Information processing device, vehicle equipped with the same, information processing method, and program

Abstract

To ensure that the occurrence of inconvenience can be suppressed even if the vehicle control function is disabled by a key.SOLUTION: An information processing apparatus includes a reception part 130 for receiving a user operation for invalidating a vehicle control function by a first key usable for controlling a vehicle, a confirmation part 132 for confirming whether predetermined communication with a second key usable for controlling a vehicle, different from the first key can be performed, and a processing part 134 for performing processing for suppressing invalidation of the vehicle control function by the first key according to the user operation when the confirmation part does not confirm that the predetermined communication with the second key can be performed.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to an information processing device, a vehicle equipped with the same, an information processing method, and a program. [Background technology]

[0002] Patent Document 1 discloses a notification device that makes a user aware that a mobile terminal is being used as a vehicle key. When a smartphone is being used as a vehicle key, the notification device notifies the user that it is being used as a vehicle key, and a picture of the smartphone is displayed on the display device to show that the smartphone is being used as a vehicle key, and also displays information to prevent the smartphone from being taken out. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2014-054902 A Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, there has been technology that uses a digital key registered on a smartphone to control a vehicle, such as locking and unlocking the vehicle and starting the engine.

[0005] Here, let us consider a case where the user disables the function of the digital key in the vehicle by operating the vehicle settings. In such a case, if the user only has a smartphone, he or she will be unable to control the vehicle, such as locking and unlocking the door and starting the engine, which will cause inconvenience.

[0006] SUMMARY OF THE PRESENT DISCLOSURE In view of the above circumstances, an object of the present invention is to prevent inconveniences from occurring even when a vehicle control function using a key is disabled. [Means for solving the problem]

[0007] The information processing device described in claim 1 includes a reception unit that receives a user operation to disable a vehicle control function by a first key that can be used to control a vehicle, a confirmation unit that confirms whether a specified communication is possible with a second key that can be used to control the vehicle and is different from the first key, and a processing unit that performs processing to prevent the disablement of the vehicle control function by the first key in response to the user operation if the confirmation unit does not confirm that the specified communication is possible with the second key.

[0008] In the information processing device described in claim 1, a confirmation unit confirms whether a predetermined communication is possible with a second key that is a key that can be used to control the vehicle and is different from the first key. Then, if the confirmation unit does not confirm that the predetermined communication is possible with the second key, a processing unit performs processing to prevent the disabling of a vehicle control function by the first key in response to the user operation. Here, the "vehicle control function by a key" refers to a function of controlling a vehicle by operating a key, such as locking and unlocking a door, turning on the power, and starting the engine. With this information processing device, it is possible to prevent inconveniences from occurring even if the vehicle control function by a key is disabled.

[0009] The information processing device according to claim 2 is the information processing device according to claim 1, wherein the reception unit receives a pressing operation of a button for disabling a vehicle control function by the first key, the button being provided in the vehicle.

[0010] The information processing device described in claim 2 disables the vehicle control function by the first key by accepting a pressing operation of a button provided in the vehicle. According to the information processing device, the vehicle control function by the key can be easily disabled.

[0011] The information processing device according to claim 3 is the information processing device according to claim 1, wherein the reception unit receives a user operation on a user interface displayed on a display unit for disabling a vehicle control function using the first key.

[0012] The information processing device described in claim 3 disables the vehicle control function by the first key by accepting a user operation on a user interface displayed on a display unit. According to the information processing device, the vehicle control function by the key can be easily disabled.

[0013] The information processing device according to claim 4 is the information processing device according to claim 3, wherein the processing unit controls the user interface so that the user operation cannot be accepted if the confirmation unit does not confirm that the specified communication with the second key is possible.

[0014] In the information processing device described in claim 4, when it is not confirmed that the predetermined communication with the second key is possible, the user interface is controlled so that the user operation cannot be accepted. According to this information processing device, when it is not confirmed that the predetermined communication with the second key is possible, it is possible to reliably prevent the vehicle control function from being disabled by the first key in response to a user operation.

[0015] The information processing device according to claim 5 is an information processing device according to any one of claims 1 to 4, wherein, when the confirmation unit does not confirm that the specified communication with the second key is possible, the processing unit notifies a message indicating that the user operation cannot be accepted.

[0016] In the information processing device according to claim 5, when it is not confirmed that the predetermined communication with the second key is possible, a message indicating that the user operation is not acceptable is notified. In this way, when it is not confirmed that the predetermined communication with the second key is possible, it is possible to inform the user that the user operation for disabling the vehicle control function by the first key in response to the user operation is not acceptable.

[0017] The information processing device of claim 6 is an information processing device of any one of claims 1 to 5, wherein the confirmation unit confirms whether the specified communication with the second key is possible by comparing identification information of the second key capable of the specified communication within the vehicle with identification information of the second key that has been registered in advance.

[0018] In the information processing device described in claim 6, when the identification information of the second key capable of the predetermined communication in the vehicle does not match with the identification information of the second key registered in advance, it is not confirmed that the second key is capable of the predetermined communication. According to the information processing device, when the identification information of the second key capable of the predetermined communication in the vehicle does not match with the identification information of the second key registered in advance, it is possible to prevent the vehicle control function by the first key from being disabled in response to a user operation.

[0019] The information processing device of claim 7 is an information processing device of any one of claims 1 to 5, wherein the confirmation unit confirms whether the specified communication with the second key is possible by comparing identification information of the second key that the user brings close to a short-range communication unit provided in the vehicle with identification information of the second key that has been registered in advance.

[0020] In the information processing device described in claim 7, when the identification information of the second key brought close by the user to a short-range communication unit provided in the vehicle does not match with the identification information of the second key registered in advance, it is not confirmed that the second key can perform the predetermined communication. According to this information processing device, when the identification information of the second key brought close by the user to a short-range communication unit provided in the vehicle does not match with the identification information of the second key registered in advance, it is possible to prevent the vehicle control function by the first key from being disabled in response to a user operation.

[0021] The information processing device of claim 8 is an information processing device of any one of claims 1 to 5, wherein the confirmation unit transmits a response request signal to the second key that has been registered in advance, and confirms whether the specified communication with the second key is possible based on whether or not a response signal is received from the second key.

[0022] In the information processing device described in claim 8, a response request signal is transmitted to the second key registered in advance, and when a response signal from the second key is not received, it is not confirmed that the predetermined communication with the second key is possible. According to the information processing device, when a response request signal is transmitted to the second key registered in advance, and when a response signal from the second key is not received, it is possible to prevent the first key from disabling the vehicle control function in response to a user operation.

[0023] The information processing device of claim 9 is an information processing device of any one of claims 1 to 5, wherein the confirmation unit confirms whether the specified communication with the second key is possible based on whether or not a signal transmitted from the second key that has been registered in advance is received.

[0024] In the information processing device described in claim 9, when a signal transmitted from the preregistered second key is not received, it is not confirmed that the predetermined communication with the second key is possible. According to the information processing device, when a signal transmitted from the preregistered second key is not received, it is possible to prevent the vehicle control function of the first key from being disabled in response to a user operation.

[0025] A vehicle described in claim 10 includes the information processing device described in any one of claims 1 to 9, and a locking unit that locks and unlocks an opening / closing unit that separates the inside of the vehicle from the outside of the vehicle.

[0026] In the vehicle described in claim 10, the opening and closing part is locked and unlocked by a key. With this vehicle, it is possible to prevent inconveniences from occurring even if the function of locking and unlocking the opening and closing part by the key is disabled.

[0027] The information processing method described in claim 11 includes a receiving unit receiving a user operation to disable a vehicle control function by a first key that can be used to control a vehicle, a confirmation unit confirming whether a specified communication is possible with a second key that can be used to control the vehicle and is different from the first key, and a processing unit performing processing to prevent the disablement of the vehicle control function by the first key in response to the user operation if the confirmation unit does not confirm that the specified communication is possible with the second key.

