JP7600966B2 - Start-up control device, start-up control program, and start-up control method - Google Patents

Description

The present invention relates to a startup control device that controls the startup of other devices, and a method and program executed by the startup control device.

In recent years, autonomous driving technology that automatically performs driving assistance and driving control has been developed. Driving automation levels, defined according to the driver and driving location, are known as indicators of autonomous driving technology. As stated in the "Public-Private ITS Initiative Roadmap 2020" (July 15, 2020), autonomous driving refers to driving automation levels equivalent to level 3 or higher, while manual driving refers to driving automation levels equivalent to level 2 or lower. In particular, driving automation levels 4 and higher are known as autonomous driving technologies in which all driving operations are automated and the vehicle can run even when the driver is not present.

In autonomous vehicles that do not require a driver, it is assumed that the vehicle will be started and begin traveling by remote instructions from a management system located in a different location from the vehicle. One method that the management system can use to start the vehicle is to send a wireless signal instructing it to start.

For example, Patent Document 1 discloses that in a device for remotely controlling a vehicle, a voice signal, SMS (Short Message Service), or the like is sent to the vehicle as an activation signal to activate a data communication module (DCM) installed in the vehicle, and the activated DCM is used to communicate with a command management center, thereby remotely controlling the vehicle.

WO2013/111282

Here, the present inventors have found the following problems through detailed investigation.
In the case of a remote activation method using SMS, if the SMS number used is identified, or if an SMS is sent to the same number as the SMS for remote activation due to a brute force attack or mistake, there is a risk of erroneous activation. Therefore, it is necessary to implement activation control that allows activation only by a legitimate remote activator, and does not allow erroneous remote activation when an SMS is sent by a third party who is not a legitimate remote activator.

The present invention aims to realize a startup control device that can be controlled so that it can be remotely started only by a legitimate remote starter, and not by a third party by mistake.

The present invention further aims to reduce power consumption by the device to be started by providing the start-up control device separately from the device to be started, and to prevent unauthorized access by a malicious third party to the device to be started and devices connected to that device.

A startup control device according to one embodiment of the present disclosure is a startup control device connected to a wireless communication unit that receives a wireless signal, and a control unit, and includes a receiving unit (101) that receives an internal signal from the wireless communication unit when the wireless communication unit receives the wireless signal, a storage unit (102) that stores a startup pattern that is a reference for starting the control unit, the startup pattern being a combination of the time and number of reference internal signals, a judgment unit (103) that compares the startup pattern with a reception pattern that is a combination of the time and number of the internal signals received by the receiving unit, and determines whether to start the control unit, and an output unit (104) that outputs a startup signal instructing the control unit to start if the judgment unit determines that the control unit should be started, and the startup control device is an in-vehicle startup control device mounted on a vehicle, and the in-vehicle startup control device is supplied with electricity by a first power source, and the control unit is supplied with electricity by a second power source, which is the power source of the vehicle .

The numbers in parentheses attached to the constituent elements of the invention described in the claims and this section indicate the correspondence between the present invention and the embodiments described below, and are not intended to limit the present invention.

With the above-mentioned configuration, the startup control device etc. disclosed herein can prevent the device from being started by a third party who is not a legitimate remote starter.

FIG. 1 shows an overall configuration of each embodiment. FIG. 2 is a block diagram showing a configuration example of an electronic control system common to each embodiment. FIG. 2 is a block diagram showing a configuration example of a start-up control device common to each embodiment; FIG. 13 is a diagram for explaining a comparison between an activation pattern and a reception pattern by a determination unit in the first embodiment. FIG. 1 is a diagram for explaining a comparison between an activation pattern and a reception pattern by a determination unit according to the first embodiment. FIG. 1 is a diagram for explaining a comparison between an activation pattern and a reception pattern by a determination unit according to the first embodiment. FIG. 1 is a diagram for explaining the operation of the start-up control device according to the first and second embodiments. FIG. 11 is a diagram for explaining a comparison between an activation pattern and a reception pattern by a determination unit in the second embodiment. FIG. 11 is a diagram for explaining a comparison between an activation pattern and a reception pattern by a determination unit in the second embodiment. FIG. 11 is a diagram for explaining a comparison between an activation pattern and a reception pattern by a determination unit in the second embodiment. FIG. 11 is a diagram for explaining the operation of the start-up control device according to the third embodiment. FIG. 13 is a diagram for explaining the operation of the start-up control device according to the fourth embodiment.

The following describes an embodiment of the present invention with reference to the drawings.

The present invention refers to the invention described in the claims or in the Means for Solving the Problems section, and is not limited to the following embodiments. Furthermore, at least the words in quotation marks refer to the words described in the claims or in the Means for Solving the Problems section, and are not limited to the following embodiments.

The configurations and methods described in the dependent claims of the claims are optional configurations and methods in the invention described in the independent claims of the claims. The configurations and methods of the embodiments corresponding to the configurations and methods described in the dependent claims, and the configurations and methods described only in the embodiments without being described in the claims, are optional configurations and methods in the present invention. The configurations and methods described in the embodiments when the description of the claims is broader than the description of the embodiments are also optional configurations and methods in the present invention in the sense that they are examples of the configurations and methods of the present invention. In either case, by being described in the independent claims of the claims, they become essential configurations and methods of the present invention.

The effects described in the embodiments are the effects when the configuration of the embodiment is an example of the present invention, and are not necessarily the effects of the present invention.

When there are multiple embodiments, the configurations disclosed in each embodiment are not limited to each embodiment, but can be combined across the embodiments. For example, a configuration disclosed in one embodiment may be combined with another embodiment. Also, the configurations disclosed in each of the multiple embodiments may be collected and combined.

The problem described in the problem that the invention is intended to solve is not a publicly known problem, but was discovered independently by the inventor, and this fact, together with the configuration and method of the present invention, affirms the inventive step of the invention.

1. Configuration common to each embodiment (1) Electronic control system S
With reference to Figures 1 and 2, an electronic control system S having a start control device 10 will be described as a configuration common to each embodiment. Note that in the embodiments described below, an example will be described in which the electronic control system S is an in-vehicle system mounted on a vehicle. However, the electronic control system S is not limited to an in-vehicle system, and can be applied to any system. Note that, although it is assumed that the vehicle equipped with the electronic control system S of each embodiment is an autonomous vehicle, the electronic control system S may also be equipped in a vehicle that is manually driven by a driver.

The electronic control system S has a start-up control device 10, a wireless communication device 20, and an in-vehicle communication control device 30. The management system is, for example, a server that manages the vehicle in which the electronic control system S is mounted. The management system transmits, via a wireless communication network, to the electronic control system S, wireless signals required to start the in-vehicle communication control device 30 and wireless signals that control the running of the vehicle after the in-vehicle communication control device 30 is started.

The start-up control device 10 is a device that controls the start-up of the in-vehicle communication control device 30, and is connected to the wireless communication device 20 and the in-vehicle communication control device 30. The detailed configuration of the start-up control device 10 will be described later.

The wireless communication device 20 includes a wireless communication unit that receives a wireless signal transmitted from the management system. The wireless signal is, for example, an SMS (Short Message Service).

While FIG. 2 shows an example in which the wireless communication device 20 has three wireless communication units 201-203, the wireless communication device 20 may have as many wireless communication units as necessary to realize each embodiment described below. In embodiment 1, a configuration in which the wireless communication device 20 uses one wireless communication unit 201 is described, while in embodiments 2 and 4, a configuration in which the wireless communication device 20 uses multiple wireless communication units is described. Each wireless communication unit is set with a different destination (e.g., IP address, identifier, etc.), and only wireless signals sent to the corresponding destination are received. For example, when SMS is used as the wireless signal, each wireless communication unit is assigned a different identification number (e.g., telephone number), and each wireless communication unit can only receive SMS sent to the corresponding identification number.

