Vehicle security control device

Abstract

The present invention provides a vehicle security control device capable of responding to abnormal conditions such as the removal of a locking mechanism that locks the connection between a connector on a vehicle's communication cable and the connector portion of this device, or the cutting of the communication cable. [Solution] The security control device 4 includes a connector part 401 that can be connected to a connector 153 provided on the vehicle's communication cable 15, a locking part 402 that locks the connection state between the connector 153 and the connector part 401, an abnormality detection part that detects a first abnormal state in which the lock of the connection state by the locking part 402 is released, or a second abnormal state in which the communication cable 15 is cut, and a first communication part 424 that transmits the detected first abnormal state or second abnormal state to a server 2 located in a remote location when the abnormality detection part detects the first abnormal state or the second abnormal state.

Description

Technical Field

[0005]

[0001] The present invention relates to a vehicle security control device.

Background Art

[0002] Patent Document 1 describes a conventional vehicle security control device (a mobile body operation control device in Patent Document 1). The control device described in this Patent Document 1 can be mounted on a vehicle (mobile body), and includes a device main body that controls the vehicle so as to restrict the operation of the vehicle according to a control signal from a control unit located at a remote location.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] By the way, an electronic control device mounted on a vehicle has a function of recording a failure code corresponding to a malfunction such as an abnormality or disconnection abnormality of a sensor mounted on the vehicle. The vehicle is provided with a diagnostic connector (for example, a connector conforming to the OBD (On-Board Diagnostics) standard) for an external failure diagnostic device to read the failure code recorded in this electronic control device.

[0005] By connecting a failure diagnostic device to this diagnostic connector, a maintenance technician or the like can read the failure code stored in the electronic control device, identify the content of the malfunction of the vehicle, and perform inspection and repair. This diagnostic connector is provided on the path of a communication cable of the vehicle connected to the electronic control device by CAN (Controller Area Network) communication or the like.

[0006] Incidentally, one possible method for connecting a vehicle security control unit to an electronic control unit is to use the vehicle's communication cable. Specifically, the connector of the vehicle security control unit is connected to the connector provided on the communication cable. This allows the vehicle security control unit and the electronic control unit to be connected via the communication cable. Due to the ease of installation, this connection is sometimes made using a diagnostic connector (for example, an OBD connector).

[0007] However, when a passenger steals a vehicle, there is a risk that the connector of the vehicle security control device may be disconnected from the communication cable connector. To address this, it is conceivable to provide a locking mechanism that secures the connection between the connector and the connector part, thereby deterring passengers from disconnecting the connector part. However, there is a risk that the locking mechanism may be removed by the passenger, so countermeasures are necessary in case the locking mechanism is removed.

[0008] Furthermore, since there is a risk that the communication cable may be cut by the passenger when the vehicle is stolen, measures must be taken to address the possibility of such a situation occurring.

[0009] The present invention has been made in view of the above circumstances and aims to provide a vehicle security control device that can respond to an abnormal condition in which a locking part that locks the connection state between a connector provided on a vehicle's communication cable and the connector part of this device is removed, or an abnormal condition in which the communication cable is cut. [Means for solving the problem]

[0010] A vehicle security control device according to one aspect of the present invention is a vehicle security control device capable of communicating with a vehicle-side control unit via a vehicle communication cable, comprising: a connector unit capable of connecting to a connector provided on the communication cable; a locking unit for locking the connection state between the connector and the connector unit; an abnormality detection unit for detecting a first abnormal state in which the lock of the connection state by the locking unit is released, or a second abnormal state in which the communication cable is cut; and a first communication unit for transmitting the detected first abnormal state or second abnormal state to a server located remotely when the abnormality detection unit detects the first abnormal state or the second abnormal state. [Effects of the Invention]

[0011] The above-described embodiment of the vehicle security control device according to the present invention has the advantage of being able to respond to abnormal conditions in which a locking mechanism that locks the connection between a connector provided on a vehicle's communication cable and the connector portion of this device is removed, or in which the communication cable is cut. [Brief explanation of the drawing]

[0012] [Figure 1] This is a configuration diagram of a security control system to which a security control device according to one embodiment of the present invention is applied. [Figure 2] This is a schematic diagram showing an example of mounting the security control device according to the above embodiment onto a vehicle. [Figure 3] This is a block diagram of a security control system to which the security control device according to the above embodiment is applied. [Figure 4] This is a diagram corresponding to Figure 2, showing the first abnormal state according to the embodiment described above. [Figure 5] This figure, equivalent to Figure 2, shows the fifth connector according to the same embodiment as above in a state where it has been removed from the third connector. [Figure 6] This is a diagram corresponding to Figure 2, showing the second abnormal state according to the embodiment described above. [Figure 7] This is a flowchart showing the detection of the first abnormal state according to the embodiment described above. [Figure 8] It is a flowchart at the time of detecting a second abnormal state according to the above embodiment. [Figure 9] It is a flowchart for restricting the operation of the vehicle according to the above embodiment.