[0028] In the information processing method described in claim 11, a confirmation unit confirms whether a predetermined communication can be performed with a second key that is a key that can be used to control the vehicle and is different from the first key. If the confirmation unit does not confirm that the predetermined communication can be performed with the second key, a processing unit performs a process for preventing the disabling of the vehicle control function by the first key in response to the user operation. According to this information processing method, it is possible to prevent inconvenience from occurring even if the vehicle control function by the key is disabled.

[0029] The program described in claim 12 is a program for causing a computer to receive a user operation for disabling a vehicle control function by a first key that can be used to control a vehicle, check whether a specified communication is possible with a second key that can be used to control the vehicle and is different from the first key, and if it is not confirmed that the specified communication is possible with the second key, perform processing for preventing the disabling of the vehicle control function by the first key in response to the user operation.

[0030] The program described in claim 12 checks whether a predetermined communication can be performed with a second key that is different from the first key and can be used to control the vehicle. If it is not confirmed that the predetermined communication can be performed with the second key, a process is performed to prevent the vehicle control function by the first key from being disabled in response to the user operation. This program can prevent inconvenience from occurring even if the vehicle control function by a key is disabled. Effect of the Invention

[0031] According to the present invention, it is possible to prevent inconveniences from occurring even when the vehicle control function using the key is disabled. [Brief description of the drawings]

[0032] [Figure 1] 1 is a diagram showing a schematic configuration of a vehicle system according to a first embodiment. [Diagram 2] 1 is a block diagram showing a hardware configuration of a vehicle according to a first embodiment. [Diagram 3] 2 is a block diagram showing an example of a functional configuration of a CPU of a physical key control ECU in the vehicle-mounted device according to the first and second embodiments. FIG. [Figure 4] 2 is a block diagram showing an example of a functional configuration of a CPU of a digital key control ECU in the vehicle-mounted device according to the first embodiment; [Diagram 5] 2 is a block diagram showing an example of a functional configuration of a CPU of a control ECU in the vehicle-mounted device of the first embodiment; [Figure 6] FIG. 13 is a diagram illustrating an example of a customization setting screen. [Figure 7] FIG. 2 is a block diagram showing the hardware configuration of a physical key. [Figure 8] 1 is a block diagram showing a hardware configuration of a smartphone according to a first embodiment. [Figure 9] 5 is a flowchart showing an example of the flow of a customization setting process executed by a CPU of a control ECU in the vehicle-mounted device of the first embodiment. [Figure 10] FIG. 11 is a diagram showing a schematic configuration of a vehicle system according to a second embodiment. [Figure 11] FIG. 11 is a block diagram showing a hardware configuration of a vehicle according to a second embodiment. [Figure 12] 10 is a flowchart showing an example of the flow of a customization setting process executed by a CPU of a control ECU in an in-vehicle device of a second embodiment. [Figure 13] 10 is a flowchart showing an example of the flow of a customization setting process executed by a CPU of a control ECU in an in-vehicle device according to a modified example of the second embodiment. [Figure 14] FIG. 11 is a diagram showing a schematic configuration of a vehicle system according to a third embodiment. [Figure 15] FIG. 13 is a block diagram showing a hardware configuration of a smartphone according to a third embodiment. [Figure 16] FIG. 13 is a block diagram illustrating an example of a functional configuration of a CPU of a control device in a smartphone according to a third embodiment. [Figure 17] FIG. 13 is a block diagram showing a hardware configuration of a management server according to a third embodiment. [Figure 18] FIG. 11 is a sequence diagram showing a process flow in a vehicle system according to a third embodiment. [Figure 19] FIG. 13 is a sequence diagram showing a process flow in a vehicle system according to a modified example of the third embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0033] A vehicle system according to an embodiment of the present invention will be described with reference to FIGS. 1 to 19. FIG.

[0034] [First embodiment] FIG. 1 is a block diagram showing a schematic configuration of a vehicle system 10 according to a first embodiment.

[0035] (Overall composition) 1, a vehicle system 10 according to this embodiment includes a vehicle 12 and a smartphone 14 as a terminal for controlling the vehicle 12. The vehicle system 10 also includes a physical key 50 that is a portable device dedicated to the vehicle 12 for controlling the vehicle 12. The physical key 50 is an example of a second key.

[0036] The vehicle 12 is configured to be able to directly receive local communication that does not go through a network from the smartphone 14 and the physical key 50. This communication includes wireless communication and infrared communication.

[0037] The door lock device 28 locks and unlocks the driver's door, the passenger's door, the rear door, and the back door.

[0038] As shown in FIG. 2, the in-vehicle device 11 mounted on the vehicle 12 includes a physical key control ECU (Electronic Control Unit) 20, a digital key control ECU 21, an LF (Low Frequency) communication unit 22, a control ECU 23, an RF (Radio Frequency) communication unit 24, a display unit 25, and a BLE (Bluetooth (registered trademark) Low Energy) communication unit 26.

[0039] The LF communication unit 22 is a communication unit that performs wireless communication in the LF band, and transmits a request signal to an LF communication unit 42, which will be described later. The LF communication units 22 in this embodiment are installed in the driver's door, the passenger's door, the rear door, and the back door.

[0040] The RF communication unit 24 is a communication unit that performs wireless communication in the RF band, and receives a response signal from an RF communication unit 44, which will be described later.

[0041] The BLE communication unit 26 is a communication unit that performs wireless communication using Bluetooth (registered trademark), and performs communication with a BLE communication unit 14C, which will be described later.

[0042] The physical key control ECU 20 includes a CPU (Central Processing Unit) 20A, a ROM (Read Only Memory) 20B, a RAM (Random Access Memory) 20C, and an input / output I / F (Interface) 20D. The CPU 20A, the ROM 20B, the RAM 20C, and the input / output I / F 20D are connected to each other so as to be able to communicate with each other via an internal bus (not shown).

[0043] The CPU 20A is a central processing unit that executes various programs and controls each part. That is, the CPU 20A reads out the programs from the ROM 20B and executes the programs using the RAM 20C as a working area.

[0044] The ROM 20B stores various programs and various data. In this embodiment, ID (Identification) information 100 is stored in the ROM 20B.

[0045] The ID information 100 stores information about an ID unique to the physical key 50 .

[0046] The RAM 20C temporarily stores programs or data as a working area. The input / output I / F 20D is an interface for communicating with the LF communication unit 22, the RF communication unit 24, and the door lock device 28, respectively.

[0047] The physical key control ECU 20 may include a storage as a memory unit in addition to or instead of the ROM 20B. The storage may be, for example, a hard disk drive (HDD) or a solid state drive (SSD).

[0048] As shown in FIG. 3, in the physical key control ECU 20 of this embodiment, a CPU 20A functions as a physical key authentication unit 110 and a physical key function management unit 112 by executing a program.

[0049] The physical key authentication unit 110 performs authentication processing of the physical key 50 by comparing the ID of the physical key 50 with the ID information 100 based on wireless communication with the physical key 50 via the LF communication unit 22 and the RF communication unit 24. Specifically, the physical key authentication unit 110 transmits a response request signal via the LF communication unit 22 to the physical key 50 having the same ID as the ID information 100, and when it receives a response signal from the physical key 50 via the RF communication unit 24, determines that authentication of the physical key 50 has been successful.

[0050] If authentication of the physical key 50 is successful, the physical key authentication unit 110 performs vehicle control including locking and unlocking the doors of the door lock device 28, turning on the power to the vehicle 12, and starting the engine based on wireless communication with the physical key 50 via the LF communication unit 22 and the RF communication unit 24.