The in-vehicle communication control device 30 (corresponding to the "control unit") is connected to various in-vehicle devices such as an electronic control device (ECU (Electric Control Unit), hereafter abbreviated as ECU) that controls the running of the vehicle, a camera, and sensors, and controls the communication network within the vehicle. Note that, since it is assumed that the electronic control system S is an in-vehicle system, each embodiment is described using as an example a case where the object whose activation is controlled by the activation control device 10 is the in-vehicle communication control device 30. However, the object whose activation is controlled by the activation control device 10 is not limited to the in-vehicle communication control device 30, and can be any device having any function.

Each device constituting the electronic control system S is connected to a power source E and receives electricity from the power source E. FIG. 2 illustrates an example in which the power source E supplies power to the start-up control device 10, the wireless communication device 20, and the in-vehicle communication control device 30; however, the power source E1 (corresponding to a "first power source") that supplies power to the start-up control device 10 and the wireless communication device 20, and the power source E2 (corresponding to a "second power source") that supplies power to the in-vehicle communication control device 30 may each be provided separately. In this case, for example, a battery may be used as the power source E1, and a vehicle power source (e.g., an ignition power source) may be used as the power source E2.

As described below, the start-up control device 10 and the wireless communication device 20 are devices used when starting the in-vehicle communication control device 30 upon receiving a wireless signal from the management system, and therefore must always be in an activated state, i.e., in an operable state. In contrast, the in-vehicle communication control device 30 and the in-vehicle device connected to the in-vehicle communication control device 30 are devices having functions necessary for the vehicle to operate (e.g., travel, etc.), and only need to be activated when the vehicle is operating. Therefore, the in-vehicle communication control device 30 is not activated when the vehicle is in a standby state, and is activated upon receiving an activation instruction from the start-up control device 10 when the vehicle is operated. As a result, while the vehicle is in standby, power is not supplied to the in-vehicle communication control device 30 and the in-vehicle device, which in turn can reduce power consumption. Then, the in-vehicle communication control device 30 is activated based on an activation signal transmitted from the start-up control device 10, which will be described later. Note that the in-vehicle communication control device 30 being activated means that the in-vehicle communication control device 30 is in an operable state, and may mean, for example, starting the supply of power from the power source E, or connecting an oscillator circuit to the in-vehicle communication control device 30 to start supplying a clock.

As described above, the wireless communication device 20 must always be in an operable state together with the activation control device 10, but only some of the functions may be in an operable state. For example, in the below-described embodiments 1 to 3, each wireless communication unit of the wireless communication device 20 only needs to be in a state in which it can receive SMS, and an SMS transmission function and a data communication function are not necessarily required. Thus, in the embodiments 1 to 3, each wireless communication unit may be in a state in which only the SMS reception function is operable, and the transmission function is stopped, thereby reducing power consumption while the vehicle is waiting.

The start-up control device 10 in each embodiment is assumed to be in the form of a PLD (Programmable Logic Device) as a component, but is not limited to this. For example, component forms include semiconductor circuits and semiconductor modules, semi-finished product forms include electronic control devices, electronic control units, and system boards, and finished product forms include servers, workstations, personal computers (PCs), tablets, smartphones, mobile phones, and navigation systems.

2, the start-up control device 10, the wireless communication device 20, and the in-vehicle communication control device 30 are described as separate devices. By configuring the start-up control device 10 independent of the in-vehicle communication control device 30, a malicious third party cannot illegally access the in-vehicle device unless the in-vehicle communication control device 30 is started. This makes it possible to reduce the risk of information theft and software tampering of the in-vehicle device. However, the functions corresponding to the start-up control device 10, the wireless communication device 20, and the in-vehicle communication control device 30 may be integrated into a single device. For example, the start-up control device 10 and the wireless communication device 20 may be integrated into a single ECU or component, or the start-up control device 10, the wireless communication device 20, and the in-vehicle communication control device 30 may be integrated into a single communication device.

(2) Configuration of the activation control device 10 The configuration of the activation control device 10 will be described with reference to Fig. 3. The activation control device 10 controls the activation of the in-vehicle communication control device 30 in order to safely activate the in-vehicle communication control device 30 based on a wireless signal transmitted from the management system. The activation control device 10 includes a receiving unit 101, a storage unit 102, a determination unit 103, and an output unit 104.

When each wireless communication unit of the wireless communication device 20 receives a wireless signal, the receiving unit 101 receives an "internal signal" from the wireless communication unit. The internal signal may include the contents of the wireless signal received by the wireless communication unit, or may be a signal notifying that the wireless communication unit has received a wireless signal.

Here, an "internal signal" is a signal that is sent and received when a wireless signal is received, and the content of the signal does not matter. For example, the wireless signal may be transferred as is as an internal signal, or it may be a signal that is generated when the wireless signal is received.

The storage unit 102 stores a startup pattern that is the basis for "starting up" the in-vehicle communication control device 30. Specific examples of startup patterns will be described in the embodiment described below.

Here, "starting up" refers to the control unit becoming operable, and includes, for example, starting the supply of power to the control unit, as well as starting the supply of clocks and other signals necessary for the control unit to operate.

The determination unit 103 compares the activation pattern stored in the storage unit 102 with a reception pattern, which is a combination of the time and number of internal signals received by the reception unit 101, to determine whether or not to activate the in-vehicle communication control device 30. Specifically, the determination unit 103 compares the activation pattern with the reception pattern, and if these patterns "match", it determines that the in-vehicle communication control device 30 should be activated. On the other hand, if the patterns do not "match", it determines that the in-vehicle communication control device 30 should not be activated. The determination method by the determination unit 103 using the activation pattern and reception pattern will be described in each embodiment.

Here, "match" refers not only to cases where the two patterns are a perfect match, but also to cases where the two patterns do not match perfectly but are similar enough to be considered a match.

In each embodiment, an example is described in which the determination unit 103 determines to activate the in-vehicle communication control device 30 only when the activation pattern and the reception pattern are completely identical. However, the wireless signal received by the wireless communication unit may be affected by the communication line and may be delayed. For this reason, a determination criterion tolerance may be set, and even if the activation pattern and the reception pattern do not completely match, the activation pattern and the reception pattern may be deemed to match if the degree of match between the activation pattern and the reception pattern is within the determination criterion tolerance. For example, if 90% or more of the signals contained in each pattern of the activation pattern and the reception pattern match, they may be deemed to match and determined.

When the determination unit 103 determines that the in-vehicle communication control device 30 should be started, the output unit 104 outputs a start-up signal that instructs the in-vehicle communication control device 30 to be started.

The functions and operations of the start-up control device 10 that are specific to each embodiment are described in each embodiment.

2. Embodiment 1
In this embodiment, an example will be described in which the in-vehicle communication control device 30 is started using a wireless signal received by the wireless communication unit 201 of the wireless communication device 10. Therefore, the wireless communication device 10 of this embodiment only needs to include one wireless communication unit 201, and may not include the wireless communication units 202 and 203.

In this embodiment, the receiving unit 101 receives an internal signal when the wireless communication unit 201 receives a wireless signal. The storage unit 102 stores an activation pattern, which is a combination of the "time" and "number of times" of a reference internal signal, as an activation pattern. The determination unit 103 compares the activation pattern with a reception pattern, which is a combination of the "time" and "number of times" of an internal signal received by the receiving unit 101, and determines whether or not to activate the in-vehicle communication control device 30.

Here, the "time" of the reference internal signal includes not only the absolute time, but also relative times such as the transmission interval between two signals and the time elapsed since a specific signal was transmitted.
The "number of times" may indicate a specific value, or may indicate a range with an upper or lower limit.