Mode for Carrying Out the Invention

[0013] <Embodiment>

[0014] Hereinafter, the security control system 1 to which the security control device 4 according to the present embodiment is applied will be described in detail. (1) System configuration

[0015] The security control system 1 according to the present embodiment is used when purchasing a vehicle 5, for example, by loan or installment sales. The security control system 1 includes a security control device 4, and by mounting the security control device 4 on the vehicle 5, it is possible to control so that the vehicle 5 cannot be moved by an operation from a remote location. Therefore, by using the security control system 1, for example, when the repayment is delayed, the operation of the vehicle 5 can be restricted by an operation from a remote location, and when the repayment is made, the operation of the vehicle 5 can be permitted. As a result, it is possible to suppress the delay in repayment of the owner (passenger) of the vehicle 5.

[0016] If such a security control system 1 is used, on the condition that the security control device 4 is mounted on the vehicle 5, for example, the examination at the time of lending can be performed with a looser standard than the examination of an ordinary car loan.

[0017] FIG. 1 is a diagram showing an example of the system configuration of the security control system 1 according to the present embodiment. The security control system 1 includes a server 2, an administrator terminal 3, and a security control device 4, which are connected to each other via a network N1. The "network N1" as referred to in this specification is not particularly limited as long as it is wireless communication. For example, 3G, 4G, 5G, Wi-Fi (registered trademark), WiMAX (registered trademark), Bluetooth (registered trademark), Zigbee (registered trademark), etc. can be mentioned.

[0018] The security control device 4 is mounted on the vehicle 5 and can be remotely controlled so that the vehicle 5 does not move according to an instruction from the administrator terminal 3.

[0019] FIG. 2 shows an example of mounting the security control device 4 on the vehicle 5. The security control device 4 is disposed in the inner space S1 of the instrument panel 10. The outer space S2 of the instrument panel 10 is the passenger compartment. In the present embodiment, the security control device 4 is connected to an electronic control unit 51 via a communication cable 15 which is an example of a diagnostic connector and is connected to an OBD connector. The electronic control unit 51 is connected to a power supply device 54. Thereby, when the security control device 4 is connected to the communication cable 15, it can receive power supply from the power supply device 54 via the electronic control unit 51 and the communication cable 15. The connection target of the present invention is not limited to this, and it is also possible to interrupt and connect to any communication cable (for example, CAN communication line) inside the vehicle. As the communication cable 15, for example, in addition to the connector of the OBD standard, communication cables and connectors used in standards such as CAN (Controller Area Network), LIN (Local Interconnect Network), FlexRay, MOST (Media Oriented Systems Transport), and in-vehicle Ethernet (Automotive Ethernet) can be adopted.

[0020] The communication cable 15 used in this embodiment includes a first connector 151, a second connector 152, a third connector 153, and a connecting wire 154.

[0021] The first connector 151 is connected to one end of the connecting wire 154. The first connector 151 is, for example, a connector to which a fault diagnostic device (not shown) is connected. The connecting wire 154 branches midway, with the other end of one branch connected to the second connector 152 and the other end of the other branch connected to the third connector 153.

[0022] The electronic control unit 51 includes a fourth connector 511 that can be connected to the second connector 152.

[0023] The security control device 4 is equipped with a fifth connector 401 that can be connected to the third connector 153. When the fourth connector 511 of the electronic control unit 51 is connected to the second connector 152 of the communication cable 15, and the fifth connector 401 of the security control device 4 is connected to the third connector 153 of the communication cable 15, the security control device 4 and the electronic control unit 51 are connected to communicate via the communication cable 15. In this connected state, the security control device 4 can send and receive bidirectional signals to and from the electronic control unit 51.

[0024] Furthermore, the security control device 4 includes a lock pin 402 that locks the connection between the fifth connector 401 and the third connector 153. When the lock pin 402 locks the connection between the fifth connector 401 and the third connector 153, it is impossible to remove the fifth connector 401 from the third connector 153. On the other hand, when the lock pin 402 is removed, in other words, when the lock on the connection between the fifth connector 401 and the third connector 153 by the lock pin 402 is released, it becomes possible to remove the fifth connector 401 from the third connector 153. (2)Each configuration

[0025] The security control system 1 according to this embodiment will be described in detail below. (2.1) Vehicles

[0026] Examples of vehicles 5 include automobiles, trucks, buses, motorcycles, and construction machinery.

[0027] As shown in Figure 3, the vehicle 5 comprises an electronic control unit 51, a drive system 52, a braking system 53, and a power supply device 54. The electronic control unit 51 is, for example, an ECU (Electronic Control Unit), and can operate the drive system 52 and the braking system 53 by issuing control commands to them. The electronic control unit 51 includes, for example, a computer system. The computer system mainly consists of a processor and memory as hardware. The functions of the electronic control unit 51 are realized by the processor executing a program recorded in the memory of the computer system. The electronic control unit 51 includes a vehicle communication unit 512 that transmits and receives electrical signals wirelessly to and from the wireless communication unit 41 of the security control device 4 without using a communication cable 15.