[0051] The physical key function management unit 112 enables or disables the vehicle control function of the physical key 50 in accordance with a setting based on a user operation.

[0052] The digital key control ECU 21 includes a CPU 21A, a ROM 21B, a RAM 21C, and an input / output I / F 21D. The CPU 21A, the ROM 21B, the RAM 21C, and the input / output I / F 21D are connected to each other via an internal bus (not shown) so as to be able to communicate with each other.

[0053] The functions of the CPU 21A, the ROM 21B, the RAM 21C, and the input / output I / F 21D are the same as those of the CPU 20A, the ROM 20B, the RAM 20C, and the input / output I / F 20D described above.

[0054] The ROM 21B of this embodiment stores ID information 102. The ID information 102 stores information on an ID unique to a digital key registered in the smartphone 14. The digital key is an example of a first key.

[0055] The input / output I / F 21D is an interface for communicating with each of the BLE communication unit 26 and the door lock device 28.

[0056] The digital key control ECU 21 may include a storage as a memory unit in addition to or instead of the ROM 21 B. The storage may be configured with, for example, an HDD or SSD.

[0057] As shown in FIG. 4, in the digital key control ECU 21 of this embodiment, a CPU 21A functions as a digital key authentication unit 120 and a digital key function management unit 122 by executing a program.

[0058] The digital key authentication unit 120 performs authentication processing of the digital key by comparing the ID of the digital key registered in the smartphone 14 with the ID information 102 based on wireless communication with the smartphone 14 via the BLE communication unit 26. If authentication of the digital key is successful, the digital key authentication unit 120 executes vehicle control including door locking and unlocking of the door lock device 28, powering on the vehicle 12, and starting the engine based on wireless communication with the smartphone 14 via the BLE communication unit 26.

[0059] The digital key function management unit 122 enables or disables the vehicle control function by the digital key in accordance with settings based on user operations.

[0060] The control ECU 23 includes a CPU 23A, a ROM 23B, a RAM 23C, and an input / output I / F 23D. The CPU 23A, the ROM 23B, the RAM 23C, and the input / output I / F 23D are connected to each other via an internal bus (not shown) so as to be able to communicate with each other.

[0061] The functions of the CPU 23A, the ROM 23B, the RAM 23C, and the input / output I / F 23D are the same as those of the CPU 20A, the ROM 20B, the RAM 20C, and the input / output I / F 20D described above.

[0062] In this embodiment, an information processing program 104 is stored in the ROM 23B. The input / output I / F 23D is an interface for communicating with the display unit 25.

[0063] The control ECU 23 may include a storage as a storage unit in addition to or instead of the ROM 23 B. The storage is configured by, for example, an HDD or SSD.

[0064] Even without a physical key, if you have a smartphone with a registered digital key, you can control the vehicle by locking and unlocking the doors, turning on the vehicle power, starting the engine, and more.

[0065] If a user wants to disable the digital key function through vehicle settings, but only has a smartphone and no physical key, disabling the digital key function means that the user will be unable to lock or unlock the doors, turn on the vehicle power, or start the engine. In addition, because the user will be unable to turn on the vehicle power, the digital key function cannot be enabled.

[0066] Therefore, in this embodiment, if the vehicle-mounted device 11 is unable to perform predetermined communication with the physical key 50, the vehicle control function using the digital key cannot be disabled.

[0067] Specifically, as shown in FIG. 5, in the control ECU 23 of this embodiment, the CPU 23A executes the information processing program 104 to function as a reception unit 130, a confirmation unit 132, and a processing unit 134.

[0068] The reception unit 130 receives a user operation for disabling the vehicle control function by the digital key. Specifically, the reception unit 130 receives a user operation on a user interface displayed on the display unit 25 for disabling the vehicle control function by the digital key.

[0069] For example, a customization setting screen 25A shown in Fig. 6 is displayed on the display unit 25 to accept user operations. Fig. 6 shows an example in which the customization setting screen 25A includes a digital key function off button 25B for disabling the vehicle control function by the digital key, a smart entry function off button 25C for disabling the smart entry function, and a power back door function off button 25D for disabling the power back door function.

[0070] The confirmation unit 132 confirms whether predetermined communication is possible with the physical key 50. Specifically, the confirmation unit 132 determines that predetermined communication with the physical key 50 is possible if the physical key authentication unit 110 of the physical key control ECU 20 has successfully authenticated the physical key 50.

[0071] When the confirmation unit 132 does not confirm that predetermined communication with the physical key 50 is possible, the processing unit 134 performs processing to prevent the disablement of the vehicle control function by the digital key in response to a user operation. Specifically, when the confirmation unit 132 does not confirm that predetermined communication with the physical key 50 is possible, the processing unit 134 performs control so that a user operation for disabling the vehicle control function by the digital key cannot be accepted in the user interface displayed on the display unit 25. For example, as shown in Fig. 6, the processing unit 134 tones down the display of the digital key function off button 25B on the customization setting screen 25A and disables the digital key function off button 25B.

[0072] (Physical key) 7, the physical key 50 is an electronic device that can be carried by the user of the vehicle 12. The physical key 50 includes a microcomputer 40, an LF communication unit 42, and an RF communication unit 44. The microcomputer 40 includes at least a non-volatile memory 40B. The memory 40B stores ID information 106, which is information unique to the physical key 50.

[0073] The LF communication unit 42 is a communication unit that performs wireless communication in the LF band, and receives a response request signal from the LF communication unit 22. The RF communication unit 44 is a transmission unit that performs wireless communication in the RF band, and transmits a response signal to the RF communication unit 24.

[0074] The microcomputer 40 compares the ID information 100 included in the response request signal received from the LF communication unit 22 with the ID information 106 in the memory 40B, and if they match, causes the RF communication unit 44 to transmit a response signal. Furthermore, when the microcomputer 40 receives a user operation on an operation unit (not shown) provided on the physical key 50 for locking and unlocking the door of the door lock device 28, turning on the power to the vehicle 12, and starting the engine, the microcomputer 40 causes the RF communication unit 44 to transmit a signal corresponding to the user operation to the RF communication unit 24 of the in-vehicle device 11.

[0075] (Smartphone) The smartphone 14 is a communication terminal carried by a user. The smartphone 14 of the present embodiment is configured to accept user operations for locking and unlocking the door of the door lock device 28, turning on the power of the vehicle 12, and starting the engine when authentication of a registered digital key is successful through communication with the vehicle-mounted device 11, and is configured to be able to lock and unlock the door of the door lock device 28, turn on the power of the vehicle 12, and start the engine. As shown in FIG. 8, the smartphone 14 includes a control device 70, a touch panel 14A, a communication unit 14B, and a BLE communication unit 14C.

[0076] The control device 70 includes a CPU 72, which is an example of a processor that is hardware, a ROM 73, a RAM 74, a storage 75, and an input / output I / F 76. The CPU 72, the ROM 73, the RAM 74, the storage 75, and the input / output I / F 76 are connected to each other via a bus 78.

[0077] The functions of the CPU 72, the ROM 73, the RAM 74, and the input / output I / F 76 are the same as those of the CPU 20A, the ROM 20B, the RAM 20C, and the input / output I / F 20D described above. Note that, as the storage 75 in this embodiment, in addition to the storage inside the smartphone 14, a microSD card can be applied.

[0078] The CPU 72 reads out a program from the ROM 73 and executes the program using the RAM 74 as a working area. In this embodiment, the digital key 140 is registered in the storage 75. The ROM 73 stores a vehicle control application program for controlling the vehicle through user operations using the digital key 140.

[0079] The control device 70 of the present embodiment is connected to the touch panel 14A, the communication unit 14B, and the BLE communication unit 14C via the input / output I / F 76. The touch panel 14A, the communication unit 14B, and the BLE communication unit 14C may be directly connected to the bus 78.

