Key control system, key control method, key management device, smart key

Abstract

To provide a technique capable of reducing the risk of unauthorized use of a vehicle.SOLUTION: Key data of a registration key, which is a smart key associated with a vehicle, is registered in a key management device 4. The key management device 4 includes an accommodating unit that accommodates a control key 8b, which is a smart key that is not associated with the vehicles. The control key 8b is a smart key that is stored in the accommodating unit and is driven by electric power supplied from the key management device 4. The control key 8b is connected to the key management device 4 by wire. The key management device 4 starts power supply to the control key 8b based on a communication connection with the mobile device 9, and writes data of the registered key in a RAM of the control key 8b, thereby causing the control key 8b to temporarily function as a registered key.SELECTED DRAWING: Figure 8

Description

[Technical Field]

[0001] The present disclosure relates to a technique for reducing the risk of unauthorized use of a vehicle. [Background Art]

[0002] Patent Literature 1 discloses a system capable of switching the operation state (enabled / disabled) of a smart key stored in a vehicle by selecting a button (software key) displayed on a screen of a mobile device such as a smartphone. [Prior Art Literature] [Patent Literature]

[0003] [Patent Literature 1] Japanese Unexamined Patent Publication No. 2019-91220 [Summary of the Invention] [Problem to be Solved by the Invention]

[0004] In the configuration of Patent Literature 1, the smart key stored in the vehicle is switched to a disabled state based on a user operation on a mobile device. Therefore, if the user forgets to perform an operation to disable the smart key, a valid smart key will continue to exist in the vehicle. In other words, there is a risk that the vehicle may be used illegally. Further, even if the smart key is disabled, key information is stored in the smart key stored in the vehicle. Therefore, if the smart key is stolen, the key information may be leaked.

[0005] The present disclosure has been made based on the above studies and points of focus, and one object thereof is to provide a technique capable of reducing the risk of unauthorized use of a vehicle. [Means for Solving the Problem]

[0006] The key control system disclosed herein is configured to perform wireless communication for authentication with an authentication device mounted in a vehicle and includes a smart key (8b) stored inside the vehicle, and a key management device (4) that can communicate with the smart key and is configured to control the power state of the smart key. The key management device includes a wireless communication module (42) for wireless communication with a mobile device, a storage (47) which is a non-volatile storage medium in which key information used for authentication is stored, and a control unit (44) for controlling the operation of the smart key. The control unit sets the power of the smart key to ON based on the presence of a mobile device within a predetermined distance from the vehicle, and transmits the key information stored in the storage to the smart key based on the power of the smart key being turned ON. The smart key includes a key-side control unit (87b) that processes communication for authentication, a volatile memory (872), and a non-volatile memory (873). The key information stored in the storage is not registered in the non-volatile memory of the smart key. The key-side control unit is configured to store the received key information in the volatile memory when it receives key information from the key management device, and to perform communication for authentication using the key information stored in the volatile memory.

[0007] According to the key control system described above, the smart key stored in the vehicle functions as a smart key that can be successfully authenticated by the authentication device only while the power is turned on by the key management device. Since the key information required for authentication is stored in volatile memory, the key information is lost from the smart key when the power is turned off. The smart key stored in the vehicle does not always retain the key information. Therefore, the risk of key information being leaked due to the theft of the smart key is reduced. Consequently, the risk of the vehicle being used fraudulently is reduced.

[0008] The key control method included in this disclosure is a key control method performed in a system including a key management device (4) configured to be able to communicate wirelessly with a mobile device and a smart key (8b) configured to be able to communicate wirelessly for authentication with an authentication device mounted in a vehicle, the method comprising: the key management device turning on the power of the smart key based on the mobile device being within a predetermined distance from the vehicle; the key management device transmitting key information necessary for authentication to the smart key based on the power being turned on; the smart key receiving key information from the key management device; the smart key storing the received key information in a volatile memory; the smart key performing wireless communication for authentication using the key information stored in the volatile memory; and the key management device turning off the power of the smart key based on the mobile device not being within a predetermined distance from the vehicle.

[0009] The key management device included in this disclosure comprises a storage unit (41) for housing a smart key, a key communication unit (411) for communicating with the smart key, a storage unit (47) which is a non-volatile storage medium that stores key information used for authentication, a wireless communication module (42) which is a communication module for performing wireless communication with a mobile device, and a control unit (44) for controlling the smart key. The control unit is configured to turn on the power of the smart key based on whether the mobile device is within a predetermined distance from the vehicle, to transmit key information to the smart key and store it in the smart key's volatile memory based on whether the smart key has been turned on, and to turn off the power of the smart key based on whether the mobile device is not within a predetermined distance from the vehicle.

[0010] The smart key of this disclosure is a smart key used in connection with a key management device, and comprises a key-side communication unit (86) for communicating with the key management device, a key-side control unit (87b) for processing communication for authentication with an authentication device mounted on the vehicle, a volatile memory (872), and a non-volatile memory (873). The non-volatile memory does not store key information that will result in successful authentication. The key-side control unit is configured to receive key information from the key management device, store the received key information in the volatile memory, and perform authentication communication using the key information stored in the volatile memory.

[0011] The reference numerals in parentheses in the claims indicate the correspondence with the specific means described later in the embodiments, and do not limit the technical scope of this disclosure. [Brief explanation of the drawing]

[0012] [Figure 1] This diagram shows an overall view of a vehicle electronic key system. [Figure 2] This is a block diagram showing the configuration of the Smart ECU. [Figure 3] This is a block diagram showing the configuration of the registration key. [Figure 4] This is a block diagram showing the configuration of the control keys. [Figure 5] This is a flowchart showing the operation of the control keys. [Figure 6] This is a block diagram showing the configuration of the storage area. [Figure 7] This is a sequence diagram of the process for registering key data in a key management device. [Figure 8] This is a sequence diagram showing the operation of each device involved in unlocking. [Figure 9] This flowchart shows an example of how a key management device operates when a control key is activated. [Figure 10] This sequence diagram shows the other operations of each device involved in unlocking. [Figure 11]It is a flowchart showing another operation example of the key management device related to unlocking. [Figure 12] It is a sequence diagram showing the operation of each device when a start switch is pressed. [Figure 13] It is a sequence diagram showing the operation of each device when a user presses a lock button of a portable device. [Figure 14] It is a sequence diagram showing the operation of each device when a communication connection between a portable device and a key management device is disconnected. MODE FOR CARRYING OUT THE INVENTION

[0013] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. The present disclosure is not limited to the following embodiments, and various modified examples described below are also included in the technical scope of the present disclosure. Furthermore, various alterations can be made without departing from the scope of the gist other than those described below. Various supplements and modified examples can be implemented in appropriate combinations within a range where no technical contradiction occurs. Members having the same function are denoted by the same reference numerals, and description thereof may be omitted. In addition, when only a part of the configuration is described, the description described in other sections can be applied to the other parts.

[0014] As shown in FIG. 1, the vehicle electronic key system of the present embodiment includes an in-vehicle system 1, a registered key 8a, a control key 8b, and a portable device 9. The in-vehicle system 1 includes a smart ECU 2 and a key management device 4 as described later. ECU is an abbreviation for Electronic Control Unit. The in-vehicle system 1 is a system mounted on a certain vehicle. The term "vehicle" used hereinafter basically refers to the same vehicle.

[0015] The registration key 8a is a dedicated device serving as an electronic key for a vehicle. The registration key 8a is provided to a user as the owner together with the vehicle when the vehicle is purchased. The registration key 8a may be understood as an accessory of the vehicle. The registration key 8a may be referred to as a smart key, a vehicle portable device, a key fob, a key card, an access key, or the like. The registration key 8a may be understood as a smart key linked to the vehicle.

[0016] Key data such as a key ID and a key code are registered in the non-volatile memory of the registration key 8a. A smart key linked to a vehicle may be understood as a smart key whose key data is registered in the smart ECU 2. In the present disclosure, for a given smart key, the vehicle linked to the smart key is also referred to as a target vehicle. Registration of key data in the smart ECU 2 may be performed at a dealer shop / factory using a predetermined registration tool.

[0017] The registration key 8a is configured to be capable of wireless communication with the smart ECU 2 via a predetermined first communication method. The first communication method may be a combined LF-UHF method. The combined LF-UHF method is a method for performing two-way communication using both LF (Low Frequency) band radio waves such as 125 kHz and 134 kHz, and UHF (Ultra High Frequency) band radio waves such as 315 MHz and 920 MHz. For example, the combined LF-UHF method may be a method that uses LF band radio waves for signal transmission from the in-vehicle system 1 to the registration key 8a, and uses UHF band radio waves for signal transmission from the registration key 8a to the in-vehicle system 1. A UHF band signal transmitted by the registration key 8a may be referred to as an RF signal. In the present disclosure, wireless communication based on the combined LF-UHF method is also referred to as smart communication. Of course, the first communication method may be other methods. From the viewpoint of user convenience, the first communication method may be a communication method with a communication distance of 0.5 m or more. Further, from the viewpoint of crime prevention, the first communication method may be a communication method with an effective communication distance of less than 20 m and a maximum communication distance of 100 m.

[0018] Furthermore, the registration key 8a and the smart ECU 2 are configured to enable wireless communication with the smart ECU 2 even using a second communication method, which has a shorter communication range than the first communication method. For example, the second communication method may be transponder communication. Transponder communication refers to wireless communication in which a transponder is driven using the received power of electromagnetic waves emitted from a transmitter and responds to signals received from the transmitter. Transponder communication is wireless communication that utilizes electromagnetic field coupling between a transponder and a transmitter. Transponder communication may be understood as a type of Near Field Communication (NFC).

[0019] The Smart ECU2 performs wireless authentication with the registered key 8a, allowing it to control functions such as unlocking / locking the doors and turning the vehicle power on / off without requiring user operation of the registered key 8a. The vehicle power is the power source that is turned on when the vehicle is running. The vehicle power may be the ignition power or the system main relay. Wireless authentication is performed using key data. Such a function / system may also be called a Passive Entry / Passive Start (PEPS) function / system. In this embodiment, the registered key 8a does not necessarily need to be carried by the user and may be stored in a designated storage location outside the vehicle, such as at home or in the office.

[0020] Authentication by the Smart ECU2 refers to the process of verifying whether the communication partner is a device associated with the vehicle using key data (e.g., key code). Successful authentication corresponds to determining that the communication partner is a pre-registered smart key. Since the registered key 8a is associated with a user, the Smart ECU2's authentication of the communication partner indirectly corresponds to the authentication of the user, or in other words, to determining whether the person attempting to access the vehicle is a legitimate user. Thus, the authentication described in this disclosure can be understood as verifying whether the user / device is a user / device associated with the vehicle.