[0028] The drive system 52 moves the vehicle 5 forward or backward by rotating the drive wheels with the engine 521. The drive system 52 comprises the engine 521 and the starter motor 522. The starter motor 522 is an electric motor for starting the engine 521. When the occupant operates the ignition key or start button, the electronic control unit 51 operates the starter motor 522, thereby starting the engine 521.

[0029] The braking system 53 slows down or stops the vehicle 5 by applying braking force to the wheels of the vehicle 5. The braking system 53 comprises a brake 532 and a brake pedal 531. When the brake pedal 531 is operated by the occupant, the electronic control unit 51 controls the brake 532 to operate, thereby applying braking force to the wheels.

[0030] The power supply device 54 is a device that supplies power to the vehicle 5, and can supply power to electrical equipment such as a starter motor 522, a lighting device (not shown), and a computer system including an electronic control unit 51. (2.2) Administrator terminal

[0031] The administrator terminal 3 is a terminal device used by the administrator, and the administrator can remotely operate the security control device 4 by operating it. The administrator terminal 3 is not particularly limited as long as it is a communication terminal capable of sending and receiving signals bidirectionally to and from the server 2, and examples include smartphones, tablet terminals, PDAs, mobile phones, notebook PCs, desktop PCs, smartwatches, smart glasses and other wearable devices. As shown in Figure 3, the administrator terminal 3 comprises a terminal display unit 31, a terminal processing unit 32, and a terminal input unit 33.

[0032] The terminal display unit 31 displays information processed by the terminal processing unit 32. The terminal display unit 31 is composed of, for example, a monitor, display, touch display, projector, etc. The terminal input unit 33 is a device that allows input through the administrator's operation. Examples of the terminal input unit 33 include a keyboard, mouse, tablet, touch display, microphone, pointing device, etc. The terminal processing unit 32 executes various processes of the administrator terminal 3. The terminal processing unit 32 mainly consists of a computer system having one or more processors and one or more memories. The processor realizes its respective functions by executing programs stored in memory.

[0033] The terminal processing unit 32 stores an application program (hereinafter sometimes referred to as "app") for using the services provided by the server 2. The app, in the said service, for example, displays a management screen or displays a map where the location of the vehicle 5 is mapped. By executing the app, the administrator terminal 3 can access the server 2 and send and receive information used to execute the app. However, in this invention, the administrator terminal 3 is not limited to an app installed on the administrator terminal 3; various operations may also be performed from the management screen provided by the server 2 via an internet browser.

[0034] The administrator can track the current location of vehicle 5 in real time by operating the administrator terminal 3, and can send instructions to restrict the movement of vehicle 5 to prevent it from moving. For example, after the administrator confirms that vehicle 5 is stopped in a specific parking lot using the terminal display unit 31 of the administrator terminal 3, if the administrator takes action to prevent vehicle 5 from moving (i.e., restrict the movement of vehicle 5; hereafter sometimes referred to as "movement restriction"), the administrator terminal 3 outputs a control command to restrict the vehicle's movement and inputs it to the server 2. The server 2 issues a command to the security control device 4 to restrict the movement of vehicle 5. The security control device 4, in accordance with the command from the server 2, restricts the operation of the starter motor 522 or drives the brake 532. (2.3) Security control device

[0035] The security control device 4 is mounted on the vehicle 5 and performs operational restrictions on the vehicle 5. The security control device 4 comprises a wireless communication unit 41, a control unit 42, a power supply unit 43, and an notification unit 44. (2.3.1) Wireless Communication Section

[0036] The wireless communication unit 41 is capable of wireless communication with the server 2 and is also capable of wireless communication with the electronic control unit 51 without using the communication cable 15. In this embodiment, the wireless communication unit 41 transmits and receives electrical signals wirelessly to the server communication unit 21 of the server 2 and the vehicle communication unit 512 of the electronic control unit 51. That is, the wireless communication unit 41 transmits information processed by the control unit 42 to the server communication unit 21 of the server 2 and the vehicle communication unit 512 of the electronic control unit 51, and inputs information received from the server communication unit 21 of the server 2 and the vehicle communication unit 512 of the electronic control unit 51 to the control unit 42. (2.3.2) Caregivers

[0037] As shown in Figure 3, the control unit 42 includes a first abnormality detection unit 421, a removal detection unit 422, a second abnormality detection unit 423, a first communication unit 424, a second communication unit 425, a third communication unit 426, a fourth communication unit 427, a vehicle control unit 428, a location information acquisition unit 429, and a radio wave receiving unit 430. The control unit 42 functions as the first abnormality detection unit 421, the removal detection unit 422, the second abnormality detection unit 423, the first communication unit 424, the second communication unit 425, the third communication unit 426, the fourth communication unit 427, the vehicle control unit 428, the location information acquisition unit 429, and the radio wave receiving unit 430 by the execution of a program recorded in memory by the processor. The program may be pre-recorded in memory, provided via a telecommunication line such as the Internet, or provided on a non-temporary recording medium such as a memory card.