[0080] When the application program for vehicle control is executed, the CPU 72 displays icons for locking and unlocking the door of the door lock device 28, turning on the power of the vehicle 12, and starting the engine on the touch panel 14A. When the user operates the icon, a signal instructing the vehicle control (locking or unlocking the door of the door lock device 28, turning on the power of the vehicle 12, or starting the engine) corresponding to the operated icon is transmitted to the BLE communication unit 26 of the in-vehicle device 11 via the BLE communication unit 14C.

[0081] (Processing flow) Next, the flow of processing in the vehicle system 10 of this embodiment will be described with reference to the flowchart of FIG.

[0082] First, the smartphone 14 starts an application program for controlling the vehicle in response to an operation by a user in the vicinity of the vehicle 12. Then, the smartphone 14 or the physical key 50 receives a door unlock operation in response to the user's operation, and the smartphone 14 or the physical key 50 transmits a signal corresponding to the door unlock operation to the in-vehicle device 11, and the in-vehicle device 11 unlocks the door lock device 28.

[0083] When the user gets into the vehicle 12, the physical key control ECU 20 of the vehicle-mounted device 11 authenticates the physical key 50. In addition, the digital key control ECU 21 authenticates the digital key 140 registered in the smartphone 14.

[0084] When a customization setting is instructed to the vehicle-mounted device 11 by a user's operation, the CPU 23A of the control ECU 23 of the vehicle-mounted device 11 executes the information processing program 104 to perform the customization setting process shown in FIG.

[0085] First, in step S100, the CPU 23A, functioning as the confirmation unit 132, confirms the authentication state of the physical key 50 and the authentication state of the digital key 140. If the authentication of the physical key 50 has failed and the authentication of the digital key 140 has failed, the CPU 23A ends the customization setting process. If the authentication of the physical key 50 has failed and the authentication of the digital key 140 has succeeded, the CPU 23A proceeds to step S102. If the authentication of the physical key 50 has succeeded, the CPU 23A proceeds to step S106.

[0086] In step S102, CPU 23A functioning as reception unit 130 transitions the screen to be displayed on display unit 25 to customization setting screen 25A.

[0087] In step S104, the CPU 23A, functioning as the processing unit 134, tones down the display of the digital key function off button 25B on the customization setting screen 25A, disables the digital key function off button 25B, and proceeds to step S110.

[0088] In step S106, CPU 23A functioning as reception unit 130 transitions the screen displayed on display unit 25 to customization setting screen 25A.

[0089] In step S108, the CPU 23A, functioning as the processing unit 134, increases the tone of the display of the digital key function off button 25B on the customization setting screen 25A, and enables the digital key function off button 25B, and then proceeds to step S110.

[0090] In step S110, the CPU 23A, functioning as the reception unit 130, receives a user operation on the customization setting screen 25A, sets the digital key function, the smart entry function, or the power back door function to be disabled, and ends the customization setting process.

[0091] (Summary of the first embodiment) In the vehicle 12 of this embodiment, the control ECU 23 checks whether predetermined communication with the physical key 50 is possible, and if it is not confirmed that predetermined communication with the physical key 50 is possible, performs processing to prevent the vehicle control function using the digital key 140 from being disabled in response to a user operation. In this way, if the control ECU 23 is unable to perform predetermined communication with the physical key 50, the vehicle control function using the digital key 140 cannot be disabled. This reduces the possibility that the vehicle will become uncontrollable due to an erroneous operation when the user only has the smartphone 14 to which the digital key 140 is registered.

[0092] In the present embodiment, the physical key authentication unit 110 transmits a response request signal via the LF communication unit 22 to the physical key 50 having the same ID as the ID information 100, and determines that authentication of the physical key 50 has been successful when a response signal is received from the physical key 50 via the RF communication unit 24. However, the present invention is not limited to this. For example, the physical key 50 may be configured to periodically transmit a signal, and the physical key authentication unit 110 may perform authentication processing of the physical key 50 by comparing the ID of the physical key 50 contained in the signal transmitted from the physical key 50 inside the vehicle 12 with the ID information 100.

[0093] In the present embodiment, the case has been described as an example in which the screen displayed on the display unit 25 is transitioned to the customization setting screen 25A after the authentication status of the physical key 50 and the authentication status of the digital key 140 have been confirmed, but this is not limiting. When the screen displayed on the display unit 25 is transitioned to the customization setting screen 25A, the authentication status of the physical key 50 and the authentication status of the digital key 140 may be confirmed.

[0094] [Second embodiment] In the first embodiment, the physical key performs wireless communication in the LF band and RF band to control the vehicle. In contrast, the second embodiment differs from the first embodiment in that a card that communicates by NFC (Near Field Communication) is used. The differences from the first embodiment will be described below. Note that the same components are denoted by the same reference numerals, and description thereof will be omitted.

[0095] (Overall composition) 10, a vehicle system 210 according to this embodiment includes a vehicle 212, a smartphone 14, and an NFC card 250 that is a card dedicated to the vehicle 212 for controlling the vehicle 212. The NFC card 250 is an example of a second key.

[0096] The vehicle 212 is configured to be able to directly receive local communication that does not go through a network from the smartphone 14 and the NFC card 250. This communication includes wireless communication and infrared communication.

[0097] As shown in FIG. 11, an in-vehicle device 211 mounted on a vehicle 212 includes a physical key control ECU 220, a digital key control ECU 21, an NFC communication unit 224, a control ECU 23, a display unit 25, and a BLE communication unit 26.

[0098] The NFC communication unit 224 is a communication unit that performs wireless communication in the NFC band, and performs communication with the NFC card 250 that is brought close by the user. The NFC communication unit 224 of this embodiment is installed inside the vehicle 212.

[0099] The physical key control ECU 220 includes a CPU 220A, a ROM 220B, a RAM 220C, and an input / output I / F 220D. The CPU 220A, the ROM 220B, the RAM 220C, and the input / output I / F 220D are connected to each other via an internal bus (not shown) so as to be able to communicate with each other.

[0100] The functions of the CPU 220A, the ROM 220B, the RAM 220C, and the input / output I / F 220D are the same as those of the CPU 20A, the ROM 20B, the RAM 20C, and the input / output I / F 20D described above.

[0101] The ROM 220B of this embodiment stores ID information 100. As the ID information 100, information on an ID unique to the NFC card 250 is stored.

[0102] 3, in the physical key control ECU 220 of this embodiment, the CPU 220A executes a program to function as the physical key authentication unit 110 and the physical key function management unit 112. Note that in the digital key control ECU 21, the CPU 21A may be configured to execute a program to function as the physical key authentication unit 110 and the physical key function management unit 112.

[0103] The physical key authentication unit 110 performs authentication processing of the NFC card 250 by comparing the ID of the NFC card 250 with the ID information 100 based on wireless communication with the NFC card 250 in the NFC communication unit 224. Specifically, when the physical key authentication unit 110 receives from the NFC card 250, via the NFC communication unit 224, a response request signal having the same ID as the ID information 100, the physical key authentication unit 110 determines that the authentication of the NFC card 250 has been successful.

[0104] If authentication of the NFC card 250 is successful, the physical key authentication unit 110 executes vehicle control including turning on the power of the vehicle 212 and starting the engine.

[0105] The physical key function management unit 112 enables or disables the vehicle control function by the NFC card 250 in accordance with settings based on user operations.

[0106] As shown in FIG. 5, in the control ECU 23 of this embodiment, the CPU 23A executes the information processing program 104 to function as a reception unit 130, a confirmation unit 132, and a processing unit 134.

