JP5212320B2 - Mobile key information management system - Google Patents

Description

  The present invention relates to a key information management system for a mobile body, particularly a mobile body that remotely manages key information related to an electronic key of a vehicle.

  In order to prevent theft and unauthorized use of the moving body, particularly the vehicle, an immobilizer system that requires the key ID held in the electronic key at the time of starting the prime mover and the key ID unique to the vehicle is mounted. There are many things. As is well known with this immobilizer system, the unique key ID of the electronic key is compared with the unique key ID of the vehicle held on the vehicle side, and the engine etc. It is a system that permits the start of the prime mover.

  By the way, in the vehicle immobilizer system, even if the electronic key is stolen or duplicated, if the verified key ID matches the unique key ID of the vehicle, the motor is started. Is possible. Therefore, in recent years, a remote immobilizer system that can set the operation permission / non-permission of the vehicle prime mover by remote operation from outside the vehicle via a public communication network such as a mobile phone has been proposed in order to further improve security. ing.

  An example of the technology of such a remote immobilizer system is described in Patent Document 1. The remote immobilizer system described in Patent Document 1 communicates with a management center outside the vehicle via a mobile communication device, and controls an engine control device that is a prime mover based on a command received from the management center, thereby It is possible to set the operation permission / non-permission, etc., and to set or cancel the engine in the start prohibition state.

JP 2007-30613 A

  The above-mentioned conventional remote immobilizer system sets whether or not to operate the engine based on a command received by wireless communication from the management center. However, the moved vehicle is in an environment where communication is impossible, such as an underground parking lot or a mountain. In some cases or when the mobile communication device itself is out of order, it is not possible to set permission / non-permission of engine operation by communication. That is, unauthorized use cannot be prevented.

  The present invention has been made in view of such a situation, and its purpose is in a mobile body using a remote immobilizer system, even in a case where communication with a management center is impossible. It is an object of the present invention to provide a mobile key information management system that can prevent theft and unauthorized use of a mobile body.

Hereinafter, means for solving the above-described problems and the effects thereof will be described.
In order to solve the above problems, the invention described in claim 1 is a key information management system for managing key information of a mobile unit through wireless communication between the mobile unit and a management center. A storage unit that stores key information managed by the management center, and a short distance communication that can be executed by the mobile unit and a specific mobile terminal registered in advance. Stored in the storage unit on the condition that communication between the mobile body and the management center is interrupted when an operation to cancel the use of the mobile body is performed. The key information is to save the current key information to the specific portable terminal through the short-range communication device.

  According to such a configuration, under predetermined conditions, key information such as a key ID and an encryption key held in the storage unit of the collation control device by short-range communication is saved in the mobile terminal. The key information is lost from the storage unit of the verification control device. In detail, when the vehicle as a moving body is parked or locked from the outside, the vehicle is brought into a non-operating state, and when wireless communication with the management center is impossible or unstable, the key ID or the like By retracting (moving) the key information to the portable terminal, the key information itself is not left in the moving body, so that the key information is prevented from being illegally acquired from the moving body. As a result, even if the remote immobilizer command cannot be set on the mobile unit due to the inability to perform mobile unit communication, the mobile unit does not verify the key ID of the electronic key used for the mobile unit itself. Thus, unauthorized use and theft of the mobile object can be prevented by the illegally acquired key information. As a result, the security of the mobile body belonging to such a mobile body key information management system is improved.

  By the way, in the system described in Patent Document 1 of the prior art document, the operation of the engine is disapproved when a new operable signal cannot be received from the management center even after a certain period of time has passed since mobile communication became impossible. I am doing so. And when the operation of the engine is not permitted, the cancellation code for canceling the permission can be transmitted to the vehicle using a mobile terminal such as a mobile phone, thereby causing inconvenience caused by improving security. Eliminates it and makes it more convenient. However, if the engine operation cannot be immediately disallowed because the mobile communication with the management center is not possible, the vehicle will not be allowed due to unauthorized use of the key ID until the engine operation is disallowed after a certain period of time. It is difficult to prevent unauthorized use and theft, and the strong security according to the present invention cannot be expected. However, according to this configuration, when the remote immobilizer command cannot be set because the mobile communication is not possible, the key information itself is deleted from the mobile body in which the information such as the key ID is saved, so that a certain time elapses. Without any unauthorized use or theft of the mobile body.

  The key information used for collation with key ID of the electronic key used for the said mobile body is contained in the said key information, The said short distance communication apparatus is the said memory | storage part. The key ID stored in is encrypted with an encryption key, and the key information including the encrypted key ID is saved in the specific portable terminal.

  According to such a configuration, since the key ID encrypted by the mobile body is held in the mobile terminal, it becomes difficult to obtain the key ID from the stolen or lost mobile terminal and use it illegally. The security of the body key information management system can be further improved.

  According to a third aspect of the present invention, the encryption key is transferred and held in advance from the management center to the mobile unit during a period in which communication between the mobile unit and the management center is possible. It is a summary.

  According to such a configuration, since the encryption key generated by the management center is transferred and held in advance in the mobile body, the key ID is encrypted and carried even in an environment where wireless communication with the management center is impossible. It can be moved to the terminal. As a result, the key ID to be saved can be encrypted without applying a load for generating the encryption key to the mobile body, and the security of the mobile key information management system is improved.

The invention according to claim 4 is the invention according to claim 2, wherein the encryption key is separately stored in the storage unit.
According to such a configuration, since the encryption key is stored and held in the storage unit of the verification control device, the key ID can be easily encrypted. Thereby, the security of the key ID saved in the portable terminal is improved.

  According to a fifth aspect of the present invention, the specific portable terminal is a terminal capable of exchanging information with the management center by wireless communication, and further stores the key information evacuated from the mobile body to the management center. The gist is to evacuate.