[0038] The first abnormality detection unit 421 detects a first abnormal state in which the lock on the connection state by the lock pin 402 is released (see Figure 4). In other words, the first abnormal state is the state in which the lock pin 402 is removed. In this embodiment, the security control device 4 is configured such that when the lock on the connection state between the fifth connector 401 and the third connector 153 by the lock pin 402 is released, communication of a predetermined signal with the electronic control unit 51 is interrupted. The first abnormality detection unit 421 is configured to detect the first abnormal state by detecting when communication of a predetermined signal between the security control device 4 and the electronic control unit 51 is no longer possible via the communication cable 15. More specifically, the signal line for communicating a predetermined signal with the electronic control unit 51 in the security control device 4 is configured to be disconnected when the lock on the connection state by the lock pin 402 is released. The first abnormality detection unit 421 is configured to detect the first abnormal state by detecting the disconnection of the signal line for communicating a predetermined signal with the electronic control unit 51 in the security control device 4.

[0039] The removal detection unit 422 detects when the fifth connector 401 is removed from the third connector 153 (see Figure 5). In this embodiment, the removal detection unit 422 is configured to detect when the first abnormal condition is detected by the first abnormal condition detection unit 421, and when all remaining signal communication with the electronic control unit 51 is interrupted and the power supply from the electronic control unit 51 is interrupted, the fifth connector 401 is removed from the third connector 153.

[0040] The second abnormality detection unit 423 detects a second abnormality, in which the communication cable 15 is cut (see Figure 6). In this embodiment, the second abnormality detection unit 423 is configured to detect a second abnormality when the first abnormality is not detected, all signal communication with the electronic control unit 51 is interrupted, and the power supply from the electronic control unit 51 is also interrupted.

[0041] The first communication unit 424 transmits the detected first abnormal condition to the remote server 2 when the first abnormal condition detection unit 421 detects the first abnormal condition. The first communication unit 424 also transmits the detected second abnormal condition to the remote server 2 when the second abnormal condition detection unit 423 detects the second abnormal condition.

[0042] When the first abnormal condition is detected by the first abnormality detection unit 421, the second communication unit 425 transmits a control signal to the electronic control unit 51 via the communication cable 15 to restrict the operation of the vehicle 5. This restricts the operation of the vehicle 5. In this embodiment, the control signal that causes the electronic control unit 51 to restrict the operation of the vehicle 5 includes a pseudo-signal to switch the electronic control unit 51 to fail-safe mode. This pseudo-signal is, for example, a signal in which the numerical values ​​of engine water temperature, engine oil temperature, engine speed, fuel pump motor speed, or vehicle speed are set to abnormal values. When the electronic control unit 51 receives a signal indicating an abnormal value such as engine water temperature, it switches to a fail-safe mode that restricts the operation of the vehicle 5 in order to ensure the safety of the vehicle 5. An example of a fail-safe mode is start-stop control of the starter motor 522. Start-stop control of the starter motor 522 means controlling the starter motor 522 so that it does not move. As a result, the vehicle 5, whose engine 521 is stopped, cannot start the engine 521, thus enabling safer restriction of the operation of the vehicle 5.

[0043] When the removal detection unit 422 detects that the fifth connector 401 has been removed from the third connector 153, the third communication unit 426 transmits to the server 2 that the fifth connector 401 has been removed.

[0044] When the second abnormal condition is detected by the second abnormal condition detection unit 423, the fourth communication unit 427 uses the wireless communication unit 41 to transmit a control signal to the electronic control unit 51 to restrict the operation of the vehicle 5. This restricts the operation of the vehicle 5. However, when the second abnormal condition is detected by the second abnormal condition detection unit 423, the communication cable 15 is cut, so the fourth communication unit 427 cannot transmit a control signal to the electronic control unit 51 to restrict the operation of the vehicle 5 via the communication cable 15. Therefore, when the second abnormal condition is detected, the fourth communication unit 427 uses the wireless communication unit 41 to transmit a control signal to the electronic control unit 51 to restrict the operation of the vehicle 5. In this embodiment, the control signal that causes the electronic control unit 51 to restrict the operation of the vehicle 5 includes a pseudo-signal to switch the electronic control unit 51 to fail-safe mode. This pseudo-signal is, for example, a signal in which the numerical values ​​of engine water temperature, engine oil temperature, engine speed, fuel pump motor speed, or vehicle speed are set to abnormal values.

[0045] The vehicle control unit 428 transmits a control signal to the electronic control unit 51 via the communication cable 15 to restrict the operation of the vehicle 5, in order to control the electronic control unit 51 according to the control command output from the server 2 in response to the operation of the administrator terminal 3. The control command by the vehicle control unit 428 is not particularly restricted as long as it can restrict the operation of the vehicle 5, but examples include starting and stopping control of the starter motor 522 and braking control by the brake 532. Starting and stopping control of the starter motor 522 means controlling the starter motor 522 so that it does not move. As a result, the vehicle 5, whose engine 521 is stopped, cannot start the engine 521, so the operation restriction of the vehicle 5 can be implemented more safely.

[0046] However, in this invention, the engine 521 may operate while the vehicle 5 is stationary, and the brake 532 may be driven. The control unit 42 may determine whether the engine 521 is operating, and the server control unit 22 may automatically select whether to drive the brake 532 or limit the operation of the starter motor 522, or the administrator may make the decision. In addition, the vehicle control unit 428 may impose a speed limit on the vehicle 5 (for example, a speed limit of 5 km / h or less), or lock the accelerator pedal for the stationary vehicle 5.