(1) Method of Determining Activation A method of determining activation using an activation pattern and a reception pattern by the determination unit 103 of this embodiment will be described with reference to FIGS.

Figure 4 is a diagram for explaining a comparison between a start-up pattern and a reception pattern. Figure 4a shows an example of a start-up pattern stored in the storage unit 102. This example shows a start-up pattern that is a combination of four standby times (T1 to T4) that are set from the start of judgment by the judgment unit 103, and the number of times that the reference internal signal (S in the figure) occurs once during each standby time.

The timing at which the determination unit 103 starts the determination is, for example, the timing at which the receiving unit 101 first receives an internal signal. When the receiving unit 101 receives the first internal signal, the determination unit 103 compares the reception pattern of the internal signal received thereafter with the startup pattern.

Figure 4b illustrates a case where the receiving unit 101 receives the first internal signal S0, and then receives internal signals S1 to S4. In this example, when the receiving unit 101 receives the internal signal S0, the determination unit 103 starts comparing the activation pattern with the reception pattern. In the example of Figure 4b, the internal signal S1 is received within the standby time T1, the internal signal S2 within the standby time T2, the internal signal S3 within the standby time T3, and the internal signal S4 within the standby time T4. Therefore, the activation pattern shown in Figure 4a matches the reception pattern shown in Figure 4b, which is a combination of the time and number of internal signals. Therefore, the determination unit 103 determines to activate the in-vehicle communication control device 30.

Figure 4c illustrates a case where the receiving unit 101 receives multiple internal signals different from those in Figure 4b. In the example of Figure 4c, two internal signals S1 and S2 are received within the standby time T1. In other words, the number of times the reference internal signal is received within the standby time T1 in the startup pattern of Figure 4a (one time) is different from the number of times the internal signal is received within the standby time T1 in the reception pattern of Figure 4c (two times), and the startup pattern of Figure 4a and the reception pattern of Figure 4c do not match. Therefore, the determination unit 103 determines not to start the in-vehicle communication control device 30.

Figure 4d illustrates a case where multiple internal signals different from those in Figures 4b and 4c are received. In the example of Figure 4d, internal signals S1, S2, and S3 are received during standby times T1, T3, and T4, respectively, but no internal signal is received during standby time T2. In other words, the number of reference internal signals (1 time) during standby time T2 in the startup pattern of Figure 4a is different from the number of internal signals (0 times) received during standby time T2 in the reception pattern of Figure 4d, and the startup pattern of Figure 4a and the reception pattern of Figure 4d do not match. Therefore, the determination unit 103 determines not to start the in-vehicle communication control device 30.

Figure 5 is a diagram illustrating a comparison between a wake-up pattern different from that of Figure 4 and a reception pattern. Figure 5a shows an example of a wake-up pattern, which, unlike the wake-up pattern of Figure 4a, includes a standby time (T2) without a reference internal signal. As shown in Figure 5a, the wake-up pattern may include a combination of a time of the reference internal signal and a count of 0, i.e., a time when the reference internal signal is not present.

Figure 5b illustrates a case where the receiving unit 101 receives internal signals S1 to S3 after the first internal signal S0. In the example of Figure 5b, the internal signal S1 is received within standby time T1, no internal signal is received within standby time T2, and internal signals S2 and S3 are received within standby times T3 and T4, respectively. Therefore, the reception pattern, which is a combination of the time and number of internal signals shown in Figure 5b, matches the startup pattern shown in Figure 5a. Therefore, the determination unit 103 determines to start up the in-vehicle communication control device 30.

Figure 5c illustrates a case where the receiving unit 101 receives multiple internal signals different from those in Figure 5b. In the example of Figure 5c, the internal signal S1 is received within standby time T1, the internal signal S2 is received within standby time T2, no internal signal is received within standby time T3, and the internal signal S3 is received within standby time T4. In other words, the number of reference internal signals (0 times, 1 time) during standby times T2 and T3 in the startup pattern of Figure 5a is different from the number of internal signals (1 time, 0 times) received during standby times T2 and T3 in the reception pattern of Figure 5c, and the startup pattern of Figure 5a and the reception pattern of Figure 5c do not match. Therefore, the determination unit 103 determines not to start the in-vehicle communication control device 30.

Note that although Figs. 4 and 5 illustrate examples in which the number of reference internal signals during the standby time is 0 or 1, the number of reference internal signals during the standby time may be multiple. Furthermore, the number of reference internal signals in the startup pattern may be specified by an upper or lower limit of the number of times.

The startup patterns shown in Figures 4 and 5 are merely examples and are not limited to these examples. For example, in Figure 4, four standby times are set after the start of the judgment, but the number and length of the standby times are arbitrary. In addition, the time of the startup pattern may be defined by the interval between two consecutive reference internal signals, rather than the time from the start of the judgment.

In both Figs. 4 and 5, an example is described in which the determination unit 103 starts the determination when the receiving unit 101 receives the first internal signal S0 as a trigger, but the timing at which the determination unit 103 starts the determination is not limited to this example. For example, the determination may be started when all internal signals received by the receiving unit 101 are used as a trigger, and the reception pattern of the internal signals received after the internal signal that became the trigger is compared with the startup pattern.

Figure 6 shows an example in which the determination is made using all internal signals received by the receiving unit 101 as a trigger. Note that in the example of Figure 6, the start-up pattern shown in Figure 4a is used as the start-up pattern.

In the example of FIG. 6, the receiving unit 101 receives internal signals S0 to S7. FIG. 6a shows a case where the internal signal S0 is used as a trigger to start the judgment. In the case of FIG. 6a, the internal signals (S2, S3) are received twice during the standby time T2, so the reception pattern of the internal signals S1 to S5 shown in FIG. 6a does not match the startup pattern of FIG. 4a. FIG. 6b shows a case where the internal signal S1 is used as a trigger to start the judgment. In FIG. 6b, the internal signals (S3, S4) are received twice during the standby time T2, so the reception pattern of the internal signals S2 to S6 shown in FIG. 6b does not match the startup pattern. FIG. 6c shows a case where the internal signal S2 is used as a trigger to start the judgment. In FIG. 6c, the internal signals (S4, S5) are received twice during the standby time T2, so the reception pattern of the internal signals S3 to S6 shown in FIG. 6c does not match the startup pattern. FIG. 6d shows a case where the internal signal S3 is used as a trigger to start the judgment. Here, in FIG. 6d, the internal signal is received once during each standby time (T1 to T4), and the reception pattern of the internal signals S4 to S7 matches the startup pattern in FIG. 4a. Therefore, the determination unit 103 determines that the in-vehicle communication control device 30 should be started.

For example, in a situation where a malicious third party is conducting a brute force attack, etc., the wireless communication unit 201 may receive an unauthorized wireless signal transmitted from the third party and a legitimate wireless signal transmitted from a legitimate management system, but in such a case, the possibility of a situation in which the activation pattern and the reception pattern match is extremely low. Therefore, as shown in FIG. 6, if a reception pattern that matches the activation pattern exists even once, it is highly likely that a wireless signal was transmitted from a legitimate management system, and the determination unit 103 may determine to activate the in-vehicle communication control device 30.

(2) Operation of the Start-up Control Device The operation of the start-up control device 10 of this embodiment will be described with reference to Fig. 7. Note that the following operation does not only indicate a method executed by the start-up control device 10, but also indicates the processing procedure of a program that can be executed by the device. The order of these processes is not limited to the order shown in Fig. 7. In other words, the order may be changed as long as there is no constraint, such as a relationship in which a certain step utilizes the result of the previous step.