[0107] The reception unit 130 receives a user operation for disabling the vehicle control function by the digital key 140. Specifically, the reception unit 130 receives a user operation on a user interface, displayed on the display unit 25, for disabling the vehicle control function by the digital key 140.

[0108] For example, the customization setting screen 25A shown in FIG. 6 is displayed on the display unit 25 and a user operation is accepted.

[0109] The confirmation unit 132 confirms whether predetermined communication with the NFC card 250 is possible. Specifically, when the physical key authentication unit 110 of the physical key control ECU 220 has successfully authenticated the NFC card 250, the confirmation unit 132 determines that predetermined communication with the NFC card 250 is possible.

[0110] When the confirmation unit 132 does not confirm that predetermined communication with the NFC card 250 is possible, the processing unit 134 performs processing to prevent the digital key 140 from disabling the vehicle control function in response to a user operation. Specifically, when the confirmation unit 132 does not confirm that predetermined communication with the NFC card 250 is possible, the processing unit 134 performs control so that a user operation for disabling the vehicle control function with the digital key 140 cannot be accepted in the user interface displayed on the display unit 25. For example, as shown in FIG. 6 above, the processing unit 134 tones down the display of the digital key function off button 25B on the customization setting screen 25A and disables the digital key function off button 25B.

[0111] (Processing flow) Next, the flow of processing in the vehicle system 210 of this embodiment will be described with reference to the flowchart of FIG.

[0112] First, the smartphone 14 starts an application program for vehicle control by an operation by a user in the vicinity of the vehicle 212. Then, the smartphone 14 receives a door unlock operation by the user's operation, and transmits a signal corresponding to the door unlock operation to the in-vehicle device 11, and the in-vehicle device 211 unlocks the door lock device 28.

[0113] When the user gets into the vehicle 212, the digital key control ECU 21 of the vehicle-mounted device 211 authenticates the digital key 140 registered in the smartphone 14.

[0114] When a customization setting is instructed to the vehicle-mounted device 211 by a user operation, the CPU 23A of the control ECU 23 of the vehicle-mounted device 211 executes the information processing program 104 to perform the customization setting process shown in FIG.

[0115] First, in step S200, the CPU 23A, functioning as the confirmation unit 132, confirms the authentication status of the digital key 140. If the authentication of the digital key 140 has failed, the CPU 23A ends the customization setting process. On the other hand, if the authentication of the digital key 140 has succeeded, the CPU 23A proceeds to step S202.

[0116] In step S202, CPU 23A functioning as reception unit 130 transitions the screen displayed on display unit 25 to customization setting screen 25A.

[0117] In step S204, the CPU 23A, functioning as the confirmation unit 132, determines whether or not the smartphone 14 is preregistered as a smartphone having owner authority. Here, a smartphone having owner authority is a smartphone registered in the vehicle 212 as a smartphone held by the owner of the vehicle 212. If the smartphone 14 is not preregistered as a smartphone having owner authority, the CPU 23A proceeds to step S206. On the other hand, if the smartphone 14 is preregistered as a smartphone having owner authority, the CPU 23A proceeds to step S212.

[0118] In step S206, CPU 23A as confirmation unit 132 notifies the user of a message requesting that NFC card 250 be brought close to NFC communication unit 224. Then, the user brings NFC card 250 that the user holds close to NFC communication unit 224. When NFC card 250 approaches NFC communication unit 224, physical key authentication unit 110 performs authentication processing of NFC card 250 by matching the ID of NFC card 250 with ID information 100 based on wireless communication with NFC card 250 in NFC communication unit 224.

[0119] In step S208, CPU 23A, functioning as confirmation unit 132, determines whether or not authentication of NFC card 250 has been successful by physical key authentication unit 110 of physical key control ECU 220A. If authentication of NFC card 250 has been successful, CPU 23A proceeds to step S212. On the other hand, if authentication of NFC card 250 has not been successful, CPU 23A proceeds to step S210.

[0120] In step S210, the CPU 23A, functioning as the processing unit 134, tones down the display of the digital key function off button 25B on the customization setting screen 25A, disables the digital key function off button 25B, and proceeds to step S214.

[0121] In step S212, the CPU 23A, functioning as the processing unit 134, increases the display tone of the digital key function off button 25B on the customization setting screen 25A, and enables the digital key function off button 25B, and then proceeds to step S214.

[0122] In step S214, CPU 23A, as reception unit 130, receives a user operation on customization setting screen 25A, sets the digital key function, smart entry function, or power back door function to be disabled, and ends the customization setting process. When setting the digital key function to be disabled, the vehicle control function by NFC card 250 or the vehicle control function by communication with an NFC communication unit (not shown) of smartphone 140 having owner authority is set to be enabled according to the user's selection.

[0123] (Summary of the second embodiment) In the vehicle 212 of this embodiment, the control ECU 23 checks whether a predetermined communication with the NFC card 250 is possible, and if it is not confirmed that the predetermined communication with the NFC card 250 is possible, the control ECU 23 performs a process for suppressing the disablement of the vehicle control function by the digital key 140 according to the user's operation. In this way, if the control ECU 23 cannot perform the predetermined communication with the NFC card 250, the vehicle control function using the digital key 140 cannot be disabled. This can reduce the possibility that the vehicle control will not be possible due to an erroneous operation when the user only has the smartphone 14 to which the digital key 140 is registered. Note that, if a smartphone other than a smartphone with owner authority is used for digital key authentication, the vehicle control function using the digital key 140 cannot be disabled unless authentication by the NFC card 250 is successful. This is because if a smartphone other than a smartphone with owner authority is used, there is a high possibility that the NFC card 250 is not held. On the other hand, when a smartphone with owner authority is being used, there is a high probability that the NFC card 250 is in possession of the vehicle, so there is a low risk of losing control of the vehicle, and reducing the hassle of omitting authentication can be prioritized.

[0124] (Modification of the second embodiment) In the second embodiment, an example has been described in which an NFC card is not requested if the smartphone 14 to which the digital key 140 is registered is an owner-authorized smartphone, but an NFC card may be requested even if the smartphone is an owner-authorized smartphone. In a modified example, instead of the customization setting process shown in Fig. 12, the CPU 23A of the control ECU 23 of the in-vehicle device 211 performs a customization setting process shown in Fig. 13.

[0125] First, in step S300, the CPU 23A, functioning as the confirmation unit 132, confirms the authentication status of the digital key 140. If the authentication of the digital key 140 has failed, the CPU 23A ends the customization setting process. On the other hand, if the authentication of the digital key 140 has succeeded, the CPU 23A proceeds to step S302.

[0126] In step S302, CPU 23A functioning as reception unit 130 transitions the screen to be displayed on display unit 25 to customization setting screen 25A.

[0127] In step S304, CPU 23A as confirmation unit 132 notifies the user of a message requesting that NFC card 250 be brought close to NFC communication unit 224. Then, the user brings NFC card 250 that the user holds close to NFC communication unit 224. When NFC card 250 is brought close to NFC communication unit 224, physical key authentication unit 110 performs authentication processing of NFC card 250 by matching the ID of NFC card 250 with ID information 100 based on wireless communication with NFC card 250 in NFC communication unit 224.

[0128] In step S306, CPU 23A, functioning as confirmation unit 132, determines whether or not authentication of NFC card 250 has been successful by physical key authentication unit 110 of physical key control ECU 220A. If authentication of NFC card 250 has been successful, CPU 23A proceeds to step S308. On the other hand, if authentication of NFC card 250 has not been successful, CPU 23A proceeds to step S310.

[0129] In step S308, the CPU 23A, functioning as the confirmation unit 132, determines whether or not the smartphone 14 is registered in advance as a smartphone having friend authority. Here, a smartphone having friend authority is a smartphone registered in the vehicle 212 as a smartphone held by a person other than the owner of the vehicle 212. If the smartphone 14 is not registered in advance as a smartphone having friend authority, the CPU 23A proceeds to step S312. On the other hand, if the smartphone 14 is registered in advance as a smartphone having friend authority, the CPU 23A proceeds to step S310.