[0047] The location information acquisition unit 429 acquires the location information of the vehicle 5 and outputs the location information to the server 2. The location information acquisition unit 429 calculates the location information of the vehicle 5 from the radio waves received by the radio wave receiving unit 430. Examples of radio waves received by the radio wave receiving unit 430 include radio waves transmitted from GPS (Global Positioning System) satellites (GPS radio waves), Wi-Fi radio waves transmitted from wireless LAN access points, and radio waves transmitted from mobile phone base stations (4G, 5G). It may receive one of these, or multiple radio waves from these to improve the accuracy of the location information.

[0048] Preferably, the timing of acquiring the location information of the vehicle 5 by the location information acquisition unit 429 can be selected by the administrator from multiple modes, including a normal mode and a real-time mode. The normal mode is a mode in which the timing of acquiring the location information of the vehicle 5 is longer than that of the real-time mode. In normal mode, for example, the location information of the vehicle 5 is acquired at intervals of 20 minutes / time, 30 minutes / time, 40 minutes / time, 50 minutes / time, 60 minutes / time, etc. The real-time mode is a mode in which the timing of acquiring the location information of the vehicle 5 is shorter than that of the normal mode, and it is possible to acquire location information that is approximately synchronized with the current movement of the vehicle 5. In real-time mode, for example, the location information of the vehicle 5 is acquired at intervals of 5 seconds / time, 10 seconds / time, 15 seconds / time, etc.

[0049] Setting it to real-time mode at all times increases the load on Server 2, but by allowing users to select between normal mode and real-time mode, the load on Server 2 can be reduced. (2.3.3) Power supply section

[0050] The power supply unit 43 is an emergency battery that can discharge power for a short time when the power supply from the electronic control unit 51 is interrupted. When the second abnormality detection unit 423 detects the second abnormality state, and when the removal detection unit 422 detects that the fifth connector 401 has been removed from the third connector 153, the power supply from the electronic control unit 51 is interrupted. Therefore, in this embodiment, the first communication unit 424 transmits the second abnormality state to the server 2 using the power stored in the power supply unit 43. The third communication unit 426 also transmits to the server 2 the state that the fifth connector 401 has been removed using the power stored in the power supply unit 43. (2.3.4) Hochi Department

[0051] When the security control device 4 imposes an operation restriction on the vehicle 5, the notification unit 44 makes an announcement to the occupants of the vehicle 5. The announcement is made, for example, by voice, digital display, etc. When an operation restriction is imposed, the notification unit 44 makes an announcement, for example, by using a speaker, such as "This vehicle is currently unavailable due to customer circumstances. Please contact your dealer for details."

[0052] Furthermore, the notification unit 44 is composed of, for example, a speaker. Moreover, the notification unit 44 is not limited to a speaker provided as an element of the security control device 4, but may also be a signal output unit that controls a speaker, car navigation display, head-up display (HUD), etc., that are pre-installed in the vehicle 5 to make announcements. (2.4) Server

[0053] As shown in Figure 3, Server 2 comprises a server communication unit 21 and a server control unit 22. The server control unit 22 includes a server processing unit 221, a server notification unit 222, and a display control unit 223. The server communication unit 21 transmits and receives electrical signals wirelessly to the administrator terminal 3 and the security control device 4. That is, the server communication unit 21 transmits information processed by the server control unit 22 to the administrator terminal 3 and the security control device 4, and inputs information received from the administrator terminal 3 and the security control device 4 to the server control unit 22. The server control unit 22 functions as the server processing unit 221, the server notification unit 222, and the display control unit 223 by having a processor execute a program stored in memory. The program may be pre-stored in memory, provided via a telecommunication line such as the Internet, or provided on a non-temporary recording medium such as a memory card.

[0054] Server 2 is preferably a server device for so-called cloud computing, such as a PC / AT compatible machine or a MAC standard machine, a dedicated machine, or a blade server.

[0055] The server processing unit 221 executes various processes in the server control unit 22. For example, when the server processing unit 221 receives a command from the administrator terminal 3 regarding the restriction of the operation of vehicle 5, it outputs a command regarding the restriction to the security control device 4. In other words, the server processing unit 221 can remotely control the control unit 42. The server processing unit 221 also identifies the location of vehicle 5 based on the location information transmitted from the security control device 4 and locates its position on the map. As described above, the location information input to the server processing unit 221 is requested by the server processing unit 221 from the location information acquisition unit 429 according to the mode (normal mode or real-time mode) set in response to the operation of the administrator terminal 3.

[0056] The server notification unit 222 sends an alert to the administrator terminal 3 when it receives a signal from the security control device 4 indicating a first abnormal state, a second abnormal state, or that the fifth connector 401 has been disconnected. The "alert" here refers to any action that can alert the administrator via the administrator terminal 3, such as sending an email, displaying an alert via a pop-up, sounding a warning, lighting a warning light, or vibrating.

