Apparatus, vehicle, and method for preventing vehicle theft

Abstract

To provide a technique for preventing a trick of theft in which functionality of an on-vehicle communication device is invalidated for stealing, making it difficult to track where the vehicle is located.SOLUTION: An apparatus 50 for preventing theft of a vehicle 10 includes: a communication monitor part 52 for monitoring whether or not functionality of an on-vehicle communication device 24 that is capable of communicating positional information of the vehicle 10 is valid with a communication device 100 external to the vehicle 10; and a process execution part 54 for executing a preset theft prevention process in a case where the communication monitor part 52 detects invalidation of the functionality.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] FIELD OF THE DISCLOSURE The present disclosure relates to an apparatus, vehicle, and method for preventing vehicle theft. [Background technology]

[0002] BACKGROUND ART Techniques for preventing vehicle theft are known (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-187322 Summary of the Invention [Problem to be solved by the invention]

[0004] If a vehicle is stolen after the functions of the in-vehicle communication device are disabled, it is difficult to track the location of the vehicle. Therefore, there has been a demand for technology to prevent such thefts. [Means for solving the problem]

[0005] In one aspect of the present disclosure, a device for preventing vehicle theft includes a communication monitoring unit that monitors whether a function of an onboard communication device that can communicate vehicle location information with communication equipment outside the vehicle is enabled, and a process execution unit that executes a predetermined theft prevention process when the communication monitoring unit detects that the function has been disabled.

[0006] In another aspect of the present disclosure, a method for preventing vehicle theft includes a processor monitoring whether a function of an onboard communication device capable of communicating vehicle location information with a communication device external to the vehicle is enabled, and executing a predetermined theft prevention process when the processor detects that the function is disabled. [Effects of the Invention]

[0007] According to the present disclosure, by executing an anti-theft process when it is detected that the functions of an in-vehicle communication device have been disabled, it is possible to effectively prevent thefts in which the functions of an in-vehicle communication device are disabled, making the vehicle's location untraceable, and the vehicle is then taken away. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a schematic diagram of a vehicle and communication equipment external to the vehicle according to an embodiment; [Figure 2] 2 is a flowchart showing an example of an anti-theft function of the vehicle shown in FIG. [Figure 3] 10 is a schematic diagram of a vehicle according to another embodiment and communication equipment external to the vehicle. [Figure 4] 4 is a flowchart showing an example of an anti-theft function of the vehicle shown in FIG. 3. [Figure 5] An example of the flow of step S15 in FIG. 4 is shown below. [Figure 6] An example of the flow of step S16 in FIG. 4 is shown below. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In various embodiments described below, similar elements will be assigned the same reference numerals, and duplicated explanations will be omitted. First, a vehicle 10 according to one embodiment will be described with reference to FIG. 1. The vehicle 10 is, for example, a four-wheeled automobile, and includes a body 12, a drive mechanism 14, a steering mechanism 16, a braking mechanism 18, an electronic control unit (ECU) 20, a door lock device 22, an on-board communication device 24, and the like.

[0010] The vehicle body 12 is equipped with a drive mechanism 14, a steering mechanism 16, a braking mechanism 18, an ECU 20, a door lock device 22, an on-board communication device 24, as well as components (not shown) such as seats, an air conditioning system, a meter panel, a room mirror, and various sensors. The drive mechanism 14 has an engine 14A and the like, and generates a driving force that rotates wheels 26 rotatably mounted on the vehicle body 12 to cause the vehicle 10 to travel.

[0011] The steering mechanism 16 has a power steering device 16A and the like, and changes the traveling direction of the vehicle 10. The power steering device 16A has, for example, a steering wheel rotatably provided inside the vehicle 10, and a steering actuator (for example, a motor) that automatically rotates the steering wheel to change the steering angle of the steering wheel.

[0012] The braking mechanism 18 has an electric brake device 18A and the like, and automatically brakes the vehicle 10. The electric brake device 18A has, for example, brake pads that apply brakes to the wheels 26 by clamping disc rotors that are fixed integrally to the wheels 26, and a brake actuator (for example, a motor) that drives the brake pads to contact and disengage from the brake rotor.

[0013] The ECU 20 controls the operation of the vehicle 10. Specifically, the ECU 20 is a computer having a processor 30, a memory 32, and an I / O interface 34. The processor 30 has a CPU, a GPU, or the like, and is communicatively connected to the memory 32 and the I / O interface 34 via a bus 36. The processor 30 performs arithmetic processing to realize an anti-theft function, which will be described later. The memory 32 has a ROM, a RAM, or the like, and temporarily or permanently stores various data used in the arithmetic processing executed by the processor 30 and various data generated during the arithmetic processing.

[0014] The I / O interface 34 has, for example, a controller area network (CAN) port, an Ethernet (registered trademark) port, a USB port, an optical fiber connector, or an HDMI (registered trademark) terminal, and communicates data with external devices via wired or wireless communication. The drive mechanism 14 (engine 14A), steering mechanism 16 (power steering device 16A), braking mechanism 18 (electric brake device 18A), door lock device 22, and in-vehicle communication device 24 are communicatively connected to the I / O interface 34.

[0015] The door lock device 22 automatically locks an openable and closable door (not shown) provided on the vehicle body 12. Specifically, the door lock device 22 has a latch provided on the door so as to be engageable with a striker provided on the vehicle body 12, and a door lock actuator (e.g., a motor) that drives the latch to engage with and disengage from the striker.

[0016] The in-vehicle communication device 24 can communicate location information PI of the vehicle 10 with communication devices 100 external to the vehicle 10. The external communication devices 100 include, for example, a GPS satellite 100A, an in-vehicle communication device mounted on a vehicle 100B other than the vehicle 10, a management server 100C, a desktop personal computer (PC) 100D, a mobile terminal device 100E (such as a smartphone or tablet terminal device), and a communication base station 100F.

[0017] In this embodiment, the in-vehicle communication device 24 includes a GPS receiver 24A, an inter-vehicle communication device 24B, and a data communication module (DCM) 24C. The GPS receiver 24A communicates with a GPS satellite 100A and receives a GPS signal PI1 from the GPS satellite 100A. The processor 30 estimates the position of the vehicle 10 based on the GPS signal PI1 acquired through the GPS receiver 24A and map data MD pre-stored in the memory 32.

