JP7225680B2 - Control system and in-vehicle control device - Google Patents

Description

The present disclosure relates to vehicle door lock control.

2. Description of the Related Art A technology is known that enables execution and release of a door lock when a predetermined mobile terminal approaches a vehicle. For example, Patent Literature 1 below proposes a technique for improving security by increasing the number of signal transmissions.

Japanese Patent No. 5354299

2. Description of the Related Art In recent years, measures against so-called relay attacks have been studied, in which radio waves from a mobile terminal are amplified and relayed to unlock the door even when the mobile terminal is away from the vehicle. As a result of detailed examination by the inventor, it was found that it is desirable to apply multiple preventive measures against relay attacks, and that a technology for improving security from a different perspective from the above-mentioned patent document is desired. .

One aspect of the present disclosure provides a technique for improving vehicle security.

One aspect of the present disclosure is a mobile terminal (11, 111) that is portable, and an in-vehicle control device ( 12, 112) and a control system (101). The mobile terminal includes a first communication section (31, 123) configured to transmit a predetermined signal to the vehicle-mounted controller using a first wireless communication module (21). The in-vehicle control device uses the second wireless communication module (13) to receive the signal transmitted from the first communication unit (51, 133), and the second communication unit a determination unit (52, 132) configured to determine whether a predetermined condition regarding the relative position of the mobile terminal is satisfied based on the signal received from the first communication unit; a lock control unit (53) configured not to permit an unlocking operation to the lock mechanism when is satisfied.

With such a configuration, when the relative position of the mobile terminal satisfies a predetermined condition with a high probability of being illegal, the doors of the vehicle cannot be unlocked, so the security of the vehicle can be improved.

Another aspect of the present disclosure is an in-vehicle control device (12, 112) that is mounted in a vehicle (3) and controls a lock mechanism (61) that locks a door (14) of the vehicle, comprising: uses a wireless communication module (13) to perform wireless communication with a portable terminal (11, 111) and a communication unit (51, 133) based on a signal received from the portable terminal by the communication unit, A determination unit (52, 132) configured to determine whether or not a predetermined condition regarding the position of the mobile terminal is satisfied, and an unlocking operation for the lock mechanism when the predetermined condition is satisfied. and a lock control unit (53) configured not to permit.

With such a configuration, it is possible to improve the security of the vehicle, similarly to the control system of one aspect of the present disclosure described above.

2 is a functional block diagram of the control system of the first embodiment; FIG. 3 is a block diagram showing the configuration of an ECU; FIG. It is a flow chart of unlocking permission processing of a 1st embodiment. It is a functional block diagram of the control system of the second embodiment. It is a flow chart of unlocking permission processing of a 2nd embodiment.

Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.
[1. First Embodiment]
[1-1. composition]
The control system 1 shown in FIG. 1 includes a portable smart device 11, an ECU 12 mounted on a vehicle 3, a BLE (Bluetooth Low Energy) communication transmitter/receiver 13 (Bluetooth is a registered trademark). The ECU 12 controls a lock mechanism 61 provided on the door 14 of the vehicle 3 . The vehicle 3 may also include a light ECU 15 and a display device 16 . Note that the smart device 11 corresponds to a mobile terminal, and the ECU 12 corresponds to an in-vehicle control device. Also, the communication transmitting/receiving unit 13 corresponds to a second wireless communication module and a wireless communication module.

The control system 1 has a wireless authentication function (so-called smart entry/start system function) that enables locking/unlocking (unlocking) of the door 14 without using a mechanical key. The smart device 11 is a key device with a wireless authentication function, and when the smart device 11 is close to the ECU 12, the door 14 can be locked or unlocked by the user performing a predetermined operation.

The lock mechanism 61 of the vehicle 3 is a device that locks and unlocks the door 14 . The door 14 is provided with a button 62 connected to the ECU 12, and the user operates the button 62 to switch between a locked state and an unlocked state. Note that the user's operation to switch between the locked state and the unlocked state is not limited to this. For example, a non-illustrated contact sensor, proximity sensor, or the like may be arranged on the door or in the vicinity thereof, and switching may be performed using detection signals thereof as a trigger.

<Configuration of smart device 11>
The smart device 11 includes a BLE communication transmitter/receiver 21 and a control device 22 . The smart device 11 may also include a display 23 , touch panel 24 and mechanical keys 25 .