[0057] The display control unit 223 controls the display on the terminal display unit 31 of the administrator terminal 3. For example, the display control unit 223 displays the management screen on the administrator terminal 3. The display control unit 223 also displays the vehicle 5 on the map according to the location information of the vehicle 5. (3) Operation

[0058] Next, an example of the operation of the security control system 1 will be described based on the flowcharts in Figures 7, 8, and 9.

[0059] Figure 7 shows a flowchart of the operation when the first abnormal condition is detected. When the occupant pulls out the lock pin 402 and communication of a predetermined signal with the electronic control unit 51 is interrupted, the control unit 42 detects the first abnormal condition (ST1).

[0060] The control unit 42 then sends information that it has detected the first abnormal state (first abnormal state detection information) to the server 2 (ST2). When the server 2 receives the first abnormal state detection information, it sends an alert email to the administrator terminal 3 (ST3). The administrator can understand the first abnormal state by checking the alert email on the administrator terminal 3.

[0061] Furthermore, when the control unit 42 detects the first abnormal condition, it transmits a control signal (a pseudo-signal to switch the electronic control unit 51 to fail-safe mode) to the electronic control unit 51 to restrict the operation of the vehicle 5 (ST4). As a result, the electronic control unit 51 switches to fail-safe mode. When the electronic control unit 51 switches to fail-safe mode, it executes start-stop control of the starter motor 522 and implements operation restrictions to prevent the vehicle 5 from moving (ST5). As a result, the operation of the vehicle 5 is restricted (ST6).

[0062] When the passenger disconnects the fifth connector 401 from the third connector 153, all remaining signal communication with the electronic control unit 51 is cut off, and the power supply from the electronic control unit 51 is also cut off, the control unit 42 detects that the fifth connector 401 has been disconnected from the third connector 153 (ST7).

[0063] The control unit 42 then sends information (detachment detection information) to the server 2 indicating that the fifth connector 401 has been detached from the third connector 153 (ST8). When the server 2 receives the detachment detection information, it sends an alert email to the administrator terminal 3 (ST9). The administrator can confirm that the fifth connector 401 has been detached by checking the alert email on the administrator terminal 3.

[0064] Figure 8 shows a flowchart of the operation when the second abnormal condition is detected. When the passenger cuts the communication cable 15, all signal communication with the electronic control unit 51 is interrupted, and the power supply from the electronic control unit 51 is also cut off, the control unit 42 detects the second abnormal condition (ST11).

[0065] The control unit 42 then sends information that it has detected a second abnormal state (second abnormal state detection information) to the server 2 (ST12). When the server 2 receives the second abnormal state detection information, it sends an alert email to the administrator terminal 3 (ST13). The administrator can understand that a second abnormal state has occurred by checking the alert email on the administrator terminal 3.

[0066] Furthermore, when the control unit 42 detects the second abnormal state, it uses the wireless communication unit 41 to transmit a control signal (a pseudo-signal to switch the electronic control unit 51 to failsafe mode) to the electronic control unit 51 to restrict the operation of the vehicle 5 (ST14). As a result, the electronic control unit 51 switches to failsafe mode. When the electronic control unit 51 switches to failsafe mode, it executes start and stop control of the starter motor 522 and implements operation restrictions to prevent the vehicle 5 from moving (ST15). As a result, the operation of the vehicle 5 is restricted (ST16).

[0067] Figure 9 shows a flowchart illustrating the process of restricting the operation of vehicle 5 by operating the administrator terminal 3. When the administrator operates the administrator terminal 3 and issues a command to stop vehicle 5, the administrator terminal 3 sends the command to stop vehicle 5 to the server 2 (ST21, ST22).

[0068] Upon receiving the stop command, server 2 sends a command to control unit 42 to restrict the operation of vehicle 5 (ST23).

[0069] Upon receiving a command from server 2, control unit 42 outputs a stop command to electronic control unit 51 to restrict the operation of vehicle 5 (ST24). Upon receiving the stop command, electronic control unit 51 executes either stopping the starter motor 522 or engaging the brake 532, thereby restricting the operation of vehicle 5 to prevent it from moving (ST25). As a result, the operation of vehicle 5 is restricted (ST26). <Variation>

[0070] The above embodiments are merely one of many embodiments of the present invention. The embodiments can be modified in various ways depending on the design, etc., as long as the objectives of the present invention are achieved. The following lists some modifications of the embodiments. The modifications described below can be combined and applied as appropriate.

[0071] In the security control system 1 according to the above embodiment, an example was described in which it is used when purchasing a vehicle 5 on a loan or installment plan. However, the present invention is not limited to this, and may be used, for example, for monthly payments for vehicle subscriptions, payments for rental cars, etc.

[0072] In the above embodiment, the first communication unit 424, the third communication unit 426, and the fourth communication unit 427 only output electrical signals to the server 2. However, for example, they may also output electrical signals to the notification unit 44, which may then issue a warning to the passenger.

[0073] The security control device 4 may be installed at the time of sale of the vehicle 5, or it may be retrofitted to the vehicle 5 after the sale.