[0018] Here, there are areas where it is difficult to receive the GPS signal PI1 from the GPS satellite 100A (hereinafter referred to as "difficult communication areas") (for example, inside a building or a tunnel, a desert, a mountainous area, etc.). When the vehicle 10 is in an area where it is difficult to receive the GPS signal PI1 from the GPS satellite 100A, the processor 30 may not be able to receive the GPS signal PI1 from the GPS satellite 100A.

[0019] In such a case, the processor 30 can continuously estimate the vehicle position during the period in which the GPS signal PI1 is not received after the time τ based on the vehicle position most recently estimated from the GPS signal PI1 and map data MD and behavior data of the vehicle 10 (e.g., the speed and acceleration of the vehicle 10, and the steering angle) obtained from the time τ when the vehicle position was estimated.

[0020] The inter-vehicle communication device 24B can transmit and receive data to and from an in-vehicle communication device of another vehicle 100B. For example, the inter-vehicle communication device 24B can transmit host vehicle position estimation information PI2 indicating the host vehicle position estimated by the processor 30 from the GPS signal PI1 to the in-vehicle communication device of the other vehicle 100B. The GPS signal PI1 and the host vehicle position estimation information PI2 constitute the position information PI of the vehicle 10.

[0021] Meanwhile, the DCM 24C can transmit and receive data to and from the management server 100C, the PC 100D, the mobile terminal device 100E, and the communication base station 100F using a mobile communication network system such as 4G or 5G. For example, the DCM 24C can transmit vehicle position estimation information PI2 as position information PI to the management server 100C, the PC 100D, the mobile terminal device 100E, or the communication base station 100F.

[0022] In this way, the in-vehicle communication device 24 (GPS receiver 24A, vehicle-to-vehicle communication device 24B, DCM 24C) can communicate position information PI (GPS signal PI1, vehicle position estimation information PI2) with communication equipment 100 outside the vehicle 10 (GPS satellite 100A, another vehicle 100B, management server 100C, PC 100D, mobile terminal device 100E, communication base station 100F, etc.).

[0023] Next, the anti-theft function of the vehicle 10 will be described with reference to Fig. 2. The flow shown in Fig. 2 starts, for example, when the processor 30 receives a signal indicating that a start button (not shown) provided on the interior of the vehicle 10 for starting the vehicle 10 has been turned on.

[0024] In step S1, the processor 30 starts an operation of monitoring whether the function of the in-vehicle communication device 24 is valid. As an example, the processor 30 monitors whether the GPS receiver 24A is receiving the GPS signal PI1 from the GPS satellite 100A periodically (for example, at a predetermined cycle T0). If the GPS receiver 24A has not received the GPS signal PI1 for a predetermined period T1 (>T0), it can be detected that the GPS receiver 24A is not functioning validly (i.e., its function has been disabled).

[0025] As another example, the processor 30 monitors whether communication with another vehicle 100B has been established by the inter-vehicle communication device 24B periodically (e.g., at a predetermined cycle T2) communicating predetermined data (e.g., a communication establishment request signal, a communication establishment response signal, the vehicle 10's own vehicle position estimation information PI2, or the vehicle position estimation information of the other vehicle 100B transmitted from the other vehicle 100B) with the other vehicle 100B. If the inter-vehicle communication device 24B cannot communicate data with the other vehicle 100B for a predetermined period T3 (>T2), it can be detected that the inter-vehicle communication device 24B is not functioning effectively.

[0026] As yet another example, the processor 30 monitors whether communication with an external communication device 100 (e.g., management server 100C, PC 100D, mobile terminal device 100E, or communication base station 100F) has been established by the DCM 24C periodically (e.g., at a predetermined cycle T4) communicating predetermined data (e.g., a communication establishment request signal, a communication establishment response signal, or vehicle position estimation information PI2) with the external communication device 100. If the DCM 24C cannot communicate data with the external communication device 100 for a predetermined period T5 (>T4), it can be detected that the DCM 24 is not functioning effectively.

[0027] As yet another example, the processor 30 monitors whether communication between the ECU 20 and the in-vehicle communication device 24 (specifically, the GPS receiver 24A, the vehicle-to-vehicle communication device 24B, and the DCM 24C) is established by periodically (e.g., at a predetermined cycle T6) communicating predetermined data (e.g., a communication establishment request signal, a communication establishment response signal, a communication control command, a GPS signal PI1, or vehicle position estimation information PI2). If data cannot be communicated between the ECU 20 and the in-vehicle communication device 24 for a predetermined period T7 (>T6), it can be detected that the in-vehicle communication device 24 is not functioning effectively.

[0028] As yet another example, the processor 30 monitors whether the power supply ES (not shown) of the in-vehicle communication device 24 (GPS receiver 24A, vehicle-to-vehicle communication device 24B, and DCM 24C) is operating normally. Specifically, the vehicle 10 further includes a sensor (not shown) that detects the output voltage or output current of the power supply ES of the in-vehicle communication device 24, and the processor 30 monitors the output voltage or output current detected by the sensor. If the output voltage or output current of the power supply ES is lower than a required value, it can be detected that the in-vehicle communication device 24 is not functioning effectively.

[0029] As yet another example, the processor 30 monitors whether the communication line CL connected to the on-board communication device 24 (GPS receiver 24A, vehicle-to-vehicle communication device 24B, and DCM 24C) is disconnected. Specifically, the vehicle 10 further includes a sensor (not shown) that detects the resistance of the communication line CL, and the processor 30 monitors the resistance detected by the sensor. If the resistance of the communication line CL is higher than a required value, it can be detected that the on-board communication device 24 is not functioning effectively due to a disconnection of the communication line CL.