The BLE communication transmitting/receiving unit 21 is a module for performing wireless communication with the BLE communication transmitting/receiving unit 13 of the ECU 12, and transmits signals by the BLE method. The BLE communication transmitting/receiving unit 21 can communicate with a device located several tens of meters away. When communicating with the ECU 12 by a plurality of communication methods, a plurality of modules corresponding to the communication methods may be arranged. For example, it may further comprise a module for executing RF signals, LF signals, or other communication schemes of Bluetooth. Note that the BLE communication transmitting/receiving unit 21 of the smart device 11 corresponds to a first wireless communication module.

The control device 22 is a microcomputer having a CPU and semiconductor memory, and controls the smart device 11 as a whole. Controller 22 may comprise multiple microcomputers with separate functions. The control device 22 functions as a first communication section 31 and a notification execution section 32 . The first communication unit 31 can use the BLE communication transmission/reception unit 21 to transmit signals for authentication and unlocking of the smart device 11 to the ECU 12 . The notification execution unit 32 causes the display 23 to display a predetermined image as notification processing, which will be described later.

The display 23 is a display device 16 such as a liquid crystal display that displays images, and displays images according to signals input from the control device 22 .
The touch panel 24 is an input device that is arranged on the surface of the display 23 and that allows input operations by being touched by the user. The mechanical key 25 is an input device that allows the user of the smart device 11 to perform an input operation by pressing it. The touch panel 24 and the mechanical keys 25 correspond to the reception section.

<Configuration of ECU 12>
The ECU 12 includes a microcomputer having a CPU 41 and a semiconductor memory such as RAM or ROM (hereinafter referred to as memory 42). Each function of the ECU 12 is implemented by the CPU 41 executing a program stored in a non-transitional substantive recording medium. In this example, the memory corresponds to a non-transitional substantive recording medium storing programs. Also, by executing this program, a method corresponding to the program is executed.

The ECU 12 includes a second communication section 51 , a determination section 52 and a lock control section 53 . The ECU 12 may further include a notification control section 54 . The method of realizing the function of each unit included in the ECU 12 is not limited to software, and some or all of the functions may be realized using one or more pieces of hardware. For example, when the above functions are realized by an electronic circuit that is hardware, the electronic circuit may be realized by a digital circuit, an analog circuit, or a combination thereof.

The second communication section 51 can receive the signal transmitted from the first communication section 31 using the communication transmission/reception section 13 .
Based on the signal received from the first communication unit 31 by the second communication unit 51, the determination unit 52 determines whether a predetermined condition regarding the position of the smart device 11 is satisfied. Information generated from the received signal and predetermined conditions will be described below.

The determination unit 52 acquires the relative distance between the smart device 11 and the ECU 12 based on the strength of the signal received from the first communication unit 31. Based on the signal received from the first communication unit 31 at the first timing and the signal received from the first communication unit 31 at the second timing, the determination unit 52 determines the above-described relative distance at each timing. Calculate Then, from the difference between the distances, the amount of change in distance described above during the period from the first timing to the second timing is acquired.

In addition, the determination unit 52 determines that (i) the smart device 11 is moving at a speed exceeding a predetermined threshold, and (ii) the smart device 11 is present in multiple locations at the same time. , it is determined that the predetermined condition is satisfied.

The lock control unit 53 locks and unlocks the door 14 according to the input operation to the button 62 . Further, when the predetermined condition described above is satisfied, an unlocking disapproval state is entered in which the unlocking operation of the lock mechanism 61 is not permitted. Here, disallowing unlocking operation means that unlocking is not executed even if an input operation to the button 62 is performed. This state is maintained until the touch panel 24 or the mechanical key 25 is operated to perform a predetermined input operation (state return operation, which will be described later). A state in which the door can be unlocked by a user's unlocking operation on the button 62 is hereinafter referred to as an unlocking permitted state.

The notification control unit 54 causes the notification device capable of executing the notification process to perform notification when it is determined that the predetermined condition described above is satisfied. The notification device here corresponds to the smart device 11 , the light ECU 15 and the display device 16 .

<Other configurations>
The light ECU 15 controls lighting of lights arranged outside the vehicle 3 . Such lights include, for example, headlights, width lights, direction indicators, and the like.

