request from the immobilizer 6.
[0066] In this embodiment, an example has been described in which the vehicle control unit 11 performs various judgments and calculations based on various sensor information, but the present invention is not limited to this. Various judgments and calculations may be performed by an external device based on detection information from various sensors transmitted from the communication control unit 10, and the judgment results and calculation results may be received by the communication control unit 10, and various controls may be performed using the received judgment results and calculation results.
[0067] Although an embodiment of the invention has been disclosed, it will be apparent to one of ordinary skill in the art that modifications may be made thereto without departing from the spirit and scope of the invention, and it is intended that all such modifications and equivalents be included in the following claims. [Explanation of symbols]
[0068] 1 vehicle 2. Powertrain 3 Battery 4 Entry Key 5 Key communication section 6 Immobilizer 7 Mobile communication devices 8 Wireless Communication Section 9 Input section 10 Communication control section 11 Vehicle control unit 100 Server device
Claims
1. A vehicle control unit that controls a vehicle system of the vehicle; an entry key that generates a key necessary for authentication with the vehicle system, and that requests locking and unlocking of the vehicle door lock and activation of the vehicle system; A mobile communication device that manages a passcode required to permit driving of a powertrain of the vehicle, A vehicle control system in which the vehicle control unit permits operation of the powertrain when the entry key is authenticated in response to a request to start the vehicle system and the passcode entered from the mobile communication device is determined to be valid.
2. 2. The vehicle control system according to claim 1, wherein the vehicle control unit cuts off power supply to the vehicle system when the passcode input from the mobile communication device is determined to be invalid.
3. An input unit that accepts operation input from a user, 3. The vehicle control system according to claim 1, wherein when the vehicle control unit determines that the passcode input from the mobile communication device is invalid, the vehicle control unit notifies the mobile communication device of a request for permission to drive, and when a password is input into the input unit and the password matches, the vehicle control unit permits the powertrain to be driven.
4. a communication control unit that communicates with a server device that manages the vehicle; 3. The vehicle control system according to claim 1, wherein the vehicle control unit authenticates the passcode input from the mobile communication device by using the passcode acquired from the server device.
5. 3. The vehicle control system according to claim 1, wherein the vehicle control unit notifies the mobile communication device when a valid passcode is not input.
6. a communication control unit that communicates with a server device that manages the vehicle; 4. The vehicle control system according to claim 3, wherein the vehicle control unit authenticates the passcode input from the mobile communication device by using the passcode acquired from the server device.
7. The vehicle control system according to claim 3 , wherein the vehicle control unit notifies the mobile communication device when a valid passcode is not input.
8. The vehicle control system according to claim 4 , wherein the vehicle control unit notifies the mobile communication device when a valid passcode is not input.
Citation Information
Patent Citations
Start control device
JP2012250584A