When the wireless communication unit 201 receives a wireless signal, the receiving unit 101 receives an internal signal from the wireless communication unit 201 (S101).
The determination unit 103 compares the activation pattern with the reception pattern of the internal signal received by the reception unit 101 (S102).
If the comparison of the activation pattern and the reception pattern in S102 shows that the activation pattern and the reception pattern match (S103: Y), it is determined that the in-vehicle communication control device 30 is activated, and the output unit 104 transmits a activation signal to the in-vehicle communication control device 30 (S104). On the other hand, if the comparison of the activation pattern and the reception pattern in S102 shows that the activation pattern and the reception pattern do not match, the process ends without transmitting a activation signal to the in-vehicle communication control device 30.

(3) Summary When activation is determined by comparing the activation pattern with the reception pattern as in this embodiment, even if a third party other than the management system transmits a wireless signal to the wireless communication unit, the in-vehicle communication control device 30 will not be activated as long as the combination of the time and number of times is different from the preset activation pattern. Therefore, for example, even if a third party obtains the address of the wireless communication unit or transmits a wireless signal to the wireless communication unit by performing a brute force attack, it is possible to prevent the in-vehicle communication control device 30 from being activated illegally.

3. Embodiment 2
In the first embodiment, a configuration has been described in which the in-vehicle communication control device 30 is started up using a wireless signal received by one wireless communication unit 201. In the second embodiment, an example in which the in-vehicle communication control device 30 is started up using two wireless signals received by two wireless communication units, respectively, will be described, focusing on differences from the first embodiment. Therefore, the wireless communication device 10 of the present embodiment needs to include at least two wireless communication units 201 and 202.

In this embodiment, the receiving unit 101 receives a first internal signal from the wireless communication unit 201 (corresponding to the "first wireless communication unit") when the wireless communication unit 201 (corresponding to the "first wireless signal"). Also, the receiving unit 101 receives a second internal signal from the wireless communication unit 202 (corresponding to the "second wireless communication unit") when the wireless communication unit 202 (corresponding to the "second wireless signal"). As described above, the wireless communication units 201 and 202 are assigned different identification numbers, and receive wireless signals (e.g., SMS) sent to their respective identification numbers.

The storage unit 102 stores, as the startup pattern, a startup pattern that is a combination of two or more of the order, "time," and "number of times" of the first and second reference internal signals. The determination unit 103 then compares the startup pattern with a reception pattern that is a combination of two or more of the order, time, and number of times of the first and second internal signals received by the reception unit 101, and determines whether or not to start the in-vehicle communication control device 30.

(1) Method of Determining Activation A method of determining activation using an activation pattern and a reception pattern by the determination unit 103 of this embodiment will be described with reference to FIGS.

FIG. 8 is a diagram for explaining a comparison between a wake-up pattern and a reception pattern. FIG. 8a shows an example of a wake-up pattern stored in the storage unit 102. The wake-up pattern in FIG. 8a is a wake-up pattern of three combinations of the order, time, and number of times of the first reference internal signal and the second reference internal signal, and S 1 in FIG. _8a indicates the first reference internal signal, and S ₂ indicates the second reference internal signal. The wake-up pattern shown in FIG. 8a indicates that the combination of the order of the first reference internal signal, the second reference internal signal, the second reference internal signal, and the first reference internal signal is repeated twice within the standby time T1. Note that the first reference internal signal corresponds to the first internal signal, and the second reference internal signal corresponds to the second internal signal.

Figure 8b illustrates a case where the receiver 101 receives the first internal signal S0, and then receives internal signals S1 to S8. In the example of Figure 8b, the internal signals S1 to S8 are received within the standby time T1, and among them, the internal signals S1 to S4 and S5 to S8 are all received in the order of the first internal signal, the second internal signal, the second internal signal, and the first internal signal. In other words, in Figure 8b, the above-mentioned order of the internal signals is repeated twice. Therefore, the reception pattern, which is a combination of the order, time, and number of times of the internal signals shown in Figure 8b, matches the startup pattern shown in Figure 8a. Therefore, the determination unit 103 determines that the in-vehicle communication control device 30 should be started.

Fig. 8c illustrates a case where the receiving unit 101 receives a plurality of internal signals different from those in Fig. 8b. In the example of Fig. 8c, the order of the internal signals S1 to S4 is the same as that in Fig. 8b, but the order of the internal signals S5 to S8 is different from that in Fig. 8b. That is, the number of times (2 times) that the order of the first and second reference internal signals (S ₁ , S ₂ , S ₂ , S ₁ ) is repeated in the start-up pattern of Fig. 8a is different from the number of times (1 time) that the order of the first and second internal signals (S ₁ , S ₂ , S ₂ , S ₁ ) is repeated in the reception pattern of Fig. 8c, and the start-up pattern of Fig. 8a and the reception pattern of Fig. 8c do not match. Therefore, the determination unit 103 determines not to start the in-vehicle communication control device 30.

Fig. 8d illustrates a case where multiple internal signals different from those in Fig. 8b and Fig. 8c are received. In the example of Fig. 8d, internal signals S1 to S8 are received, of which internal signals S1 to S4 and S5 to S8 are received in the order of the first internal signal, the second internal signal, the second internal signal, and the first internal signal. However, internal signal S8 is not a signal received during standby time T1, and the above-mentioned combination of internal signal orders is received only once during standby time T1. In other words, the number of times (2) that the sequence of the first and second reference internal signals ( _S1 , _S2 , _S2 , _S1 ) in the startup pattern of Fig. 8a is repeated is different from the number of times (1) that the sequence of the first and second internal signals ( _S1 , _S2 , _S2 , _S1 ) is repeated in the reception pattern of Fig. 8b, or the standby time (T1) that satisfies the sequence and number of times of the first and second reference internal signals in the startup pattern of Fig. 8a is different from the time that satisfies the sequence and number of times of the first and second internal signals in the reception pattern of Fig. 8d, and the startup pattern of Fig. 8a and the reception pattern of Fig. 8d do not match. Therefore, the determination unit 103 determines not to start the in-vehicle communication control device 30.

In FIG. 8a, an example was described in which the start-up pattern of this embodiment is a combination of three elements, namely, the order, time, and number of times of the first reference internal signal and the second reference internal signal. However, as described above, the start-up pattern may be a combination of two or more elements of the order, time, and number of times. For example, the start-up pattern may be a combination of the order and number of times of the first reference internal signal and the second reference internal signal without specifying the time of the reference internal signal. For example, the start-up pattern shown in FIG. 8a may be a start-up pattern in which the combination of the order of the first reference internal signal, the second reference internal signal, the second reference internal signal, and the first reference internal signal is repeated twice without considering the standby time T1. In this case, the reception pattern, which is a combination of the order and number of times of the internal signals S1 to S8 shown in FIG. 8d, matches the start-up pattern. In this way, when the start-up pattern is a combination of the order and number of times of the reference internal signal and does not consider the time, if it is not determined that the reception pattern and the start-up pattern match before a predetermined number of internal signals are received, the determination unit 103 may end the process.

Figure 9 is a diagram illustrating a comparison between a start-up pattern different from that in Figure 8 and a reception pattern. Unlike Figure 8a, the start-up pattern in Figure 9a is a combination of the time and number of times of the first reference internal signal and the second reference internal signal. The start-up pattern in Figure 9a shows that the first reference internal signal occurs once each in standby times T1 and T3, and the second reference internal signal occurs once each in standby times T2 and T4. In Figure 9a, the number of times of the second reference internal signal occurs during standby times T1 and T3, and the number of times of the first reference internal signal occurs during standby times T2 and T4 are arbitrary.

