JP5576150B2 - Wireless communication system - Google Patents

Description

  The present invention relates to a wireless communication system used in, for example, a vehicle or a house.

  As one of such wireless communication systems, the vehicle door is automatically unlocked when the vehicle owner approaches the vehicle door while holding the electronic key, and the owner enters the vehicle interior. Systems that are permitted to start are known. Conventionally, for example, a system described in Patent Document 1 is known as such a vehicle wireless communication system. FIG. 10 shows an outline of a wireless communication system that has been generally employed conventionally, including the system described in Patent Document 1.

  As shown in FIG. 10, in this wireless communication system, for example, a transmission device 40 provided in the vehicle interior transmits a request signal to the communication area A set in the vehicle interior, and transmission provided in the vehicle door. A request signal is transmitted from the device 41 to the communication area B set around the vehicle door. In this wireless communication system, the electronic key 50 that receives the request signal transmitted from the transmission devices 40 and 41 and transmits a response signal including information such as an identification code (ID code) to the received request signal. Is owned by the owner. That is, when the owner having the electronic key 50 enters the communication area A or the communication area B, a response signal is transmitted from the electronic key 50. In this system, the response signal transmitted from the electronic key 50 is received by the receiving device 42 provided in the passenger compartment, and that effect is transmitted to the vehicle control device 43 that executes various controls relating to the vehicle. The vehicle control device 43 collates the ID code of the electronic key 50 included in the received response signal with the ID code stored in the memory in the control device 43 in advance. Vehicle control, such as unlocking the vehicle door through the door lock mechanism 44 or allowing the engine to start, is performed. According to such a wireless communication system, various control of the vehicle is automatically performed without direct manual operation of the owner, so that convenience for operation of the vehicle is greatly improved.

JP 2001-31333 A

  By the way, in such a wireless communication system, for example, a method of incorporating the function of the electronic key 50 in a mobile phone has been proposed. If such a method is adopted, the user who has the mobile phone does not need to carry the electronic key, so that the convenience for the user can be improved.

  However, in such a configuration, the owner of the vehicle needs to lend his mobile phone to the borrower when lending the vehicle to someone other than himself. However, since various types of personal information are often stored in the mobile phone, the owner may hesitate to rent the mobile phone and eventually stop renting the vehicle. This is one factor that reduces the convenience of the wireless communication system.

  Note that such a problem is not limited to the above-described wireless communication system of a vehicle, but, for example, the wireless of a house in which the door of the house is unlocked by approaching the entrance door while holding the electronic key. This is a common problem in communication systems.

  The present invention has been made in view of such circumstances, and an object of the present invention is to provide a wireless communication system capable of improving convenience as a system while maintaining high security.

In order to solve the above-described problem, an invention according to claim 1 includes a control device that controls driving of a control target, and a portable terminal that performs wireless communication with the control device, and the control device includes the portable device. In the wireless communication system that performs authentication of the portable terminal through wireless communication with the terminal and drives the control object based on the establishment of the authentication of the portable terminal, as the portable terminal, a specific portable terminal, and the have other mobile terminal different from the specific mobile terminal, wherein the control device, on condition that the authentication of the specific mobile terminal is established via the wireless communication with the specific mobile terminal, the specific mobile different from the first authentication information used for authentication of the terminal, and is intended to generate a second authentication information can be establish the authentication of the control device, the second authentication from the control device Obtains the distribution, it is summarized as further comprising an authentication information transmitting means for transmitting the acquired second authentication information before Symbol another portable terminal.

According to the system, when the owner wants to allow the borrower to perform the operation to be controlled, if the second authentication information is transmitted to the other portable terminal possessed by the borrower through the authentication information transmitting means, the other portable terminal However, since authentication can be established, the borrower can operate the control target as required. For this reason, an owner who owns a specific mobile terminal can permit the borrower to perform an operation to be controlled without lending his / her mobile terminal to the borrower. Can be raised. In addition, since the generation of the second authentication information is performed on the condition that the authentication of the specific mobile terminal is established, it is possible to suitably prevent the generation of the second authentication information by a third party. Therefore, the convenience as a system can be improved while maintaining high security.

The invention according to claim 2 is summarized in that, in the wireless communication system according to claim 1, the control device establishes authentication of the second authentication information only for a predetermined period.

According to the system, the second authentication information transmitted to the other portable terminal because the borrower possessing the other portable terminal cannot operate the control target when the predetermined period has elapsed. It is possible to avoid a situation in which the borrower manipulates the control target illegally by using. For this reason, the security as a system can be further improved.

The invention according to claim 3, in the wireless communication system according to claim 1 or 2, wherein the authentication information transmitting means, said Ri specific mobile terminal der, wherein the control device, prior to the second authentication information all SANYO for wirelessly transmitting to the serial specific mobile terminal, the specific mobile terminal includes a storage means for storing the second authentication information wirelessly transmitted from said control unit, said first stored in the storage means And 2) a communication means for wirelessly transmitting authentication information to the other portable terminal.

As in the system, if the second authentication information transmitted from the control device is stored in the storage means of the specific mobile terminal, the owner can carry the second authentication information by carrying the specific mobile terminal. It can be carried freely. Therefore, since the owner can permit the borrower to operate the control target at an arbitrary place, the convenience as the system is further improved.