[0021] The control key 8b, like the registration key 8a, is a device capable of wireless communication with the smart ECU2 using the first and second communication methods. The control key 8b differs from the registration key 8a in that it is not linked to a vehicle. In other words, the control key 8b may be a smart key whose key data is not registered in the smart ECU2.

[0022] As described later, the control key 8b temporarily functions as a vehicle key using the key data of the registered key 8a received from the key management device 4. The control key 8b is stored in the vehicle for use. For example, the control key 8b may be stored in the key management device 4. Hereafter, when the registered key 8a and the control key 8b are not distinguished, they will simply be referred to as smart keys.

[0023] The portable device 9 is a portable and general-purpose information processing terminal. The portable device 9 may be a variety of communication terminals, such as a smartphone or a wearable device. Both the portable device 9 and the key management device 4 are configured to perform short-range communication. Here, short-range communication refers to communication compliant with a predetermined short-range wireless communication standard, where the actual communication range is 1m to 30m, and at most about 100m. Short-range communication may also be referred to as SRWC (Short Range Wireless Communication). In the following, the operation of each part will be explained using the case where short-range communication is wireless communication compliant with Bluetooth® Low Energy as an example.

[0024] <Regarding the operation of mobile devices> If the mobile device 9 is not in communication with the key management device 4, it transmits an advertisement signal at a predetermined transmission interval. The advertisement signal is a radio signal used to notify (i.e., advertise) its own presence to other devices. Based on receiving a connection request from the key management device 4, the mobile device 9 establishes a communication connection with the key management device 4.

[0025] The mobile device 9 has a digital key app installed, which is an application that allows the mobile device 9 to function as a vehicle key. Based on the establishment of a communication connection with the key management device 4, the digital key app communicates with the key management device 4 for authentication using the device key code. Authentication may be performed using a challenge-response method. As a step in the authentication communication, if the mobile device 9 receives a challenge code from the key management device 4, it may generate a response code using the device key code and send it back to the key management device 4. The device key code is a code that the key management device 4 uses to authenticate the mobile device 9. The device key code may be a fixed value set by, for example, the user / server. The device key code may also be a so-called disposable code (so-called one-time passcode) that is discarded after one use.

[0026] Furthermore, the digital key app may display a vehicle operation screen on the mobile device 9's display once a communication connection with the key management device 4 has been established. The vehicle operation screen includes software keys related to checking the vehicle's status and remote operation, such as an unlock button and a lock button. These various software keys may be referred to as operation buttons. The digital key app responds to the user's selection operation on the operation buttons included in the vehicle operation screen by transmitting a short-range communication signal corresponding to the operation to the key management device 4.

[0027] Furthermore, the portable device 9 performs distance measurement communication based on a request from the key management device 4. Distance measurement communication is wireless communication for measuring the device distance, which is the distance from the vehicle to the portable device 9. The device distance may be calculated based on the time of flight of the radio signal, the received phase difference (the difference in received phase for each frequency), or the received signal strength. The device distance calculation function may be provided by the portable device 9 or by the key management device 4.

[0028] <Overview of the in-vehicle system> The in-vehicle system 1 comprises a smart ECU 2, a body ECU 3, a key management device 4, an in-vehicle network 5, a start switch 6, and a door switch 7. The smart ECU 2, body ECU 3, and key management device 4 are each connected to the in-vehicle network 5. The smart ECU 2 is connected to the start switch 6 by a communication cable. The key management device 4 is connected to the door switch 7 by a communication cable.

[0029] The in-vehicle network 5 is a communication network built within the vehicle. Various standards can be adopted for the in-vehicle network 5, including Controller Area Network (CAN), Ethernet (registered trademark), and FlexRay (registered trademark). The smart ECU 2, body ECU 3, and key management device 4 are configured to communicate with each other via the in-vehicle network 5.

[0030] The connection configurations between the devices in this disclosure are examples and may be modified as appropriate. The key management device 4 does not need to be connected to the in-vehicle network 5. The key management device 4 may be configured to be unable to communicate with the smart ECU 2 and the body ECU 3.

[0031] The Smart ECU2 is an ECU that provides PEPS functionality. Specifically, the Smart ECU2 communicates with the smart key for authentication and, based on successful authentication, executes controls corresponding to user operations on the vehicle. These user operations include unlocking and locking the vehicle, and turning on the vehicle power. The Smart ECU2 acts as the authentication device. As shown in Figure 2, the Smart ECU2 comprises an LF transmitter 21, a UHF receiver 22, and a smart control unit 23.

[0032] The LF transmitter 21 is a device that transmits an LF signal corresponding to the baseband signal input from the smart control unit 23. An LF signal is a radio signal of a predetermined frequency belonging to the LF band. For example, the LF transmitter 21 transmits a challenge signal based on the input signal from the smart control unit 23. The challenge signal is a signal that includes a challenge code for authentication. The LF transmitter 21 includes a circuit that performs predetermined signal processing such as frequency conversion and modulation, and an LF antenna. The LF antenna is an antenna for transmitting LF signals. The LF antenna may be placed in multiple locations on the vehicle, such as on each door handle and the instrument panel.

[0033] The UHF receiver 22 is a communication module for receiving UHF signals transmitted from the smart key. The UHF signal is a radio signal of a predetermined frequency belonging to the UHF band. The UHF receiver 22 includes an antenna for receiving UHF signals, a demodulation circuit, an amplification circuit, a frequency conversion circuit, etc. The UHF receiver 22 outputs data corresponding to the received signal to the smart control unit 23.

[0034] The smart control unit 23 is a circuit module that performs processing for authenticating the smart key using the LF transmitter 21 and the UHF receiver 22. The smart control unit 23 comprises a processor 231, memory 232, and storage 233. The processor 231 may be a CPU (Central Processing Unit). The memory 232 is a volatile storage medium such as RAM (Random Access Memory). The storage 233 includes a non-volatile storage medium such as flash memory. The key data of the registered key 8a is stored in the storage 233.

[0035] Key data includes the key ID, key code, and TP-ID. The key ID is the identification number of the smart key. The key code is the code used for wireless authentication via smart communication. Wireless authentication refers to authentication via wireless communication. The key code corresponds to the key information used for authentication using the first communication method. The TP-ID corresponds to the code that functions as the key code in wireless authentication via transponder communication. The TP-ID corresponds to the key information used for authentication using the second communication method.

[0036] The smart control unit 23 searches for the smart key by periodically transmitting a predetermined response request signal (a so-called wake signal) from multiple LF antennas located in the vehicle. When the smart control unit 23 receives a response from the smart key, it attempts to authenticate the smart key using the first communication method. Specifically, it transmits a challenge signal from the LF antenna and generates a verification code using the transmitted challenge code and the key code of the registered key 8a. It then compares the response code returned from the smart key with the verification code. The verification code can be understood as a code for verifying the legitimacy of the communication partner.

[0037] The procedure for generating the verification code in the smart control unit 23 is the same as the procedure for generating the response code in the smart key. Therefore, if the communication partner for the smart ECU2 is truly the registered key 8a, the two codes should match. The smart ECU2 determines that authentication is successful if the received response code matches the verification code. On the other hand, the smart ECU2 determines that authentication is unsuccessful if the response code received from the communication partner does not match the verification code. The smart ECU2 may also determine that authentication is unsuccessful if it does not receive a response code even after a predetermined response waiting time has elapsed since sending the challenge code. The specific method of wireless authentication may be changed as appropriate. Wireless authentication may also involve the smart ECU2 determining whether the code decrypted using a predetermined decryption key matches the challenge code.

[0038] Based on its determination of successful authentication, the Smart ECU 2 works in cooperation with the Body ECU 3 to perform actions such as unlocking / locking the vehicle. In addition, the Smart Control Unit 23 performs wireless authentication with the smart key using the vehicle-side TPM 61. As described later, the vehicle-side TPM 61 is a module for performing transponder communication. Wireless authentication with the smart key using the vehicle-side TPM 61 supports authentication using the second communication method.

[0039] The Body ECU3 is an ECU that controls body actuators such as door lock motors, power sliding door motors, and window motors. The Body ECU3 performs door unlocking / locking based on requests from the Smart ECU2. The Body ECU3 may also be configured to perform actions such as opening and closing windows or turning off hazard lights based on requests from the Smart ECU2.

[0040] The key management device 4 includes a storage section 41 for housing control keys 8b, and is a device that controls the operating state (enabled / disabled) of the control keys 8b stored in the storage section 41. In addition to the storage section 41, the key management device 4 includes a short-range communication module 42, a communication interface 43, and a control unit 44. The storage section 41 is configured to house the control keys 8b. Storage can be rephrased as storage. Details of the storage section 41 will be described separately. The key management device 4 may be installed in any location inside the vehicle, such as in the glove box, under the seat, or in the trunk.

[0041] The short-range communication module 42 is a wireless communication module for performing short-range communication with the mobile device 9. The short-range communication module 42 may include an antenna for short-range communication, a signal processing chip, a microcomputer, etc. The short-range communication module 42 outputs received data to the control unit 44 and transmits data input from the control unit 44 to the mobile device 9. The short-range communication module 42 intermittently scans to search for the mobile device 9. If the short-range communication module 42 finds the mobile device 9 through the scan, it establishes a communication connection with the mobile device 9. The state in which the short-range communication module 42 is communicating with the mobile device 9 corresponds to the state in which the key management device 4 / control unit 44 is communicating with the mobile device 9.

[0042] The short-range communication module 42 may output to the control unit 44 data indicating the received signal strength from the mobile device 9, in addition to the data transmitted from the mobile device 9. Furthermore, the short-range communication module 42 performs distance measurement communication with the mobile device 9. The distance measurement communication may be communication for measuring round trip time (RTT). RTT corresponds to the time from when the short-range communication module 42 transmits a predetermined radio signal requesting a response to the mobile device 9 until it receives a response signal from the mobile device 9. RTT may be understood as the round-trip flight time of the radio signal. The distance measurement communication may include transmitting a response request signal to the mobile device 9 and receiving a response signal from the mobile device 9. Note that the entity measuring RTT (and thus distance), in other words, the device that transmits the response request signal for distance measurement, may be the mobile device 9. The arrangement of functions related to distance measurement may be changed as appropriate. If the mobile device 9 is the initiator of the distance measurement communication, the mobile device 9 may transmit the distance measurement result to the short-range communication module 42.

[0043] When the short-range communication module 42 performs distance measurement communication with the mobile device 9, it outputs data indicating the result of the distance measurement communication to the control unit 44. The result of the distance measurement communication may be the device distance value (i.e., the distance measurement value), or data for identifying the distance measurement value. The data for identifying the distance measurement value may be the round-trip flight time, the received phase for each communication frequency (channel), etc. The data for identifying the distance measurement value may also be the received signal strength. The short-range communication module 42 may also perform distance measurement communication based on instructions from the control unit 44 / mobile device 9. The short-range communication module 42 may be configured to perform distance measurement communication automatically and periodically while communicating with the mobile device 9.