  According to such a configuration, the key information is saved from the mobile terminal to the management center, so that the key information is not held in the mobile terminal. As a result, the key information such as the key ID itself does not exist in the mobile terminal, so that unauthorized use of the key information due to theft or loss of the mobile terminal is prevented, and the security is maintained high as a mobile key information management system. can do.

  The invention according to claim 6 is the invention according to claim 5, wherein the specific portable terminal re-acquires the key information saved in the management center, and then retransmits the key information through the short-range communication device. The gist is to restore the acquired key information to the storage unit.

  According to such a configuration, even if key information reacquired from the management center is restored to the mobile body via the mobile terminal, wireless communication between the mobile body and the management center is impossible. The key information managed by the management center can be restored to the mobile unit.

  Also, the management center can update the key information managed there based on the information held by the management center, even if wireless communication between the mobile unit and the management center is impossible. Thus, the key information including the updated key ID and the like is restored to the moving body via the portable terminal, so that the key information of the moving body is also updated. As a result, the convenience of the key information management system is improved, and the possibility of adoption is increased.

The block diagram which shows the schematic structure about one Embodiment of the key information management system of the mobile body which concerns on this invention. FIG. 3 is a schematic diagram illustrating saving of key information from the mobile body to the mobile terminal according to the embodiment. The flowchart which shows the process which the mobile body of the embodiment evacuates key information to a portable terminal. FIG. 5 is a schematic diagram illustrating saving of key information from the mobile terminal to the management center according to the embodiment. The schematic diagram shown about the restoration | restoration of the key information from the management center of the embodiment to a portable terminal. The schematic diagram shown about the decompression | restoration of the key information from the portable terminal of the embodiment to a moving body. The flowchart shown about the process in which the mobile body of the embodiment decompress | restores key information from a portable terminal.

  Hereinafter, an embodiment of a mobile key information management system according to the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing the configuration of a mobile key information management system using functional blocks.

  As shown in FIG. 1, the mobile key information management system includes a vehicle 10 as a mobile body, an electronic key 11 of the vehicle 10, a management center 13 that performs mobile communication with the vehicle 10, and a management center 13. A mobile terminal 14 that performs mobile communication and short-distance communication with the vehicle 10 is provided. The mobile key information management system is provided with a communication network 12 for performing the mobile communication described above by wireless communication.

  The communication network 12 has a communication line for performing mobile communication by wireless communication, for example, a known communication line used for a mobile phone, a PHS, and the like, and performs wireless communication with a mobile communication terminal such as a mobile phone or a PHS. A plurality of base stations (not shown) are provided. As a result, wireless communication through the communication network 12 is performed between the vehicle 10 and the management center 13 and between the management center 13 and the portable terminal 14. When the environment in which the vehicle 10 is placed due to wireless communication is in the mountains outside the communication range of the base station, or in an environment where radio waves do not reach such as an underground parking lot, the vehicle 10 and the management center 13 may not be able to perform wireless communication.

  The management center 13 can remotely manage the functions of the vehicle 10. The management center 13 is provided with a computer 40 for performing various processes such as function management of the vehicle 10 and a communication device 41 for connecting the computer 40 to the communication network 12 via a line 41L. The computer 40 is provided with a calculation device (CPU) (not shown) and a ROM and a RAM (not shown), and various processes described above are executed by executing various programs by the calculation device. As one of the function management of the vehicle 10 performed at the management center 13, there is a known remote immobilizer function that prohibits starting of a prime mover (not shown) as an engine of a vehicle owned by the user by the management center 13 by remote operation. is there.

  In the remote immobilizer function, the management center 13 notifies the vehicle 10 of a command for disabling the start of the engine of the vehicle 10 through mobile communication based on a request from the user. As a result, the engine of the vehicle 10 cannot be started, and unauthorized use or theft of the vehicle 10 can be prevented. In addition, the management center 13 notifies the vehicle 10 of a command for permitting the start of the engine of the vehicle 10 based on a request from the user to the vehicle 10 through the mobile communication in the same manner as described above. Allow start-up as usual.

  In the present embodiment, the computer 40 is provided with a storage device 42 composed of a non-volatile memory (EEPROM, hard disk, etc.). A predetermined area of the storage device 42 includes an encryption key 44 and the vehicle 10. The saved save key ID 43 is stored. The ROM also stores a management program for managing the save key ID 43, and the save key ID 43 is managed by the management program being read into the arithmetic device and executed. For this management, a function for exchanging the evacuation key ID 43 withdrawn from the vehicle 10 with the mobile terminal 14 and a function for changing, adding, and deleting the contents of the evacuation key ID 43 with respect to the evacuation key ID 43. Etc. are included. Further, the ROM of the computer 40 stores an encryption key generation program for generating the encryption key 44, and the encryption key 44 generated as necessary is stored in the storage device. The encryption key 44 consists of a pair of public key and secret key, and these are managed as a set. The encryption key 44 is transferred from the management center 13 to the vehicle 10 in advance when mobile communication is possible, and is also held by the vehicle 10.

Next, management of the key ID in the vehicle 10 will be described.
The vehicle 10 includes a collation control device 20 that collates the key ID 11K of the electronic key 11, a key communication device 21 that obtains the key ID 11K from the electronic key 11, and an operation for locking / unlocking the door of the vehicle 10. A door lock / unlock sensor 22 and an engine switch (engine SW) 23 for starting / stopping the engine are provided. Further, the vehicle 10 includes a vehicle control device 24 composed of various control devices provided in the vehicle 10, a mobile communication device 25 that is wirelessly connected to the communication network 12, and a proximity that makes the vicinity of the vehicle 10 a wireless communication range. A distance communication device 26 and a status monitor 27 for notifying the user of the collation state of the electronic key 11 are provided.

  The mobile communication device 25 is a device that connects the vehicle 10 to the communication network 12 by mobile communication, and is connected to the verification control device 20 in the vehicle 10. The mobile communication device 25 is provided with a mobile antenna 25A. The mobile communication device 25 is wirelessly connected to the communication network 12 through the mobile antenna 25A and a base station of the communication network 12, thereby enabling communication. Communication between the vehicle 10 and the management center 13 via the network 12 is made possible. As a result, the vehicle 10 can perform wireless communication with the management center 13 regardless of the movement of the position accompanying the travel.