[0130] In step S312, the CPU 23A, as the confirmation unit 132, determines whether the smartphone 14 is preregistered as a smartphone having owner authority. If the smartphone 14 is not preregistered as a smartphone having owner authority, the CPU 23A proceeds to step S316. On the other hand, if the smartphone 14 is preregistered as a smartphone having owner authority, the CPU 23A proceeds to step S314.

[0131] In step S310, the CPU 23A, functioning as the processing unit 134, tones down the display of the digital key function off button 25B on the customization setting screen 25A and disables the digital key function off button 25B, and then proceeds to step S322.

[0132] In step S314, the CPU 23A, functioning as the processing unit 134, increases the tone of the display of the digital key function off button 25B on the customization setting screen 25A, and enables the digital key function off button 25B, and then proceeds to step S322.

[0133] In step S316, CPU 23A, functioning as confirmation unit 132, determines whether or not authenticated NFC card 250 is an NFC card registered at the time of shipment from the factory. If authenticated NFC card 250 is an NFC card registered at the time of shipment from the factory, CPU 23A proceeds to step S320. On the other hand, if authenticated NFC card 250 is not an NFC card registered at the time of shipment from the factory, CPU 23A proceeds to step S318.

[0134] In step S318, the CPU 23A, functioning as the processing unit 134, tones down the display of the digital key function off button 25B on the customization setting screen 25A and disables the digital key function off button 25B, and then proceeds to step S322.

[0135] In step S320, the CPU 23A, functioning as the processing unit 134, increases the display tone of the digital key function off button 25B on the customization setting screen 25A, and enables the digital key function off button 25B, and then proceeds to step S322.

[0136] In step S322, the CPU 23A, as the reception unit 130, receives a user operation on the customization setting screen 25A, sets the digital key function, the smart entry function, or the power back door function to be disabled, and ends the customization setting process. Here, when the smartphone 14 is a smartphone with owner authority and sets the digital key function to be disabled, the vehicle control function by communication with an NFC communication unit (not shown) of the smartphone 140 with owner authority may be enabled. Alternatively, the vehicle control function by the digital key registered in a smartphone 140 other than the smartphone with owner authority may be disabled, and the vehicle control function by the digital key registered in the smartphone with owner authority may be enabled.

[0137] In a modified example of the second embodiment, even if the smartphone 14 is a smartphone with owner authority, the smartphone 14 requests the NFC card 250. This makes it possible to check the NFC card 250 even if the smartphone has owner authority, and to reduce the possibility that the vehicle control will become impossible due to an erroneous operation when only the smartphone 14 is in possession of the smartphone 14. Note that even if the smartphone 14 is not a smartphone with owner authority, if the NFC card 250 is a card registered at the time of shipment from the factory, it is possible to set the vehicle control function using the digital key 140 to be disabled. This is because the NFC card registered at the time of shipment from the factory is an NFC card that is handled in a business environment, such as within the manufacturer or within a dealer before shipment.

[0138] As a further modified example of the second embodiment, the first embodiment and the second embodiment may be combined. In this case, both physical key authentication and NFC card authentication may be attempted in step S100. At this time, a failure of the physical key authentication refers to a case where the physical key authentication fails and also the NFC card authentication fails, and a success of the physical key authentication refers to a case where at least one of the physical key authentication and the NFC card authentication succeeds. Note that a success of the physical key authentication may be a case where both the physical key authentication and the NFC card authentication succeed, and a failure of the physical key authentication may be a case where either the physical key authentication or the NFC card authentication fails. It may be possible for the user to set which of the above is regarded as a success of the physical key authentication.

[0139] In addition, in step S100, the user may be able to set whether to perform the physical key authentication in the first embodiment, the NFC card authentication in the second embodiment, or both the physical key authentication and the NFC card authentication described above.

[0140] [Third embodiment] In the first and second embodiments, the customization settings are accepted in the vehicle-mounted device. In contrast, the third embodiment differs from the first and second embodiments in that the customization settings are accepted in the smartphone. The following describes the differences from the first embodiment. Note that the same components are denoted by the same reference numerals, and the description thereof will be omitted.

[0141] (Overall composition) As shown in FIG. 14, a vehicle system 410 according to this embodiment includes a vehicle 12, a smartphone 414, a physical key 50, and a management server 416.

[0142] The vehicle 12, the smartphone 414, and the management server 416 are configured to be able to communicate with each other via a network N. Here, the vehicle 12 is equipped with a communication device 444 connected to the network N. The network N includes mobile communication services such as 3G and LTE, and an Internet line.

[0143] (Smartphone) As shown in FIG. 15, the smartphone 414 includes a control device 470, a touch panel 14A, a communication unit 14B, and a BLE communication unit 14C.

[0144] The control device 470 includes a CPU 472, which is an example of a processor that is hardware, a ROM 473, a RAM 74, a storage 75, and an input / output I / F 76. The CPU 472, the ROM 473, the RAM 74, the storage 75, and the input / output I / F 76 are connected to each other via a bus 78.

[0145] The functions of the CPU 472, the ROM 473, the RAM 74, and the input / output I / F 76 are the same as those of the CPU 20A, the ROM 20B, the RAM 20C, and the input / output I / F 20D described above.

[0146] The CPU 472 reads out the information processing program 473A from the ROM 473, and executes the information processing program 473A using the RAM 74 as a working area. In this embodiment, the information processing program 473A, which is an application program for controlling the vehicle in response to a user operation using the digital key 140, is stored in the ROM 473.

[0147] As shown in FIG. 16, the CPU 472 functions as a reception unit 490, a confirmation unit 492, and a processing unit 494 by executing an information processing program 473A.

[0148] The reception unit 490 receives a user operation for disabling the vehicle control function by the digital key 140. Specifically, the reception unit 490 receives a user operation on a user interface for disabling the vehicle control function by the digital key 140, which is displayed on the touch panel 14A.

[0149] For example, the customization setting screen 25A shown in FIG. 6 is displayed on the touch panel 14A and accepts user operations.

[0150] The confirmation unit 492 confirms whether predetermined communication with the physical key 50 is possible. Specifically, when the confirmation unit 492 receives information indicating that authentication of the physical key 50 has been successful by the physical key authentication unit 110 of the physical key control ECU 20 of the in-vehicle device 11, it determines that predetermined communication with the physical key 50 is possible.

[0151] When the confirmation unit 492 does not confirm that predetermined communication with the physical key 50 is possible, the processing unit 494 performs processing to prevent the digital key 140 from disabling the vehicle control function in response to a user operation. Specifically, when the confirmation unit 492 does not confirm that predetermined communication with the physical key 50 is possible, the processing unit 494 performs control so that a user operation for disabling the vehicle control function by the digital key 140 cannot be accepted in the user interface displayed on the touch panel 14A. For example, as shown in FIG. 6 above, the processing unit 494 tones down the display of the digital key function off button 25B on the customization setting screen 25A and disables the digital key function off button 25B.

[0152] (Management Server) The management server 416 has a function of mediating data exchange between the smartphone 414 and the vehicle-mounted device 11. As shown in Fig. 17, the management server 416 includes a control device 480 and a communication unit 416B.

[0153] The control device 480 includes a CPU 482, a ROM 483, a RAM 484, a storage 485, and an input / output I / F 486. The CPU 482, the ROM 483, the RAM 484, the storage 485, and the input / output I / F 486 are connected to each other via a bus 488.

[0154] The functions of the CPU 482, ROM 483, RAM 484, storage 485, and input / output I / F 486 are the same as those of the CPU 72, ROM 73, RAM 74, storage 75, and input / output I / F 76 described above.