[0044] The short-range communication module 42 remains operational using the vehicle's battery power even when the vehicle's power supply is turned off. The short-range communication module 42 remains in standby mode, either continuously or intermittently, using the power supplied from the vehicle's battery, even when the vehicle is parked. The short-range communication module 42 may be located outside the enclosure housing the control unit 44, such as on the vehicle's ceiling, B-pillar, or door handle. The key management device 4 may be implemented by dividing it into multiple modules.

[0045] The communication interface 43 is a circuit module for the control unit 44 to communicate with sensors and devices mounted on the vehicle. The communication interface 43 may include a PHY chip and cable connectors that comply with the communication standards of the in-vehicle network 5. The communication interface 43 also includes a circuit for receiving signals from the door switch 7.

[0046] The control unit 44 includes a processor 45, memory 46, and storage 47. The processor 45 may be a CPU. The memory 46 is a volatile storage medium (e.g., RAM). The storage 47 includes a non-volatile storage medium such as flash memory. Similar to the smart ECU 2, the storage 47 stores the key data of the registration key 8a. The method for registering the key data of the registration key 8a to the storage 47 will be described separately. The storage 47 also stores information for authenticating the portable device 9 (e.g., a device key code).

[0047] Furthermore, storage 47 stores a key control program, which is a program for controlling the operating state of the control key 8b stored in the storage unit 41. The key control program is a program that includes instructions for the computer to function as a control unit 44. The key control program is executed by the processor 45. When the processor 45 executes the key control program, it is equivalent to executing the key control method corresponding to the key control program.

[0048] The control unit 44 may maintain a state in which it can perform processing using the power of the onboard battery even when the vehicle power is off. If the key management device 4 and the mobile device 9 are in communication, the control unit 44 may periodically cause the short-range communication module 42 to perform distance measurement communication with the mobile device 9. Other functions and details of operation of the control unit 44 will be described separately.

[0049] The start switch 6 is a push switch used by the user to switch the vehicle's power on / off. The start switch 6 may also be called a power switch. When pressed by the user, the start switch 6 outputs an ON signal to the smart ECU 2. The vehicle-side TPM 61 is located near the start switch 6 (for example, on the back side).

[0050] The vehicle-side TPM 61 is a transponder module (TPM) mounted in the vehicle. In this disclosure, a transponder module means a communication module for performing transponder communication. The vehicle-side TPM 61 includes an antenna coil for communication. The vehicle-side TPM 61 forms an electromagnetic field in response to an input signal from the smart ECU 2 and outputs data corresponding to the received signal to the smart ECU 2. The vehicle-side TPM 61 operates based on instructions from the smart ECU 2 and attempts to communicate data with the smart key, for example, by sending and receiving a challenge code and a response code. When communicating with the smart key, the vehicle-side TPM 61 acts as the terminal requesting the return of data, i.e., the reader / active device.

[0051] The door switch 7 is a switch located on the exterior door handle or trunk door handle, etc., to accept user unlocking / locking operations. The door switch 7 may be a push-button switch or a touch sensor. The door switch 7 may also be an aftermarket addition. When the door switch 7 is pressed / touched by the user, it outputs an ON signal to the key management device 4. When the door switch 7 is not pressed / touched by the user, it outputs an OFF signal to the key management device 4. The door switch 7 may also be configured to output a signal to the smart ECU 2 indicating whether or not it is pressed / touched by the user. Note that the door switch 7 is an optional element and may be omitted.

[0052] <Regarding the structure of the registration key> As shown in Figure 3, the registration key 8a comprises an LF receiver 81, a UHF transmitter 82, a key-side TPM 83, an operation button 84, a power supply circuit 85, a communication connector 86, and a controller 87.

[0053] The LF receiver 81 is configured to receive LF signals transmitted from the in-vehicle system 1. The LF receiver 81 includes an antenna for receiving LF signals, a demodulation circuit, and a frequency conversion circuit. The LF receiver 81 outputs data corresponding to the LF signal received by the antenna to the controller 87.

[0054] Generally, smart keys have two operating modes: an active mode and a sleep mode. Active mode is when the controller 87, etc., is activated and bidirectional communication with the smart ECU 2 is possible. Sleep mode is a mode that suppresses power consumption by limiting the functions that can be executed compared to active mode. Sleep mode may be a state in which power supply to all parts except the LF receiver 81 is stopped. Sleep mode may be a state in which the smart key is waiting to receive an LF radio wave. The LF receiver 81 transitions the smart key from sleep mode to active mode based on the reception of an LF signal (e.g., a wake signal) with an intensity above a predetermined threshold. The smart key may also transition from sleep mode to active mode when the operation button 84 is operated.

[0055] The UHF transmitter 82 is a communication module that includes an antenna and modulation circuit for transmitting UHF signals. The UHF transmitter 82 transmits a UHF signal corresponding to the data input from the controller 87.

[0056] The key-side TPM83 is the transponder module included in the registered key 8a. The key-side TPM83 includes an antenna coil and an IC (Integrated Circuit) chip. The IC chip included in the key-side TPM83 is configured to send back a signal corresponding to the received signal and includes a CPU and a ROM (Read Only Memory) in which the TP-ID is registered. The TP-ID is written to the IC chip for transponder communication, and its value differs for each IC chip. Therefore, the TP-ID used by the registered key 8a for authentication in transponder communication is different from the TP-ID used by the control key 8b for authentication in transponder communication.

[0057] When the key-side TPM 83 receives a challenge code transmitted from the vehicle-side TPM 61, it generates a response code based on the challenge code and TP-ID and sends it back. In this way, the registered key 8a is configured to perform wireless communication for authentication with the in-vehicle system 1 via transponder communication. The function unit related to generating a response signal to a received signal may be integrated with the controller 87.

[0058] The operation buttons 84 are configured to accept user input on the registration key 8a. The operation buttons 84 may be push switches. The registration key 8a may have a lock button for locking the vehicle doors and an unlock button for unlocking the vehicle doors as operation buttons 84. When each operation button 84 is pressed by the user, it outputs an ON signal to the controller 87. The ON signal may be a signal with a voltage level corresponding to low (0).

[0059] The power supply circuit 85 is a circuit that converts the voltage supplied from the battery 200 into a voltage suitable for the operation of the controller 87, UHF transmitter 82, LF receiver 81, etc. The power supply circuit 85 supplies the converted voltage to each part. The power supply circuit 85 includes a positive terminal 851 and a negative terminal 852. The positive terminal 851 is a terminal for electrically connecting to the positive terminal of the battery 200. The negative terminal 852 is a terminal for electrically connecting to the negative terminal of the battery 200. Inside the housing of the registration key 8a, there is a battery compartment where the battery 200 is set. The shape of the battery compartment is suitable for the shape (model number) of the battery 200. The battery 200 may be a small battery, such as a coin cell or button cell.

[0060] The communication connector 86 is a connector to which a communication cable C1 for communication with the key management device 4 is connected. The communication connector 86 is connected to the input and output terminals of the IC chip acting as the controller 87. The communication connector 86 and the communication cable C1 are configured for data communication between the controller 87 and the key management device 4. The communication method between the controller 87 and the key management device 4 may be SPI (Serial Peripheral Interface), I2C (Inter-Integrated Circuit), or UART (Universal Asynchronous Receiver Transmitter), etc.

[0061] Note that the communication connector 86 is an optional element and may be omitted. The signal lines of the communication cable C1 may be directly soldered to specific input / output terminals on the controller 87b or to wiring patterns connected thereto. The registration key 8a may be configured to communicate wirelessly with the key management device 4. The wireless communication method may be transponder communication or other NFC methods. The key management device 4 may include a wireless communication module, such as a TPM, that supports the NFC function of the registration key 8a.

[0062] The controller 87 comprises a CPU 871, RAM 872, and ROM 873. The controller 87 may be mounted on a circuit board as an IC chip. The controller 87 has multiple input terminals and multiple output terminals, such as an unlocking input terminal that receives an ON signal from the unlocking button and a locking input terminal that receives an ON signal from the locking button.

[0063] The ROM 873 of the registered key 8a contains the key ID, key code, other data, and the encryption key for wired communication. The "other data" registered in the smart key's ROM includes the vehicle ID, which is an identification number for the target vehicle, and the key number for the target vehicle. The key number corresponds to the registration number of the smart key associated with the target vehicle. The encryption key for wired communication is the code used for encrypted communication with the key management device 4.

[0064] The key ID, key code, and encryption key for wired communication may be registered in ROM873 at the factory during the smart key's manufacture. Other data, such as the vehicle identification number and key number, may be registered based on data obtained from the smart ECU2 when the smart key is registered with the smart ECU2. The TP-ID assigned to the key-side TPM83 may also be registered in ROM873. The controller 87 loads the key data stored in ROM873 into RAM872 based on the key's operating state transitioning from sleep mode to active mode.

[0065] Based on the challenge code input from the LF receiver 81, the controller 87 generates a response code using the key code and other data stored in the RAM 872 and outputs it to the UHF transmitter 82. The controller 87 also generates a UHF command signal corresponding to the operation button 84 pressed by the user and, in cooperation with the UHF transmitter 82, wirelessly transmits it to the smart ECU 2.

[0066] UHF command signals are UHF signals used for remotely controlling a vehicle. These include unlock commands and lock commands. An unlock command is a UHF command signal that instructs the vehicle to unlock. A lock command is a UHF command signal that instructs the vehicle to lock.

[0067] Various UHF command signals are generated using data indicating the correspondence between the vehicle and the smart key, i.e., some or all of the key data, so that vehicles other than the target vehicle (i.e., other vehicles) do not react. For example, the unlock command may be a data signal in which a predetermined command code instructing unlocking is encrypted with the key code. In this embodiment, a low-level (0) signal functions as an ON signal. The controller 87 can transmit an unlock command signal based on the input voltage of the unlocking input terminal becoming low level.

[0068] If the controller 87 of the registered key 8a is wired to the key management device 4, it transmits its own key data to the key management device 4 based on a request from the key management device 4. If the key management device 4 has a transponder communication function, the transmission of key data to the key management device 4 may be performed by transponder communication. The registered key 8a may be configured to operate on power supplied by the key management device 4. The registered key 8a may transition from sleep mode to active mode based on the input of a start signal from the key management device 4 via the communication cable C1.