[0074] If vehicle 5 is an electric vehicle, the fail-safe mode may be a control that prohibits the supply of power to the motors that drive the wheels.

[0075] In the above embodiment, the control signals that the second communication unit 425 and the fourth communication unit 427 transmit to the electronic control unit 51 to restrict the operation of the vehicle 5 were described as pseudo-signals to switch the electronic control unit 51 into fail-safe mode. However, these could also be control signals that cause the electronic control unit 51 to perform braking using the brake 532, control signals that impose a speed limit on the vehicle 5 (for example, a speed limit of 5 km / h or less), or control signals that cause the accelerator pedal to lock for a stationary vehicle 5.

[0076] In the above embodiment, a locking pin 402 was used as an example of the locking mechanism, but any locking mechanism other than the locking pin 402 may be used as long as it is possible to lock the connection state between the third connector 153 and the fifth connector 401.

[0077] In the above embodiment, the first abnormal state was described using an example of a state in which the communication of a predetermined signal between the security control device 4 and the electronic control unit 51 is interrupted. However, it may also be a state in which the power supply from the electronic control unit 51 to the security control device 4 is interrupted. To describe this modified example in more detail, the wire that receives power from the electronic control unit 51 in the security control device 4 is configured to break when the lock on the connection state by the lock pin 402 is released. The first abnormality detection unit 421 according to the modified example is configured to detect the first abnormal state by detecting the break in the wire that receives power from the electronic control unit 51 in the security control device 4.

[0078] Furthermore, the present invention is not limited to the above embodiments, and may be configured as follows, for example. In addition to detecting the disconnection, the first abnormality detection unit 421 may also directly detect the release or removal state of the locking part using a mechanical switch, Hall element, optical sensor, pressure switch, Tamper loop (continuity monitoring wire), etc., provided on or near the locking pin 402. These multiple detection means may be used individually or in combination, and when used in combination, the first abnormal state is determined based on majority rule or priority rules.

[0079] The control unit 42 selects a vehicle-specific failsafe threshold profile stored in the memory unit based on vehicle identification information (e.g., VIN, ECU identifier, communication protocol information), and determines the type, range, and transmission order of pseudo signals to transition the electronic control unit 51 into failsafe mode according to the profile. In case the failsafe is not triggered, a fallback is provided that gradually transitions to the safer control among speed limiting, brake 532 driving, and starter motor 522 starting / stopping.

[0080] The notification unit 44 uses at least one of the following to make announcements: a speaker, an in-vehicle display, a head-up display, etc. For example, when starting the engine of a parked vehicle, it outputs safety guidance messages in stages, such as, "This vehicle's engine will soon be unable to start. Please contact the dealership," or "This vehicle's engine is unable to start due to the owner's circumstances. Please contact the dealership." In addition, the server notification unit 222 sends multiple alerts to the administrator terminal 3 via at least one of the following: email, push notification, SMS, or voice notification. The safety guidance messages can be set arbitrarily. <Summary>

[0081] As described above, the security control device 4 according to the first embodiment is a security control device 4 that can communicate with an electronic control unit 51 via a communication cable 15, and comprises a fifth connector 401 that can be connected to a third connector 153 provided on the communication cable 15, a lock pin 402 that locks the connection state between the third connector 153 and the fifth connector 401, an abnormality detection unit (first abnormality detection unit 421, second abnormality detection unit 423) that detects a first abnormal state in which the lock of the connection state by the lock pin 402 is released, or a second abnormal state in which the communication cable 15 is cut, and a first communication unit 424 that transmits the detected first abnormal state or second abnormal state to a server 2 located in a remote location when the first abnormal state or second abnormal state is detected by the abnormality detection unit (first abnormality detection unit 421, second abnormality detection unit 423).

[0082] According to this embodiment, when a first abnormal state or a second abnormal state is detected, the detected first abnormal state or second abnormal state is transmitted to a server 2 located remotely. The administrator can then respond to the abnormal state by, for example, understanding the abnormal state received by server 2.

[0083] The security control device 4 according to the second embodiment further includes a second communication unit 425 that, when a first abnormal condition is detected by the first abnormality detection unit 421, transmits a control signal to the electronic control unit 51 via the communication cable 15 to restrict the operation of the vehicle 5.

[0084] According to this embodiment, when the first anomaly detection unit 421 detects an anomaly, the operation of the vehicle 5 can be restricted. This prevents theft of the vehicle 5 by the occupants.

[0085] The security control device 4 according to the third embodiment further includes a removal detection unit 422 that detects when the fifth connector 401 has been removed from the third connector 153 when the first abnormal condition is detected by the first abnormal condition detection unit 421, and a third communication unit 426 that transmits to the server 2 the detected state that the fifth connector 401 has been removed from the third connector 153 when the removal detection unit 422 detects that the fifth connector 401 has been removed from the third connector 153.

[0086] According to this embodiment, when it is detected that the fifth connector 401 has been disconnected from the third connector 153, the detected disconnected state of the fifth connector 401 is transmitted to the server 2. The administrator can, for example, respond to the disconnection of the fifth connector 401 by being aware of the disconnected state of the fifth connector 401 received by the server 2.