According to a fourth aspect of the present invention, in the wireless communication system according to the third aspect, when the specific mobile terminal wirelessly transmits the second authentication information to the other mobile terminal via the communication unit. , performs processing for deleting the second authentication information wirelessly transmitted from the storage unit, the second authentication information in order to newly stored in the storage means, a signal requesting the second authentication information to the control device is intended to wirelessly transmit, the control device is configured to generate a new second authentication information based on the reception of a signal requesting the second authentication information, carry generated new second authentication information of the specific The gist is that it is wirelessly transmitted to the terminal.

According to the system, for example, when the specific mobile terminal and sending the second authentication information to the first mobile terminal, in particular mobile terminal, the second authentication information transmitted to the first mobile terminal memory means While being erased, new second authentication information generated by the control device is stored in the storage means. Therefore, the next time the first portable terminal that transmits the second authentication information from a particular mobile terminal to another second mobile terminal, the second authentication information transmitted to the first mobile terminal Another second authentication information is transmitted to the second portable terminal. That is, when there are a plurality of borrowers, the second authentication information transmitted to each borrower's mobile terminal is different from each other. For this reason, even if data transmitted from a specific mobile terminal to another mobile terminal is intercepted by a third party, it is difficult to specify the second authentication information . The leakage of authentication information can be prevented, and as a result, the security can be further improved.

According to a fifth aspect of the present invention, in the wireless communication system according to the third or fourth aspect, the number of the second authentication information stored in the storage unit of the specific mobile terminal is less than a predetermined number. Based on this, the gist is that a signal requesting the second authentication information is wirelessly transmitted to the control device.

According to the system, since the number of second authentication information stored in the storage unit can be kept at a predetermined number, the owner can carry a plurality of second authentication information by carrying a specific mobile terminal. Can be carried around. As a result, even if there are a plurality of borrowers, the owner can transmit the second authentication information to the respective portable terminals of the borrowers, so that a plurality of borrowers are permitted to operate the control target. Will be able to. Therefore, convenience as a system is greatly improved.

The invention according to claim 6, in a wireless communication system according to any one of claims 3-5, wherein the control device, the vehicle-mounted engine as the control target, based on the first authentication information is intended to start the vehicle engine on condition that the authentication of a specific mobile terminal is established, when the specific mobile terminal authentication was started the vehicle engine on the condition that satisfied, the vehicle engine The gist is to wirelessly transmit the second authentication information to the specific mobile terminal only during the driving period.

According to the system, since the second authentication information is transmitted to the specific portable terminal during the period when the in-vehicle engine is driven, that is, during the period when the owner of the vehicle is estimated to be on board, The second authentication information can be transmitted in a situation where there is a low possibility that the person exists near the vehicle. For this reason, when transmitting 2nd authentication information to a specific portable terminal from a control apparatus, since the situation where the 2nd authentication information is intercepted by the third party can be avoided, a security level is raised. Will be able to.

  According to the wireless communication system of the present invention, it is possible to improve convenience as a system while maintaining high security.

The block diagram which shows the system configuration | structure about one Embodiment of the radio | wireless communications system concerning this invention. The flowchart which shows the process sequence about the portable terminal authentication process by the radio | wireless communications system of the embodiment. The flowchart which shows the process sequence about the engine starting signal transmission process by the radio | wireless communications system of the embodiment. 6 is an exemplary flowchart illustrating a processing procedure for temporary key generation processing by the wireless communication system according to the embodiment; 6 is an exemplary flowchart illustrating a processing procedure for temporary key registration processing by the wireless communication system according to the embodiment; The sequence chart which shows the operation example of the radio | wireless communications system of the embodiment. The sequence chart which shows the operation example of the radio | wireless communications system of the embodiment. The sequence chart which shows the operation example of the radio | wireless communications system of the embodiment. The sequence chart which shows the operation example of the radio | wireless communications system of the embodiment. The top view which shows typically the structure of the conventional radio | wireless communications system.

  Hereinafter, an embodiment in which a wireless communication system according to the present invention is embodied in a vehicle wireless communication system will be described with reference to FIGS. The basic configuration of the wireless communication system to which this embodiment is applied is the same as that of the wireless communication system illustrated in FIG. That is, also in this wireless communication system, the mobile terminal 20 is authenticated by performing wireless communication between the in-vehicle device 10 mounted on the vehicle and the mobile terminal 20 carried by the owner of the vehicle. Incidentally, in this embodiment, as an authentication method of the mobile terminal 20, the in-vehicle device 10 and the mobile terminal 20 have the same encryption key, and the random number information (challenge code) is encrypted with the common encryption key. A so-called challenge-response authentication method that performs authentication based on this is adopted. The in-vehicle device 10 permits the start of the engine mounted on the vehicle on condition that the authentication of the mobile terminal 20 is established. FIG. 1 is a block diagram showing the system configuration of such a radio communication system. First, the configuration and operation of the radio communication system of this embodiment will be described with reference to FIG.

  Here, the in-vehicle device 10 is provided with a receiving device 12 for receiving a response signal transmitted from the portable terminal 20 together with a transmitting device 11 for transmitting a challenge signal to the communication area A set in the passenger compartment. It has been. The in-vehicle device 10 includes an engine switch 14 that is turned on by a driver when starting an engine 13 mounted on the vehicle, and a brake pedal switch 15 that is turned on based on a depression operation of a brake pedal. Is provided. The output signals of these switches 14 and 15 are taken into the vehicle control device 16 having an arithmetic processing unit (CPU), a nonvolatile memory 16a as a storage means, and the like. The vehicle control device 16 is a portion that executes transmission control of a challenge signal by the transmission device 11, processing of a response signal received through the reception device 12, start control of the engine 13, and the like. The memory 16a of the vehicle control device 16 stores a main key KM that is a common encryption key used for the challenge response authentication, an encryption algorithm, and the like.

