JP2013063672A - Vehicular control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicular control system which makes it difficult for others to perform, when a vehicle key is stolen, unlocking of a vehicle door or starting of an engine by use of the vehicle key.SOLUTION: The vehicular control system includes an in-vehicle device 10 and an electronic key 20 (vehicle key). The electronic key 20 is mounted with a camera 23 capable of photographing a user's iris, and wirelessly transmits data including encrypted iris image data of the user and characteristic ID data of the electronic key 20 to a receiver 15 mounted on a vehicle. A vehicle control unit 11 (collation means) of the in-vehicle device 10 collates each of the received data with each of preliminarily registered master data. The unlocking of the vehicle door or the starting of the engine is permitted on condition that each data is accepted and authenticated by the vehicle control unit 11 (control means).

Description

  The present invention relates to a vehicle control system, and more particularly to a vehicle control system with enhanced security.

  In a vehicle control system that uses an electronic key as a vehicle key, the vehicle door is locked or unlocked on the condition that ID data wirelessly transmitted from the electronic key to the in-vehicle transceiver is received and authenticated (ID authentication). In addition, the engine is started. In such a vehicle control system, a camera is installed inside the vehicle, the user's iris is photographed with the camera, biometric authentication is performed using the iris image data, and if biometric authentication is not performed, for example, engine start is prohibited. By doing so, it is conceivable to ensure security when the electronic key is stolen (see the following patent document).

JP 2006-282116 A JP 2000-099785

  However, even if a camera is installed inside the vehicle, there is a problem that luggage and in-vehicle equipment in the vehicle can be easily stolen because the electronic key can be freely used in the vehicle. And there was also a problem that the security was invalidated by removing the personal authentication device in the vehicle, and the vehicle itself could be easily stolen by moving the vehicle by tow.

  The present invention has been made in order to cope with the above-described problems. The purpose of the present invention is to enable the other person to use the vehicle key to unlock the door or start the engine when the vehicle key is stolen. It is to provide a vehicle control system that is difficult to perform.

Means for Solving the Problems and Effects of the Invention

In order to achieve the above object, a vehicle control system of the present invention includes:
A vehicle key equipped with a camera that can shoot the user's iris and wirelessly transmitting data including the encrypted iris image data,
A receiver mounted on a vehicle and capable of wirelessly receiving the data;
A collation means mounted on the vehicle and collating the wirelessly received data with the pre-registered master data,
Control means for permitting the start of the engine of the vehicle is provided on condition that it is authenticated by the verification means. In this case, the data can be configured to include ID data unique to the vehicle key, for example. Here, the vehicle key is, for example, an electronic key (keyless system key) that locks or unlocks a vehicle door automatically or semi-automatically and that can start an engine by pressing a start switch provided on the vehicle. ), A wireless key (remote key for a remote keyless system) having an input operation unit for locking or unlocking a vehicle door and a mechanical key unit inserted into an ignition switch.

  In the vehicle control system of the present invention, the start of the vehicle engine is permitted on condition that the user's iris is photographed using a camera mounted on the vehicle key and authentication is performed by the matching means based on the iris. Is done. For this reason, since it is not possible to start the engine of the vehicle simply by stealing the vehicle key, it is possible to enhance the security as compared with the conventional system. In other words, in a system using conventional immobilization authentication, it is possible to analyze immobility information from a stolen vehicle key, but in a system using iris authentication, it is not possible to analyze iris information from a stolen vehicle key. Since this is possible, the security is enhanced compared to the conventional system.

In order to achieve the above object, another vehicle control system of the present invention includes:
Equipped with a camera that can photograph the user's iris, and equipped with collation means for collating the iris image data with the master iris image data registered in advance, and data including ID data is installed in the vehicle when the collation results match Vehicle key that can be wirelessly transmitted to the receiver,
And a control unit that is mounted on the vehicle and permits the start of the engine of the vehicle based on the data.

  In another vehicular control system of the present invention, a vehicular key is provided with collation means, authentication is performed by the collation means based on the photographed iris, and data including ID data is obtained when the collation result matches. The key is wirelessly transmitted to the receiver of the vehicle, and starting of the engine of the vehicle is permitted based on the data. According to this, the security aspect can be strengthened while reducing the burden on the storage means on the vehicle side.

  In this case, it can be configured to include means for permitting locking or unlocking of the vehicle door on the condition that authentication is performed by the verification means. According to this, since it is not possible to get into the vehicle only by stealing the vehicle key, it is possible to further enhance the security aspect as compared with the conventional system.

  In addition, it is preferable that the iris authentication is set to be invalidated after a predetermined time has elapsed since the authentication by the verification unit. According to this, for example, it is possible to configure so that the iris authentication needs to be performed again in order to start the engine after the lapse of the time, and the security of the vehicle can be enhanced.

  In addition, during a series of boarding periods from when the user gets on the vehicle until the user gets off the vehicle, the iris authentication may be set to be effective. In the configuration in which the effectiveness of the iris authentication is invalidated after a predetermined time has elapsed since the iris authentication as described above, it is necessary to repeatedly perform the iris authentication, which improves security while improving convenience. It becomes easy to lack. In this regard, it is possible to eliminate some of the above inconveniences by configuring the iris authentication to be effective during a series of boarding periods from when the user gets on the vehicle until it gets off. Is possible.