The display device 16 is a device that displays an image arranged in the vehicle interior of the vehicle 3 .
[1-2. process]
The first communication unit 31 of the smart device 11 transmits authentication information such as the ID code of the smart device 11 to the ECU 12, and the ECU 12 switches between the locked/unlocked state if the ID code can be verified. Note that the specific configuration of the wireless authentication function is not limited to this, and can be applied to various configurations in which a signal is transmitted by wireless communication from a key device. Processing when the ECU 12 receives a signal superimposed with authentication information output from the smart device 11 will be described below.

The unlock permission process executed by the CPU 41 of the ECU 12 will be described with reference to the flowchart of FIG. This process is repeatedly executed each time a signal output from the smart device 11 is received (for example, several hundred milliseconds).

First, in S<b>1 , the CPU 41 acquires the distance from the ECU 12 to the smart device 11 based on the intensity of radio waves received from the smart device 11 . Various well-known techniques can be adopted as a specific method for obtaining the distance between two points from the radio wave intensity.

In S2, the CPU 41 determines whether or not there is an abnormal state, that is, whether or not an abnormal state flag is set. The abnormal state flag is a flag that is set in S8 and S12, which will be described later. If not abnormal, the process proceeds to S3. On the other hand, if the state is abnormal, the process proceeds to S10.

In S<b>3 , the CPU 41 calculates the movement distance of the smart device 11 from the difference between the current position and the previous position of the smart device 11 . Specifically, the relative movement distance, that is, the A change in distance between the smart device 11 and the ECU 12 is calculated. The timing at which S1 was executed last time corresponds to the first timing, and the timing at which S1 is executed this time corresponds to the second timing. Also, the amount of change in the relative movement distance between the smart device 11 and the ECU 12 corresponds to the relative positional change between the mobile terminal and the in-vehicle control device.

In S4, the CPU 41 determines whether or not the movement distance calculated in S3 exceeds a specified value. The process of S4 is the process of determining whether or not a predetermined condition is satisfied. In this S4, it is determined whether or not any of (i) and (ii) described above is satisfied. For example, if the distance between the smart device 11 and the ECU 12 is 50 m, and the distance becomes 1 m the next moment, it is unlikely that the user holding the smart device 11 has moved. have a nature. Also, in this example, it can be said that the presence of the smart devices 11 in two locations is detected almost simultaneously.

Note that this specified value can be set based on, for example, the moving speed of the smart device 11 . In other words, for example, if the smart device 11 is moving at a speed exceeding 300 km/h, it can be determined that there is an abnormality. It may be set to 17m. Of course, the specified value is not limited to this, and various values can be used. Also, the specified value may be configured to change according to the communication interval of the smart device 11 . For example, the larger the communication interval, the larger the prescribed value. As a result, even if the moving speed of the smart device 11 is the same, it is possible to prevent the determination result from changing depending on the communication interval.

In S4, if the movement distance does not exceed the specified value, the process proceeds to S5. On the other hand, if the relative movement distance exceeds the specified value, the process proceeds to S8.
S5 is a step to which the abnormal state flag is not set and a predetermined condition is not satisfied. In S<b>5 , the CPU 41 determines whether the smart device 11 is within the user position area based on the distance between the ECU 12 and the smart device 11 . The user position area referred to here is a position near the vehicle (for example, within a range of about 1.5 m) and outside the vehicle. do. If the smart device 11 is within the user location area, the process proceeds to S6. On the other hand, if the smart device 11 is not within the user location area, the process proceeds to S7.

In S6, the CPU 41 brings the unlocking permission state described above. That is, the user can unlock by operating 62 . After that, the processing ends.
In S7, the CPU 41 sets the unlocking disallowed state described above. Since the smart device 11 is not near the vehicle 3, unlocking cannot be performed even if someone operates the button 62. - 特許庁After that, the processing ends.

S8 is a step to which the abnormal state flag is not set but a transition is made when a predetermined condition is satisfied. In S8, the CPU 41 sets an abnormal state flag. In situations such as (i) and (ii) described above, there is a possibility that an unauthorized operation such as a relay attack is being performed. Therefore, the abnormal state flag is set, and the above-described unlocking disapproval state is set in the following S9. After that, this process is terminated.