  On the other hand, the mobile terminal 20 is a so-called mobile phone, and is configured to include a transmission / reception device, a microphone, a speaker (not shown) and the like for transmitting and receiving radio waves including voice information when making a call. The mobile terminal 20 includes a receiving device 21 for receiving a challenge signal transmitted from the in-vehicle device 10 and a transmitting device 22 for transmitting a response signal to the in-vehicle device 10 based on reception of the challenge signal. Is provided. Further, the mobile terminal 20 includes a short-range communication device 23 for exchanging various data with other mobile terminals based on Bluetooth communication, and an operation unit 24 that is pushed by an owner when inputting a telephone number. Is also provided. Then, the output signal of the operation unit 24 is taken into a terminal control device 25 having an arithmetic processing unit (CPU), a nonvolatile memory 25a as a storage means, and the like. This terminal control device 25 is a part for executing generation of a response signal based on a challenge signal received through the receiving device 21, transmission control of the response signal through the transmitting device 22, communication control of the short-range communication device 23, and the like. It is. The memory 25a of the terminal control device 25 also stores, for example, a main key KM that is a common encryption key used for the challenge response authentication, an encryption algorithm, and the like.

  Note that this configuration as a mobile terminal is the same for the mobile terminal 30 other than the mobile terminal 20. That is, the mobile terminal 30 also includes a receiving device 31, a transmitting device 32, a short-range communication device 33, an operation unit 34, a terminal control device 35, and the like. However, the portable terminal 30 is different from the owner portable terminal 20 in that the main key KM is not stored in the built-in nonvolatile memory 35a.

  In the wireless communication system configured as described above, for example, if an owner who has the portable terminal 20 gets on the vehicle and steps on the brake pedal, signal transmission / reception between the in-vehicle device 10 and the portable terminal 20 is performed. This is performed in the following manner. First, the vehicle control device 16 generates a random number C and detects a challenge signal including the generated random number C to the communication area A via the transmission device 11 when detecting the depression of the brake pedal through the brake pedal switch 15. Send. Then, the challenge signal is received via the receiving device 21 of the mobile terminal 20 and the received challenge signal is transmitted to the terminal control device 25. In the terminal control device 25, when the challenge signal is transmitted in this way, the random number C included in the challenge signal is encrypted using the main key KM stored in the memory 25a and the encrypted signal is encrypted. A response signal including the random number C is generated. Further, the terminal control device 25 transmits the response signal to the in-vehicle device 10 by transmitting the generated response signal to the transmission device 22. As a result, the in-vehicle device 10 receives the response signal via the receiving device 12 and transmits the received response signal to the vehicle control device 16. When the response signal is transmitted in this way, the vehicle control device 16 encrypts the random number C generated by itself using the main key KM to calculate the encrypted random number, and also calculates the calculated encrypted random number and the response. The encrypted random number included in the signal is checked. When the vehicle control device 16 determines that the encrypted random numbers match each other through this verification, the vehicle control device 16 determines that the authentication of the mobile terminal 20 has been established, and permits the engine 13 to start. Further, when the vehicle control device 16 detects the on operation of the engine switch 14 when the start of the engine 13 is permitted in this way, the vehicle control device 16 starts the engine 13.

  By the way, in such a wireless communication system, the owner of the vehicle needs to lend the portable terminal 20 storing the main key KM to the borrower when lending the vehicle to someone other than himself. However, since various types of personal information are often stored in the mobile terminal 20, the owner may hesitate to lend the mobile terminal 20 and eventually stop renting the vehicle. This is one factor that reduces the convenience of the wireless communication system.

  Therefore, in the present embodiment, the temporary keys KT1 to KTm, which are encryption keys other than the main key KM, are generated in the vehicle control device 16, and the generated temporary keys KT1 to KTm are stored in the memory 16a of the in-vehicle device 10. (Where “m” is an integer of 2 or more). Further, when the temporary key request signal is transmitted from the mobile terminal 20 to the in-vehicle device 10, the temporary keys KT <b> 1 to KTm are transmitted from the in-vehicle device 10 to the mobile terminal 20, whereby the temporary keys KT <b> 1 to KTm are transmitted to the mobile terminal 20. It is stored in the memory 25a. When the owner possessing the portable terminal 20 rents the vehicle to the borrower, the owner transmits the temporary keys KT1 to KTm from the portable terminal 20 to the borrower's portable terminal 30, thereby making these temporary keys KT1 to KT1. The KTm is stored in the memory 35a of the portable terminal 30. That is, since the same encryption key can be shared between the portable terminal 30 possessed by the borrower and the in-vehicle device 10 through such a series of processing, the in-vehicle device 10 authenticates the portable terminal 30. Will be able to. Therefore, the borrower can start the engine 13 using his / her mobile terminal 30 without borrowing the mobile terminal 20 from the owner.

  In the present embodiment, for example, after the number of times that the engine 13 is started based on the authentication of the temporary key KT1 reaches a predetermined number LCa, the authentication of the temporary key KT1 is not established. That is, the temporary keys KT1 to KTm are authenticated only for a predetermined period.

Next, processing executed through the vehicle control device 16 and the terminal control device 25 will be described with reference to FIGS.
FIG. 2 is a flowchart showing a processing procedure for authenticating the portable terminals 20 and 30 based on the main key KM and the temporary keys KT1 to KTm, which is executed through the vehicle control device 16. This process is executed when a response signal is received via the receiving device 12. The authentication establishment flag F is set to “0” as an initial value when this process is started.