  The electronic key 11 is provided with a small communication device (not shown) and a storage device (not shown) inside, and the storage device holds a key ID 11K unique to the electronic key. The electronic key 11 outputs a key ID 11K unique to the electronic key from the small communication device to the key communication device 21 by wireless communication with the key communication device 21.

  The key communication device 21 is a device that acquires a key ID 11K unique to the electronic key held in the electronic key 11 by wireless communication with the electronic key 11. The key communication device 21 is connected to the collation control device 20, and transmits the key ID 11 K unique to the electronic key acquired from the electronic key 11 to the collation control device 20. The key communication device 21 is provided with an in-vehicle antenna 21A and an out-of-vehicle antenna 21B. When communicating with the electronic key 11 through the in-vehicle antenna 21A, it is determined that the electronic key 11 is in the vehicle, and the out-of-vehicle antenna 21B. When it communicates with the electronic key 11 via, it determines with the electronic key 11 being outside a vehicle. The determination result obtained in this way is transmitted to the collation control device 20.

  Based on the key ID 11K unique to the electronic key acquired from the key communication device 21, the verification control device 20 determines the validity of the key ID 11K unique to the electronic key. The verification control device 20 includes a processing unit (CPU) 30 that executes arithmetic processing such as various programs, a read-only memory (ROM) (not shown) in which a verification program and various data are stored, CPU calculation results, and the like. A volatile memory (RAM) (not shown) that is temporarily stored is provided. Thereby, the collation control apparatus 20 performs various processes by the various programs etc. which are hold | maintained at ROM being read into the processing apparatus 30, and being executed.

  Further, the collation control device 20 is provided with a storage device 31 composed of a non-volatile memory (EEPROM or the like) that can read and write set values used for arithmetic processing and that can be continuously stored. In a predetermined storage area of the storage device 31, a vehicle-specific key ID 32, an encryption key 33 used for encryption of the key ID, and terminal information 34 for identifying a specific portable terminal 14 are stored. .

In the present embodiment, the electronic key uniqueness is obtained by executing the collation program for comparing the key ID 11K unique to the electronic key and the vehicle unique key ID 32 stored in the ROM to determine the validity. The validity of the key ID 11K is determined. Thus, when the verification control device 20 determines that the key ID 11K unique to the electronic key is valid, when the electronic key 11 is outside the vehicle, the verification control device 20 controls the vehicle 10 so that an operation that can be performed from outside the vehicle can be performed. When the vehicle is in the vehicle, the vehicle 10 is controlled so that possible operations and the like can be performed from the vehicle. Conversely, the collation control device 20 controls the vehicle 10 so as not to accept an operation on the vehicle 10 when determining that the key ID 11K unique to the electronic key is not valid. That is, the collation control device 20 performs control so that the engine can be started when it is determined that the key ID 11K unique to the electronic key is valid, and when it is determined that the key ID 11K unique to the electronic key is not valid. It is possible to implement a so-called conventional immobilizer function that controls the engine so that it cannot be started.

  The collation control device 20 also supports a remote immobilizer function. That is, when the verification control device 20 receives a command for disabling engine start from the management center 13, the vehicle 10 prevents the engine from starting in response to the command regardless of the operation of the engine switch 23. To control. In addition, when the verification control device 20 receives a command permitting engine start from the management center 13, in response to the command, the verification control device 20 operates the engine switch 23 under the condition that the key ID 11K unique to the electronic key is valid. Based on the above, the vehicle 10 is controlled so that the engine can be started.

  Further, the ROM stores a save program and a restore program. When the save program is executed, the vehicle-specific key ID 32 is encrypted based on the encryption key 33 under a predetermined condition, and the encrypted key ID is carried from the verification control device 20. The terminal 14 is evacuated (moved). That is, when the saving of the vehicle-specific key ID 32 to the portable terminal 14 is confirmed, the verification control device 20 deletes the vehicle-specific key ID 32 and the data obtained by encrypting the vehicle-specific key ID 32, The key ID 32 or the like is not left behind. As a result, since the collation processing of the electronic key 11 by the collation control device 20 cannot be performed, illegal use and theft prevention based on the key ID 11K unique to the electronic key can be prevented, and the vehicle-specific key ID 32 from the collation control device 20 is illegal. In addition, it is possible to prevent unauthorized use of the information.

  Further, when the restoration program is executed, the restoration program obtains an encrypted key ID saved (moved) in the portable terminal 14 under a predetermined condition, and encrypts the encrypted key ID. Decrypt based on the key 33 to restore the vehicle-specific key ID 32. At this time, when it is confirmed that the vehicle-specific key ID 32 is restored, the verification control device 20 deletes the encrypted key ID saved in the mobile terminal 14. Thereby, the collation process of the electronic key 11 by the collation control apparatus 20 is enabled, and the said vehicle 10 can be normally used by the electronic key 11. FIG.

  The door lock / unlock sensor 22 is a sensor provided on the vehicle door for the vehicle door lock operation and unlock operation, and is connected to the verification control device 20. The door lock / unlock sensor 22 is provided with a lock sensor (not shown) for locking (locking) the vehicle door and an unlock sensor (not shown) for unlocking (unlocking) the vehicle door. ing. Thus, when the lock sensor is operated, the collation control device 20 determines the validity of the key ID 11K unique to the electronic key and controls the vehicle door to be locked if it is valid. Further, when the unlock sensor is operated, the collation control device 20 determines the validity of the key ID 11K unique to the electronic key, and controls the vehicle door to be unlocked if it is valid.