[0030] Thus, in step S1, the processor 30 starts the operation of monitoring whether the functions of the in-vehicle communication device 24 are enabled (specifically, monitoring the reception status of the GPS signal PI1 by the GPS receiver 24A, monitoring the communication status between the inter-vehicle communication device 24B and another vehicle 100B, monitoring the communication status between the DCM 24C and the external communication device 100, monitoring the communication status between the ECU 20 and the in-vehicle communication device 24, monitoring the operation of the power supply ES, and monitoring for a break in the communication line CL). Therefore, the processor 30 functions as a communication monitoring unit 52 (FIG. 1) that monitors whether the functions of the in-vehicle communication device 24 are enabled.

[0031] In addition, the processor 30 may perform any operation that can detect whether the functions of the in-vehicle communication device 24 are enabled or disabled, other than monitoring the reception status of the GPS signal PI1 described above, monitoring the communication status between the vehicle-to-vehicle communication device 24B and another vehicle 100B, monitoring the communication status between the DCM 24C and external communication equipment 100, monitoring the communication status between the ECU 20 and the in-vehicle communication device 24, monitoring the operation of the power supply ES, and monitoring for a break in the communication line CL, as an operation for monitoring whether the functions of the in-vehicle communication device 24 are enabled or disabled.

[0032] In addition, the processor 30 may monitor whether the functions of all the on-board communication devices 24 (i.e., the GPS receiver 24A, the vehicle-to-vehicle communication device 24B, and the DCM 24C) installed in the vehicle 10 are enabled, or may monitor whether the functions of only the on-board communication devices 24 (i.e., the vehicle-to-vehicle communication device 24B and the DCM 24C) that have the function of transmitting position information PI (e.g., the vehicle's position estimation information PI2) to the external communication device 100 are enabled.

[0033] In step S2, the processor 30 determines whether the function of the in-vehicle communication device 24 is enabled. As an example, if the operation of monitoring the reception state of the GPS signal PI1 by the GPS receiver 24A is started in step S1, when the processor 30 detects that the GPS receiver 24A has not received the GPS signal PI1 for a predetermined period T1, the processor 30 determines that the function of the GPS receiver 24A has been disabled (i.e., NO) and proceeds to step S3. On the other hand, while the GPS receiver 24A is periodically receiving the GPS signal PI1, the processor 30 determines YES and proceeds to step S4.

[0034] The processor 30 may determine whether the function of the GPS receiver 24A is valid by taking into consideration the estimated vehicle position of the vehicle 10 and the map data MD. Specifically, the processor 30 compares the estimated vehicle position of the vehicle 10 with the map data MD to determine whether the current vehicle position is in the above-mentioned difficult-to-communicate area.

[0035] In step S2, the processor 30 may determine NO when it detects that the vehicle position is outside the difficult-to-communicate area and that the GPS receiver 24A has not received the GPS signal PI1 for the period T1. On the other hand, in step S2, the processor 30 may determine YES while the vehicle position is within the difficult-to-communicate area or while the GPS receiver 24A is periodically receiving the GPS signal PI1. Note that the map data MD may include information that identifies the difficult-to-communicate area.

[0036] As another example, when an operation of monitoring the communication state between the inter-vehicle communication device 24B and the other vehicle 100B is started in step S1, if the processor 30 detects that the inter-vehicle communication device 24B has not communicated with the other vehicle 100B for a predetermined period T3, the processor 30 determines that the function of the inter-vehicle communication device 24B has been disabled (i.e., NO) and proceeds to step S3. On the other hand, while the inter-vehicle communication device 24B is periodically communicating with the other vehicle 100B, the processor 30 determines YES and proceeds to step S4.

[0037] As yet another example, when an operation to monitor the communication state between the DCM 24C and the external communication device 100 is started in step S1, if the processor 30 detects that the DCM 24C has not communicated with the external communication device 100 for a predetermined period T5, the processor 30 determines that the function of the DCM 24C has been disabled (i.e., NO) and proceeds to step S3. On the other hand, while the DCM 24C is periodically communicating with the external communication device 100, the processor 30 determines YES and proceeds to step S4.

[0038] As yet another example, when the operation of monitoring the communication state between the ECU 20 and the in-vehicle communication device 24 is started in step S1, if the processor 30 detects that there is no communication between the ECU 20 and the in-vehicle communication device 24 for a predetermined period T7, the processor 30 determines that the function of the in-vehicle communication device 24 has been disabled (i.e., NO), and proceeds to step S3. On the other hand, while there is regular communication between the ECU 20 and the in-vehicle communication device 24, the processor 30 determines YES, and proceeds to step S4.

[0039] As yet another example, when monitoring of the operation of power source ES is started in step S1, if processor 30 detects that the output voltage or output current of power source ES is lower than a required value, processor 30 determines that the function of in-vehicle communication device 24 has been disabled (i.e., NO), and proceeds to step S3. On the other hand, while the output voltage or output current of power source ES is equal to or higher than the required value, processor 30 determines YES, and proceeds to step S4.

[0040] As yet another example, when the operation of monitoring for disconnection of the communication line CL is started in step S1, if the processor 30 detects that the resistance of the communication line CL is higher than a required value, the processor 30 determines that the function of the in-vehicle communication device 24 has been disabled (i.e., NO), and proceeds to step S3. On the other hand, while the resistance of the communication line CL is equal to or lower than the required value, the processor 30 determines YES, and proceeds to step S4.

[0041] In addition, in this step S2, the processor 30 may determine NO if it detects that the function of any one of the on-board communication devices 24 (i.e., the GPS receiver 24A, the vehicle-to-vehicle communication device 24B, and the DCM 24C) installed in the vehicle 10 has been disabled, or may determine NO if it detects that the function of one of the on-board communication devices 24 (e.g., the vehicle-to-vehicle communication device 24B and the DCM 24C) that has the function of transmitting position information PI (e.g., vehicle position estimation information PI2) to an external communication device 100 has been disabled.

[0042] In step S3, the processor 30 executes a predetermined anti-theft process AP. As an example of the anti-theft process AP, the processor 30 executes a process AP1 that restricts the operation of the drive mechanism 14. Specifically, the processor 30 executes the process AP1 that sends a command to the engine 14A and restricts the operation of the engine 14A (specifically, stops the engine 14A).