[0155] The CPU 482 reads a program from the storage 485 and executes the program using the RAM 484 as a working area. In this embodiment, the storage 485 stores a program for mediating data exchange between the smartphone 414 and the vehicle-mounted device 11.

[0156] A communication unit 416B is connected to the control device 480 of this embodiment via an input / output I / F 486. The communication unit 416B may be directly connected to the bus 488.

[0157] (Processing flow) Next, a process flow in the vehicle system 410 of this embodiment will be described with reference to the sequence diagram of FIG.

[0158] First, in step S400, the smartphone 414 starts the information processing program 473A in response to an operation by a user in the vicinity of the vehicle 12. Then, the smartphone 414 or the physical key 50 receives a door unlock operation in response to the user's operation, and the smartphone 414 or the physical key 50 transmits a signal corresponding to the door unlock operation to the vehicle-mounted device 11, and the vehicle-mounted device 11 unlocks the door lock device 28.

[0159] When the user gets into the vehicle 12, in step S402, the digital key control ECU 21 authenticates the digital key 140 registered in the smartphone 414. In addition, in step S404, the physical key control ECU 20 of the vehicle-mounted device 11 authenticates the physical key 50.

[0160] Then, in step S406, the CPU 23A of the control ECU 23 of the vehicle-mounted device 11 transmits information indicating the authentication state of the digital key 140 and the authentication state of the physical key 50 to the management server 416 via the communication device 444.

[0161] In step S408, the management server 416 transmits the received information indicating the authentication status of the digital key 140 and the authentication status of the physical key 50 to the smartphone 414 via the communication unit 416B.

[0162] Then, when a customization setting is instructed on smartphone 414 by a user operation, in step S410, CPU 472 of control device 470 of smartphone 414 transitions the screen displayed on touch panel 14A to customization setting screen 25A.

[0163] In step S412, the CPU 472 of the control device 470 of the smartphone 414, as the confirmation unit 492, confirms the authentication state of the digital key 140 and the authentication state of the physical key 50. Then, if the confirmation unit 492 does not confirm that specified communication with the physical key 50 is possible, the CPU 472, as the processing unit 494, tones down the display of the digital key function off button 25B on the customization setting screen 25A and disables the digital key function off button 25B.

[0164] In step S414, CPU 472 of control device 470 of smartphone 414 functions as reception unit 490 and receives a user operation on customization setting screen 25A.

[0165] In step S416, the CPU 472 of the control device 470 of the smartphone 414, as the reception unit 490, transmits setting information for setting the digital key function, the smart entry function, or the power back door function to be disabled to the management server 416 via the communication unit 14B.

[0166] In step S418, the management server 416 transmits the received setting information to the vehicle-mounted device 11 via the communication unit 416B.

[0167] In step S420, the CPU 23A of the control ECU 23 of the vehicle-mounted device 11 performs setting so as to disable the digital key function, the smart entry function, or the power back door function, in accordance with the received setting information.

[0168] (Summary of the third embodiment) The smartphone 414 of this embodiment is configured so that the control device 470 checks whether predetermined communication is possible between the physical key 50 and the vehicle 12, and if it is not confirmed that predetermined communication is possible between the physical key 50 and the vehicle 12, performs processing to prevent the vehicle control function using the digital key 140 from being disabled in response to a user operation. In this way, if the control device 470 is unable to perform predetermined communication between the physical key 50 and the vehicle 12, the vehicle control function using the digital key 140 cannot be disabled. This reduces the possibility that the user will be unable to control the vehicle due to an erroneous operation when the user only has the smartphone 414 to which the digital key 140 is registered.

[0169] (Modification of the third embodiment) In the third embodiment, the vehicle-mounted device 11 transmits information indicating the authentication state of the digital key 140 and the authentication state of the physical key 50 to the management server 416, but this is not limited thereto. The vehicle-mounted device 11 may transmit control information for controlling the customization setting screen 25A of the smartphone 414 in accordance with the information indicating the authentication state of the digital key 140 and the authentication state of the physical key 50. In the modified example, the process flow shown in FIG. 19 is used instead of the process flow shown in FIG. 18. The CPU 23A of the control ECU 23 of the vehicle-mounted device 11 executes the information processing program 104 to function as the reception unit 130, the confirmation unit 132, and the processing unit 134.

[0170] First, in step S500, the smartphone 414 starts an application program for controlling the vehicle in response to an operation by a user in the vicinity of the vehicle 12. Then, the smartphone 414 or the physical key 50 receives a door unlock operation in response to the user's operation, and the smartphone 414 or the physical key 50 transmits a signal corresponding to the door unlock operation to the in-vehicle device 11, and the in-vehicle device 11 unlocks the door lock device 28.

[0171] When the user enters the vehicle 12, in step S502, the digital key control ECU 21 authenticates the digital key 140 registered in the smartphone 414. In addition, in step S504, the physical key control ECU 20 of the in-vehicle device 11 authenticates the physical key 50.

[0172] Then, when a customization setting is instructed on smartphone 414 by a user operation, in step S506, CPU 472 of control device 470 of smartphone 414 transitions the screen displayed on touch panel 14A to customization setting screen 25A.

[0173] Then, in step S508, the CPU 23A of the control ECU 23 of the in-vehicle device 11, functioning as the confirmation unit 132, confirms the authentication state of the digital key 140 and the authentication state of the physical key 50. Then, if the confirmation unit 132 does not confirm that specified communication with the physical key 50 is possible, the CPU 23A, functioning as the processing unit 134, transmits a display control signal to the management server 416 via the communication device 444. This display control signal is a signal for controlling the tone-down of the display of the digital key function off button 25B on the customization setting screen 25A of the touch panel 14A of the smartphone 414 and for disabling the digital key function off button 25B.

[0174] In step S510, the management server 416 transmits the received display control signal to the smartphone 414 via the communication unit 416B.

[0175] In step S512, CPU 472 of control device 470 of smartphone 414 controls the display of customization setting screen 25A of touch panel 14A based on the received display control signal.

[0176] In step S514, the CPU 472 of the control device 470 of the smartphone 414 accepts a user operation on the customization setting screen 25A.

[0177] In step S516, the CPU 472 of the control device 470 of the smartphone 414 transmits setting information for setting so as to disable the digital key function, the smart entry function, or the power back door function to the management server 416 via the communication unit 14B.

[0178] In step S518, the management server 416 transmits the received setting information to the vehicle-mounted device 11 via the communication unit 416B.

[0179] In step S520, the CPU 23A of the control ECU 23 of the vehicle-mounted device 11 performs setting so as to disable the digital key function, the smart entry function, or the power back door function, in accordance with the received setting information.

[0180] As described above, the vehicle 12 according to the modified example of this embodiment is configured so that the control ECU 23 checks whether predetermined communication with the physical key 50 is possible, and if it is not confirmed that predetermined communication with the physical key 50 is possible, performs processing to prevent the vehicle control function using the digital key 140 from being disabled in response to a user operation. In this way, if the control ECU 23 is unable to perform predetermined communication with the physical key 50, the vehicle control function using the digital key 140 cannot be disabled. This reduces the possibility that the vehicle will become uncontrollable due to an erroneous operation when the user only has the smartphone 414 to which the digital key 140 is registered.

[0181] [remarks] In each of the above embodiments, the terminal to which the digital key 140 is registered is the smartphone 14, 414, but this is not limited to this. The digital key 140 may also be registered in a device with communication capabilities, such as a tablet computer or a wearable computer.