Figure 9b illustrates a case where the receiving unit 101 receives internal signals S1 to S4 after the first internal signal S0. In the example of Figure 9b, the first internal signals S1 and S3 are received within standby times T1 and T3, respectively, and the second internal signals S2 and S4 are received within standby times T2 and T4, respectively. Therefore, the reception pattern, which is a combination of the time and number of times of the first and second internal signals shown in Figure 9b, matches the startup pattern shown in Figure 9a. Therefore, the determination unit 103 determines to start up the in-vehicle communication control device 30.

Both Figs. 9c and 9d explain the case where the receiving unit 101 receives multiple internal signals different from those in Fig. 9b. In the example of Fig. 9c, the second internal signals S2 and S3 are received during standby time T2. In the case of Fig. 9d, the first internal signal S2 is received during standby time T2. In other words, the number of times the second reference internal signal is received during standby time T2 in the startup pattern of Fig. 9a is different from the number of times the second internal signal is received during standby time T2 in the reception patterns of Figs. 9c and 9d, and the startup pattern of Fig. 9a does not match the reception patterns of Figs. 9c and 9d. Therefore, the determination unit 103 determines not to start the in-vehicle communication control device 30.

Figure 10 is a diagram illustrating a comparison between a start-up pattern and a reception pattern different from those in Figures 8 and 9. The start-up pattern in Figure 10a includes standby times T2 and T4 during which the first and second reference internal signals are not present. As shown in Figure 10a, the start-up pattern may include a combination of the time and the number of times that the first and second reference internal signals are present is zero, i.e., a time during which the reference internal signal is not present.

In the case of the startup pattern shown in FIG. 10a, the order of the first and second reference internal signals in the standby times T1 and T3 does not matter. In other words, the first and second reference internal signals only need to be generated once each in the standby times T1 and T3. Therefore, by setting the standby times T1 and T3 to be short, it is possible to obtain a startup pattern that indicates that the timing of the first and second reference internal signals is substantially simultaneous. However, since the wireless signals transmitted to the wireless communication units 201 and 202 are transmitted and received via different communication paths, there is a high possibility that the wireless communication units 201 and 202 will receive the signals at different times, and thus the receiving unit 101 will also receive the internal signals at different times. Therefore, even in the startup pattern that indicates that the first and second reference internal signals are simultaneous, it is preferable to set a standby time with a certain time width.

Figure 10b illustrates a case where the receiving unit 101 receives internal signals S1 to S4 after the first internal signal S0. In the example of Figure 10b, the second internal signal S1 and the first internal signal S2 are received within standby time T1, and the first internal signal S3 and the second internal signal S4 are received within standby time T3. Therefore, the reception pattern, which is a combination of the time and number of times of the first internal signal and the second internal signal shown in Figure 10b, matches the startup pattern shown in Figure 10a. Therefore, the determination unit 103 determines to start up the in-vehicle communication control device 30.

8 to 10 are described taking as an example a case where the first internal signal is received as the first internal signal S0, but the judgment may be started by being triggered by the reception of the second internal signal, or by being triggered by all internal signals received by the receiving unit 101 as described in FIG. 6 of the first embodiment. Alternatively, the judgment may be started by being triggered by the reception of both the first internal signal and the second internal signal. By using the reception of both the first internal signal and the second internal signal as a trigger for starting the judgment, for example, even if the SNS of one wireless signal is leaked to a third party, the judgment unit 103 will not make a judgment unless the other SNS is transmitted, and therefore it is possible to prevent the judgment unit 103 from making unnecessary judgments.

(2) Operation of the Start-up Control Device 10 The operation of the start-up control device 10 in this embodiment is the same as the processes shown in Fig. 7. However, in this embodiment, the first internal signal and the second internal signal are received in S101.

(3) Summary In this embodiment, the reception pattern of two internal signals based on two different wireless signals is compared with the startup pattern to determine whether to start the in-vehicle communication control device 30. According to this embodiment, even if an identification number corresponding to one wireless communication unit is leaked to a malicious third party or one wireless communication unit receives a wireless signal through a brute force attack, it is possible to reliably prevent the in-vehicle communication control device 30 from being started illegally by comparing the reception pattern including the internal signal transmitted from the other wireless communication unit with the startup pattern.

4. Embodiment 3
In the first and second embodiments, the determination unit 103 compares the activation pattern with the reception pattern, and if it is determined that these patterns do not match, it determines that the in-vehicle communication control device 30 is not to be activated and ends the process. However, if these patterns do not match, there is a possibility that a third party other than the management system is attempting to activate the in-vehicle communication control device 30. In such a situation, it is desirable to temporarily stop the activation of the in-vehicle communication control device 30 to reliably prevent access by a third party. Therefore, in this embodiment, a configuration for temporarily stopping the activation of the in-vehicle communication control device 30 will be described.

When the determination unit 103 of this embodiment compares the activation pattern with the reception pattern and determines that the patterns do not match and that the in-vehicle communication control device 30 should not be activated, the determination unit 103 does not determine whether to activate the in-vehicle communication control device 30 until a predetermined condition is satisfied. Specifically, the determination unit 103 stops comparing the activation pattern with the reception pattern until the predetermined condition is satisfied.

The determination unit 103 may immediately stop the comparison when it is determined that the activation pattern and the reception pattern do not match. However, the time when the wireless communication unit receives the wireless signal may be affected by the communication conditions. Therefore, even if the legitimate management system transmits a wireless signal, the time when the wireless communication unit receives the wireless signal may be delayed, and the time when the reception unit 101 receives the internal signal may be delayed. In that case, the determination unit 103 determines that the activation pattern and the reception pattern do not match and stops comparing the activation pattern and the reception pattern, so that the management system may not be able to remotely start the in-vehicle communication control device 30 even if it wants to start it. Therefore, the determination unit 103 may set a condition for stopping the determination between the activation pattern and the reception pattern in advance, and may stop the execution of the comparison only when the condition is satisfied. The condition for stopping the determination between the activation pattern and the reception pattern may be, for example, when the number of consecutive determinations that there is a mismatch exceeds a predetermined number, or when the cumulative number of determinations that there is a mismatch exceeds a predetermined number.

As a condition for lifting the stop of the comparison, for example, the time that has elapsed since the comparison was stopped may be used to determine whether or not to lift the stop of the comparison between the reception pattern and the startup pattern. Specifically, when a predetermined time has elapsed since the determination unit 103 stopped comparing the startup pattern with the reception pattern, the determination unit 103 resumes the comparison between the reception pattern and the startup pattern.

As another example of a condition for lifting the stop of comparison, the determination unit 103 may compare the reception pattern of the internal signal with a preset release pattern to determine whether or not to lift the stop of the comparison between the reception pattern and the activation pattern. Specifically, when the reception pattern of the internal signal matches the preset release pattern as a result of comparing these patterns, it is determined that the stop of comparison should be lifted.

In this case, the storage unit 102 stores in advance, in addition to the activation pattern, a release pattern that serves as a reference for releasing the stop of comparison. When remote activation is performed using a wireless signal received by one wireless communication unit as in embodiment 1, the release pattern indicates a combination of the number of times and time of one reference release signal, similar to the activation pattern of embodiment 1. When remote activation is performed using two wireless signals received by two wireless communication units as in embodiment 2, the release pattern indicates a combination of two or more of the order, time, and number of times of the first reference release signal and the second reference release signal, similar to the activation pattern of embodiment 2.

Here, it is desirable that the combination of the time, number of times, etc. of the deactivation pattern is more complex than the combination of the time, number of times, etc. of the activation pattern. In this embodiment, when the comparison is stopped, there is a high possibility that unauthorized access has been received from a third party. Therefore, in order to perform remote activation in such a situation, it is desirable that the activation cannot be easily performed by a third party, and that it is reliably performed by the management system.