S10 is a step to which the process proceeds when an abnormal state flag is set. In S10, the CPU 41 notifies the user of the abnormal state. The fact that the abnormal state flag is set means that a predetermined condition has been satisfied before that. Therefore, the CPU 41 outputs a control signal for causing a device capable of notification processing to perform the notification processing. For example, an alarm screen may be displayed on the display 23 of the smart device 11, or notification may be given by a lamp or speaker (not shown). Further, the light ECU 15 may flash a light arranged outside the vehicle, or the display device 16 may display an alarm screen. Note that the notification process can be realized by various devices capable of notifying the user that a predetermined condition has been met, and the specific mode thereof is not particularly limited.

In S11, the CPU 41 determines whether or not a state return operation has been performed. In this embodiment, a predetermined input operation on the touch panel 24 and a pressing operation on the mechanical key 25 correspond to the state return operation.

If the state return operation has been performed in S11, the process proceeds to S12. On the other hand, if the state recovery operation has not been performed, the process ends.
In S12, the CPU 41 clears the abnormal state flag. After that, this process is terminated. That is, in this unlock permission process, if the abnormal state flag is set in S8, the state restoration operation is performed, and the state in which the abnormal state flag is set is maintained until the abnormal state flag is cleared in S12. It does not enter the unlocking permission state.

[1-3. effect]
According to 1st Embodiment detailed above, there exist the following effects.
(1a) The control system 1 cannot unlock the vehicle door 14 when a predetermined condition is satisfied regarding the relative position of the smart device 11 with respect to the ECU 12 . Here, the predetermined condition is a condition that is satisfied when there is a high probability that an unauthorized operation has been performed. Therefore, with the control system 1, the security of the vehicle 3 can be improved.

(1b) The determination unit 52 acquires the relative position change between the ECU 12 and the smart device 11, and determines whether or not a predetermined condition is satisfied for the position change. Specifically, the predetermined condition is satisfied when the smart device 11 is moving at a speed exceeding a predetermined threshold and when the smart device 11 is present in multiple locations at the same time. I judge. This makes it possible to detect unnatural movement of the smart device 11 and the presence of multiple smart devices 11 emitting the same signal, thereby detecting unauthorized operations.

(1c) The determination unit 52 acquires the distance from the smart device 11 based on the radio wave intensity of the signal received from the smart device 11 . Therefore, operations such as radio wave amplification can be detected as fraudulent.

(1d) When it is determined that the predetermined condition is satisfied, the lock control unit 53 puts the button 62 into a state in which it does not accept an unlocking operation, and performs a state restoration operation on the touch panel 24 or the mechanical keys 25 . Until then, the unlocking disallowed state in which the unlocking operation is not accepted is maintained. Therefore, if an unauthorized operation is performed, the lock cannot be unlocked unless the owner of the smart device 11 performs an operation. can be recognized.

In addition, the notification control unit 54 causes the smart device 11, the light ECU 15, the display device 16, and the like to execute notification processing, so that the owner of the smart device 11 and the surroundings can recognize that an unauthorized operation has been performed.

[2. Second Embodiment]
[2-1. Differences from First Embodiment]
Since the basic configuration of the second embodiment is the same as that of the first embodiment, differences will be described below. Note that the same reference numerals as in the first embodiment indicate the same configurations, and refer to the preceding description.

In the first embodiment described above, the determination unit 52 acquires the relative distance between the smart device 11 and the ECU 12 based on the radio wave intensity transmitted from the smart device 11 . In contrast, the control system 101 of the second embodiment is different from the first embodiment in that the smart device 111 transmits a signal including position information to the ECU 112 .

As shown in FIG. 4, the smart device 111 has a GNSS receiver 121 and acquires GNSS signals. The control device 122 acquires the current position of the smart device 111 from the received GNSS signals. The first communication unit 123 transmits information indicating the current position to the ECU 112 via the BLE communication transmission/reception unit 21 .

Similarly, the ECU 112 also includes a GNSS receiver 131 to acquire GNSS signals. The determination unit 132 acquires the current position of the ECU 112 from the GNSS signal acquired by the GNSS reception unit 131 . The determination unit 132 also compares the current position received by the second communication unit 133 from the smart device 111 and the current position of the ECU 112, and determines whether or not a predetermined condition is satisfied. Note that the smart device 111 may transmit the GNSS signal acquired by the GNSS receiver 121 to the ECU 112 and the determination unit 132 may calculate the position of the smart device 111 . It should be noted that the signal received by the second communication unit 133 corresponds to the signal including the location information of the mobile terminal.