  As shown in FIG. 2 and as described above, in this process, first, the encrypted random number CRa is obtained by encrypting the random number C generated by the vehicle control device 16 using the main key KM. While being calculated (step S10), it is determined whether authentication of the owner's mobile terminal 20 has been established (step S11). In the process of step S11, specifically, the encrypted random number CRa calculated through step S10 and the encrypted random number CRb included in the response signal match each other to authenticate the owner's mobile terminal 20 It is determined that is established. Here, when the authentication of the owner's mobile terminal 20 is established (step S11: YES), the start of the engine 13 is permitted (step S12), and the authentication establishment flag F is set to “1” (step S12). In step S13), the vehicle control device 16 ends this series of processing.

  On the other hand, when the authentication of the owner's mobile terminal 20 has not been established (step S11: NO), as a process of the subsequent step S14, the random number C is encrypted using the temporary keys KT1 to KTm. Each of CR1 to CRm is calculated, and it is determined whether authentication of a mobile terminal other than the owner mobile terminal 20 has been established (step S15). In the process of step S15, specifically, when any of the encrypted random numbers CR1 to CRm calculated through the process of step S14 matches the encrypted random number CRb included in the response signal, the owner's It is determined that authentication of mobile terminals other than the mobile terminal 20 has been established. And when authentication of portable terminals other than the portable terminal 20 of an owner is materialized (step S15: YES), starting of the engine 13 is permitted (step S16), and the vehicle control apparatus 16 complete | finishes this series of processes. To do.

  On the other hand, when the authentication of the borrower's portable terminal 30 is not established (step S15: NO), the vehicle control device 16 ends this series of processing without permitting the engine 13 to be started.

  Next, with reference to FIG. 3, a process for transmitting an engine start signal that is executed through the vehicle control device 16 will be described. FIG. 3 is a flowchart showing the procedure of the process. This process is executed when the engine 13 is started.

  As shown in FIG. 3, in this process, first, it is determined whether or not the authentication of the owner's mobile terminal 20 has been established (step S20). In the process of step S20, specifically, when the value of the authentication establishment flag F is “1”, it is determined that the authentication of the owner's mobile terminal 20 has been established. If it is determined that the owner's mobile terminal 20 has been authenticated (step S20: YES), a signal indicating that the engine has been started is transmitted to the communication area A (step S21). ) The vehicle control device 16 ends this series of processing.

  On the other hand, if it is determined through the processing in step S20 that the owner's mobile terminal 20 has not been authenticated (step S20: NO), the vehicle control device 16 does not transmit the engine start signal, A series of processing ends.

  Next, with reference to FIG. 4, the process which produces | generates the temporary key performed through the vehicle control apparatus 16 is demonstrated. FIG. 4 is a flowchart showing the processing procedure. This process is executed when the temporary key request signal is received via the receiving device 12.

  As shown in FIG. 4, in this process, it is first determined whether or not the engine 13 is being driven (step S30). If it is determined that the engine 13 is being driven (step S30: YES), one temporary key is generated (step S31), and the generated temporary key is stored in the memory 16a. (Step S32). In addition, a temporary key issuing signal including the generated temporary key is generated (step S33), and the temporary key issuing signal is transmitted to the communication area A (step S34). Terminate the process.

  On the other hand, if it is determined through the process of step S30 that the engine 13 is not being driven (step S30: NO), a signal including information indicating that the temporary key issuance is stopped is transmitted to the communication area A. (Step S35), the vehicle control device 16 ends this series of processes.

  Next, the temporary key registration process executed through the terminal control device 25 will be described with reference to FIG. FIG. 5 is a flowchart showing the processing procedure. This process is executed when the engine start signal is received via the receiving device 21.

  As shown in FIG. 5, in this process, first, it is determined whether or not the number of temporary keys stored in the memory 25a is less than a predetermined number n (step S40). If the number of temporary keys stored in the memory 25a is less than the predetermined number n (step S40: YES), a signal including a command requesting a temporary key is transmitted to the in-vehicle device 10. (Step S41), it is determined whether or not a temporary key issuance signal has been received (Step S42). If it is determined that a temporary key issue signal has not been received (step S42: NO), it is determined whether a temporary key issue stop signal has been received (step S43), and a temporary key issue stop signal is received. Is determined not received (step S43: NO), the determination process of step S42 is executed again. If a temporary key issuance signal is received (step S42: YES), the temporary key included in the temporary key issuance signal is stored in the memory 25a (step S44), and the process of step S40 is performed again. Executed. Note that the processes in steps S40 to S44 are repeatedly executed during a period in which the number of temporary keys stored in the memory 25a is less than the predetermined number n (step S40: YES).

  When the number of temporary keys stored in the memory 25a reaches the predetermined number n (step S40: NO), or when a temporary key issuance stop signal is received (step S43: YES), the terminal control device 25 ends this series of processing.