[0087] The security control device 4 according to the fourth embodiment further comprises a wireless communication unit 41 that can communicate wirelessly with the electronic control unit 51 without using a communication cable 15, and a fourth communication unit 427 that, when a second abnormal condition is detected by the second abnormality detection unit 423, uses the wireless communication unit 41 to transmit a control signal to the electronic control unit 51 to restrict the operation of the vehicle 5.

[0088] According to this embodiment, even if a second abnormal condition is detected in which the communication cable 15 is severed, the operation of the vehicle 5 can be restricted by sending a control signal to the electronic control unit 51 using the wireless communication unit 41 to restrict the operation of the vehicle 5. This prevents theft of the vehicle 5 by the occupants.

[0089] The security control device 4 according to the fifth embodiment includes a control signal that causes the vehicle-side control unit to switch to failsafe mode.

[0090] According to this embodiment, the operation of the vehicle 5 can be restricted by utilizing the fail-safe function of the electronic control unit 51.

[0091] The security control device 4 according to the sixth embodiment further comprises a power supply unit 43, and the first communication unit 424 transmits the second abnormal state to the server 2 using the power from the power supply unit 43.

[0092] According to this embodiment, even if the power supply from the electronic control unit 51 is interrupted due to the cutting of the communication cable 15, the second abnormal state can be transmitted to the server 2 using the power supply unit 43.

[0093] The security control device 4 according to the seventh embodiment further comprises a power supply unit 43, and the third communication unit 426 uses the power from the power supply unit 43 to transmit to the server 2 that the fifth connector 401 has been disconnected.

[0094] According to this embodiment, even if the power supply from the electronic control unit 51 is interrupted when the fifth connector 401 is removed, the power supply unit 43 can be used to transmit to the server 2 that the fifth connector 401 has been removed. [Explanation of symbols]

[0095] 2 servers 4. Security control device (vehicle security control device) 15 Communication Cable 153 Third connector (connector) 41 Wireless Communication Section 401 Fifth connector (connector part) 402 Lock pin (locking part) 421 First Anomaly Detection Unit (Anomaly Detection Unit) 422 Removal detection unit 423 Second Anomaly Detection Unit (Anomaly Detection Unit) 424 1st Communications Department 425 Second Communications Department 426 Third Communications Department 427 4th Communications Department 43 Power supply section (emergency battery) 51 Electronic control unit (vehicle-side control unit)

Claims

1. A vehicle security control device that can communicate with a vehicle-side control unit via a vehicle communication cable, A connector portion that can be connected to a connector provided on the aforementioned communication cable, A locking mechanism that locks the connection between the connector and the connector portion, An abnormality detection unit that detects a first abnormal state in which the lock on the connection state by the locking unit is released, or a second abnormal state in which the communication cable is cut, The system includes a first communication unit that, when the anomaly detection unit detects the first anomaly state or the second anomaly state, transmits the detected first anomaly state or the second anomaly state to a server located remotely. Vehicle security control device.

2. The system further includes a second communication unit that, when the abnormality detection unit detects the first abnormal condition, transmits a control signal to the vehicle-side control unit via the communication cable to restrict the operation of the vehicle. The vehicle security control device according to claim 1.

3. When the abnormality detection unit detects the first abnormal condition, the removal detection unit detects that the connector has been removed from the connector, The system further includes a third communication unit that, when the removal detection unit detects that the connector has been removed from the connector, transmits the detected state of the connector being removed to the server. The vehicle security control device according to claim 1 or 2.

4. A wireless communication unit capable of wirelessly communicating with the vehicle-side control unit without using the aforementioned communication cable, The system further includes a fourth communication unit that, when the abnormality detection unit detects the second abnormal condition, transmits a control signal to the vehicle-side control unit using the wireless communication unit to restrict the operation of the vehicle. The vehicle security control device according to claim 1.

5. The control signal includes a pseudo-signal for causing the vehicle-side control unit to enter fail-safe mode. The vehicle security control device according to claim 2 or 4.

6. Equipped with additional emergency batteries, The first communication unit transmits the second abnormal state to the server using the power of the emergency battery. The vehicle security control device according to claim 1.

7. Equipped with additional emergency batteries, The third communication unit uses the power of the emergency battery to transmit to the server that the connector has been disconnected. The vehicle security control device according to claim 3.

8. When the abnormality detection unit detects the first abnormal condition, the second communication unit transmits a control signal to the vehicle-side control unit via the communication cable to restrict the operation of the vehicle. A wireless communication unit capable of wirelessly communicating with the vehicle-side control unit without using the aforementioned communication cable, The system includes a fourth communication unit which, when the abnormality detection unit detects the second abnormal state, transmits a control signal to the vehicle-side control unit using the wireless communication unit to restrict the operation of the vehicle, The second communication unit and the fourth communication unit include control logic that automatically selects at least one of the following methods to transmit the control signal: via the communication cable or via the wireless communication unit, depending on the type of anomaly detected by the anomaly detection unit and the communication quality index. The vehicle security control device according to claim 1.

Images