[0069] <Control Key Configuration> As shown in Figure 4, the control key 8b has a configuration and function partially similar to that of the registration key 8a. Here, we will describe the differences between the registration key 8a and the control key 8b, that is, the configuration unique to the control key 8b. The control key 8b of this disclosure may be a modified version of the smart key usable as the registration key 8a, with some changes to its configuration and software. To distinguish it from the controller 87 of the registration key 8a, the controller 87 of the control key 8b will hereafter also be referred to as controller 87b.

[0070] In this embodiment, the control key 8b is used in connection with the key management device 4 via the communication cable C1. The components of the control key 8b related to communication with the key management device 4, such as the communication connector 86, correspond to the key-side communication unit.

[0071] Furthermore, the control key 8b in this embodiment is configured to be powered by power supplied from the key management device 4 instead of the battery 200. For example, the control key 8b includes a power connector 88 connected to the power cable C2. The power connector 88 may be located in the space of the battery housing. The power circuit 85 of the control key 8b may be configured to generate the operating voltage of each component based on the power supplied via the power connector 88 and the power cable C2. The power connector 88 may be a battery-type adapter located in the battery housing of the control key 8b. The battery-type adapter has an electrical configuration that converts the terminals of the power cable C2 into the shape of a battery 200. The battery-type adapter here has the same shape as the battery 200 and has conductive members corresponding to the positive and negative terminals of the battery 200, respectively. The battery-type adapter corresponds to a dummy battery in which the positive and negative terminals are not short-circuited.

[0072] In another configuration, the signal lines of the power cable C2 may be directly connected to the positive terminal 851 and the negative terminal 852 using solder or the like. From a different perspective, the control key 8b may be configured to include a power cable C2 extending from the power circuit 85 to the outside of the housing. The power circuit 85 of the control key 8b, or the configuration in which the battery-type adapter located in the battery housing is combined with the power circuit 85, corresponds to a power receiving unit that receives power from the key management device 4.

[0073] The power connector 88 is an optional element and may be omitted. The power cable C2 may be a pseudo-battery cable having an end that mimics the shape of a battery 200. The pseudo-battery cable may be understood as a cable in which the cable and the battery-type adapter are integrated. If the power cable C2 is a pseudo-battery cable, there is no need to place the power connector 88 on the control key 8b itself. If the power cable C2 is a pseudo-battery cable, the configuration around the power circuit 85 on the control key 8b may be the same as that of the registration key 8a.

[0074] Furthermore, the power supply circuit 85 for the control key 8b may also be a wireless power receiving circuit. A configuration in which the control key 8b is powered wirelessly simplifies the configuration of the housing 41. Additionally, the power connector 88 and the communication connector 86 may be integrated. For example, the control key 8b may have a connector that fits a cable capable of both data communication and power supply, such as a USB Type-C connector.

[0075] The key ID and key code registered in the ROM 873 of control key 8b are not used for actual wireless authentication, as explained below. Therefore, the key ID and key code registered in the ROM 873 of control key 8b may be any value (e.g., 0x00). The area where other data is stored may also contain a value equivalent to blank space.

[0076] When the controller 87b is connected to the key management device 4 via the communication cable C1, it receives authentication data from the key management device 4 and stores the authentication data in the RAM 872. Here, the authentication data refers to the data necessary for the control key 8b to function as a registered key 8a. The authentication data may be part or all of the key data of the registered key 8a. In this embodiment, the authentication data includes the key ID, key code, and other data of the registered key 8a. The authentication data corresponds to key information.

[0077] The controller 87b is programmed to operate according to the procedure shown in Figure 5. Specifically, the controller 87 transitions to active mode (S12) based on the commencement of power supply from the key management device 4 (S11). Upon returning to active mode, the controller 87 reads the key data of the control key 8b, which is temporarily stored in the ROM 873, and saves it to the RAM 872 as part of the startup process (S13). When the controller 87b receives the key ID, key code, and other data of the registered key 8a as authentication data from the key management device 4 (S14), it rewrites the RAM 872 (S15). Specifically, the controller 87b replaces its own key ID, key code, and other data read into the RAM 872 with the key ID, key code, and other data received from the key management device 4. Subsequently, if the controller 87b receives a challenge code via the LF receiver 81, it generates a response code using the key code of the registration key 8a stored in the RAM 872 and sends it back to the vehicle using the UHF transmitter 82.

[0078] Furthermore, when a request to transmit a predetermined UHF command signal is received from the key management device 4 via the communication cable C1, the control key 8b transmits the requested UHF command signal. Note that the vehicle will not respond to UHF command signals generated using the key data registered in the ROM 873 of the control key 8b. The control key 8b is configured to generate UHF command signals for the vehicle using the key ID, etc. (i.e., authentication data) of the registered key 8a stored in the RAM 872.

[0079] In this way, the control key 8b behaves like the registration key 8a by using authentication data received from the key management device 4. The controller 87b is configured so that the received data cannot be stored in a non-volatile storage medium such as the ROM 873.

[0080] The initial state of the control key 8b when power is supplied via the power cable C2 may be sleep mode. The control key 8b may transition to active mode when a start signal is input from the key management device 4 while it is connected to the key management device 4 via the power cable C2 and the communication cable C1. Of course, the control key 8b may also automatically enter active mode when power is supplied. The control key 8b may maintain active mode while power is supplied via the power cable C2. The other configurations of the control key 8b may be the same as those of the registration key 8a.

[0081] <Regarding the composition of the storage area> The storage section 41 may be a drawer provided in the key management device 4. The storage section 41 may also be a recess provided in the housing of the key management device 4. The storage section 41 may be provided with a door equipped with a physical locking mechanism to prevent the theft of the control key 8b. The storage section 41 may be configured to allow the control key 8b to be removed from the key management device 4. As shown in Figure 6, the storage section 41 includes a key communication unit 411, a power supply unit 412, a holding unit 413, and a push actuator 414.

[0082] The key communication unit 411 is configured to communicate with the smart key. During key registration, the key communication unit 411 is connected to the registration key 8a via the communication cable C1. After key registration is complete, the key communication unit 411 is connected to the control key 8b. The key communication unit 411 transmits data input from the control unit 44 to the connected device. The key communication unit 411 also transmits data received from the connected device to the control unit 44.

[0083] The power supply unit 412 is a circuit for supplying power to the control key 8b. The power supply unit 412 is connected to the power supply circuit 85 of the control key 8b via the power cable C2. If the control key 8b is configured to receive power wirelessly, the power supply unit 412 may be configured for wireless power supply, such as a wireless power transmission circuit. The power supply unit 412 starts supplying power to the control key 8b based on instructions from the control unit 44. The power supply unit 412 also stops supplying power to the control key 8b based on instructions from the control unit 44. The retaining unit 413 is configured for fixing the control key 8b in the housing unit 41. The retaining unit 413 may be a protrusion / wall etc. arranged to surround the control key 8b. The retaining unit 413 may be configured so that the control key 8b can be attached to and detached from it.

[0084] The push actuator 414 is an actuator for physically pressing the operation button 84 of the control key 8b. The push actuator 414 may be a solenoid actuator or a motor. Multiple push actuators 414 may be arranged to correspond to the operation buttons 84 of the control key 8b. The push actuators 414 are arranged to face each of the multiple operation buttons 84. The push actuator 414 is driven based on instructions from the control unit 44 to press the operation button 84. The push actuator 414 is an example of a configuration in which the key management device 4 transmits a UHF command signal to the control key 8b.

[0085] The push actuator 414 is an optional element and may be omitted. The controller 87b may be configured to transmit a UHF command signal corresponding to an input signal based on the input of a predetermined signal from the key management device 4. The unlocking input terminal and the locking input terminal of the control key 8b may also be connected to the ground line via a switching element such as a transistor. The on / off state of the switching element may be controlled directly or indirectly by the control unit 44. The control key 8b can transmit an unlock command signal in conjunction with the on / off state of the switching element connected to the unlocking / locking input terminals.

[0086] <About the key data registration process> This section describes the process of registering the key data of registration key 8a to the key management device 4, using Figure 7. As a prerequisite, the key management device 4 and registration key 8a are wired together using communication cable C1, and the mobile device 9 and key management device 4 are wirelessly connected via short-range communication. Furthermore, it is assumed that the key management device 4 and mobile device 9 have been paired and bonded in advance. In the following description, "mobile device 9" may be read as "digital key application" or "processor running the digital key application."

[0087] The mobile device 9 displays a key registration screen based on the user's screen operation (S01). The key registration screen may be displayed when the mobile device 9 detects, based on the touch panel signal, that the registration start button on a predetermined screen has been selected. The key registration screen may be a screen indicating that the registration process is underway. The key registration screen may also indicate that the connection status between the key management device 4 and the registration key 8a needs to be maintained, or it may be a screen that shows the progress.

[0088] When the key registration screen is displayed, the mobile device 9 sends a key registration request to the key management device 4 via short-range communication (S02). The key registration request may be a signal instructing the key management device 4 to acquire key data from the registration key 8a.

[0089] When the key management device 4 receives a key registration request, it sends a data request to the registration key 8a (S03). The data request is a signal requesting the transmission of key data. If the registration key 8a is configured to operate using power supplied from the key management device 4, there may be a step to supply power to the registration key 8a and activate the registration key 8a before sending the key registration request.

[0090] Based on the receipt of the key request, the registration key 8a sends the key data back to the key management device 4 (S04). The key data may be transmitted and received encrypted with an encryption key for wired communication. The encryption key for wired communication associated with the registration key may also be registered in the key management device 4.

[0091] When the key management device 4 receives key data, it saves the received key data to the storage 47 (S05). Subsequently, the key management device 4 sends a registration completion notification to the mobile device 9 (S06). Based on the receipt of the registration completion notification, the mobile device 9 displays a registration completion screen (S07).

[0092] With the above steps completed, the registration of key data to the key management device 4 is finished. The above registration sequence may be performed in parallel (simultaneously) with the smart key registration process to the smart ECU 2 at a dealer shop or similar location. Alternatively, the above registration sequence may be performed by the user at home or elsewhere.

[0093] The method of communication between the key management device 4 and the registered key 8a is not limited to wired communication. If the key management device 4 is equipped with a transponder communication function, the key management device 4 may be configured to receive key data from the registered key 8a via transponder communication.

[0094] <Example of operation when unlocked> Here, the operation of each device when a user unlocks the vehicle from outside the vehicle using a portable device 9 will be explained with reference to Figure 8. As a prerequisite, the user carrying the portable device 9 is sufficiently far away from the vehicle, and the portable device 9 and the key management device 4 are not in communication connection. Also, the key data of the registered key 8a is registered in the key management device 4, and the control key 8b is set in the housing unit 41. The state in which the control key 8b is set in the housing unit 41 means that the power cable C2 and the communication cable C1 are connected to the control key 8b.