Next, with reference to FIG. 6, how the temporary key is generated based on these processes and how the temporary key is stored in the memory 25 a of the mobile terminal 20 will be described.
For example, it is assumed that the owner who has the portable terminal 20 gets on the vehicle and depresses the brake pedal. At this time, as shown in FIG. 6, after the processing related to the authentication communication described above between the in-vehicle device 10 and the portable terminal 20, that is, the processing of steps S <b> 50 to S <b> 54, the vehicle control device 16 When it is determined that the authentication of the mobile terminal 20 is established (step S55), the engine 13 is allowed to start (step S56). Thereafter, if the owner turns on the engine switch 14, the vehicle control device 16 detects that fact and starts the engine 13 (step S57), and sends an engine start signal via the transmission device 11 to the communication area. A is transmitted to A (step S58). By transmitting the engine start signal to the communication area A in this way, the owner's portable terminal 20 receives the engine start signal via the receiving device 21. At this time, if the number of temporary keys stored in the memory 25a of the portable terminal 20 is less than the predetermined number n, the terminal control device 25 generates a temporary key request signal and sends it through the transmission device 22. Is transmitted to the in-vehicle device 10 (step S59). As a result, the in-vehicle device 10 receives this temporary key request signal via the receiving device 12, and the vehicle control device 16 generates one temporary key (step S60). In addition, the vehicle control device 16 stores the generated temporary key in the memory 16a (step S61), generates a temporary key issuance signal including the temporary key, and transmits it to the communication area A via the transmission device 11. Transmit (step S62). Then, the portable terminal 20 receives this temporary key issuance signal via the receiving device 21, and the terminal control device 25 stores the temporary key included in the received temporary key issuance signal in the memory 25a (step S63). Subsequently, the terminal control device 25 determines whether or not the number of temporary keys stored in the memory 25a is less than the predetermined number n (step S64), and the number of temporary keys is less than the predetermined number n. (Step S64: YES), the temporary key request signal is transmitted again to the in-vehicle device 10 via the transmission device 22 (step S59). When the number of temporary keys stored in the memory 25a reaches the predetermined number n (step S64: NO), the vehicle control device 16 and the terminal control device 25 end this series of processes.

  According to such a configuration as a wireless communication system, the number of temporary keys stored in the mobile terminal 20 can be kept at a predetermined number n, so that the owner can carry his / her mobile terminal 20 by carrying it with him / her. A plurality of temporary keys KT1 to KTm can be carried. As a result, even if there are multiple borrowers, the temporary key can be sent to each borrower's mobile terminal, so the owner can lend the vehicle to multiple borrowers, and as a system The convenience will be improved.

  As shown in FIG. 7 as a diagram corresponding to FIG. 6, when the owner stops the engine 13 after the vehicle control device 16 transmits the engine start notification through the process of step S <b> 58 (step S <b> 65), When receiving the temporary key request signal, the vehicle control device 16 transmits a temporary key issuance stop signal to the communication area A (step S66). When receiving the temporary key issuance stop signal via the receiving device 21 (step S64), the terminal control device 25 ends the series of processes.

  According to such a configuration as the wireless communication system, the authentication information is transmitted to the portable terminal 20 during the period when the engine 13 is driven, that is, during the period when the owner of the vehicle is estimated to be in the vehicle. Therefore, the temporary key can be transmitted in a situation where there is a low possibility that a third party exists near the vehicle. For this reason, a situation in which the temporary key is intercepted by a third party can be avoided, so that the security level can be increased.

Next, with reference to FIG. 8, a state where temporary keys KT1 to KTm stored in the owner's portable terminal 20 are transmitted to the borrower's portable terminal 30 will be described.
For example, it is assumed that the owner performs an operation necessary for lending the vehicle to the operation unit 24 of the mobile terminal 20, for example, an operation for inputting a lending period. At this time, when detecting this operation (step S70), the terminal control device 25 determines the number of temporary keys KT1 to KTm to be lent based on the inputted rental period information (step S71). Specifically, for example, when the lending period is one week, the number of temporary key lending is “1”, and when the lending period is two weeks, the number of temporary key lending is “2”. Is set. In this embodiment, since the number of times the engine 13 can be started based on the temporary key authentication is limited, when the vehicle is rented over a long period of time, This is to avoid a situation where the borrower cannot start the engine. Then, following the process of step S71, the terminal control device 25 generates a temporary key lending signal including one or a plurality of temporary keys, and transmits this to the portable terminal 30 via the short-range communication device 23. (Step S72). Further, after transmitting the temporary key lending signal in this way, the terminal control device 25 deletes the transmitted temporary key information from the memory 25a (step S73). On the other hand, when the borrower's portable terminal 30 receives the temporary key lending signal via the short-range communication device 33, the terminal control device 35 stores the temporary key included in the temporary key lending signal in the memory 35a. (Step S74).

  According to such a configuration as the wireless communication system, for example, if the temporary key KT1 is transmitted from the owner's portable terminal 20 to the borrower's portable terminal 30, the information on the temporary key KT1 is deleted from the memory 25a. For this reason, when a temporary key is transmitted from the owner portable terminal 20 to a portable terminal different from the portable terminal 30 next, a temporary key different from the temporary key KT1, for example, the temporary key KT2 is transmitted. That is, when there are a plurality of borrowers, the temporary keys transmitted to the respective portable terminals of the borrowers are different from each other. For this reason, even if the data transmitted from the owner's mobile terminal 20 to the borrower's mobile terminal is intercepted, it becomes difficult to specify the contents of the temporary key, so that the temporary key is leaked to a third party. Can be prevented, and as a result, security can be improved.

  In addition, since wireless communication between the owner's mobile terminal 20 and the borrower's mobile terminal 30 is performed by Bluetooth communication, it is possible to set a password while performing encryption processing on data exchanged between them. Is possible. For this reason, it is possible to effectively avoid a situation in which the temporary key is eavesdropped by a third party, so that the security of the system can be further improved.

  Next, a state in which the borrower's portable terminal 30 is authenticated will be described with reference to FIG. Here, the case where temporary key KT1 is stored in portable terminal 30 is illustrated.