The engine switch 23 is a rotary type or push button type switch for operating the start and stop of the engine of the vehicle 10, and is connected to the verification control device 20. When the engine switch 23 is operated to start the engine, the collation control device 20 determines the validity of the key ID 11K unique to the electronic key, and controls the vehicle control device 24 to start the engine if it is valid. To do. When it is determined that the key ID 11K unique to the electronic key is not valid, the vehicle control device 24 is controlled so as not to start the engine. On the other hand, when the engine switch 23 is operated to stop the engine, the vehicle control device 24 is controlled to stop the engine.

  The vehicle control device 24 includes various control devices required for the vehicle 10 such as an engine ECU 241 that controls engine driving, and these various control devices are connected to the verification control device 20 so as to be communicable. That is, the vehicle control device 24 has a configuration in which the various control devices are connected to each other via an in-vehicle LAN to enable information communication between the various control devices and the verification control device 20. Making it possible. Thereby, for example, when the collation control device 20 controls the vehicle 10 so as not to allow the engine to be started by the immobilizer function or the remote immobilizer function, the engine ECU 241 is controlled not to start the engine. In addition, when the verification control device 20 controls the vehicle 10 to allow the engine to start, the engine ECU 241 is controlled so as to start the engine based on the operation of the engine switch 23.

  The short-range communication device 26 is a device that allows the vehicle 10 and the mobile terminal 14 to communicate with each other by short-range wireless communication, and is connected to the verification control device 20. The short-range communication device 26 is provided with a short-range antenna 26A. The short-range communication device 26 is wirelessly connected to the mobile terminal 14 through the short-range antenna 26A, so that the vehicle 10 and the mobile terminal 14 are directly connected. Wireless communication is now possible. In the present embodiment, the short-range communication device 26 is a Bluetooth (registered trademark) device, and only the vicinity of the vehicle 10 is set as a communication range.

  The status monitor 27 is a device for notifying the user of processing performed in the verification control device 20, and has a plurality of indicator lights such as LEDs and is connected to the verification control device 20. Each indicator lamp is used when the electronic key 11 is collated by the collation control device 20, the process of retracting the vehicle-specific key ID 32 to the mobile terminal 14, or the vehicle-specific key ID 32 is restored from the mobile terminal 14. When the processing to be performed is performed, the user is notified that the processing is performed by lighting or blinking the corresponding indicator lamp.

Next, the portable terminal 14 that performs near field communication with the vehicle 10 will be described.
The mobile terminal 14 is a terminal device that can be carried by a user, such as a mobile phone, PHS, or PDA, and causes the mobile communication device 52 that connects the mobile terminal 14 to the communication network 12 and the mobile terminal 14 to communicate with the vehicle 10. A short-range communication device 53. Note that the mobile terminal 14 is also provided with an operation button as a known input device, a display screen as an output device, and the like.

  The mobile communication device 52 is a device that connects the mobile terminal 14 to the communication network 12 by mobile communication, and is connected to the processing device 50 in the mobile terminal 14. The mobile communication device 52 is provided with a mobile antenna 52A. The mobile communication device 52 is wirelessly connected to the communication network 12 through the mobile antenna 52A and a base station of the communication network 12, thereby enabling communication. The mobile terminal 14 and the management center 13 can communicate with each other via the network 12. Thereby, the portable terminal 14 can perform wireless communication with the management center 13 regardless of the movement of the position.

The short-range communication device 53 is a device having the same communication specifications as the short-range communication device 26 of the vehicle 10, which allows the mobile terminal 14 and the vehicle 10 to communicate with each other by short-range wireless communication. It is connected to the. The near field communication device 53 is provided with a near field antenna 53A, and the near field communication device 53 is wirelessly connected to the near field communication device 26 of the vehicle 10 through the near field antenna 53A and the near field antenna 26A of the vehicle 10. Thus, the vehicle 10 and the portable terminal 14 can directly perform wireless communication. In the present embodiment, the short-range communication device 53 is a Bluetooth (registered trademark) device, just like the short-range communication device 26 of the vehicle 10, and has a communication range only in the vicinity of the mobile terminal 14.

  Further, the mobile terminal 14 is provided with a processing device 50 for executing various programs and various memories (not shown) such as ROM and RAM. Various programs are stored in the ROM, and the mobile terminal 14 causes the processing device 50 to execute the various programs stored in the ROM to cause the mobile terminal 14 to execute various processes. In addition, the portable terminal 14 is provided with a storage unit 51 including a nonvolatile memory (EEPROM or the like). The storage unit 51 stores an application 60 and an area for storing a key ID 61. Is secured. The application 60 includes a key ID saving program and a key ID restoration program.

  The key ID saving program has a function of saving the vehicle-specific key ID 32 as the encrypted key ID 61 in the portable terminal 14 and a function of saving the encrypted key ID 61 of the portable terminal 14 to the management center 13 respectively. It has to be selectable. As a result, the key ID saving program is executed by the processing device 50, so that each function described above is executed based on the selection. That is, when the vehicle-specific key ID 32 is withdrawn, the mobile terminal 14 receives the key ID 32C obtained by encrypting the vehicle-specific key ID 32 from the vehicle 10 and stores it as the encrypted key ID 61. When the encrypted key ID 61 of the mobile terminal 14 is saved in the management center 13, the mobile terminal 14 transmits the encrypted key ID 61 to the management center 13 and sends the key ID 61 to the management center 13. When the transfer is completed, the key ID 61 is deleted.

  The key ID restoration program has a function of restoring the key ID 61 encrypted in the portable terminal 14 from the saved key ID 43 saved in the management center 13 and a function of transferring the encrypted key ID 61 of the portable terminal 14 to the vehicle 10. Can be selected. Thus, the key ID restoration program is executed by the processing device 50, so that each function described above is executed based on the selection. That is, when restoring the encrypted key ID 61 to the mobile terminal 14, the mobile terminal 14 receives the encrypted key ID 43C of the evacuation key ID 43 from the management center 13 and stores it as the encrypted key ID 61. When the key ID 61 is completely acquired, the save key ID 43 of the management center 13 is deleted. When restoring the vehicle-specific key ID 32 to the vehicle 10, the mobile terminal 14 transfers the encrypted key ID 61 to the vehicle 10 and deletes the key ID 61 when the transfer is completed.