[0095] When a user possessing the mobile device 9 approaches the vehicle, the key management device 4 establishes a communication connection with the mobile device 9 (S101). Specifically, the key management device 4 establishes a communication connection with the mobile device 9 based on receiving an advertisement signal emitted from the mobile device 9 through scanning.

[0096] Based on the communication connection established with the portable device 9, the key management device 4 sets the power of the control key 8b to ON and activates it (S102). Setting the power of the control key 8b to ON may include not only starting to supply power to the control key 8b but also sending an activation signal to the control key 8b.

[0097] The control key 8b performs a startup process based on the power being turned on (S103). The startup process includes loading the control key 8b's own key data, stored in ROM 873, into RAM 872. Once the startup is complete, the control key 8b may output a signal to the key management device 4 indicating that the startup is complete.

[0098] Based on the fact that the power of the control key 8b was turned on in step S102, the key management device 4 transmits part or all of the key data of the registered key 8a to the control key 8b as authentication data (S104). The transmission of the authentication data may be performed after a predetermined time has elapsed since the power was turned on. The key management device 4 may also transmit the authentication data based on the fact that it has received a startup completion notification signal from the control key 8b.

[0099] When authentication data is input from the key management device 4, the control key 8b saves the input authentication data to the RAM 872 (S105). For example, the control key 8b overwrites its own key code, etc., stored in the RAM 872 with the authentication data received from the key management device 4. When the saving of the authentication data to the RAM 872 is complete, the control key 8b may output a rewrite completion signal to the key management device 4 to indicate that the saving is complete.

[0100] Based on the fact that authentication data has been sent to the control key 8b or that a rewrite completion signal has been received in step S104, the key management device 4 sends a ready notification to the portable device 9 (S106). The ready notification may be a signal indicating that the activation of the control key 8b has been completed. Activating the control key 8b means setting the power of the control key 8b to ON and saving the authentication data to the RAM 872 of the control key 8b. The ready notification may be rephrased as an activation notification. Note that sending the ready notification (S106) is an optional element and may be omitted.

[0101] Based on receiving a ready notification, the mobile device 9 activates the operation buttons on the vehicle operation screen (S107). The vehicle operation screen may include, as a software key, an unlock button for unlocking, a lock button for locking, a headlight button for switching the headlights on and off, a hazard light button for switching the hazard lights on and off, etc. The digital key app may display the operation buttons in a grayed-out state if they are disabled. The mobile device 9 may change the display of the operation buttons in conjunction with the state (enabled / disabled) of the control key 8b. This configuration makes it easier for the user to recognize the operating status of the system. Note that changing the display of the operation buttons on the mobile device 9 in conjunction with the state of the control key 8b is an optional element and may be omitted.

[0102] When the mobile device 9 detects that the unlock button on the screen has been pressed by the user, it sends an unlock request to the key management device 4 (S108). The unlock request is a short-range communication signal that requests the key management device 4 to perform the control necessary for unlocking.

[0103] When the key management device 4 receives an unlock request, it executes control for unlocking (S109). For example, based on the receipt of the unlock request, the key management device 4 outputs a request to send an unlock command to the control key 8b. A request to send an unlock command is a signal that instructs the controller 87b to send an unlock command. The request to send an unlock command may be a signal that electrically / mechanically inputs an ON signal to the unlocking input terminal of the controller 87b. For example, the request to send an unlock command may be a signal that sets a switching element connected to the unlocking terminal to ON.

[0104] Furthermore, when the key management device 4 receives an unlock request from the mobile device 9, it may physically press the unlock button on the control key 8b by operating the push actuator 414 corresponding to the unlock button on the control key 8b. This operation also allows the key management device 4 to cause the control key 8b to send an unlock command. In other words, the control for unlocking may be performed by operating the push actuator 414 corresponding to the unlock button.

[0105] Based on the input of an unlock command transmission request from the key management device 4, the control key 8b transmits an unlock command (S110). The control key 8b generates an unlock command using the key data stored in RAM 872, in other words, some or all of the key data of the registered key 8a, and transmits it wirelessly. When the smart ECU 2 receives the unlock command, it works in cooperation with the body ECU 3 to unlock the vehicle (S111).

[0106] As an example, the key management device 4 activates the control key 8b when it establishes a communication connection with the mobile device 9. However, the conditions for activating the control key 8b are not limited to this. The key management device 4 may also be configured to activate the control key 8b when it is in communication with the mobile device 9 and the distance measurement value identified by the distance measurement communication is less than a predetermined value.

[0107] Figure 9 is a flowchart showing an example of the operation of the key management device 4 corresponding to the above technical concept. When the key management device 4 establishes a communication connection with the mobile device 9 (S21), it periodically performs distance measurement communication with the mobile device 9 (S22). Then, if the distance measurement value obtained as a result of the distance measurement communication is less than a predetermined activation threshold (S23 YES), it activates the control key 8b (S24). In step S13 of Figure 9, "D" represents the distance measurement value, and "Th0" represents the activation threshold. The activation threshold may be set to a value corresponding to 5m, 8m, or 10m.

[0108] According to the above configuration, if the measured distance value is above a threshold, the power to the control key 8b is not turned on. Therefore, the risk of the control key 8b being activated when the user is away from the vehicle is reduced. In addition, since the scenarios in which the control key 8b is activated are limited, it is expected that power consumption will be reduced and security will be enhanced. The first state, which is the state for turning on the power to the control key 8b, may be a state in which communication is established with the mobile device 9, or a state in which communication is established with the mobile device 9 and the measured distance value is below a predetermined value.

[0109] In addition, the key management device 4 may be configured to activate the control key 8b on the condition that it is in communication with the mobile device 9 and the signal strength received from the mobile device 9 is above a predetermined value. The key management device 4 may be configured not to activate the control key 8b if the signal strength received from the mobile device 9 is below a predetermined value. The first state may be a state in which the key management device 4 is in communication with the mobile device 9 and the signal strength received from the mobile device 9 is above a predetermined value.

[0110] The condition for activating the control key 8b can also be rephrased as the condition for determining that the portable device 9 is present in the vicinity of the vehicle. The key management device 4 may determine that the portable device 9 is present in the vicinity of the vehicle using at least one of the following: the status of the communication connection with the portable device 9, the distance measurement value, and the received signal strength. The key management device 4 may be configured to activate the control key 8b based on the determination that the portable device 9 is present in the vicinity of the vehicle.

[0111] <Other examples of operations related to unlocking> If the door switch 7 is connected to the key management device 4, the key management device 4 may be configured to perform unlocking control based on the input of an ON signal from the door switch 7. Figure 10 is a sequence diagram showing the operation of each device when the vehicle is unlocked in response to user operation on the door switch 7.

[0112] Steps S101 to S105 shown in Figure 10 are the same as steps S101 to S105 shown in Figure 8. Steps S101 to S105 correspond to the sequence in which the key management device 4 activates the control key 8b (hereinafter referred to as the activation sequence). When the key management device 4 receives an ON signal from the door switch 7 while the control key 8b is activated (S120), it outputs a request to send an unlock command to the control key 8b (S121). Based on the input of the request to send an unlock command, the control key 8b wirelessly transmits an unlock command (S122). Based on the reception of the unlock command, the smart ECU 2 works in cooperation with the body ECU 3 to unlock the vehicle (S123).

[0113] With the above configuration, the user can unlock the vehicle without operating the portable device 9. The key management device 4 may perform different controls in response to the ON signal from the door switch 7 depending on the state of the vehicle. For example, if the vehicle is locked, the key management device 4 may perform control to unlock the vehicle based on the ON signal from the door switch 7, while if the vehicle is unlocked, it may perform control to lock the vehicle based on the ON signal from the door switch 7.

[0114] The control for locking may be outputting a request to send a lock command to the control key 8b. Alternatively, the control for locking may be physically pressing the lock button by operating the push actuator 414 corresponding to the lock button on the control key 8b. The door handle may also be provided with separate door switches 7 for unlocking and door switches 7 for locking.

[0115] The above describes a pattern in which the key management device 4 performs unlock / lock control when an ON signal is input from the door switch 7 while the control key 8b is activated. However, the conditions for performing unlock / lock control are not limited to the above conditions.

[0116] The key management device 4 may be configured to perform unlock control on the condition that the distance measurement value identified by the distance measurement communication is less than a predetermined value. In other words, the key management device 4 may be configured not to perform unlock control even if an ON signal is input from the door switch 7 if the distance measurement value is greater than or equal to a predetermined value. The same applies to the conditions for performing lock control. In other words, the key management device 4 may be configured to require that the distance measurement value be within a specific range in order to perform predetermined control related to the use of the vehicle.

[0117] Figure 11 is a flowchart showing an example of the operation of the key management device 4 corresponding to the above technical concept. The flowchart shown in Figure 11 may be performed when the control key 8b is valid. When the control key 8b is valid and an ON signal is input from the door switch 7 (S31 YES), the key management device 4 performs distance measurement communication with the portable device 9 (S32). Step S32 may also be a step to read the result of the distance measurement communication performed immediately before. If the distance measurement value obtained as a result of step S32 is less than a predetermined unlocking threshold (S33), the key management device 4 performs control for unlocking (S34). In step S33 of Figure 11, "D" represents the distance measurement value, and "Th1" represents the unlocking threshold. The unlocking threshold may be set to a value corresponding to 2m, 4m, or 6m. The unlocking threshold may be set to a value smaller than the activation threshold in order to enhance security. Alternatively, the unlocking threshold may be set to the same value as the activation threshold.

[0118] According to the above configuration, if the measured distance value is greater than or equal to a predetermined value, even if the door switch 7 is pressed while the control key 8b is active, the control key 8b will not perform the control to unlock the vehicle. Therefore, the risk of the key management device 4 unlocking the vehicle when the portable device 9 (user) is not near the vehicle can be reduced.

[0119] In addition, the key management device 4 may be configured to perform unlocking control on the control key 8b if the signal strength received from the mobile device 9 is above a predetermined value. The key management device 4 may also be configured not to perform unlocking control even if an ON signal is input from the door switch 7 if the signal strength received from the mobile device 9 is below a predetermined value. The conditions for performing locking control may also include the signal strength received from the mobile device 9 being above a predetermined value.

[0120] Furthermore, the conditions for executing the lock control may be more relaxed than the conditions for executing the unlock control from a security standpoint. The conditions for executing the unlock control include the distance measurement value being less than a predetermined value or the received signal strength being greater than or equal to a predetermined value, whereas the conditions for executing the lock control do not necessarily include the distance measurement value or received signal strength being within a predetermined range.