[0043] As another example of the theft prevention process AP, the processor 30 executes a process AP2 that restricts the operation of the steering mechanism 16. Specifically, the processor 30 executes the process AP2 to send a command to the steering actuator of the power steering device 16A, and lock the steering after rotating the steering to the maximum steering angle.

[0044] As yet another example of the theft prevention process AP, the processor 30 executes a process AP3 that restricts the movement of the vehicle 10 by activating the braking mechanism 18. Specifically, the processor 30 executes the process AP3 that sends a command to the brake actuator of the electric brake device 18A to press the brake pads against the disc rotor of the wheel 26, thereby braking (specifically, locking) the wheel 26.

[0045] As yet another example of the theft prevention process AP, the processor 30 executes a process AP4 that outputs an alarm AL indicating the possibility of theft of the vehicle 10. Specifically, the processor 30 executes the process AP4 that sends a command to a horn (not shown) provided on the vehicle 10 and outputs the alarm AL as a sound wave from the horn.

[0046] As yet another example of the theft prevention process AP, the processor 30 executes a process AP5 for locking the doors of the vehicle 10. Specifically, the processor 30 executes the process AP5 for locking the doors so that they cannot be unlocked by sending a command to a door lock actuator of the door lock device 22 and engaging a latch with a striker.

[0047] In this way, when the communication monitoring unit 52 detects that the function of the in-vehicle communication device 24 has been disabled (i.e., when a NO determination is made in step S2), the processor 30 executes a predetermined anti-theft process AP (specifically, process AP1, AP2, AP3, AP4, or AP5). Therefore, the processor 30 functions as a process execution unit 54 (FIG. 1) that executes the anti-theft process AP. When the processor 30 completes step S3, it ends the flow of FIG. 2.

[0048] As the anti-theft process AP, the processor 30 may execute all of the above-described processes AP1, AP2, AP3, AP4, and AP5 simultaneously (or in stages), or may execute only some of the processes AP1, AP2, AP3, AP4, and AP5 (for example, processes AP1, AP2, and AP3). As the anti-theft process AP, the processor 30 may execute any process other than the above-described processes AP1, AP2, AP3, AP4, and AP5 for preventing theft of the vehicle 10 or for notifying the surrounding area of ​​the theft.

[0049] On the other hand, if the determination in step S2 is YES, in step S4, processor 30 determines whether the start button has been turned OFF. If the start button has been turned OFF, processor 30 determines YES and ends the flow shown in Fig. 2, but if the determination is NO, processor 30 returns to step S2.

[0050] As described above, in this embodiment, the processor 30 functions as the communication monitoring unit 52 and the process execution unit 54 to prevent theft of the vehicle 10. Therefore, the communication monitoring unit 52 and the process execution unit 54 constitute a device 50 (FIG. 1) for preventing theft of the vehicle 10.

[0051] This device 50 can effectively prevent theft of the vehicle 10. More specifically, if the vehicle 10 is stolen after the functions of the in-vehicle communication device 24 of the vehicle 10 are disabled, it will be impossible to communicate the location information PI of the vehicle 10 with the external communication device 100. In this case, it will be difficult to track the location of the stolen vehicle 10.

[0052] In the device 50, the communication monitoring unit 52 monitors whether the function of the in-vehicle communication device 24 is enabled, and the process execution unit 54 executes the theft prevention process AP when it detects that the function of the in-vehicle communication device 24 has been disabled. According to this configuration, by executing the theft prevention process AP when it detects that the function of the in-vehicle communication device 24 has been disabled, it is possible to effectively prevent thefts of the type described above in which the function of the in-vehicle communication device 24 is disabled, making the location of the vehicle 10 untraceable, and the vehicle is then taken away.

[0053] In addition, in the device 50, the process execution unit 54 executes at least one of the following anti-theft processes AP: process AP1 for restricting the operation of the drive mechanism 14; process AP2 for restricting the operation of the steering mechanism 16; process AP3 for restricting the movement of the vehicle 10 by operating the braking mechanism 18; process AP4 for outputting an alarm AL indicating the possibility of theft of the vehicle 10; and process AP5 for locking the doors of the vehicle 10.

[0054] Processes AP1, AP2, and AP3 make it impossible to drive the vehicle 10 normally, thereby preventing the vehicle 10 from being driven away. Process AP4 uses an alarm AL to alert those around the vehicle 10 that the vehicle 10 may have been stolen, thereby preventing theft of the vehicle 10. Process AP5 prevents the vehicle 10 from being stolen by locking a person who has disabled the function of the in-vehicle communication device 24 inside the vehicle 10 or by making it impossible for the person to enter the vehicle 10.

[0055] Next, a vehicle 60 according to another embodiment will be described with reference to Fig. 3. The vehicle 60 differs from the above-described vehicle 10 in that it further includes a human-machine interface (HMI) 62 and an imaging device 64. The HMI 62 exchanges information with the driver of the vehicle 60. The HMI 62 includes, for example, an input device (such as a switch, a push button, a rotary dial, or a touch panel) that accepts information input from the driver, a display that displays various information as images, a speaker that outputs various information as sound, and a microphone that converts the driver's voice into an electrical signal.

[0056] The imaging device 64 captures an image of the face of a driver in the vehicle 60. Specifically, the imaging device 64 has, for example, a light-emitting unit (such as an LED), an imaging sensor (such as a CCD or CMOS), and an optical lens (such as a collimator lens or a focus lens), and is incorporated into the interior (for example, an instrument panel or a rearview mirror) of the vehicle 60. The imaging device 64 emits light (for example, infrared light) from the light-emitting unit and forms an image of the light reflected from the driver on the imaging sensor, thereby capturing an image of the driver's face.

[0057] Next, the anti-theft function of the vehicle 60 will be described with reference to Fig. 4. The flow shown in Fig. 4 starts, for example, when the processor 30 receives a signal indicating that the above-mentioned start button has been turned on. After the flow of Fig. 4 starts, the processor 30 executes the above-mentioned step S1 and functions as the communication monitoring unit 52 to start an operation of monitoring whether the function of the in-vehicle communication device 24 is enabled.