Then, (iii) the determination unit 132 determines that the predetermined condition is satisfied when the distance between the smart device 111 and the ECU 112 is greater than the predetermined distance.
[2-2. process]
Next, unlocking permission processing executed by 41 of the second embodiment in place of the unlocking permission processing (FIG. 3) of the first embodiment will be described with reference to the flowchart of FIG. Note that the processing of S2, S5-S12 in FIG. 5 is the same as the processing of S2, S5-S12 in FIG. 3, so the description is partially simplified.

First, in S<b>21 , the CPU 41 acquires the current position received from the smart device 111 . After that, the process shifts to S2.
If it is determined in S2 that the abnormal state flag is not set, in S22 the relative distance between the current position of the ECU 112 and the current position of the smart device 111 obtained in S21 is calculated based on them. .

In S23, it is determined whether or not the relative distance exceeds a specified value. This process is a determination as to whether or not the predetermined condition described above is satisfied. The specified value is set to a distance (for example, 100 m) at which radio waves from the BLE communication transmitting/receiving unit 21 do not reach. If the relative distance exceeds the specified value, it can be expected that there is a possibility that an unauthorized operation is being performed. If the relative distance exceeds the specified value, the process proceeds to S8. On the other hand, if the relative distance does not exceed the specified value, the process proceeds to S5.

[2-3. effect]
According to the second embodiment described in detail above, the effects (1a) and (1d) of the first embodiment described above are obtained, and the following effects are also obtained.

(2a) The determination unit 132 acquires the current location of the smart device 11 and determines whether or not the current location satisfies a predetermined condition. Specifically, when the distance between the smart device 111 and the ECU 112 is greater than or equal to a predetermined distance, it is determined that the predetermined condition is satisfied. If the smart device 111 receives radio waves even though it is located in a remote location where radio signals cannot normally reach, there is a possibility that an unauthorized operation is being performed. Therefore, unauthorized operation can be detected by the above determination.

[3. Other embodiments]
Although the embodiments of the present disclosure have been described above, the present disclosure is not limited to the above-described embodiments, and various modifications can be made.

(3a) In each of the above-described embodiments, a smart device was used as a key device for unlocking the door, but the key device is not limited to the above configuration, and various configurations capable of wireless communication with the ECU of the vehicle are possible. can be For example, a device that does not include the display 23 or the touch panel 24 or a device that does not include the mechanical key 25 may be used.

(3b) In the above-described second embodiment, the configuration for identifying the current position of the smart device 111 based on the GNSS signal and detecting unauthorized operation based on the distance from the ECU 112 has been exemplified. However, for example, as in the first embodiment, a change in the current position of the smart device 111 may be acquired and an unauthorized operation may be detected by determining whether the position change satisfies a predetermined condition.

(3c) The method of acquiring the location information of the smart device 111 is not limited to methods using satellite signals such as GNSS and GPS. For example, various well-known methods such as a method of estimating position using the phase difference of radio waves such as Angle of Arrival (AOA) and a method of estimating position based on the delay time of radio waves such as Time of Arrival (TOA) are used. can be used to obtain the location of the smart device. When the position of the smart device is acquired, it may be determined whether or not the distance between the smart device and the ECU is greater than a predetermined distance as in (iii) of the second embodiment. As in (i) and (ii) of the embodiment, the moving speed of the smart device and the presence of smart devices at multiple locations may be determined.

(3d) The determination unit 52 of the first embodiment determines whether or not the above (i) and (ii) are met, and the determination unit 132 of the second embodiment determines (iii) above. The configuration is illustrated. However, if it is a predetermined condition related to the position of the mobile terminal that is highly likely to occur when an unauthorized operation is performed, the determination unit determines whether or not conditions other than the above are satisfied. may be configured. Also, it may be configured to determine one or more of the above (i) to (iii).

(3e) In each of the above embodiments, the lock control unit 53 sets the unlocking disapproval state when it is determined that the predetermined condition is satisfied, and continues to the unlocking disapproval state until the state restoration operation is performed. is exemplified. However, the lock control unit may be configured to enter the unlocking permission state without performing the state restoration operation. For example, it may be configured to transition to the unlocking permitted state after a certain period of time has passed since the unlocking prohibited state. By maintaining the unlocking disapproval state until the state restoration operation is performed, security can be enhanced.