[0182] In the vehicle 12 or the smartphone 414 of each embodiment, the display of the digital key function off button 25B on the customization setting screen 25A is toned down and the digital key function off button 25B is disabled, but the present invention is not limited to this. For example, a message indicating that a user operation to disable the vehicle control function of the digital key 140 cannot be accepted may be notified. As an example, an error message saying "The vehicle control function of the digital key cannot be disabled because there is no physical key" may be notified. In this case, after accepting a user operation to disable the vehicle control function of the digital key 140, the control ECU 23 may check whether a predetermined communication with the physical key 50 is possible.

[0183] In addition, in each embodiment, a case has been described in which a user operation to disable the vehicle control function of the digital key 140 is accepted on the display unit 25 of the in-vehicle device 11 or the customization setting screen 25A displayed on the touch panel 14A of the smartphone 414, but this is not limiting. A user operation to disable the vehicle control function of the digital key 140 may be accepted by pressing a button provided in the vehicle.

[0184] In addition, in each embodiment, the physical key 50 performs wireless communication with the vehicle-mounted device 11 in the LF band and RF band, but the present invention is not limited to this. For example, the physical key 50 may perform wireless communication with the vehicle-mounted device 11 using Bluetooth (registered trademark), NFC, or UWB (Ultra Wide Band).

[0185] In addition, in each embodiment, the smartphone 14, 414 performs wireless communication with the vehicle-mounted device 11 using Bluetooth (registered trademark), but the present invention is not limited to this. For example, the smartphone 14, 414 may perform wireless communication with the vehicle-mounted device 11 using NFC or UWB.

[0186] In the above embodiment, various processes executed by the CPU 23A, 472 by reading the software (program) may be executed by various processors other than the CPU. In this case, examples of the processor include a PLD (Programmable Logic Device) such as an FPGA (Field-Programmable Gate Array) whose circuit configuration can be changed after manufacture, and a dedicated electric circuit such as an ASIC (Application Specific Integrated Circuit) which is a processor having a circuit configuration designed exclusively for executing a specific process. In addition, the various processes may be executed by one of these various processors, or may be executed by a combination of two or more processors of the same or different types (for example, a plurality of FPGAs, a combination of a CPU and an FPGA, etc.). In addition, the hardware structure of these various processors is, more specifically, an electric circuit that combines circuit elements such as semiconductor elements.

[0187] In the above embodiment, each program has been described as being prestored (installed) in a non-transitory computer-readable recording medium. For example, in the vehicle-mounted device 11, the information processing program 104 is prestored in the ROM 23B. In the smartphone 414, the information processing program 473A is prestored in the ROM 473. However, the present invention is not limited to this, and each program may be provided in a form recorded in a non-transitory recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a USB (Universal Serial Bus) memory. In addition, each program may be downloaded from an external device via a network.

[0188] The process flow described in the above embodiment is also one example, and unnecessary steps may be deleted, new steps may be added, or the process order may be changed, without departing from the spirit of the invention.

[0189] In addition, the configurations of each vehicle-mounted device, smartphone, physical key, and management server described in the above embodiment are merely examples, and may be changed according to the situation without departing from the spirit of the invention. [Explanation of symbols]

[0190] 10 Vehicle Systems 11 Onboard equipment 12 Vehicles 14 Smartphone 14A Touch Panel 23 Control ECU (information processing unit) 25 Display section 25A Customized setting screen (user interface) 25B Digital key function off button 28 Door lock device (locking part) 50 Physical Keys (Secondary Keys) 70 Control device 72 CPU 100 ID information (authentication information) 104 Information Processing Programs (Programs) 106 ID information (authentication information) 110 Physical key authentication unit 112 Physical key function management unit 120 Digital key authentication unit 122 Digital key function management unit 130 Reception 132 Verification Department 134 Processing section 140 Digital Key (First Key) 210 Vehicle Systems 211 Onboard equipment 212 vehicles 224 NFC communication unit (near field communication unit) 250 NFC Cards (Second Key) 410 Vehicle Systems 414 Smartphones (information processing devices) 416 Management Server 470 Control Device 472 CPU 473A Information Processing Programs (Programs) 490 Reception 492 Confirmation Department 494 Processing section

Claims

1. a reception unit that receives a user operation on a user interface for disabling a vehicle control function by a first key that can be used to control the vehicle, the user operation being displayed on the display unit; a confirmation unit that, when a user instructs the display unit to display a screen for customizing settings of a vehicle control function, confirms whether a second key that can be used to control the vehicle and is different from the first key and a predetermined authentication process have succeeded or failed; and When the verification unit determines that the second key and the predetermined authentication have failed, a screen is displayed on a display unit, the screen being processed to inhibit the disablement of a vehicle control function by the first key in response to the user operation; a processing unit that, when the confirmation unit confirms that the second key and the predetermined authentication have been successful, causes the display unit to display a screen for accepting disabling of a vehicle control function using the first key in response to the user operation; and An information processing device comprising:

2. The information processing apparatus according to claim 1 , wherein the processing unit performs control so that the user operation cannot be accepted in the user interface when the confirmation unit confirms that the second key and the predetermined authentication have failed.

3. 3 . The information processing apparatus according to claim 1 , wherein the processing unit notifies a user of a message indicating that the user operation cannot be accepted when the confirmation unit confirms that the second key and the predetermined authentication have failed.

4. The information processing device according to any one of claims 1 to 3, wherein the confirmation unit confirms whether the specified authentication process with the second key has been successful or unsuccessful by comparing identification information of the second key capable of performing the specified authentication process within the vehicle with identification information of the second key that has been registered in advance.

5. The information processing device according to any one of claims 1 to 3, wherein the confirmation unit confirms whether the second key and the specified authentication process have been successful or unsuccessful by comparing identification information of the second key that the user has brought close to a short-range communication unit provided in the vehicle with identification information of the second key that has been registered in advance.

6. The information processing device according to any one of claims 1 to 3, wherein the confirmation unit transmits a response request signal to the second key that has been registered in advance, and confirms whether the second key and the specified authentication process have been successful or unsuccessful depending on whether a response signal has been received from the second key.

7. The information processing device according to any one of claims 1 to 3, wherein the confirmation unit confirms whether the second key and the specified authentication process have been successful or unsuccessful depending on whether or not a signal transmitted from the second key that has been registered in advance has been received.

8. An information processing device according to any one of claims 1 to 7; a locking unit that locks and unlocks an opening / closing unit that separates the inside of the vehicle from the outside of the vehicle; A vehicle equipped with.

9. the reception unit receives a user operation on a user interface displayed on the display unit, the user operation being for disabling a vehicle control function using a first key that can be used to control the vehicle; a confirmation unit, when a user instructs the display unit to display a screen for customizing settings of a vehicle control function, confirms whether a second key that can be used to control the vehicle and is different from the first key has been successfully authenticated or not, a processing unit that, when it is confirmed by the confirmation unit that the second key and the predetermined authentication have failed, causes a display unit to display a screen that has been processed to inhibit the disablement of a vehicle control function by the first key in response to the user operation; When the verification unit verifies that the second key and the predetermined authentication have been successful, the display unit displays a screen for accepting disablement of a vehicle control function using the first key in response to the user operation. Information processing methods.

10. On the computer, receiving a user operation on a user interface for disabling a vehicle control function by a first key that can be used to control the vehicle and that is displayed on the display unit; when a user instructs the display unit to display a screen for customizing settings of a vehicle control function, confirming whether a second key that can be used to control the vehicle and is different from the first key and a predetermined authentication process have succeeded or failed; When it is confirmed that the second key and the predetermined authentication have failed, a screen processed to inhibit the disablement of a vehicle control function by the first key in response to the user operation is displayed on a display unit; When it is confirmed that the second key and the predetermined authentication have been successful, a screen for accepting the disablement of a vehicle control function using the first key in response to the user operation is displayed on the display unit. A program to make it happen.

Images