[0058] After step S1, in step S11, the processor 30 authenticates whether the driver DR in the vehicle 60 is a registered person. As an example, the processor 30 operates the imaging device 64 to capture an image of the face of the driver DR in the vehicle 60, and acquires a facial image FI of the driver DR from the imaging device 64. The processor 30 then verifies whether the driver DR is a registered person by comparing the acquired facial image FI with facial images of registered people stored in advance in a database DB. This database DB is stored in advance in the memory 32.

[0059] As another example, the in-vehicle communication device 24 communicates with a portable device MB (e.g., a smart key or a smartphone) owned by the driver DR, and receives the identification code CD (a number, a character string, etc.), biometric information BI (e.g., fingerprint information, iris information, etc.), or facial image FI of the driver DR from the portable device MB. The processor 30 verifies whether the driver DR is an authorized registrant by comparing the identification code CD, biometric information BI, or facial image FI acquired through the in-vehicle communication device 24 with the identification code, biometric information, or facial image of an authorized registrant stored in advance in the database DB.

[0060] In addition, the in-vehicle communication device 24 may further include a mobile signal communication device (not shown) that receives the identification code CD, biometric information BI, or facial image FI from the mobile device MB, or the above-mentioned DCM 24C may receive the identification code CD, biometric information BI, or facial image FI from the mobile device MB.

[0061] If the processor 30 can authenticate the driver DR as a registered person, it determines YES and proceeds to step S16, whereas if the processor 30 cannot authenticate the driver DR as a registered person, it determines NO and proceeds to step S12. Thus, in this embodiment, the processor 30 functions as a driver authentication unit 72 (FIG. 3) that authenticates whether the driver DR riding in the vehicle 60 is a registered person.

[0062] In step S12, the processor 30 determines whether or not a regular registration application RQ has been received from the driver DR. In this embodiment, the driver DR can operate the HMI 62 to issue a regular registration application RQ for registering the driver DR as a regular registrant in the database DB.

[0063] For example, the processor 30 displays a legitimate registration application image RI on the display of the HMI 62. The driver DR operates an input device (e.g., a touch panel) of the HMI 62 to input a legitimate registration application RQ via the legitimate registration application image RI displayed on the display. In response to the input of the legitimate registration application RQ, the processor 30 operates the imaging device 64 to capture an image of the face of the driver DR.

[0064] At this time, in order to enable the imaging device 64 to capture the front face of the driver DR, the processor 30 may display guide information to direct the driver DR toward the imaging device 64 through the HMI 62 as an image on the official registration application image RI, or output it as audio from the speaker.

[0065] In this way, the processor 30 accepts, as a regular registration application RQ, an application for the facial image FI of the driver DR captured by the imaging device 64. Note that the processor 30 may use the facial image FI of the driver DR captured by the imaging device 64 in the above-mentioned step S11 as data for the regular registration application RQ, without causing the imaging device 64 to capture an image of the face of the driver DR in this step S12.

[0066] Furthermore, the driver DR may operate the input device of the HMI 62 to input biometric information BI (fingerprint information, iris information, etc.) of the driver DR through a legitimate registration application image RI. In this case, the HMI 62 has a touch sensor capable of acquiring the fingerprint information of the driver DR, and the processor 30 may accept an application for fingerprint information from the HMI 62 as a legitimate registration application RQ. Furthermore, the processor 30 may accept an application for iris information of the driver DR as a legitimate registration application RQ by performing image analysis on the face image FI captured by the imaging device 64 in step S12 (or step S11).

[0067] The driver DR may also input the identification code CD of the driver DR through the official registration application image RI by operating the input device of the HMI 62. In this case, the processor 30 accepts the application for the identification code CD of the driver DR through the HMI 62 as an official registration application RQ.

[0068] In step S12, the processor 30 may accept all of the facial image FI, biometric information BI, and identification code CD as the regular registration request RQ, or may accept only a part of the facial image FI, biometric information BI, and identification code CD (for example, the facial image FI). Alternatively, the processor 30 may accept any data other than the facial image FI, biometric information BI, and identification code CD that can identify the driver DR as the regular registration request RQ.

[0069] In this way, the processor 30 accepts data such as the facial image FI, biometric information BI, and identification code CD as a regular registration application RQ from the driver DR. Therefore, the processor 30 functions as a registration acceptance unit 74 (FIG. 3) that accepts a regular registration application RQ from the driver DR. If the processor 30 has accepted a regular registration application RQ from the driver DR, it determines YES and proceeds to step S13, whereas if the processor 30 has not accepted a regular registration application RQ, it determines NO and proceeds to step S15.

[0070] In step S13, the processor 30 transmits the regular registration request RQ received in step S12 to the external communication device 100. For example, the processor 30 operates the DCM 24C to transmit data of the regular registration request RQ (e.g., the facial image FI, the biometric information BI, and the identification code CD) to at least one of the management server 100C, the PC 100D, and the mobile terminal device 100E.

[0071] Thus, in this embodiment, the processor 30 operates the in-vehicle communication device 24 (e.g., DCM 24C) and functions as an application sending unit 76 (Figure 3) that sends the regular registration application RQ accepted by the registration accepting unit 74 to an external communication device 100 (e.g., management server 100C, PC 100D, or mobile terminal device 100E).

[0072] The management server 100C, the PC 100D, or the mobile terminal device 100E displays the data of the regular registration request RQ (e.g., facial image FI) transmitted from the DCM 24C on the display of the management server 100C, the PC 100D, or the mobile terminal device 100E. Then, the operator of the management server 100C, the PC 100D, or the mobile terminal device 100E checks the displayed regular registration request RQ (e.g., facial image FI) and determines whether or not to permit the regular registration request RQ.

[0073] The management server 100C may be installed in, for example, an automobile company that manufactures the vehicle 60, and the operator of the management server 100C may be an administrator of the automobile company. Also, the PC 100D or the mobile terminal device 100E may be owned by, for example, the owner of the vehicle 60, and the operator of the PC 100D or the mobile terminal device 100E may be the owner.

[0074] When the legitimate registration application RQ is permitted, the operator operates the management server 100C, the PC 100D, or the mobile terminal device 100E to return a permission signal AS permitting the legitimate registration application RQ to the vehicle 60, and the DCM 24C receives the permission signal AS. In this way, the processor 30 can determine whether the legitimate registration application RQ is permitted or not based on the permission signal AS received by the DCM 24C.