  For example, suppose that a borrower who has the portable terminal 30 gets on the vehicle and steps on the brake pedal. At this time, as shown in FIG. 9, a process related to authentication communication between the in-vehicle device 10 and the portable terminal 30, that is, the processes of steps S <b> 80 to S <b> 84 are executed. However, in this case, the terminal control device 35 encrypts the random number C using the temporary key KT1 (step S82), and transmits a response signal including the encrypted random number CRb to the in-vehicle device 10 via the transmission device 32. (Step S83). For this reason, the vehicle control device 16 determines that the authentication of the owner's mobile terminal 20 has not been established (step S85), and then encrypts the random number C generated by itself using the temporary keys KT1 to KTm. Thus, the encrypted random numbers CR1 to CRm are respectively calculated (step S86). And if the vehicle control apparatus 16 judges that authentication of portable terminals other than the owner's portable terminal 20 was materialized (step S87), it will start the engine 13 (step S88). Thereafter, if the borrower turns on the engine switch 14, the vehicle control device 16 detects that fact and starts the engine 13 (step S89), and increments the value of the built-in counter LC1 (step S90). ). In other words, the value of the counter LC1 indicates the number of times the engine 13 has been started after performing authentication using the temporary key KT1. Note that the vehicle control device 16 also performs a process of setting the value of the counter LC1 to “0” when the process of generating the temporary key KT1 is performed. Then, the vehicle control device 16 determines whether or not the value of the counter LC1 is equal to or greater than a predetermined number LCa (step S91). If the value of the counter LC1 is equal to or greater than the predetermined number LCa, the temporary key KT1 is determined. Is deleted from the memory 16a (step S92).

  Incidentally, the vehicle control device 16 also has the same counters LC2 to LCm for the temporary keys KT2 to KTm, and the number of times the engine 13 is started after authentication is performed using the temporary keys KT2 to KTm. Management is performed using these counters LC2 to LCm.

  According to such a configuration, for example, after the number of times the engine 13 is started based on the authentication of the temporary key KT1 reaches the predetermined number LCa, the authentication of the mobile terminal 30 is not established, and thus the mobile terminal 30 is The tenant who owns the engine cannot start the engine 13. For this reason, for example, a situation in which the borrower illegally starts the engine 13 using the temporary key KT1 can be avoided, so that the security can be further improved.

As described above, according to the wireless communication system according to the present embodiment, the following effects can be obtained.
(1) The temporary key is generated by the vehicle control device 16 on condition that authentication of the owner's portable terminal 20 is established. Further, the generated temporary key is stored in the owner's portable terminal 20 and the temporary key is transmitted to the borrower's portable terminal 30 through wireless communication between the owner's portable terminal 20 and the borrower's portable terminal 30. I made it. As a result, the owner of the vehicle can permit the borrower to start the engine 13 without renting out his / her mobile terminal 20, thereby improving convenience as a wireless communication system. It becomes like this. Moreover, since the owner can permit the borrower to start the engine at any place if he / she carries the portable terminal 20, the convenience can be improved in this respect as well. Furthermore, since it is possible to suitably prevent generation of temporary keys by a third party, it is possible to maintain high security.

  (2) After the number of times that the engine 13 is started based on the authentication of the temporary keys KT1 to KTm reaches the predetermined number LCa, the authentication of the temporary keys KT1 to KTm is not established. As a result, for example, a situation in which the borrower illegally operates the vehicle using the temporary keys KT1 to KTm can be avoided, so that the security as a wireless communication system can be further improved. Become.

  (3) When the temporary keys KT1 to KTm are transmitted from the owner's portable terminal 20 to the borrower's portable terminal 30, the process of deleting the transmitted temporary key information from the memory 25a of the portable terminal 20 is performed. In addition, a temporary key request signal is transmitted from the portable terminal 20 to the in-vehicle device 10 in order to newly store the temporary key in the memory 25a. The vehicle control device 16 newly generates a temporary key based on the reception of the temporary key request signal, and transmits the generated temporary key to the portable terminal 20. As a result, when there are multiple borrowers, the temporary keys transmitted to each borrower's mobile terminal are different from each other, and therefore leakage of temporary keys to third parties can be prevented. As a result, the security can be further improved.

  (4) The temporary key is transmitted from the vehicle control device 16 to the portable terminal 20 only during the period when the engine 13 is driven. As a result, a situation in which the temporary key is intercepted by a third party can be avoided, so that the security level can be increased.

  (5) Wireless communication between the owner's mobile terminal 20 and the borrower's mobile terminal 30 is performed based on Bluetooth communication. Thereby, when the temporary key is transmitted from the portable terminal 20 to the portable terminal 30, it is possible to avoid a situation in which the temporary key is eavesdropped by a third party, so that the security level as a system can be further increased. become able to.

  (6) The mobile terminals 20 and 30 are authenticated based on the challenge response authentication method. Thereby, since the main key KM and the temporary keys KT1 to KTm are not transmitted as they are, the data exchanged between the in-vehicle device 10 and the mobile terminals 20 and 30 is intercepted by a third party. Even if it is done, the main key KM and the temporary keys KT1 to KTm do not leak to a third party. For this reason, since unauthorized use of the main key KM and the temporary keys KT1 to KTm by a third party can be prevented, a high security level can be maintained.

In addition, the said embodiment can also be implemented with the following forms which changed this suitably.
In the above embodiment, the mobile terminals 20 and 30 are configured by mobile phones. Instead, for example, a dedicated wireless communication device used in a wireless communication system, specifically the “background art” You may make it comprise with the electronic key etc. which were described in the column of "."