  In the communication between the management center 13 and the mobile terminal 14, the mobile terminal 14 accesses the management center 13. In order to ensure security in the access, the management center 13 performs input transmission by the mobile terminal 14. It is preferable to perform authentication based on the user ID and password and the terminal information.

  In addition, when the vehicle-specific key ID 32 is withdrawn from the vehicle 10 to the portable terminal 14, it is preferable that the key ID withdrawal program of the portable terminal 14 is automatically started by the start of short-range communication from the vehicle 10. The 14 key ID saving program may be manually activated.

  Furthermore, when the vehicle-specific key ID 32 is transferred from the mobile terminal 14 to the vehicle 10, it is preferable that the restoration program for the vehicle 10 is automatically started by the start of short-range communication from the mobile terminal 14. The key ID restoration program may be manually activated or automatically activated from the vehicle 10. Further, even in communication between the vehicle 10 and the mobile terminal 14, authentication based on a user ID, a password, terminal information, and the like may be performed in order to ensure security.

  Next, the operation of the mobile key information management system will be described with reference to FIGS. FIG. 2 is a schematic diagram illustrating a mode in which the key ID is withdrawn from the vehicle 10 to the portable terminal 14, and FIG. 3 is a flowchart illustrating a procedure for withdrawing the key ID from the vehicle 10 to the portable terminal 14.

  As shown in FIG. 2, when the vehicle 10 cannot communicate with the management center 13 through mobile communication, the vehicle 10 is generated by encrypting the vehicle-specific key ID 32 under the condition of being in a non-operating state such as parking. The encrypted key ID 32C is transferred to the portable terminal 14 by short-range communication. Note that the case where communication with the management center 13 is not possible means that the environment in which the vehicle 10 is placed is in an environment where mobile communication is not possible, such as an underground parking lot or in the mountains, or the mobile communication device 25 itself is This includes cases where there is a failure. In any case, since the mobile communication is not possible, the command from the management center 13 does not reach the vehicle 10 and the remote immobilizer function does not work in the vehicle 10, so that the remote immobilizer function prevents unauthorized use or theft of the vehicle 10. Is not planned. Therefore, when the remote immobilizer function does not work, the operation with the key ID 32 inherent to the vehicle is made impossible by moving the vehicle-specific key ID 32 from the vehicle 10 to the portable terminal 14, that is, withdrawing.

Therefore, a procedure for retracting the vehicle-specific key ID 32 from the vehicle 10 will be described in detail.
As shown in FIG. 3, when there is a possibility that the vehicle 10 is parked or the like, such as parking, the collation control device 20 starts the execution process of the save program for the key ID 32 unique to the vehicle. When the execution process of the save program is started, the collation control device 20 determines whether or not the engine is stopped (step S10 in FIG. 3). When it is determined that the engine is not stopped (NO in step S10 in FIG. 3), the process returns to step S10 after a predetermined time elapses, and it is determined whether the engine is stopped again. Note that when there is no possibility of being in a non-operating state such as when the vehicle starts running, this determination is forcibly terminated and the execution process of the save program is terminated.

  On the other hand, when it is determined that the engine has stopped (YES in step S10 in FIG. 3), the collation control device 20 confirms the communication state of the mobile communication with the management center 13 (step S11 in FIG. 3). It is determined whether or not the body communication is interrupted (step S12 in FIG. 3). Whether or not the mobile communication is interrupted is determined by whether or not the mobile communication with the management center 13 is possible. When it is determined that the mobile communication has not been interrupted (NO in step S12 in FIG. 3), the save program execution process is terminated.

  On the other hand, when it is determined that the mobile communication is interrupted (YES in step S12 in FIG. 3), the collation control device 20 determines whether or not the door of the vehicle 10 is locked (step S13 in FIG. 3). ). Locking the door of the vehicle 10 ensures that the vehicle 10 is in a non-operating state and completes the use of the electronic key 11 to the vehicle 10. When it is determined that the door is not locked (NO in step S13 in FIG. 3), the process returns to step S13 after a predetermined time has elapsed, and it is determined again whether or not the door of the vehicle 10 is locked. When there is no longer a possibility of being in a non-operating state such as when the vehicle starts running, this determination is forcibly terminated and the execution process of the save program is terminated.

On the other hand, when it is determined that the door of the vehicle 10 is locked (YES in step S13 in FIG. 3), the verification control device 20 encrypts (converts) the vehicle-specific key ID 32 based on the encryption key 33, An encrypted key ID 32C is generated (step S14 in FIG. 3). When the encrypted key ID 32C is generated, the collation control device 20 starts short-range communication by the short-range communication device 26 (step S15 in FIG. 3). In short-range communication, a specific mobile terminal 14 registered in the terminal information 34 is selected as a wireless communication target from one or a plurality of mobile terminals in the communication range, and short-range communication with the mobile terminal 14 is performed. Establish. When the near field communication with the mobile terminal 14 is established, the verification control device 20 transmits the encrypted key ID 32C to the mobile terminal 14 (step S16 in FIG. 3). The encrypted key ID 32C is transferred to the portable terminal 14 and stored as an encrypted key ID 61 in a predetermined area of the portable terminal 14. When the storage of the encrypted key ID 61 in the portable terminal 14 is completed, the vehicle-specific key ID 32 and the encrypted key ID 32C are deleted in the vehicle 10. As a result, the vehicle 10 does not have the vehicle-specific key ID 32 for collation with the key ID 11K unique to the electronic key, so that the vehicle 10 cannot be operated with the key ID 11K unique to the electronic key. It is also impossible to illegally acquire the vehicle-specific key ID 32 from the verification control device 20 and use it as if it were the electronic key 11.

  Further, a case where the encrypted key ID 61 held in the portable terminal 14 is saved in the management center 13 will be described with reference to FIG. FIG. 4 is a schematic diagram illustrating a mode in which the key ID is saved from the portable terminal 14 to the management center 13.