[0121] <Example of operation when the vehicle power is on> This section describes the operation of each device in a scenario where a user boards a vehicle with a portable device 9 and turns on the vehicle's power. Figure 12 is a sequence diagram showing the operation of each device to turn on the vehicle's power in response to user operation on the start switch 6. As a prerequisite, the portable device 9 and the key management device 4 are already connected and the activation sequence (S101~S105) has been executed.

[0122] When the smart ECU2 receives an ON signal from the start switch 6 (S130), it causes the LF transmitter 21 to send a challenge code (S131). The LF antenna that sends the challenge code triggered by pressing the start switch 6 may be an LF antenna located inside the vehicle. Since the control key 8b is located inside the vehicle, it can receive the challenge code.

[0123] When control key 8b receives a challenge code, it generates a response code using the key code stored in RAM 872 and sends it back to smart ECU 2 (S131). The key code stored in RAM 872 of control key 8b is, as explained above, the key code of registration key 8a. In this way, control key 8b uses the authentication data received from key management device 4 to perform wireless communication for authentication with smart ECU 2 on behalf of registration key 8a.

[0124] When the Smart ECU2 receives a response code, it performs code verification (S133). Code verification is the process of comparing the received response code with a verification code generated by the Smart ECU2 itself. Based on the result of the code verification, if the received response code and the verification code generated by the Smart ECU2 itself match, the Smart ECU2 sets the vehicle power to ON (S134). Note that the switching of the vehicle power state may be performed in cooperation with the power supply ECU, which is the ECU that controls the vehicle power. The power supply ECU may also be the engine ECU.

[0125] <Example of operation when locked> Here, the operation of each device when a user locks the vehicle by operating the software key on the mobile device 9 will be explained using Figure 13. The mobile device 9 and the key management device 4 are already connected and the activation sequence (S101~S105) has been executed.

[0126] When the mobile device 9 detects that the lock button displayed on the screen has been pressed, based on a signal from the touch panel, it sends a lock request to the key management device 4 (S201). The lock request is a short-range communication signal requesting the key management device 4 to perform the locking control.

[0127] When the key management device 4 receives a lock request, it performs control for locking (S202). For example, based on the receipt of the lock request, the key management device 4 outputs a request to send a lock command to the control key 8b. A request to send a lock command is a signal that instructs the controller to send a lock command. The request to send a lock command may be a signal to input a low (0) to the locking input terminal of the controller 87b. The request to send a lock command may be a control signal that turns on the switching element connected to the locking input terminal.

[0128] Based on receiving a request to send a lock command from the key management device 4, the control key 8b sends a lock command (S203). When the smart ECU 2 receives an unlock command, it works in cooperation with the body ECU 3 to unlock the vehicle (S204).

[0129] Furthermore, if the key management device 4 executes a locking control triggered by receiving a lock request from the mobile device 9, it may then perform the process of invalidating the control key 8b described below. After the vehicle is locked, there is a high probability that the vehicle will remain parked for a predetermined time (e.g., 5 minutes) or longer. By promptly invalidating the control key 8b upon receiving a lock request, the risk of the key data of the registered key 8a being leaked can be further reduced.

[0130] <Regarding operation during communication interruption> The communication connection between the mobile device 9 and the key management device 4 is disconnected based on user operation on the mobile device 9 or the user (mobile device 9) leaving the vehicle. Figure 14 is a sequence diagram showing the operation of the key management device 4 and the control key 8b when communication is disconnected. When the communication connection with the mobile device 9 is lost, the key management device 4 turns off the power to the control key 8b (S301). Specifically, turning off the power to the control key 8b can be achieved by cutting off the power supply to the control key 8b. When the power supply to the control key 8b is cut off, the data stored in the RAM 872 is automatically erased (S302). In other words, the key data of the registered key 8a is erased from the control key 8b. In this embodiment, the control key 8b is disabled when it is no longer supplied with power from the key management device 4 (in other words, powered off).

[0131] The above describes a pattern in which the power to the control key 8b is turned off based on the loss of communication connection with the mobile device 9. However, the events in which the key management device 4 disables the control key 8b (hereinafter referred to as "disable events") are not limited to this. Disable events can be rephrased as "disable conditions."

[0132] The key management device 4 may turn off the power to the control key 8b based on the vehicle being locked. The key management device 4 may also turn off the power to the control key 8b after a certain period of time has elapsed since the power to the control key 8b was set to ON. The key management device 4 may also turn off the power to the control key 8b when the measured distance value exceeds a predetermined value (e.g., 10m). The key management device 4 may also turn off the power to the control key 8b after a predetermined period of time has elapsed since detecting that all occupants have disembarked. Disembarkation of all occupants may be detected based on the output of the weight sensor and / or seat sensor.

[0133] The key management device 4 may turn off the power to the control key 8b when it receives an instruction signal to disable the control key 8b from the mobile device 9 via short-range communication. The instruction signal to disable the control key 8b may be understood as a signal instructing the control key 8b to stop. The disabling event may be understood as an event indicating that the user has finished using the vehicle in one phase. As described above, the key management device 4 may turn off the power to the control key 8b based on the detection of an event indicating that the user has finished using the vehicle. The second state, which is the state for turning off the power to the control key 8b, may be a state in which the communication connection with the mobile device 9 is lost, or a state in which the distance measurement value is greater than or equal to a predetermined value. The second state may also be a state in which the received signal strength from the mobile device 9 is less than a predetermined value.

[0134] The control to turn off the power of the control key 8b only needs to cut off the power supply to the RAM 872 of the control key 8b, thereby erasing the data in the RAM 872. If the control key 8b is a memory-clear type smart key, the control to turn off the power of the control key 8b may also be to put the control key 8b into sleep mode or power-saving mode. In this disclosure, a memory-clear type smart key is a smart key configured to cut off the power supply to the RAM 872 or to clear the key data storage area in the RAM 872 when in sleep mode or power-saving mode. The power-saving mode of the smart key is a mode that stops waiting for LF radio wave reception.

[0135] The control key 8b may be configured to clear RAM 872 based on the input of a predetermined signal (hereinafter referred to as the clear signal) from the key management device 4. Clearing RAM 872 is equivalent to deleting the authentication data stored in RAM 872. Clearing can be rephrased as releasing or other similar terms. The state in which RAM 872 of the control key 8b is cleared may also be included in the state in which the control key 8b is disabled. The state in which the control key 8b is unable to behave as a registered key 8a may be understood as the state in which the control key 8b is disabled. The controller 87b may be configured to clear RAM 872 based on the occurrence of the above-mentioned invalidation event.

[0136] <Effects> In the above configuration, the ROM 873 of the control key 8b itself does not contain any key data (i.e., authentication data) that would enable the user to use the vehicle. In other words, the control key 8b does not have a non-volatile memory in which key data indicating successful authentication is recorded. Based on the detection that the portable device 9 is present in the vicinity of the vehicle, the key management device 4 turns on the power to the control key 8b and writes authentication data to the RAM 872 of the control key 8b, thereby temporarily making the control key 8b function like the registered key 8a.

[0137] This configuration has the advantage of enabling the introduction of a pseudo-digital key system even in existing vehicles that only support smart keys. In this disclosure, the term "digital key system" refers to a system that allows a general-purpose information processing terminal such as a smartphone to function as a vehicle key.

[0138] Furthermore, the key management device 4 turns off the power to the control key 8b based on the detection of an event indicating that the user has finished using the vehicle, such as when the communication connection with the mobile device 9 is disconnected. Since valid authentication data for the control key 8b is stored only in the RAM 872, when the power to the control key 8b is turned off, the key data of the registered key 8a is automatically erased from the control key 8b. Therefore, even if a third party steals the control key 8b stored in the vehicle, there is no risk of the key code of the registered key 8a being leaked.

[0139] Furthermore, even if the control key 8b is temporarily activated, the moment the control key 8b is removed from the key management device 4, the power to the control key 8b is turned off and the data in RAM 872 is lost. In other words, an active control key 8b automatically switches to an inactive smart key the moment it is removed from the key management device 4. The control key 8b in this embodiment will never be taken outside the vehicle while it is still active. Thus, the configuration of this embodiment reduces the risk of the vehicle being misused.

[0140] In the above embodiment, the TP-ID of control key 8b is not registered in the smart ECU2. Furthermore, the TP-ID of registered key 8a is not stored in the key-side TPM 83 and ROM 873 of control key 8b. In other words, control key 8b is a smart key that does not have the data necessary for successful authentication using the second communication method registered. Therefore, even if a third party holds control key 8b over the vehicle-side TPM 61, authentication via transponder communication will not succeed. Thus, the unauthorized use of the vehicle can be prevented through transponder communication between control key 8b and the vehicle.

[0141] Furthermore, according to the above embodiment, the control key 8b is automatically activated when a user carrying the mobile device 9 approaches the vehicle. Therefore, it offers high user convenience. In other words, it is possible to enhance both user convenience and security.

[0142] Furthermore, the software for the control key 8b in this embodiment may be a modified version of the software for a general smart key, where the key codes stored in RAM 872 are replaced with key codes input from the key management device 4. Since the changes between the control key 8b and a general smart key are minor, a general smart key can be modified to function as the control key 8b even if the general smart key has limited free space in its ROM. In addition, the minimal changes to the software have the advantage of reducing the bug rate and development costs.

[0143] The key management device 4 and the control key 8b described above may be developed and manufactured as separate devices. Smart keys may have different hardware and software depending on the vehicle manufacturer and model. However, as long as the key data input from the key management device 4 is stored in the RAM 872 and used for authentication processing, a variety of smart keys can be used as the control key 8b of this disclosure. By providing the key management device 4 as a separate device from the control key 8b, it is expected that there will be no need to modify the key management device 4 for each vehicle manufacturer and model.

[0144] <Supplementary information on the configuration of control keys> The control key 8b may be configured to output a signal to the key management device 4 indicating the reception status of the LF signal. The key management device 4 may determine whether the control key 8b is in a standby state based on the signal indicating the reception status of the LF signal input from the control key 8b. If the key management device 4 determines that the control key 8b is in a standby state, it may turn off the power to the control key 8b.

[0145] The control key 8b does not necessarily need to be connected to the key management device 4 by the power cable C2. The control key 8b may be configured to be powered by an internal battery. In that case, the control key 8b may be configured to be switched on / off by a signal input from the key management device 4, and to clear RAM 872 when wired communication with the key management device 4 is disconnected. For example, the key management device 4 may be configured to clear RAM 872 when the communication cable C1 is disconnected from the communication connector 86.

[0146] The control key 8b does not necessarily have to be equipped with a key-side TPM 83. In other words, the control key 8b may be configured in such a way that communication using the second communication method is physically impossible. In another embodiment, the control key 8b may be configured to communicate with the key management device 4 via NFC. For example, the control key 8b may send and receive authentication data and various instruction signals via NFC.