As described above, while the vehicle is in standby, it is desirable that only the activation control device 10 and the wireless communication device 20, which are necessary for remote activation, are in operation. Therefore, it is assumed that the communication device that notifies the management system that the comparison of the reception pattern with the activation pattern by the determination unit 103 has stopped is not activated. Therefore, if the in-vehicle communication control device 30 does not start up despite transmitting a wireless signal with the activation pattern, which is a combination of the "time" and "count" of the reference internal signal stored in the storage unit 102, the management system determines that the determination unit 103 of the activation control device 10 is locked and comparison of the activation pattern with the reception pattern has stopped, and transmits a wireless signal according to the release pattern.

Figure 11 shows the operation of the start-up control device 10 of this embodiment. The processes from S101 to S104 are the same as those in the first and second embodiments, so the explanation is omitted.

In this embodiment, if it is determined in S103 that the patterns do not match (S103: N), the comparison between the activation pattern and the received pattern is stopped (S201).Then, the comparison between the activation pattern and the received pattern is not performed until it is determined that a predetermined condition for releasing the stop of the comparison is satisfied.
If it is determined in S202 that the predetermined condition is met (S202: Y), the comparison between the activation pattern and the reception pattern is resumed (S203). Here, the predetermined condition in S202 is, as described above, the passage of a predetermined time or a match between the release pattern and the reception pattern.

In the above example, a configuration has been described in which the comparison between the activation pattern and the reception pattern is released when the release pattern matches the reception pattern. However, the determination unit 103 may determine that the comparison between the activation pattern and the reception pattern is released and the in-vehicle communication control device 30 is started when the release pattern matches the reception pattern. That is, in this example, the release pattern also corresponds to the activation pattern. In this example, when it is determined in S202 of FIG. 11 that the release pattern matches the reception pattern as a predetermined condition, the processes of S203, S102, and S103 are not performed, and an activation signal is output in S104. In this case, it is desirable that the activation pattern that also functions as the release pattern is a pattern different from the activation pattern that is first compared with the reception pattern.

According to this embodiment, if a third party other than the management system attempts to start the in-vehicle communication control device 30, the comparison between the start-up pattern and the reception pattern is stopped, and the in-vehicle communication control device 30 can be prevented from being started erroneously.

Furthermore, by stopping the comparison between the activation pattern and the reception pattern until the preset release pattern matches the reception pattern, the management system can start the comparison between the activation pattern and the reception pattern by the determination unit 103 at the desired timing, making it possible to safely activate the in-vehicle communication control device 30.

5. Embodiment 4
In the first to third embodiments, a highly secure remote start is realized by comparing the start pattern with the reception pattern. In the present embodiment, a method for realizing remote start while reliably preventing remote start by a third party other than the management system will be described.

In this embodiment, a wireless communication unit different from the wireless communication unit that transmits the internal signal used for comparison with the activation pattern is used to request or receive authentication information required for remote activation. This embodiment can be applied to any of the first to third embodiments, but the following description will be given by taking as an example a case where the configuration of this embodiment is applied to the second embodiment.

When the configuration of this embodiment is applied to the second embodiment, in addition to the wireless communication units 201 and 202, the wireless communication unit 203 is used. In the second embodiment, when the determination unit 103 compares the activation pattern with the reception pattern and determines that these patterns match, the determination unit 103 instructs the wireless communication unit 203 (corresponding to the "third wireless communication unit") to transmit a wireless signal requesting "authentication information" from the management system.

Here, "authentication information" refers to any information that can verify the authenticity of the sender, and its content is not important.

When the management system receives a wireless signal requesting authentication information, the management system transmits the authentication information in response to the request. At this time, the management system may transmit a wireless signal including the authentication information to any of the wireless communication units 201, 202, and 203.

When any of the wireless communication units 201, 202, and 203 receives a wireless signal (corresponding to a "third wireless signal") including authentication information, the receiving unit 101 receives the authentication information from the wireless communication unit that received the wireless signal including the authentication information. Then, the determining unit 103 determines whether the authentication information received by the receiving unit 101 is valid or not. The authentication information may be, for example, identification information of the management system, information encrypted using a key previously shared between the management system and the activation control device 10, a hash value, or transmission domain authentication, and the method is not limited as long as the information can confirm that the received wireless signal is a legitimate management system. Then, when the determining unit 103 determines that the authentication information is valid, it determines to activate the in-vehicle communication control device 30, and the output unit 104 outputs a activation signal.

In this embodiment, when the reception pattern of the wireless signal transmitted by a third party is compared with the activation pattern, the management system receives a wireless signal requesting authentication information from the wireless communication unit, even though the management system has not transmitted a wireless signal for activating the in-vehicle communication control device 30. Therefore, the management system can detect that the electronic control system S has been unintentionally accessed by a third party. In this case, the management system does not transmit authentication information to the wireless communication unit. Therefore, the determination unit 203 does not determine the validity of the authentication information, and therefore does not output an activation signal for activating the in-vehicle communication control device 30. As a result, it is possible to prevent the in-vehicle communication control device 30 from being illegally activated by a third party, and further, the management system can detect that there has been unintentional access by a third party.

12 is a diagram for explaining the operation of the start-up control device 10 according to the present embodiment. The same reference numerals as in FIG. 7 indicate the same processes, and therefore the explanation will be omitted.
If it is determined in S103 that the activation pattern and the received pattern match, the determination unit 103 instructs the wireless communication unit 203 to transmit a wireless signal requesting authentication information (S301).
When any of the wireless communication units 201 to 203 receives a wireless signal including authentication information (corresponding to a "third wireless signal"), the receiving unit 101 receives the authentication information from the wireless communication unit that received the wireless signal including the authentication information (S302).
The determining unit 103 determines whether the authentication information received by the receiving unit 101 is valid (S303).
When the determination unit 103 determines that the authentication information is valid (S303: Y), it determines to start up the in-vehicle communication control device 30. Then, the output unit 104 outputs a start-up signal (S104).

In addition, instead of the wireless communication unit 203, the determination unit 103 may instruct the wireless communication unit 201 or the wireless communication unit 201 to transmit a wireless signal requesting authentication information from the management system. In this case, the management system transmits a wireless signal including authentication information to the wireless communication unit 203. In this example, when the wireless communication unit 203 receives a wireless signal including authentication information, the receiving unit 101 receives the authentication information from the wireless communication unit 203. Then, the determination unit 103 determines whether the authentication information received by the receiving unit 101 is valid.

Although the present embodiment has been described with reference to an example in which it is applied to the second embodiment, it may also be applied to the first embodiment. In this case, if the reception pattern of the internal signal based on the wireless signal received by the wireless communication unit 201 is compared with the startup pattern and it is determined that these patterns match, the wireless communication unit 202 is instructed to transmit a wireless signal requesting authentication information from the management system, and the wireless communication units 201 and 202 receive a wireless signal including the authentication information. Alternatively, the wireless communication unit 201 may be instructed to transmit a wireless signal requesting authentication information from the management system, and the wireless communication unit 202 may receive a wireless signal including the authentication information.

In other words, in this embodiment, it is necessary to request or receive authentication information using a wireless communication unit different from the wireless communication unit that received the wireless signal in embodiments 1 and 2.

According to this embodiment, in addition to comparing the activation pattern with the reception pattern, authentication information is also used to determine whether or not to activate the in-vehicle communication control device 30, thereby reliably preventing the in-vehicle communication control device 30 from being erroneously activated by a third party other than the authorized management system.

The configuration of this embodiment can be realized alone, without being combined with embodiments 1 to 3. In other words, without comparing the startup pattern with the reception pattern, when an instruction to start the in-vehicle communication control device 30 is received from the management system via a specific wireless communication unit, authentication information is transmitted and received via a different wireless communication unit. The parts of the invention in the startup control device that realize only the configuration of this embodiment 4 without combining it with embodiments 1 to 3 are as follows.