  As shown in FIG. 4, the mobile terminal 14 accesses the management center 13 through mobile communication and saves the encrypted key ID 61 to the management center 13. The management center 13 stores the encrypted key ID 61 received from the mobile terminal 14 in the storage area as the encryption key ID 43C, decrypts (converts) the encryption key ID 43C based on the encryption key 44, and sets the save key ID 43. Generate and hold. As a result, the management center 13 holds a retraction key ID 43 that is retreated from the vehicle-specific key ID 32, that is, a retraction key ID 43 corresponding to the vehicle-specific key ID 32. In the present embodiment, since the evacuation key ID 43 can be regarded as a vehicle-specific key ID 32, the management center 13 does not use mobile communication with the vehicle 10, but includes information on the vehicle 10 that the management center 13 has. Based on this, the contents of the save key ID 43 may be corrected. As a result, even when mobile communication between the vehicle 10 and the management center 13 is not possible, the evacuation key ID 43 corrected in the management center 13 is restored to the vehicle 10, so that the management information of the management center 13 is restored. Is also reflected in the vehicle 10.

  Therefore, restoration of the key ID 61 of the mobile terminal 14 will be described with reference to FIG. FIG. 5 is a schematic diagram showing a mode in which the mobile terminal 14 restores the save key ID 43 of the management center 13.

  As shown in FIG. 5, the mobile terminal 14 acquires the save key ID 43 of the management center 13 through communication with the management center 13 and stores it as an encrypted key ID 61. That is, when the key ID is requested from the mobile terminal 14, the management center 13 encrypts (converts) the save key ID 43 with the encryption key 44 to generate an encrypted key ID 43C, and the generated encryption The key ID 43C thus transferred is transferred to the mobile terminal 14 and stored as an encrypted key ID 61 in a predetermined area of the mobile terminal 14. When the encrypted key ID 61 is stored in the portable terminal 14, the save key ID 43 and the encrypted key ID 43 C of the management center 13 are deleted from the management center 13. As a result, the encrypted key ID 61 reflecting the management information for the vehicle 10 of the management center 13 is stored in the mobile terminal 14.

  Next, restoration of the key ID 32 unique to the vehicle 10 will be described with reference to FIGS. 6 and 7. FIG. 6 is a schematic diagram showing a mode in which the vehicle 10 restores the vehicle-specific key ID 32 via the mobile terminal 14, and FIG. 7 shows the vehicle 10 that restores the vehicle-specific key ID 32 via the mobile terminal 14. It is a flowchart shown about a procedure.

As shown in FIG. 6, the vehicle 10 performs short-distance communication with the mobile terminal 14 when mobile communication with the management center 13 is not possible and the key ID 32 unique to the vehicle is not held in the verification control device 20. . The vehicle 10 obtains the encrypted key ID 61 of the mobile terminal 14 through this short-range communication, stores it as the encrypted key ID 32C, and decrypts (converts) the stored key ID 32C based on the encryption key 33. ) To generate a key ID 32 unique to the vehicle. As a result, the vehicle 10 holds the vehicle-specific key ID 32 used for matching with the electronic key 11, so that the matching processing of the key ID 11 </ b> K of the electronic key 11 used for the vehicle 10 is performed in the matching control device 20. The operation of the vehicle 10 based on the electronic key 11 becomes possible.

  At this time, a procedure for the vehicle 10 to restore the vehicle-specific key ID 32 will be described in detail. The process of restoring the vehicle-specific key ID 32 is performed by a restoration program execution process started based on short-range communication with the mobile terminal 14.

  As shown in FIG. 7, when the execution process of the restoration program for the key ID 32 unique to the vehicle is started, the collation control device 20 starts near field communication and matches the terminal information 34 stored in the storage device 31. The short-range communication with the portable terminal 14 is started and established (step S20 in FIG. 7). When short-range communication with the mobile terminal 14 is established, the verification control device 20 acquires (receives) the encrypted key ID 61 from the mobile terminal 14 and stores it as the encryption key ID 32C (FIG. 7). In step S21), the encryption key ID 32C is decrypted (converted) to the vehicle-specific key ID 32 based on the encryption key 33 (step S22 in FIG. 7). Note that when the encryption key ID 32C is stored in the verification control device 20, the encrypted key ID 61 of the mobile terminal 14 is deleted.

  When the vehicle-specific key ID 32 is restored, the verification control device 20 searches for the key ID through the key communication device 21 (step S23 in FIG. 7). By searching for the key ID, it is determined whether or not the key ID 11K unique to the electronic key has been received (step S24 in FIG. 7). If it is determined that the key ID 11K has not been received (NO in step S24 in FIG. 7), the restoration is performed. Program execution is terminated.

  On the other hand, if it is determined that the key ID 11K unique to the electronic key has been received (YES in step S24 of FIG. 7), the obtained key ID 11K unique to the electronic key is checked against the key ID 32 unique to the vehicle. It is determined whether the ID 11K is valid, that is, whether the unlocking operation of the vehicle 10 is possible (step S25 in FIG. 7). If it is determined that the key ID is not valid (NO in step S25 in FIG. 7), the execution of the restoration program is terminated. On the other hand, when it is determined that the key ID is valid (YES in step S25 in FIG. 7), the collation control device 20 unlocks on the condition that the unlock switch is operated based on the key ID 11K unique to the electronic key. Processing is performed (step S26 in FIG. 7), and the execution of the restoration program is terminated. With the unlocking process, the door can be opened and the user can board the vehicle 10, and the engine can be started after boarding.

  As a result, even in an environment where remote operation by the remote immobilizer function is impossible, the vehicle-specific key ID 32 itself is evacuated from the vehicle 10 to prevent unauthorized use or theft of the vehicle 10 by the key ID and evacuate. In addition, the operation of the user can be made possible by restoring the key ID 32 unique to the vehicle.