[0147] <About the operating modes of the control unit> The control unit 44 may be configured to switch to a power-saving mode when the vehicle power is off. The power-saving mode of the control unit 44 may be, for example, a so-called power-off state in which the power supply to the control unit 44 is completely cut off. The power-saving mode of the control unit 44 may also be a state in which the power supply to the processor 45 and memory 46 is stopped while the execution state of the program is saved in a writable non-volatile memory such as flash memory. The state in which the processor 45 is functioning is also called the normal mode.

[0148] In a configuration where the control unit 44 enters power-saving mode while the vehicle power is off, the short-range communication module 42 may be configured to switch the control unit 44 to normal mode based on the establishment of a communication connection with the mobile device 9. The short-range communication module 42 may also switch the control unit 44 to normal mode when it is in communication with the mobile device 9 and the measured distance value falls below a predetermined value. The short-range communication module 42 may also switch the control unit 44 to normal mode when it is in communication with the mobile device 9 and the received signal strength from the mobile device 9 exceeds a predetermined value.

[0149] <About the system configuration> The key management device 4 may be connected to other short-range communication modules 42 located outside the housing, in addition to the short-range communication module 42 located inside the housing. The control unit 44 may determine the position of the portable device 9 relative to the vehicle based on the distance measurement values ​​generated by each of the multiple short-range communication modules 42. The control unit 44 may be configured to activate the control key 8b on the condition that it determines the portable device 9 is within a predetermined operating area relative to the vehicle. The control unit 44 may be configured to deactivate the control key 8b on the condition that it determines the portable device 9 is not within the operating area. The operating area may include the area outside the vehicle where the portable device 9 is within a predetermined distance from the door handle. The operating area may include the interior of the vehicle.

[0150] In addition, the key management device 4 may be configured to communicate cellularly with a predetermined server. The cellular communication here may be wireless communication compliant with LTE (Long Term Evolution), 4G, 5G, etc. If the key management device 4 is used in a vehicle for a car-sharing service, the key management device 4 may be configured to communicate cellularly with a server that provides the car-sharing service. The server generates a device key code based on a request from the mobile device 9 (e.g., a reservation) and distributes it to both the mobile device 9 and the key management device 4. The device key code may be a one-time passcode. With such a configuration, service users can make their mobile device 9 function as a pseudo-smart key / digital key for the vehicle, which can improve convenience.

[0151] The above describes a configuration in which the key management device 4 functions as the central hub in communication between the key management device 4 and the mobile device 9. However, the roles of each communication device may be reversed. The mobile device 9 may also be configured to function as the central hub.

[0152] <Supplementary information on the communication method of wireless modules> The communication method between the key management device 4 and the mobile device 9 (i.e., the first communication method) is not limited to Bluetooth LE (Low Energy) but may also be Bluetooth Classic. Bluetooth communication may be wireless communication compliant with Bluetooth LE or wireless communication compliant with Bluetooth Classic. Furthermore, wireless communication compliant with new Bluetooth standards that may be created in the future may also be included in Bluetooth communication. In addition, the first communication method may also be Wi-Fi, UWB-IR (Ultra Wide Band - Impulse Radio), EnOcean®, Zigbee®, etc.

[0153] The second communication method may be NFC. The NFC in this disclosure may be a communication method with a maximum communication range of 0.3m. The NFC may be a communication method with an effective communication range of 0.1m or less. The NFC as the second communication method may be a method compliant with, for example, ISO / IEC 18092 (NFCIP-1) or ISO / IEC 21481 (NFCIP-2). The NFC may be Type-A, Type-B, or Type-F. Furthermore, NFC also includes communication using a transponder, i.e., transponder communication between the smart key and the smart ECU2.

[0154] <Additional remark (1)> This disclosure also includes the following technical concepts. Furthermore, key management devices, programs, and smart keys corresponding to the various technical concepts disclosed below are also included in the scope of this disclosure.

[0155] [Technical thought 1] A smart key (8b) stored inside the vehicle is configured to enable wireless communication for authentication with an authentication device mounted on the vehicle, The system includes a key management device (4) that is capable of communicating with the smart key and is configured to control the power state of the smart key, The aforementioned key management device is A wireless communication module (42) for wireless communication with a mobile device, A storage (47) is a non-volatile storage medium on which key information used for the aforementioned authentication is stored, The smart key is controlled by a control unit (44) that controls the operation of the smart key, The control unit, Based on the presence of the aforementioned mobile device within a predetermined distance from the vehicle, the power of the smart key is set to ON. Based on the fact that the power of the smart key is turned on, the key information stored in the storage is transmitted to the smart key. The aforementioned smart key is The key-side control unit (87b) which processes the communication for the authentication, Volatile memory (872) and, It includes non-volatile memory (873), The non-volatile memory of the smart key does not contain the key information stored in the storage. The key-side control unit is, When the key information is received from the key management device, the received key information is stored in the volatile memory. A key control system configured to perform authentication communication using the key information stored in the volatile memory.

[0156] Furthermore, the control unit may determine that a mobile device is within a predetermined distance from the vehicle if it has established a communication connection with the mobile device. The control unit may also determine that a mobile device is within a predetermined distance from the vehicle if it has established a communication connection with the mobile device and the distance value determined by the communication with the mobile device is less than a predetermined value. In addition, the control unit may consider a mobile device to be within a predetermined distance from the vehicle if it has established a communication connection with the mobile device and the received signal strength from the mobile device is above a predetermined value.

[0157] [Technical thought 2] The aforementioned key management device is Based on data related to the wireless signal received from the mobile device, it is determined whether the mobile device is within the predetermined distance from the vehicle. A key control system according to technical idea 1, configured to perform the following actions based on the determination that the mobile device is within the predetermined distance: turn on the power of the smart key and transmit the key information to the smart key.

[0158] [Technical thought 3] The key control system according to technical idea 2, wherein the data relating to the radio signal is data relating to at least one of the signal strength, phase difference, and time of flight of the radio signal received from the portable device.

[0159] [Technical thought 4] The aforementioned key management device is Based on data related to the wireless signal received from the aforementioned mobile device, it is determined whether or not the mobile device is within a predetermined distance. A key control system according to any one of technical concepts 1 to 3, wherein, based on the fact that the mobile device is within a predetermined distance from the vehicle and a communication connection has been established with the mobile device, the power of the smart key is turned on and the key information is transmitted to the smart key.

[0160] [Technical thought 5] A key control system according to any one of technical ideas 1 to 4, wherein the key management device is configured to erase the key information from the volatile memory based on the disconnection of the communication connection with the mobile device.

[0161] Furthermore, the above technical concept 5 includes a key control system in which the key management device sets the smart key to power off based on the disconnection of the communication connection with the mobile device. Also, the above technical concept 5 includes a key control system in which the key management device clears the volatile memory of the smart key while keeping the smart key powered on based on the disconnection of the communication connection with the mobile device.

[0162] [Technical Thought 6] A key control system according to any one of technical ideas 1 to 5, wherein the key management device is configured to erase the key information from the volatile memory based on receiving an instruction from the mobile device to deactivate the smart key.

[0163] Furthermore, the above technical concept 6 includes a key control system in which the key management device sets the smart key to power off based on receiving a command to deactivate the smart key from a mobile device. The above technical concept 6 also includes a key control system in which the key management device clears the volatile memory of the smart key while keeping the smart key powered on based on receiving a command to deactivate the smart key from a mobile device.

[0164] [Technical Thought 7] A key control system according to any one of technical ideas 1 to 6, wherein the key management device is configured to erase the key information from the volatile memory based on the distance between the portable device and the vehicle exceeding a predetermined value.

[0165] Furthermore, the above technical concept 7 includes a key control system in which the key management device sets the smart key to power off based on the distance between the mobile device and the vehicle exceeding a predetermined value. The above technical concept 7 also includes a key control system in which the key management device clears the volatile memory of the smart key while keeping the smart key powered on based on the distance between the mobile device and the vehicle exceeding a predetermined value.

[0166] [Technical Thought 8] The key management device and the smart key are connected by a communication cable. The control unit transmits the key information to the smart key via wired communication, according to any one of the technical concepts 1 to 7 of the key control system.

[0167] [Technical Thought 9] The authentication device is configured to enable wireless communication for authentication with the authentication device using a first communication method with a communication distance of 0.5 m or more, and a second communication method with a communication distance shorter than that of the first communication method. In the wireless communication for authentication using the first communication method, the key information is used, In the wireless communication for authentication using the second communication method, information different from the key information is used. The key control system according to any one of Technical Concepts 1 to 8, wherein the smart key is configured to be unable to perform communication by the second communication method, or is a device in which data necessary for successful authentication by the second communication method is not registered.

[0168] [Technical Thought 10] The wireless communication method of the second communication method is NFC (Near Field Communication), as described in Technical Concept 9 of the key control system.

[0169] [Technical Thought 11] The wireless communication between the mobile device and the key management device is Bluetooth® communication, as described in any one of the technical concepts 1 to 10 of the key control system. [Technical Thought 12] In addition to the control key, which is the smart key, stored in the vehicle, The smart key (8a) is a smart key different from the control smart key, and is a registered smart key that has a non-volatile memory in which the key information is registered. The aforementioned key management device is While in a state of communication connection with the registration key, upon receiving a registration request from the mobile device, the key information is obtained from the registration key. The key information obtained from the registration key is stored in the storage, A key control system according to any one of technical ideas 1 to 11, configured to display on the mobile device that the acquisition of the aforementioned key information has been successful.

[0170] [Technical Thought 13] A key control method performed by a key management device (4) configured to be able to communicate wirelessly with a mobile device, and a smart key (8b) configured to be able to communicate wirelessly for authentication with an authentication device mounted on a vehicle, The key management device sets the power of the smart key to ON based on the fact that the portable device is within a predetermined distance from the vehicle, The key management device transmits the key information necessary for authentication to the smart key based on the fact that the smart key has been powered on. The smart key receives the key information from the key management device, The smart key includes the step of storing the received key information in a volatile memory, The smart key performs wireless communication for authentication using the key information stored in the volatile memory, A key control method comprising the step of the key management device setting the power of the smart key to off based on the fact that the portable device is not within the predetermined distance from the vehicle.

[0171] Furthermore, the control unit may determine that the mobile device is no longer within a predetermined distance from the vehicle if the communication connection with the mobile device is lost. The control unit may also determine that the mobile device is no longer within a predetermined distance from the vehicle if the distance value determined by communication with the mobile device is greater than or equal to a predetermined value. In addition, the control unit may determine that the mobile device is no longer within a predetermined distance from the vehicle if the signal reception strength from the mobile device remains below a predetermined value for a predetermined period of time.