[0075] In step S14, the processor 30 determines whether the regular registration request RQ is permitted. Specifically, if the processor 30 receives the permission signal AS, the determination is YES, and the process proceeds to step S16. If the processor 30 does not receive the permission signal AS, the determination is NO, and the process proceeds to step S15.

[0076] In step S15, processor 30 executes a process for an unregistered user. Step S15 will be described with reference to Fig. 5. In the flow shown in Fig. 5, the same processes as those in the flow shown in Fig. 2 are assigned the same step numbers, and duplicated descriptions will be omitted.

[0077] After starting step S15, processor 30 executes step S2 described above, and if the determination is NO, processor 30 functions as process execution unit 54 in step S3 described above to execute the theft prevention process AP, and proceeds to step S21. On the other hand, if the determination is YES in step S2, processor 30 proceeds to step S23.

[0078] In step S21, the processor 30 determines whether or not there is an active function in the in-vehicle communication device 24. Specifically, by executing step S2 in Fig. 5, the processor 30 can recognize which of the functions of the in-vehicle communication devices 24 (i.e., the GPS receiver 24A, the inter-vehicle communication device 24B, and the DCM 24C) has been disabled.

[0079] For example, suppose that the processor 30 detects that the function of the inter-vehicle communication device 24B has been disabled and determines the result as NO in step S2 in Fig. 5, but detects that the function of the DCM 24C is enabled. In this case, the processor 30 can recognize that the function of the DCM 24C is enabled.

[0080] In this step S21, if there is an in-vehicle communication device 24 (e.g., DCM24C) with an enabled function, the processor 30 judges the result as YES and proceeds to step S22, whereas if there is no in-vehicle communication device 24 with an enabled function, the processor 30 judges the result as NO and ends the flow shown in Figure 5, thereby ending the flow of Figure 4.

[0081] In this step S21, the processor 30 may judge YES if there is an in-vehicle communication device 24 (e.g., an inter-vehicle communication device 24B or a DCM 24C) that has an enabled function to transmit position information PI (e.g., vehicle position estimation information PI2) to an external communication device 100, but may judge NO if there is no in-vehicle communication device 24 that has an enabled function to transmit position information PI to an external communication device 100.

[0082] In step S22, the processor 30 operates the in-vehicle communication device 24 whose function was determined to be valid in step S21, to transmit the position information PI of the vehicle 60 to the external communication device 100. For example, it is assumed that the processor 30 determines YES in step S21 because the function of the DCM 24C of the in-vehicle communication device 24 is valid. In this case, the processor 30 operates the DCM 24C to continuously (for example, periodically) transmit the vehicle position estimation information PI2 to at least one of the management server 100C, the PC 100D, the mobile terminal device 100E, and the communication base station 100F.

[0083] Alternatively, it is assumed that the processor 30 determines YES in step S21 because the function of the inter-vehicle communication device 24B is enabled among the in-vehicle communication devices 24. In this case, the processor 30 operates the inter-vehicle communication device 24B to continuously (e.g., periodically) transmit the host vehicle position estimation information PI2 to the other vehicle 100B.

[0084] Thus, in this embodiment, when the processor 30 detects that the function of the first in-vehicle communication device 24 (e.g., GPS receiver 24A or vehicle-to-vehicle communication device 24B) has been disabled, it operates the second in-vehicle communication device 24 (e.g., DCM 24C) to function as a location information transmission unit 78 (Figure 3) that transmits location information PI (e.g., vehicle location estimation information PI2) to the external communication device 100.

[0085] The processor 30 may continue to continuously transmit the position information PI to the external communication device 100 until the operation of the vehicle 60 stops (for example, the start button is turned off or the engine 14A is stopped). After step S22 ends, the processor 30 ends the flow shown in FIG. 5, thereby ending the flow in FIG. 4.

[0086] On the other hand, if the determination in step S2 is YES, in step S23, the processor 30 functions as the position information transmission unit 78 and operates the in-vehicle communication device 24 to transmit the position information PI of the vehicle 60 to the external communication device 100. For example, the processor 30 operates the DCM 24C to transmit the host vehicle position estimation information PI2 to at least one of the management server 100C, the PC 100D, the mobile terminal device 100E, and the communication base station 100F. Alternatively, the processor 30 operates the inter-vehicle communication device 24B to transmit the host vehicle position estimation information PI2 to another vehicle 100B.

[0087] In step S23, the processor 30 may transmit the location information PI and also output a warning signal indicating that the driver DR is not properly registered. For example, the processor 30 may generate an image or sound warning signal saying, "You are not properly registered. Please apply for proper registration," and output this to the driver DR through the display or speaker of the HMI 62.

[0088] After step S23, processor 30 executes step S4 described above, and if it determines YES, it ends the flow shown in Fig. 5, thereby ending the flow of Fig. 4, while if it determines NO, it returns to step S2. In this way, processor 30 repeatedly executes the loop of steps S2, S23, and S4 until it determines NO in step S2 or YES in step S4, and repeatedly transmits position information PI to external communication device 100 in step S23. According to this configuration, the position of the vehicle can be tracked while an unregistered driver DR is aboard, thereby improving the security of vehicle 60.

[0089] 4 again, if the determination in step S11 or S14 is YES, in step S16, the processor 30 executes a process for authorized registrants. This step S16 will be described with reference to FIG. 6. In the flow shown in FIG. 6, the same step numbers are used for processes that are similar to those in the flow shown in FIG. 2, and duplicated descriptions will be omitted. After starting step S16, the processor 30 executes the above-mentioned step S2, and if the determination is YES, the processor proceeds to step S4, whereas if the determination is NO, the processor proceeds to step S31.

[0090] In step S31, the processor 30 outputs a failure notification signal FS. For example, the processor 30 generates a visual or audio failure notification signal FS stating, "The on-board communication device is not functioning properly. Maintenance of the on-board communication device is required," and outputs the signal to the driver DR through the display or speaker of the HMI 62.