As described above, according to the mobile key information management system of this embodiment, the effects listed below can be obtained.
(1) The vehicle-specific key ID 32 held in the storage device 31 of the collation control device 20 is saved to the portable terminal 14 by short-range communication under the condition that the vehicle 10 is not operating and mobile communication is not possible. By doing so, the key ID 32 unique to the vehicle is not held in the storage device 31 of the verification control device 20. More specifically, when the vehicle 10 is parked or locked from the outside, the vehicle 10 is brought into a non-operating state, and mobile communication with the management center 13 is not possible or unstable. Since the unique key ID 32 is saved (moved) to the mobile terminal 14, unauthorized acquisition of the key ID 32 from the vehicle 10 in which the unique key ID 32 is not left is prevented. Thus, even if the remote immobilizer function does not work in the vehicle 10 because mobile communication is not possible, the collation control device 20 does not collate the key ID 11K unique to the electronic key used in the vehicle 10. Thus, unauthorized use of the vehicle 10 and theft can be prevented by unauthorized acquisition of the key ID 11K unique to the electronic key. As a result, the security of the mobile body belonging to such a mobile body key information management system is improved.

  (2) By the way, in the system described in Patent Document 1 of the prior art document, the engine operation is not activated when a new operable signal cannot be received from the management center even after a certain period of time has passed since the mobile communication became impossible. I try to allow it. And when the operation of the engine is not permitted, the cancellation code for canceling the permission can be transmitted to the vehicle using a mobile terminal such as a mobile phone, thereby causing inconvenience caused by improving security. Eliminates it and makes it more convenient. However, in an environment where the start of the engine cannot be immediately disallowed because mobile communication with the management center is impossible, until the engine operation is disallowed after a certain period of time, It is difficult to prevent unauthorized use or theft of the vehicle due to unauthorized use of the key ID, and strong security as in the present invention cannot be expected. However, according to this configuration, when the remote immobilizer function does not work because mobile communication is not possible, the key ID 32 unique to the vehicle is withdrawn from the vehicle 10, that is, the key ID 32 is erased from the vehicle 10, and thus for a certain period of time. Thus, it is possible to prevent unauthorized use or theft of the vehicle 10 without waiting for the elapse of time.

  (3) The portable terminal 14 holds the key ID 32C encrypted by the vehicle 10 as the encrypted key ID 61. This makes it difficult to obtain an encrypted key ID 61 from the stolen or lost portable terminal 14 and makes it more difficult to use the vehicle 10 as a key information management system.

  (4) Since the encryption key 44 generated by the management center 13 is transferred and held in advance in the vehicle 10, the vehicle-specific key ID 32 is assigned even in an environment where mobile communication with the management center 13 is not possible. It can be encrypted and moved to the mobile terminal 14. As a result, the vehicle-specific key ID 32 can be encrypted without applying a load for generating the encryption key 33 on the vehicle 10, and the security of the mobile key information management system is improved.

  (5) Since the encryption key 33 is stored and held in the storage device 31 of the verification control device 20, the vehicle-specific key ID 32 can be easily encrypted. This improves the security of the vehicle-specific key ID 32 that is retracted to the portable terminal 14.

  (6) The encrypted key ID 61 is saved (moved) from the portable terminal 14 to the management center 13, so that the encrypted key ID 61 is not held in the portable terminal 14. As a result, unauthorized use of the encrypted key ID 61 due to theft or loss of the mobile terminal 14 is prevented, and the security of the mobile key information management system can be maintained high.

  (7) Since the encrypted key ID 61 acquired and held from the management center 13 is restored to the vehicle 10 via the mobile terminal 14, mobile communication between the vehicle 10 and the management center 13 is not possible. Even if possible, the vehicle 10 is restored with a key ID 32 unique to the vehicle based on the evacuation key ID 43 managed by the management center 13.

In addition, even when mobile communication between the vehicle 10 and the management center 13 is not possible, the save key ID 43 placed in the management state at the management center 13 is updated based on the information held by the management center 13. For example, it is possible to update the key ID 32 of the vehicle 10 based on the information of the management center 13 by restoring it to the vehicle 10. As a result, the convenience of the key information management system is improved, and the possibility of adoption is increased.

In addition, the said embodiment can also be implemented in the following aspects, for example.
In the above embodiment, the case where the management center 13 is connected to the communication network 12 via the line 41L is illustrated. However, the present invention is not limited to this, and the management center may be wirelessly connected to the communication network. Thereby, the freedom degree of the aspect of a communication network and the aspect of the management center connected there comes to be raised.

  In the above embodiment, the case where the evacuation key ID 43 in the management center 13 is restored to the vehicle 10 via the mobile terminal 14 is illustrated. However, the present invention is not limited to this, and the mobile communication between the management center 13 and the vehicle 10 becomes possible because the communication state of mobile communication is improved, or the failure of the mobile communication device 25 is repaired. The key ID in the management center may be directly transferred to the vehicle and restored to the vehicle without using a portable terminal. At this time, if the user intentionally executes the evacuation, the restoration is preferably performed according to the user's instruction. However, the restoration may be automatically performed according to the recovery of the mobile communication.

  In the above embodiment, the encryption key 33 is illustrated as a case where the encryption key 44 generated at the management center 13 is copied to the vehicle 10. However, the present invention is not limited to this, and an encryption key may be generated in the vehicle and copied to the management center while mobile communication between the vehicle and the management center is possible. This also enables the management center to decrypt the key ID encrypted by the vehicle and to correct the contents of the key ID based on management information and the like possessed by the management center.

  In the above embodiment, the short-range communication device 26 is exemplified as a Bluetooth (registered trademark) device. However, the present invention is not limited to this, and the short-range communication device is a wireless communication device based on a communication technology that can make the vicinity of the vehicle a communication range. Communication using radio waves by a device or the like, or other wireless communication device may be used.