  In the above embodiment, the short-range communication devices 23 and 33 that perform Bluetooth communication are used as the communication means between the mobile terminal 20 and the mobile terminal 30, but instead of this, for example, a communication device that performs infrared communication, An appropriate communication device such as a device that performs communication using the Internet may be used. In addition, when the temporary key is transmitted from the portable terminal 20 to the portable terminal 30, the temporary key may not be encrypted. In short, it is only necessary for the mobile terminals 20 and 30 to be provided with communication means that can exchange temporary keys between the mobile terminal 20 and the mobile terminal 30.

  In the above embodiment, the short-range communication devices 23 and 33 are used as a method for transmitting the temporary keys KT1 to KTm from the mobile terminal 20 to the mobile terminal 30, but instead, for example, the following Such a method can also be adopted. First, as shown in FIG. 1, the owner displays the contents of the temporary keys KT <b> 1 to KTm on the display unit 26 such as a liquid crystal display provided in the portable terminal 20. Then, the borrower views the contents of the temporary keys KT1 to KTm displayed on the display unit 26 and inputs the contents to the operation unit 34, whereby the information on the temporary keys KT1 to KTm is stored in the memory of the portable terminal 30. Store in 35a. Also by such a method, it is possible to transmit temporary keys KT1 to KTm from mobile terminal 20 to mobile terminal 30.

  In the above embodiment, after the number of times that the engine 13 is started based on the authentication of the temporary keys KT1 to KTm reaches the predetermined number LCa, the authentication of the temporary keys KT1 to KTm is not established. . Alternatively, for example, after a predetermined time has elapsed since the temporary key KT1 was generated, the authentication of the temporary key KT1 may not be established. In short, temporary keys KT1 to KTm may be authenticated only for a predetermined period.

  In the above embodiment, the start operation of the engine 13 based on the authentication of the temporary keys KT1 to KTm is permitted within a predetermined range, but such restriction on the temporary keys KT1 to KTm may be excluded. However, from the viewpoint of security, it is desirable to provide some restrictions on the engine starting operation based on the authentication of the temporary keys KT1 to KTm.

  In the above embodiment, when the temporary key is transmitted from the portable terminal 20 to the portable terminal 30, the transmitted temporary key information is deleted from the memory 25a of the portable terminal 20, but it is the same for a plurality of borrowers, for example. If it is necessary to lend the temporary key, it is not necessary to delete the temporary key information. Such a configuration is effective when it is desired to set a limit on the number of times that the engine 13 can be started for a plurality of borrowers in the same manner.

  In the above-described embodiment, a plurality of temporary keys KT1 to KTm are stored in the owner's mobile terminal 20, but instead, for example, only one temporary key may be stored.

  In the above embodiment, when the brake pedal of the vehicle is depressed, the communication area A is formed in the passenger compartment to perform wireless communication between the in-vehicle device 10 and the mobile terminals 20 and 30, and through this wireless communication Temporary keys are generated on condition that authentication of the mobile terminals 20 and 30 is established. Instead of this, for example, as described in the “Background Art” section above, by forming the communication area B around the vehicle door, that is, by forming the communication area outside the vehicle compartment, the in-vehicle device 10 and the portable terminal 20, In addition to performing wireless communication with 30, a temporary key may be generated on the condition that authentication of the mobile terminals 20 and 30 is established through this wireless communication. Alternatively, the temporary key may be generated on condition that authentication of the mobile terminals 20 and 30 is established in both the communication area A in the vehicle interior and the communication area B outside the vehicle interior.

  In the above embodiment, the temporary key is transmitted from the vehicle control device 16 to the portable terminal 20 only during the period during which the engine 13 is driven. Instead, for example, the temporary key is set in the vehicle interior. Alternatively, the authentication may be performed when authentication of the mobile terminal 20 is established in the communication area A, or when authentication of the mobile terminal 20 is established in the communication area B set outside the passenger compartment.

  In the above embodiment, the owner's portable terminal 20 is used as the authentication information transmitting means for transmitting the temporary key to the borrower's portable terminal 30, but instead, for example, it is transmitted from the in-vehicle device 10. A dedicated device for storing the temporary key may be provided, and the temporary key may be transmitted from this device to the portable terminal 30 of the borrower.

  In the above embodiment, the challenge response authentication method is adopted as the authentication method of the mobile terminals 20 and 30, but instead of this, for example, as described in the “Background Art” section above, the in-vehicle device 10 And the portable terminals 20 and 30 may have a common identification code (ID code), and the portable terminals 20 and 30 may be authenticated based on the common ID code. That is, as the authentication information, an ID code may be used instead of an encryption key such as the main key KM and the temporary keys KT1 to KTm. In this case, it goes without saying that an ID code must be used instead of the main key KM and the temporary keys KT1 to KTm.

In the above embodiment, the radio communication system according to the present invention is applied to the radio communication system of the vehicle that permits the start of the engine 13 based on the authentication of the mobile terminals 20 and 30. The present invention can also be applied to a vehicle wireless communication system that unlocks a vehicle door based on authentication of the terminals 20 and 30. Further, the present invention is not limited to such a vehicle wireless communication system. For example, the present invention is applied to a residential wireless communication system in which the door is unlocked by approaching the entrance door while the owner of the house has a portable terminal. Is also possible. In short, the mobile terminal is authenticated by performing wireless communication between the control device that controls the drive of the control target and the mobile terminal, and the control target is driven through the control device based on the establishment of this authentication. Any wireless communication system may be used.
(Appendix)
Next, a technical idea that can be grasped from the above embodiment and its modifications will be additionally described.