[0091] In this embodiment, in step S16, which is executed when a properly registered driver DR is in the vehicle, even if the determination in step S2 is NO, the processor 30 outputs the malfunction notification signal FS in step S31 without executing the above-mentioned step S3 (theft prevention process AP). After step S31, the processor 30 proceeds to step S4.

[0092] As described above, in this embodiment, the processor 30 functions as the communication monitoring unit 52, the process execution unit 54, the driver authentication unit 72, the registration acceptance unit 74, the application transmission unit 76, and the location information transmission unit 78, thereby preventing theft of the vehicle 60. Therefore, the communication monitoring unit 52, the process execution unit 54, the driver authentication unit 72, the registration acceptance unit 74, the application transmission unit 76, and the location information transmission unit 78 constitute a device 70 (FIG. 3) for preventing theft of the vehicle 60.

[0093] In this device 70, the driver authentication unit 72 authenticates whether the driver DR riding in the vehicle 60 is a registered person, and if the driver authentication unit 72 authenticates the driver DR as a registered person (i.e., YES is determined in step S11), the process execution unit 54 does not execute the theft prevention process AP (step S16) even if the disablement of the function of the in-vehicle communication device 24 is detected (NO is determined in step S2 in step S16).

[0094] With this configuration, for example, if the function of the on-board communication device 24 becomes disabled due to a malfunction or the like, the officially registered driver DR may need to drive the vehicle 60 to a repair shop for repairs. Alternatively, if the on-board communication device 24 becomes unable to communicate while the vehicle 60 is traveling in a difficult-to-reach area such as a desert, the officially registered driver DR may need to drive the vehicle 60 to a safe location. According to the device 70, even if the function of the on-board communication device 24 becomes disabled while the officially registered driver DR is in the vehicle, the officially registered driver DR is allowed to drive the vehicle 60. As a result, it is possible to prevent inconvenience to the officially registered driver.

[0095] Furthermore, in the device 70, the registration acceptance unit 74 accepts a regular registration application RQ from the driver DR (step S12), and if the regular registration application RQ accepted by the registration acceptance unit 74 is approved (determined as YES in step S14), the process execution unit 54 does not execute the theft prevention process even if it detects that the function of the in-vehicle communication device 24 has been disabled (step S16).

[0096] According to this configuration, even if the driver DR is not officially registered at the time of getting in, if the official registration application RQ is accepted and the driver DR is officially registered, the driver DR can be allowed to drive the vehicle 60 even if the function of the in-vehicle communication device 24 is disabled. As a result, it is possible to prevent inconvenience to the officially registered person.

[0097] Also, in the device 70, the application sending unit 76 operates the in-vehicle communication device 24 (e.g., DCM24C) to send the regular registration application RQ accepted by the registration accepting unit 74 to an external communication device 100 (e.g., management server 100C, PC 100D, or mobile terminal device 100E) (step S13).

[0098] Then, when the in-vehicle communication device 24 receives a signal AS approving the regular registration request RQ from the external communication device 100 (i.e., YES is determined in step S14), the process execution unit 54 does not execute the theft prevention process AP (step S16) even if it detects that the functions of the in-vehicle communication device 24 have been disabled. With this configuration, the operator of the external communication device 100 (for example, an administrator of the automobile company or the owner of the vehicle 60) can determine whether or not to approve the regular registration request RQ, thereby improving the security of the vehicle 60.

[0099] In the device 70, the registration acceptance unit 74 accepts, as a formal registration application RQ, an application for a facial image FI of the driver DR captured by the imaging device 64 provided in the vehicle 60 (step S12). According to this configuration, authentication of the driver DR in the vehicle can be performed using the facial image FI, and therefore the authentication can be performed with higher accuracy.

[0100] In addition, in the device 70, when the communication monitoring unit 52 detects that the function of the first in-vehicle communication device 24 (e.g., GPS receiver 24A or vehicle-to-vehicle communication device 24B) has been disabled, the location information transmission unit 78 operates the second in-vehicle communication device 24 (e.g., DCM 24C) to transmit location information PI (e.g., vehicle location estimation information PI2) to the external communication device 100 (step S22).

[0101] According to this configuration, even if the function of the first in-vehicle communication device 24A or 24B is disabled while an unregistered driver DR is in the vehicle, the location information PI of the vehicle 60 can be transmitted through the second in-vehicle communication device 24C. This makes it possible to track the location of the vehicle 60 even if a malicious unregistered person disables the function of the first in-vehicle communication device 24A or 24B in order to steal the vehicle.

[0102] 2 or 4 in accordance with a computer program PG pre-stored in memory 32. The functions of device 50 or 70 (i.e., communication monitoring unit 52, process execution unit 54, driver authentication unit 72, registration acceptance unit 74, application transmission unit 76, and location information transmission unit 78) executed by processor 30 may be functional modules realized by the computer program PG.

[0103] 4, the processor 30 may receive data of the regular registration application RQ from the portable device MB owned by the driver DR. Specifically, the driver DR may input a facial image FI, biometric information BI, or an identification code CD into the portable device MB as the regular registration application RQ. Then, the in-vehicle communication device 24 (for example, the above-mentioned portable signal communication device or the DCM 24C) may receive the data of the regular registration application RQ from the portable device MB.

[0104] Furthermore, in the above-described step S22, the processor 30 may transmit, in addition to the location information PI, an alarm AL indicating the possibility of theft of the vehicle 60 to the external communication device 100. For example, the processor 30 may operate the DCM 24C (or the inter-vehicle communication device 24B) whose function is enabled to transmit an image or audio alarm AL saying, "Your vehicle may have been stolen. Please check your vehicle immediately," to at least one of the management server 100C, the PC 100D, the mobile terminal device 100E, and the communication base station 100F (or another vehicle 100B).

[0105] It is possible to omit at least one of the driver authentication unit 72, the registration acceptance unit 74, the application transmission unit 76, and the location information transmission unit 78 from the above-described device 70. For example, the function of the driver authentication unit 72 may be implemented in an external communication device 100 (for example, the management server 100C). In this case, the driver DR inputs, for example, the identification code CD, the biometric information BI, or the facial image FI to the HMI 62 (or the portable device MB), and transmits the identification code CD, the biometric information BI, or the facial image FI from the in-vehicle communication device 24 (or the portable device MB) to the external communication device 100.