  In the above embodiment, the case where the key ID 61 stored in the mobile terminal 14 is encrypted is illustrated. However, the present invention is not limited to this, and the key ID stored in the mobile terminal may not be encrypted. This eliminates the need for an encryption key, simplifies such a mobile key information management system, and increases its applicability.

  In the above-described embodiment, the case where the restoration program is executed based on the monitoring of the short-range communication after the vehicle-specific key ID 32 is saved is illustrated. However, the present invention is not limited to this, and the restoration program may be executed based on the operation of the unlock switch as long as it can be executed in a timely manner.

  -In above-mentioned embodiment, it illustrated about the case where the key ID 32 evacuated from the vehicle 10 was one. However, the present invention is not limited to this, and the key ID retracted from the vehicle may be a plurality of key IDs that are permitted to be used for the vehicle. Thereby, even when there are a plurality of electronic keys that can operate the vehicle, security against unauthorized use of the vehicle key ID is ensured.

In the above embodiment, the case where the key ID 32 of the vehicle 10 is saved and restored as key information has been illustrated. However, the present invention is not limited to this, and information related to the key ID together with the key ID of the vehicle, for example, time limit information of the key ID, functional information such as door unlocking and engine starting permitted for the key ID, vehicle information, Electronic key information or the like may be included in the key information and saved or restored. Thereby, security including information associated with the key ID is ensured.

  At this time, along with the encryption of the key ID, part or all of the information associated with the key ID may be encrypted. Furthermore, the encryption key may also be saved and restored by being included in the key information.

  In the above embodiment, the case where the key ID 32 is retracted after the door is locked is illustrated. However, the present invention is not limited to this, and the key ID may be retracted to the portable terminal, for example, in a vehicle regardless of the door locking. At this time, a cable or the like can be used for saving the key ID to the portable terminal. When the key ID is retracted in the vehicle, it is necessary to enable an operation for locking the door from the outside of the vehicle, but as such an operation, the key ID is not held in the vehicle. In some cases, it is conceivable to perform a specific operation inside the vehicle and then lock the door by operating the lock sensor outside the vehicle.

  In the above embodiment, the case where the key ID 32 of the vehicle 10 is retracted to the management center 13 via the mobile terminal 14 and restored to the vehicle 10 from the management center 13 via the mobile terminal 14 is illustrated. However, the present invention is not limited to this, and the key ID of the vehicle may be retracted to the portable terminal and restored from the portable terminal to the vehicle without being retracted to the management center and restored from the management center. This also saves the key ID of the vehicle and keeps its security high, and even if the mobile terminal cannot communicate with the management center, such a mobile key management system can be applied. it can. As a result, the environment in which the mobile key management system can be applied is expanded while maintaining the security performance of the vehicle, and the adoption possibility thereof is enhanced.

  In the above embodiment, the case where the key ID 61 encrypted by one portable terminal 14 is saved in the management center 13 and restored in the vehicle 10 is illustrated. However, the present invention is not limited to this, and as long as the mobile terminal is registered in the vehicle, the mobile terminal that evacuates the key ID to the management center may be different from the mobile terminal that restores the key ID to the vehicle. As a result, a plurality of portable terminals can be used, the degree of freedom of the mobile key management system is increased, and the adoption possibility is increased.

  In the above embodiment, the case where the prime mover is an engine has been illustrated. However, the present invention is not limited to this, and the prime mover may be an engine, a motor, a combination of a motor and an engine, or a combination including them as long as it drives a vehicle.

DESCRIPTION OF SYMBOLS 10 ... Vehicle, 11 ... Electronic key, 11K ... Key ID specific to electronic key, 12 ... Communication network, 13 ... Management center, 14 ... Mobile terminal, 20 ... Collation control device, 21 ... Key communication device, 21A ... Car interior antenna , 21B ... Outside antenna, 22 ... Door lock / unlock sensor, 23 ... Engine switch, 24 ... Vehicle control device, 241 ... Engine ECU, 25 ... Mobile communication device, 25A ... Mobile antenna, 26 ... Short-range communication device 26A ... Short-range antenna, 27 ... Status monitor, 30 ... Processing device, 31 ... Storage device as storage unit, 32 ... Key ID unique to vehicle, 32C, 43C ... Encryption key ID, 33, 44 ... Encryption key, 34 ... Terminal information, 40 ... Computer, 41 ... Communication device, 41L ... Line, 42 ... Storage device, 43 ... Retraction key ID, 50 ... Processing device, 1 ... storage unit, 52 ... mobile communication device, 52A ... mobile antenna, 53 ... short-range communication device, 53A ... short-range antenna, 60 ... application 6
1 ... Encrypted key ID.

Claims (6)

A key information management system for managing key information of a mobile unit through wireless communication between the mobile unit and a management center,
Short-distance communication between a storage unit arranged in the mobile unit and storing key information managed by the management center and a specific portable terminal registered in the mobile unit and registered in advance. An executable short-range communication device,
The key information stored in the storage unit is stored on the condition that the communication between the mobile body and the management center is interrupted when an operation for canceling the use of the mobile body is performed. A mobile key information management system, wherein the mobile information is retracted to the specific portable terminal through a distance communication device. The key information includes a key ID used for collation with a key ID of an electronic key used for the mobile body,
The near field communication device encrypts the key ID stored in the storage unit with an encryption key, and saves the key information including the encrypted key ID to the specific mobile terminal. Key information management system for mobiles. The mobile body according to claim 2, wherein the encryption key is transferred and held in advance from the management center to the mobile body during a period in which communication between the mobile body and the management center is possible. Key information management system. The mobile key information management system according to claim 2, wherein the encryption key is stored and held separately in the storage unit. The specific mobile terminal is a terminal capable of exchanging information with the management center by wireless communication, and further saves the key information saved from the mobile body to the management center. The mobile key information management system according to claim 1. The mobile device according to claim 5, wherein the specific mobile terminal re-acquires the key information saved in the management center and then restores the re-acquired key information to the storage unit through the short-range communication device. Key information management system.

Images