[0172] [Technical Thought 14] The key management device determines whether the mobile device is within a predetermined distance based on data related to a wireless signal received from the mobile device. A key control method according to technical idea 13, comprising the step of activating the smart key and transmitting the key information to the smart key based on the key management device determining that the mobile device is within a predetermined distance.

[0173] [Technical Thought 15] The key control method according to technical idea 14, wherein the step of determining whether the mobile device is within a predetermined distance is to determine whether the mobile device is within a predetermined distance using data relating to at least one of the signal strength, phase difference, and flight time of the radio signal received from the mobile device.

[0174] [Technical Thought 16] The key control method according to any one of technical ideas 13 to 15, wherein the step of setting the power of the smart key to ON is performed when the mobile device is within a predetermined distance from the vehicle and a communication connection with the mobile device is established.

[0175] [Technical Thought 17] A key control method according to any one of technical ideas 13 to 16, comprising the step of the key management device outputting a signal to turn off the power of the smart key or to clear the volatile memory based on the fact that the communication connection with the mobile device has been disconnected.

[0176] [Technical Thought 18] A key control method according to any one of technical ideas 13 to 17, comprising the step of the key management device setting the power of the smart key to off or outputting a signal to clear the volatile memory, based on receiving an instruction from the mobile device to stop the smart key.

[0177] [Technical Thought 19] A key control method according to any one of technical ideas 13 to 18, comprising the step of setting the power of the smart key to off or outputting a signal to clear the volatile memory based on the distance between the portable device and the vehicle exceeding a predetermined value.

[0178] [Technical Thought 20] The key control method according to any one of technical ideas 13 to 19, wherein the step of the key management device transmitting the key information to the smart key is the step of the key management device transmitting the key information to the smart key via wired communication.

[0179] [Technical Thought 21] The key control method described in any one of Technical Ideas 13 to 20, wherein the wireless communication between the key management device and the mobile device is Bluetooth® communication.

[0180] [Technical Thought 22] A smart key and a key management device that communicates via wired and wireless communication with a mobile device have a processor, To obtain data indicating the communication status with a mobile device from a wireless communication module for performing wireless communication with the mobile device, Based on the fact that the communication state with the aforementioned mobile device has entered a first state, the power of the smart key, which is connected to the key management device, is set to turn on. Based on the power being turned on of the smart key, the key information stored in a predetermined storage device is read and stored in the volatile memory of the smart key. A program that includes a command to turn off the power of the smart key based on the communication state with the mobile device entering a second state.

[0181] [Technical Thought 23] The processor in a smart key used in connection with a key management device includes: To receive the key information from the key management device, To store the received key information in the volatile memory, A program for a smart key, which includes an instruction to perform communication with an authentication device for authentication using the received key information stored in the volatile memory.

[0182] [Technical Thought 24] A storage compartment (41) for the smart key (8b), A key communication unit (411) for communicating with the aforementioned smart key, A wireless communication module (42) for wireless communication with a mobile device, The system includes a control unit (44) that controls the operation of the smart key according to the communication status with the mobile device, The control unit, Based on the communication connection with the aforementioned mobile device, a distance measurement communication, which is a wireless communication for measuring the distance from the wireless communication module to the aforementioned mobile device, is performed with the aforementioned mobile device. Based on the fact that the distance measurement value obtained as a result of the distance measurement communication falls below a predetermined value, the smart key is activated. A key management device that disables the smart key if the communication connection with the mobile device is lost or if the distance measurement value exceeds a predetermined value.

[0183] [Technical Thought 25] The second communication method described above is wireless communication using a transponder, as described in Technical Concept 9 of the key control system.

[0184] <Additional remarks (2)> The various flowcharts shown in this disclosure are all examples, and the number of steps constituting the flowchart and the order of execution of processes can be changed as appropriate. The controls shown in each flowchart may be combined and executed in parallel to the extent that they are consistent. Expressions such as acquisition, determination, detection, generation, and calculation may be used interchangeably. When a device acquires certain data, it may also include the device generating that data based on signals input from other devices / sensors.

[0185] The devices, systems, and methods described in this disclosure may be implemented by a dedicated computer comprising a processor programmed to perform one or more functions embodied by a computer program. The devices and methods described in this disclosure may be implemented using dedicated hardware logic circuits. The devices and methods described in this disclosure may be implemented by one or more dedicated computers comprising a combination of a processor that executes a computer program and one or more hardware logic circuits. The processor may be any arithmetic core, such as a CPU, MPU, GPU, or DFP (Data Flow Processor). Some or all of the functions of the key management device 4 may be implemented as hardware. Some or all of the functions of the key management device 4 may be implemented using a system-on-chip (SoC), integrated circuit (IC), or field-programmable gate array (FPGA).

[0186] A computer program includes instructions that are executed by a computer. A computer program may be stored on a computer-readable, non-transitory tangible storage medium. The storage medium for a computer program may be a variety of media, such as an HDD (Hard-disk drive), an SSD (Solid State Drive), or flash memory. [Explanation of symbols]

[0187] 2 Smart ECU (authentication device), 4 Key management device, 8a Registered key, 8b Control key (smart key), 41 Housing unit, 42 Short-range communication module (wireless communication module), 44 Control unit, 86 Communication connector (key-side communication unit), 411 Key communication unit, 412 Power supply unit, 47 Storage, 87b Controller (key-side control unit), 872 RAM (volatile memory), 873 ROM (non-volatile memory)

Claims

1. A smart key (8b) stored inside the vehicle is configured to enable wireless communication for authentication with an authentication device mounted on the vehicle, The system includes a key management device (4) that is capable of communicating with the smart key and is configured to control the power state of the smart key, The aforementioned key management device is A wireless communication module (42) for wireless communication with a mobile device, A storage (47) is a non-volatile storage medium on which key information used for the aforementioned authentication is stored, The smart key is controlled by a control unit (44) that controls the operation of the smart key, The control unit, Based on the presence of the aforementioned mobile device within a predetermined distance from the vehicle, the power of the smart key is set to ON. Based on the fact that the power of the smart key is turned on, the key information stored in the storage is transmitted to the smart key. The aforementioned smart key is The key-side control unit (87b) performs processing related to the communication for the authentication, Volatile memory (872) and It includes a non-volatile memory (873), The non-volatile memory of the smart key does not contain the key information stored in the storage. The key-side control unit is, When the key information is received from the key management device, the received key information is stored in the volatile memory. A key control system configured to perform authentication communication using the key information stored in the volatile memory.

2. The aforementioned key management device is Based on data related to the wireless signal received from the mobile device, it is determined whether the mobile device is within the predetermined distance from the vehicle. The key control system according to claim 1, configured to perform the following actions based on the determination that the mobile device is within the predetermined distance: turn on the power of the smart key and transmit the key information to the smart key.

3. The key control system according to claim 2, wherein the data relating to the radio signal is data relating to at least one of the signal strength, phase difference, and time of flight of the radio signal received from the portable device.

4. The aforementioned key management device is The key control system according to claim 1, configured to turn on the power of the smart key and transmit the key information to the smart key based on the establishment of a communication connection with the mobile device.

5. The key control system according to claim 1, wherein the key management device is configured to erase the key information from the volatile memory based on the disconnection of the communication connection with the mobile device.

6. The key control system according to claim 1, wherein the key management device is configured to erase the key information from the volatile memory based on receiving an instruction from the mobile device to deactivate the smart key.

7. The aforementioned key management device is Based on data related to the wireless signal received from the aforementioned mobile device, the distance from the vehicle to the mobile device is calculated. The key control system according to claim 1, which is configured to erase the key information from the volatile memory based on the calculated distance being equal to or greater than a predetermined value.

8. The key management device and the smart key are connected by a communication cable. The key control system according to claim 1, wherein the control unit transmits the key information to the smart key via wired communication.

9. The authentication device is configured to enable wireless communication for authentication with the authentication device using a first communication method with a communication distance of 0.5 m or more, and a second communication method with a communication distance shorter than that of the first communication method. In the wireless communication for authentication using the first communication method, the key information is used, In the wireless communication for authentication using the second communication method, information different from the key information is used. The key control system according to claim 1, wherein the smart key is configured to be unable to perform communication by the second communication method, or is a device in which data necessary for successful authentication by the second communication method is not registered.

10. The key control system according to claim 9, wherein the wireless communication of the second communication method is NFC (Near Field Communication).

11. The key control system according to any one of claims 1 to 10, wherein the wireless communication between the mobile device and the key management device is Bluetooth communication.

12. In addition to the control key, which is the smart key, stored in the vehicle, The smart key (8a) is a smart key different from the control key, and is equipped with a non-volatile memory in which the key information is registered. The aforementioned key management device is While in a state of communication connection with the registration key, upon receiving a registration request from the mobile device, the key information is obtained from the registration key. The key information obtained from the registration key is stored in the storage, The key control system according to claim 1, further configured to display on the mobile device that the acquisition of the key information has been successful.

13. A key control method performed in a system including a key management device (4) configured to be wirelessly connected to a mobile device, and a smart key (8b) configured to be wirelessly connected to an authentication device mounted in a vehicle for authentication, The key management device sets the power of the smart key to ON based on the fact that the portable device is within a predetermined distance from the vehicle, The key management device transmits the key information necessary for authentication to the smart key based on the fact that the smart key has been powered on. The smart key receives the key information from the key management device, The smart key includes the step of storing the received key information in a volatile memory, The smart key performs wireless communication for authentication using the key information stored in the volatile memory, A key control method comprising the step of the key management device setting the power of the smart key to off based on the fact that the portable device is not within the predetermined distance from the vehicle.

14. A storage compartment (41) for housing the smart key, A key communication unit (411) for communicating with the smart key, A storage device (47) is a non-volatile storage medium that stores key information used for authentication, A wireless communication module (42) is a communication module for performing wireless communication with a mobile device, The smart key is controlled by a control unit (44), The control unit, The power of the smart key is turned on based on the presence of the aforementioned mobile device within a predetermined distance from the vehicle. Based on the power being turned on to the smart key, the key information is transmitted to the smart key and stored in the smart key's volatile memory. A key management device configured to perform the following actions: turn off the power to the smart key based on the fact that the mobile device is not within a predetermined distance from the vehicle.

15. A smart key used in connection with a key management device, A key-side communication unit (86) for communicating with the key management device, A key-side control unit (87b) that performs processing related to communication for authentication with an authentication device mounted on the vehicle, Volatile memory (872) and It includes a non-volatile memory (873), The aforementioned non-volatile memory does not contain any key information that would result in successful authentication. The key-side control unit is, The key information is received from the key management device. The received key information is stored in the volatile memory, A smart key configured to perform authentication communication using the key information stored in the volatile memory.

Images