(Invention 1)
A start-up control device connected to a first wireless communication unit, a second wireless communication unit, and a control unit,
receiving an internal signal from the first wireless communication unit when the first wireless communication unit receives a first wireless signal;
When the first wireless communication unit or the second wireless communication unit receives a second wireless signal including authentication information, the authentication information is received from the wireless communication unit that received the authentication information.
A receiving unit (101);
when the receiving unit receives the internal signal, instructs the second wireless communication unit to transmit a wireless signal requesting the authentication information;
When the receiving unit receives the authentication information, it determines whether the authentication information is valid.
A determination unit (103);
an output unit (104) that outputs a start signal for instructing start of the control unit when the determination unit determines that the authentication information is valid;
A start-up control device (10).

(Invention 2)
A start-up control device connected to a first wireless communication unit, a second wireless communication unit, and a control unit,
receiving an internal signal from the first wireless communication unit when the first wireless communication unit receives a first wireless signal;
receiving the authentication information from the second wireless communication unit when the second wireless communication unit receives a second wireless signal including the authentication information;
A receiving unit (101);
instructing the first wireless communication unit or the second wireless communication unit to transmit a wireless signal requesting the authentication information when the receiving unit receives the internal signal;
When the receiving unit receives the authentication information, it determines whether the authentication information is valid.
A determination unit (103);
an output unit (104) that outputs a start signal for instructing start of the control unit when the determination unit determines that the authentication information is valid;
A start-up control device (10).

6. Summary The features of the start-up control device and the like in each embodiment of the present invention have been described above.

The terms used in each embodiment are merely examples and may be replaced with synonymous terms or terms with equivalent functions.

The block diagrams used to explain the embodiments classify and organize the device configuration by function. The blocks showing each function are realized by any combination of hardware or software. In addition, since they show functions, such block diagrams can also be understood as disclosures of method inventions and program inventions that realize the methods.

The order of the functional blocks that can be understood as processes, flows, and methods described in each embodiment may be changed as long as there are no constraints such as a relationship in which one step uses the results of another step that precedes it.

The terms 1st, 2nd, through Nth (N is an integer) used in each embodiment and in the claims are used to distinguish between two or more configurations or methods of the same type, and do not limit the order or superiority or inferiority.

Each embodiment is based on a startup control device installed in a vehicle, but the present invention also includes dedicated or general-purpose devices other than those for vehicles, unless otherwise limited by the claims.

Moreover, examples of the configuration of the start control device of the present invention include the following.
Examples of the component form include a PLD, a semiconductor element, an electronic circuit, a module, and a microcomputer.
Examples of semi-finished products include an electronic control unit (ECU) and a system board.
Finished product forms include mobile phones, smartphones, tablets, personal computers (PCs), workstations, servers, and data communication modules (DCMs).
Other examples include devices with communication functions, such as video cameras, still cameras, and car navigation systems.

The startup control device may also be equipped with necessary functions, such as an antenna, a communication interface, a display screen, status display LEDs, and switches.

In addition, the present invention can be realized not only by dedicated hardware having the configuration and functions described in each embodiment, but also as a combination of a program for implementing the present invention recorded on a recording medium such as a memory or hard disk, and general-purpose hardware having a dedicated or general-purpose CPU and memory capable of executing the program.

Programs stored in non-transient, physical recording media (e.g., external storage devices (hard disks, USB memory, SD card memory, CDs/BDs, etc.) or internal storage devices (RAM, ROM, etc.)) of dedicated or general-purpose hardware can also be provided to the dedicated or general-purpose hardware via the recording media, or via a communication line from a server without using a recording media. This makes it possible to always provide the latest functions through program upgrades.

The start-up control device of the present invention is primarily intended for start-up control devices mounted on automobiles, but may also be intended for start-up control devices not mounted on automobiles.

10 Start control device, 101 Receiving unit, 102 Storage unit, 103 Determination unit, 104 Output unit, 201, 202, 203 Wireless communication unit, 30 In-vehicle communication control device, S Electronic control system

Claims (20)