(A) In order to establish the authentication of the second authentication information only for a predetermined period, the control device has driven the control target based on the authentication of the second authentication information to a predetermined number. Thereafter, the wireless communication system is characterized in that authentication of the second authentication information is not established. According to this system, a configuration in which authentication based on the second authentication information is established only for a predetermined period can be easily realized.

(B) pre-Symbol controlled object, the second in order to authenticate the authentication information is established only for a predetermined period of time, since after a predetermined period of time has elapsed from the time of generating the second authentication information, the second authentication A wireless communication system, characterized in that information authentication is not established. According to this system, a configuration in which authentication based on the second authentication information is established only for a predetermined period can be easily realized.

(C) before Symbol communication means, a radio communication system, characterized in that this by encrypting the second authentication information is intended to be transmitted to the other mobile terminals. According to the system, since it is possible to avoid a situation in which the second authentication information transmitted from a specific mobile terminal to another mobile terminal is intercepted by a third party, the security level as a system is further increased. Will be able to.

(D) pre-Symbol communication means, a radio communication system which is characterized in that utilizes the bluetooth communication. According to the system, since it is possible to set a password while performing encryption processing on the second authentication information transmitted from a specific mobile terminal to another mobile terminal, the third authentication information is intercepted by a third party . Can be avoided more effectively, and as a result, the security of the system can be further enhanced.

(E) before SL control device, the authentication of a particular mobile terminal, and is intended to carry out on the basis of the authentication of the other mobile terminals to the challenge response authentication scheme, the first authentication information and the second authentication information A wireless communication system characterized by being an encryption key used in the challenge response authentication method. According to the system, when wireless communication is performed between the control device and a specific mobile terminal, or when wireless communication is performed between the control device and another mobile terminal, it is shared between them. The encryption key information is not transmitted as it is, so even if the data exchanged between them is intercepted by a third party, the encryption key information cannot be leaked to the third party. Absent. Therefore, since unauthorized use of the encryption key by a third party can be prevented, the security level as a system can be maintained high.

(F) prior Symbol mobile device, a wireless communication system, comprising the mobile telephone. According to the system, the control target can be operated using the mobile phone owned by the owner or the mobile phone owned by the borrower, which improves the convenience of the owner and the borrower. To come.

  A ... Communication area, B ... Communication area, C ... Random number, F ... Authentication establishment flag, KM ... Main key, KT1-KTm ... Temporary key, 10 ... In-vehicle device, 11, 22, 32, 40, 41 ... Transmission device, 12, 21, 31, 42 ... receiving device, 13 ... engine, 14 ... switch, 14 ... engine switch, 15 ... brake pedal switch, 16, 43 ... vehicle control device, 16a ... memory, 20, 30 ... portable terminal, 23 33, near field communication device, 24, 34, operation unit, 25, 35 ... terminal control device, 25a, 35a ... memory, 26 ... display unit, 44 ... door lock mechanism, 50 ... electronic key.

Claims (6)

A control device for controlling the drive of the controlled object ;
A portable terminal that performs wireless communication with the control device,
The control device performs authentication of the portable terminal through wireless communication with the portable terminal, and in the wireless communication system that drives the control target based on the establishment of the authentication of the portable terminal .
As the mobile terminal, a specific mobile terminal, and another mobile terminal different from the specific mobile terminal,
The control device is different from the first authentication information used for authentication of the specific mobile terminal on the condition that authentication of the specific mobile terminal is established through wireless communication with the specific mobile terminal , and Generating second authentication information capable of establishing authentication of the control device;
Wireless communication system, characterized in that it comprises an authentication information transmitting means for transmitting from said control device to acquire said second authentication information, the acquired second authentication information before Symbol another portable terminal. The wireless communication system according to claim 1, wherein the control device establishes authentication of the second authentication information only for a predetermined period. The authentication information transmitting means, Ri the specific mobile terminal der,
It said controller state, and are not wirelessly transmit the second authentication information before Symbol specific mobile terminal,
The specific mobile terminal includes a storage means for storing the second authentication information wirelessly transmitted from said control unit, for wirelessly transmitting the second authentication information stored in the storage unit to the other mobile terminals The wireless communication system according to claim 1, further comprising: When the specific mobile terminal wirelessly transmits the second authentication information to the other mobile terminal via the communication unit, the specific mobile terminal performs a process of deleting the wirelessly transmitted second authentication information from the storage unit, In order to newly store the second authentication information in the storage means, a signal requesting the second authentication information is wirelessly transmitted to the control device,
Wherein the control unit is configured to generate a new second authentication information based on the reception of a signal requesting the second authentication information, the generated new second authentication information intended for wirelessly transmitting to the specific mobile terminal The wireless communication system according to claim 3. The specific portable terminal wirelessly transmits a signal requesting the second authentication information to the control device based on the fact that the number of the second authentication information stored in the storage unit is less than a predetermined number. The wireless communication system according to claim 4. Wherein the control device, the vehicle-mounted engine as the control target, wherein based on the first authentication information specific mobile terminal authentication is intended to start the vehicle engine on the condition that satisfied, the specific mobile When the in-vehicle engine is started on the condition that authentication of the terminal is established, the second authentication information is wirelessly transmitted to the specific portable terminal only during a period in which the in-vehicle engine is driven. Item 6. The wireless communication system according to any one of Items 3 to 5.

Images