[0106] Then, the external communication device 100 authenticates whether the driver DR is a registered person by comparing the received identification code CD, biometric information BI, or facial image FI with the identification code, biometric information, or facial image of the registered person stored in a database DB pre-stored in the communication device 100.

[0107] Then, the external communication device 100 transmits the authentication result to the vehicle 60. In step S11 in Fig. 4, the processor 30 refers to the authentication result transmitted from the external communication device 100 and determines whether the driver DR is a properly registered person. In this case, the driver authentication unit 72 can be omitted from the device 70.

[0108] Furthermore, the registration acceptance unit 74 and the application transmission unit 76 may be omitted from the device 70. In this case, steps S12 to S14 are omitted from the flow of Fig. 4. Furthermore, the location information transmission unit 78 may be omitted from the device 70. In this case, steps S21, S22, and S23 are omitted from the flow of Fig. 5.

[0109] In the above-described embodiment, the vehicles 10 and 60 have been described as having a GPS receiver 24A, an inter-vehicle communication device 24B, and a DCM 24C as the on-vehicle communication device 24. However, the vehicle 10 or 60 may have only one on-vehicle communication device 24 (e.g., a DCM), or may have any number of on-vehicle communication devices 24. Furthermore, the on-vehicle communication device 24 may be any type of communication device capable of communicating with the external communication device 100, other than the GPS receiver 24A, the inter-vehicle communication device 24B, and the DCM 24C.

[0110] Furthermore, in the above-described embodiments, the vehicles 10 and 60 have been described as having an engine 14A as the drive mechanism 14, but this is not limited thereto, and the vehicle 10 or 60 may be an electric vehicle (BEV, PHEV, etc.) having a motor instead of (or in addition to) the engine 14A as the drive mechanism 14.

[0111] In the above-described embodiment, the position information PI includes the GPS signal PI1 and the vehicle position estimation information PI2. However, the present invention is not limited to this, and the position information PI may be any information for notifying the outside world of the position of the vehicle 10 or 60. For example, in step S22 or S23 described above, the processor 30 operates the DCM 24C whose function is enabled, and transmits a communication establishment request signal to the communication base station 100F closest to the vehicle 60 as the position information PI.

[0112] In this case, the position of the vehicle 60 at the time of transmitting the communication establishment request signal can be estimated as a position near the communication base station 100F. Therefore, in this case, the communication establishment request signal functions as position information PI. Although the present disclosure has been described above through the embodiments, the above-mentioned embodiments do not limit the invention according to the claims. [Explanation of symbols]

[0113] 10,60 vehicles 14 Drive mechanism 16 Steering mechanism 18 Braking mechanism 20 ECU 24 In-vehicle communication device 30 processors 50,70 equipment 52 Communications Monitoring Department 54 Process Execution Unit 72 Driver Authentication Department 74 Registration Reception 76 Application Transmission Department 78 Location information transmission unit

Claims

1. A device for preventing vehicle theft, comprising: a driver authentication unit that authenticates whether a driver riding in the vehicle is a registered person; a communication monitoring unit that monitors whether a function of an in-vehicle communication device that can communicate location information of the vehicle with a communication device outside the vehicle is valid after the driver authentication unit has performed the authentication; A process execution unit, When the driver authentication unit does not authenticate the driver as the officially registered person and the communication monitoring unit detects that the function has been disabled, a predetermined theft prevention process is executed, a process execution unit that does not execute the theft prevention process when the driver authentication unit does not authenticate the driver as the officially registered person and the communication monitoring unit detects that the function is enabled; and A device comprising: a location information transmission unit that, when it is detected that the driver is not authenticated as the officially registered person and the function is enabled, operates the in-vehicle communication device to repeatedly transmit the location information to the external communication device.

2. The process execution unit executes, as the theft prevention process, a process for limiting operation of the drive mechanism of said vehicle; a process for limiting actuation of the steering mechanism of said vehicle; activating a braking mechanism of the vehicle to limit movement of the vehicle; outputting an alarm indicating a possible theft of the vehicle; and locking the doors of the vehicle; The apparatus of claim 1 , further comprising:

3. A signal generating unit is further provided which generates a failure notification signal which notifies of a failure of the in-vehicle communication device, 3. The device according to claim 1, wherein when the driver authentication unit authenticates the driver as the registered person and the communication monitoring unit detects that the function has been disabled, the process execution unit does not execute the anti-theft process, while the signal generation unit generates the malfunction notification signal.

4. Further, a registration acceptance unit is provided to accept an application for formal registration from the driver, 4. The device according to claim 1, wherein, when the proper registration application accepted by the registration acceptance unit is permitted, the process execution unit does not execute the theft prevention process.

5. an application sending unit that operates the in-vehicle communication device to send the formal registration application accepted by the registration accepting unit to the external communication device; The device according to claim 4 , wherein the process execution unit does not execute the theft prevention process when the in-vehicle communication unit receives a signal permitting the legitimate registration application from the external communication device.

6. The device according to claim 4 , wherein the registration acceptance unit accepts, as the formal registration application, an application for a face image of the driver captured by an imaging device provided in the vehicle.

7. An apparatus described in any one of claims 1 to 6, wherein the location information transmission unit operates the second vehicle-mounted communication device to transmit the location information to the external communication device when the communication monitoring unit detects that the function of the first vehicle-mounted communication device has been disabled.

8. A vehicle comprising a device according to any one of claims 1 to 7.

9. 1. A method for preventing vehicle theft, comprising: The processor: Authenticating whether the driver of the vehicle is a registered person; After the authentication is performed, the vehicle-mounted communication device is monitored to determine whether a function capable of communicating the vehicle's location information with a communication device outside the vehicle is valid. If the driver is not authenticated as the registered person and the function is disabled, a predetermined anti-theft process is executed; A method in which, if the driver is not authenticated as the legitimate registered person and the function is detected to be enabled, the on-board communication device is operated to repeatedly transmit the location information to the external communication device without executing the anti-theft process.

Images