A start-up control device connected to a wireless communication unit (201) that receives a wireless signal and a control unit (30),
a receiving unit (101) that receives an internal signal from the wireless communication unit when the wireless communication unit receives the wireless signal;
A storage unit (102) for storing an activation pattern that is a reference for activating the control unit, the activation pattern being a combination of a time and a number of times of a reference internal signal;
a determination unit (103) that compares the activation pattern with a reception pattern that is a combination of the time and number of times of the internal signal received by the receiving unit, and determines whether or not to activate the control unit;
an output unit (104) that outputs a start-up signal for instructing the control unit to start up when the determination unit determines that the control unit should be started up;
Equipped with
The start-up control device is an in-vehicle start-up control device mounted on a vehicle,
The vehicle-mounted activation control device is supplied with electricity by a first power source,
The control unit is supplied with electricity by a power source of the vehicle, which is a second power source.
A start-up control device (10). A start-up control device connected to a first wireless communication unit (201) that receives a first wireless signal, a second wireless communication unit (202) that receives a second wireless signal, and a control unit (30),
a receiving unit (101) that receives a first internal signal from the first wireless communication unit when the first wireless communication unit receives the first wireless signal, and receives a second internal signal from the second wireless communication unit when the second wireless communication unit receives the second wireless signal;
a storage unit (102) for storing an activation pattern serving as a reference for activating the control unit, the activation pattern being a combination of two or more of a sequence, a time, and a number of times of a first reference internal signal and a second reference internal signal;
a determination unit (103) that compares the activation pattern with a reception pattern that is a combination of two or more of an order, a number of times, and a time of the first internal signal and the second internal signal received by the receiving unit, and determines whether or not to activate the control unit;
an output unit (104) that outputs a start-up signal for instructing the control unit to start up when the determination unit determines that the control unit should be started up;
A start-up control device (10). the wake-up pattern includes a time when the first reference internal signal and the second reference internal signal are absent.
The start control device according to claim 2. When the determination unit determines not to activate the control unit, the determination unit stops comparing the activation pattern with the reception pattern until a predetermined condition is satisfied.
The start control device according to claim 2. restarting the comparison between the startup pattern and the reception pattern when a predetermined time has elapsed since the comparison between the startup pattern and the reception pattern was stopped;
The start control device according to claim 4. The storage unit further stores a release pattern that is a reference for releasing the stop of the comparison, the release pattern being a combination of two or more of the sequence, time, and number of times of the first reference release signal and the second reference release signal;
the determination unit compares the release pattern with the reception pattern to determine whether or not to release the stop of the comparison.
The start control device according to claim 4. When determining that the stop of the comparison should be released, the determination unit resumes the comparison between the startup pattern and the reception pattern.
The start control device according to claim 6. the determination unit, when comparing the release pattern with the received pattern and determining that they match, determines to release the stop of the comparison and to start the control unit.
The start control device according to claim 6. The activation control device is further connected to a third wireless communication unit (203);
the receiving unit further receives, when the first wireless communication unit, the second wireless communication unit, or the third wireless communication unit receives a third wireless signal including authentication information, the authentication information from the wireless communication unit that received the third wireless signal;
The determination unit is
instructing the third wireless communication unit to transmit a wireless signal requesting the authentication information when the activation pattern and the reception pattern are compared and determined to match each other;
If the authentication information received by the receiving unit is valid, it is determined that the control unit is to be started.
The start control device according to claim 2. The activation control device is further connected to a third wireless communication unit (203);
The receiving unit further receives the authentication information from the third wireless communication unit when the third wireless communication unit receives a third wireless signal including authentication information;
The determination unit is
when it is determined that the activation pattern and the reception pattern match each other, instructing the first wireless communication unit or the second wireless communication unit to transmit a wireless signal requesting the authentication information;
determining that the control unit is to be started when the authentication information received by the receiving unit is valid;
The start control device according to claim 2. the first wireless signal is a Short Message Service (SMS) sent to a first identification number;
the second wireless signal is an SMS sent to a second identification number;
The start control device according to claim 2. The start-up control device is an in-vehicle start-up control device mounted on a vehicle,
The vehicle-mounted activation control device is supplied with electricity by a first power source,
The control unit is supplied with electricity by a power source of the vehicle, which is a second power source.
The start control device according to claim 2 . An electronic control device connected to a first wireless communication unit (201) that receives a first wireless signal and a second wireless communication unit (202) that receives a second wireless signal, the electronic control device having a control unit (30),
a receiving unit (101) that receives a first internal signal from the first wireless communication unit when the first wireless communication unit receives the first wireless signal, and receives a second internal signal from the second wireless communication unit when the second wireless communication unit receives the second wireless signal;
a storage unit (102) for storing an activation pattern serving as a reference for activating the control unit, the activation pattern being a combination of two or more of a sequence, a time, and a number of times of a first reference internal signal and a second reference internal signal;
a determination unit (103) that compares the activation pattern with a reception pattern that is a combination of two or more of an order, a number of times, and a time of the first internal signal and the second internal signal received by the receiving unit, and determines whether or not to activate the control unit;
an output unit (104) that outputs a start-up signal for instructing the control unit to start up when the determination unit determines that the control unit should be started up;
The control unit is activated based on the activation signal;
An electronic control device comprising: A first wireless communication unit (201) for receiving a first wireless signal;
a second wireless communication unit (202) for receiving a second wireless signal;
a receiving unit (101) that receives a first internal signal from the first wireless communication unit when the first wireless communication unit receives the first wireless signal, and receives a second internal signal from the second wireless communication unit when the second wireless communication unit receives the second wireless signal;
a storage unit (102) for storing an activation pattern serving as a reference for activating the control unit, the activation pattern being a combination of two or more of a sequence, a time, and a number of times of a first reference internal signal and a second reference internal signal;
a determination unit (103) that compares the activation pattern with a reception pattern that is a combination of two or more of an order, a number of times, and a time of the first internal signal and the second internal signal received by the receiving unit, and determines whether or not to activate the control unit;
an output unit (104) that outputs a start-up signal for instructing the control unit to start up when the determination unit determines that the control unit should be started up;
The control unit (30) that starts up based on the start signal;
An electronic control system comprising: A start-up control program executable by a start-up control device connected to a first wireless communication unit that receives a first wireless signal, a second wireless communication unit that receives a second wireless signal, and a control unit,
The startup control device includes a storage unit that stores a startup pattern that is a reference for starting the control unit, the startup pattern being a combination of two or more of a sequence, a number of times, and a time of a first reference internal signal and a second reference internal signal;
receiving a first internal signal from the first wireless communication unit when the first wireless communication unit receives the first wireless signal;
receiving a second internal signal from the second wireless communication unit when the second wireless communication unit receives the second wireless signal;
comparing the activation pattern with a reception pattern that is a combination of two or more of an order, a time, and a number of times of the first internal signal and the second internal signal received, to determine whether or not to activate the control unit;
When it is determined that the control unit is to be started, a start-up signal for instructing the control unit to be started is output.
A startup control program that causes the startup control device to execute a process . A startup control method executed by a startup control device connected to a first wireless communication unit that receives a first wireless signal, a second wireless communication unit that receives a second wireless signal, and a control unit, comprising:
The startup control device includes a storage unit that stores a startup pattern that is a reference for starting the control unit, the startup pattern being a combination of two or more of a sequence, a number of times, and a time of a first reference internal signal and a second reference internal signal;
receiving a first internal signal from the first wireless communication unit when the first wireless communication unit receives the first wireless signal;
receiving a second internal signal from the second wireless communication unit when the second wireless communication unit receives the second wireless signal;
comparing the activation pattern with a reception pattern that is a combination of two or more of an order, a time, and a number of times of the first internal signal and the second internal signal received, to determine whether or not to activate the control unit;
When it is determined that the control unit is to be started, a start-up signal for instructing the control unit to be started is output.
Start-up control method. An electronic control device mounted on a vehicle, the electronic control device being connected to a wireless communication unit (201) that receives wireless signals, and comprising a start-up control unit (10) and a control unit (30),
The startup control unit is
a receiving unit (101) that receives an internal signal from the wireless communication unit when the wireless communication unit receives the wireless signal;
A storage unit (102) for storing an activation pattern that is a reference for activating the control unit, the activation pattern being a combination of a time and a number of times of a reference internal signal;
a determination unit (103) that compares the activation pattern with a reception pattern that is a combination of the time and number of times of the internal signal received by the reception unit, and determines whether or not to activate the control unit;
and an output unit (104) that outputs a start-up signal for instructing the control unit to start up when the determination unit determines that the control unit should be started up;
The control unit is activated based on the activation signal,
The activation control unit is supplied with electricity by a first power source,
The control unit is supplied with electricity by a power source of the vehicle, which is a second power source.
Electronic control unit. An electronic control system mounted on a vehicle,
A wireless communication unit (201) for receiving a wireless signal;
A start-up control device,
a receiving unit (101) that receives an internal signal from the wireless communication unit when the wireless communication unit receives the wireless signal;
A storage unit (102) for storing an activation pattern that is a reference for activating the control unit and is a combination of a time and a number of times of a reference internal signal;
a determination unit (103) that compares the activation pattern with a reception pattern that is a combination of the time and number of times of the internal signal received by the receiving unit, and determines whether or not to activate the control unit;
an output unit (104) that outputs a start-up signal for instructing the control unit to start up when the determination unit determines that the control unit should be started up;
The start-up control device having the
The control unit (30) is activated based on the activation signal,
the start-up control device is supplied with electricity by a first power source;
The control unit is supplied with electricity by a power source of the vehicle, which is a second power source.
Electronic control system. A start-up control program executable by a start-up control device mounted on a vehicle and connected to a wireless communication unit (201) for receiving a wireless signal and a control unit (30),
The start-up control device includes a storage unit that stores a start-up pattern that is a reference for starting the control unit, the start-up pattern being a combination of a time and a number of times of a reference internal signal;
receiving an internal signal from the wireless communication unit when the wireless communication unit receives the wireless signal;
comparing the activation pattern with a reception pattern , which is a combination of the time and number of times the internal signal is received , to determine whether or not to activate the control unit;
When it is determined that the control unit is to be started, a start-up signal is outputted to the start-up control unit; and
the start-up control device is supplied with electricity by a first power source;
The control unit is supplied with electricity by a power source of the vehicle, which is a second power source.
Startup control program.
A startup control method executed by a startup control device mounted on a vehicle and connected to a wireless communication unit (201) that receives a wireless signal and a control unit (30), comprising:
The start-up control device includes a storage unit that stores a start-up pattern that is a reference for starting the control unit, the start-up pattern being a combination of a time and a number of times of a reference internal signal;
receiving an internal signal from the wireless communication unit when the wireless communication unit receives the wireless signal;
comparing the activation pattern with a reception pattern , which is a combination of the time and number of times the internal signal is received , to determine whether or not to activate the control unit;
When it is determined that the control unit is to be started, a start-up signal is output to instruct the control unit to be started;
the start-up control device is supplied with electricity by a first power source;
The control unit is supplied with electricity by a power source of the vehicle, which is a second power source.
Start-up control method.