(3f) In each of the above-described embodiments, a configuration was exemplified in which the notification control unit 54 causes the notification device to perform notification when it is determined that the predetermined condition is satisfied. However, the notification control unit 54 may be configured not to cause the notification device to perform notification. Also, the notification device may be a device other than the smart device 11, the light ECU 15, and the display device 16 described above.

(3g) A plurality of functions possessed by one component in the above embodiment may be realized by a plurality of components, or a function possessed by one component may be realized by a plurality of components. . Moreover, a plurality of functions possessed by a plurality of components may be realized by one component, or one function realized by a plurality of components may be realized by one component. Also, part of the configuration of the above embodiment may be omitted. Also, at least part of the configuration of the above embodiment may be added or replaced with respect to the configuration of the other above embodiment.

(3h) In addition to the control system 1 described above, an in-vehicle control device (ECUs 12, 112) that are components of the control system 1, a program for causing a computer to function as the in-vehicle control device, a semiconductor memory storing this program, etc. The present disclosure can also be implemented in various forms such as a non-transitional substantive recording medium, a vehicle lock control method, and the like.

DESCRIPTION OF SYMBOLS 1, 101... Control system 3... Vehicle, 11, 111... Smart device, 12, 112... ECU, 13... BLE communication transmission/reception part, 14... Door, 21... BLE communication transmission/reception part, 31, 123... First communication part , 51, 133 ... second communication section 52, 132 ... determination section 53 ... lock control section 61 ... lock mechanism

Claims (5)

A control comprising a portable terminal (1 11) and an in-vehicle control device (1 12) that is mounted on a vehicle (3) and controls a lock mechanism (61) that locks a door (14) of the vehicle A system (101 ),
The mobile terminal comprises a first communication unit (1 23) configured to transmit a signal including location information of the mobile terminal to the in-vehicle control device using a first wireless communication module (21),
The in-vehicle control device
a second communication unit (133) configured to be able to receive a signal transmitted from the first communication unit using a second wireless communication module ( 13);
Obtaining the location of the mobile terminal based on the location information received from the first communication unit by the second communication unit, and determining whether or not the location satisfies a predetermined condition regarding the location of the mobile terminal. a determination unit (1 32) configured to
a lock control unit (53) configured not to permit an unlocking operation for the lock mechanism when the predetermined condition is satisfied;
When the mobile terminal is moving at a speed exceeding a predetermined threshold, or when the mobile terminal is present in a plurality of positions at the same time, the determination unit determines whether the A control system configured to determine that a predetermined condition is met. A control system according to claim 1 , wherein
The control system, wherein the determination unit is further configured to determine that the predetermined condition is satisfied when a distance between the mobile terminal and the in-vehicle control device is greater than a predetermined distance. A control system according to claim 1 or claim 2 ,
The mobile terminal includes a receiving unit (24, 25) configured to receive a predetermined input operation,
When it is determined that the predetermined condition is satisfied, the lock control unit sets a state in which the unlocking operation is not permitted, and keeps the lock until the predetermined input operation is performed on the reception unit. A control system configured to maintain a state that does not permit disengagement. A control system according to any one of claims 1 to 3 ,
The in-vehicle control unit (54) is configured to cause the informing devices (11 1 , 15, 16) capable of executing informing processing to execute informing when it is determined that the predetermined condition is satisfied. ), the control system. An in-vehicle control device (1 12) mounted on a vehicle (3) for controlling a locking mechanism (61) for locking a door (14) of the vehicle,
The in-vehicle control device
a communication unit (133) that performs wireless communication with a portable mobile terminal ( 111) using a wireless communication module ( 13);
Obtaining the location of the mobile terminal based on the location information of the mobile terminal received from the mobile terminal by the communication unit, and determining whether or not a predetermined condition regarding the location of the mobile terminal is satisfied for the location. A determination unit (1 32) configured as
a lock control unit (53) configured not to permit an unlocking operation for the lock mechanism when the predetermined condition is satisfied;
When the mobile terminal is moving at a speed exceeding a predetermined threshold, or when the mobile terminal is present in a plurality of positions at the same time, the determination unit determines whether the An in-vehicle controller configured to determine that a predetermined condition is met.

Images