  In addition, at least one of the vehicle key and the vehicle can be configured to be provided with an informing means for informing whether the effectiveness of iris authentication is validated or invalidated. According to this, the user can immediately recognize whether the iris authentication is validated or invalidated through the notification means, and can smoothly proceed with subsequent operations.

The block diagram which shows the structure of the control system for vehicles of this invention containing an electronic key. The flowchart which concerns on Example 1 of this invention and shows the control program performed by the control part for vehicles of FIG. The flowchart which concerns on Example 2 of this invention and shows the control program performed by the control part for keys of FIG. The flowchart which concerns on Example 2 of this invention and shows the control program performed by the control part for vehicles of FIG. The flowchart which shows the principal part of the control program of FIG. 2 or FIG. 3 concerning the modification of Example 1 and 2 of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a vehicle control system according to the present invention that includes an in-vehicle device 10 and an electronic key 20.

  The vehicle control unit 11 (ECU) of the in-vehicle device 10 is composed of a microcomputer having a CPU, ROM, RAM, input / output unit (I / O) and the like as main components. The vehicle control unit 11 repeatedly executes the control program of FIG. 2 stored in the ROM. In the memory 12, the user's own iris image pattern (master iris code) for collating with the encrypted iris image data from the electronic key 20 and ID data unique to the electronic key 20 are registered in advance. The control unit 11 collates each received data with each data in the memory 12 (authentication).

  The vehicle control unit 11 includes transmitters 13 and 14 (outdoors and indoors) including an antenna and a known modulation circuit unit (not shown), a tuner, and a known demodulation circuit unit (not shown). A receiver 15 (UHF receiver) is connected.

  The transmitter 13 (outdoor) is provided in the driver's seat, front passenger seat, left and right rear seats of the vehicle, and the trunk. The entrance door and the trunk correspond to the vehicle door of the present invention. The transmitter 13 is built in, for example, the handle portion of each door, and periodically transmits an inquiry signal (request signal) around the transmitter. The output of this inquiry signal is adjusted so as to reach only within a predetermined key response area (door lock area, detection area) of about 70 cm to 1 m from each door. Thereby, only the electronic key 20 existing in the key response area can receive this inquiry signal.

  The transmitter 14 (indoor) is provided, for example, indoors, and periodically transmits an inquiry signal to the vehicle interior. The output of this inquiry signal is adjusted so as to reach only within a predetermined key response area in the passenger compartment. Thereby, only the electronic key 20 existing in the key response area can receive this inquiry signal.

  The receiver 15 is incorporated in, for example, a vehicle pillar unit, decodes a response signal from the electronic key 20 in each key response area, and sends the response signal to the vehicle control unit 11.

  Various control switches 31 such as a door lock SW, a door unlock switch, and an engine SW are connected to the vehicle control unit 11, and the engine control unit 52 is connected to the door lock control unit 41 via the in-vehicle LAN 100 and the immobilizer 51. Etc. are connected so that they can communicate with each other.

  Of the SW 31, the door lock SW is provided, for example, at the handle portion of each door. The door lock SW is composed of, for example, a push button type mechanical switch, a capacitance type touch sensor, and the like, and transmits an ON signal thereof to the vehicle control unit 11. In response, the vehicle control unit 11 switches the door lock mechanism 42 to the locked state via the door lock control unit 41 on condition that the iris authentication and the ID authentication of the electronic key 20 are performed.

  Of the SWs 31, the door unlock SW is provided, for example, at the handle portion of the driver's seat door. The door unlock SW is composed of, for example, a push button mechanical switch, a capacitive touch sensor, and the like, and transmits an ON signal to the vehicle control unit 11. In response, the vehicle control unit 11 switches the door lock mechanism 42 to the unlocked state via the door lock control unit 41 on condition that the iris authentication and the ID authentication of the electronic key 20 are performed. In addition, you may provide door unlock SW in each door separately.

  The engine SW of the SW 31 is configured by, for example, a push button type mechanical switch, and transmits an ON signal to the vehicle control unit 11. In response to this, the vehicle control unit 11 starts the engine via the immobilizer 51 and the engine control unit 52 on condition that iris authentication and ID authentication of the electronic key 20 are performed. The vehicle control unit 11 corresponds to the checking means and control means of the present invention.

  The electronic key 20 functions as a portable wireless device capable of receiving an inquiry signal from the in-vehicle device 10 or transmitting iris image data taken by the user, ID data unique to the electronic key 20, and the like. , A transmission unit 21 (UHF transmission unit) having a known modulation circuit unit, a reception unit 22 (LF reception unit) having a known demodulation circuit unit, a camera 23, a key control unit 24, and a memory 25.

  The camera 23 captures the user's iris according to the user's manual operation. The key control unit 24 is composed of a microcomputer whose main components are a CPU, ROM, RAM, input / output unit (I / O), etc., and the captured iris image data is encrypted and stored in the memory 25. At the same time, the encrypted iris image data and ID data are transmitted to the receiver 15 of the in-vehicle device 10 via the transmission unit 21. The memory 25 stores the encrypted iris image data for a predetermined time (for example, 1 minute to 60 minutes or 1 day to 1 week), and thereafter, the iris image data is set to be cleared. Yes.

  Further, the electronic key 20 is provided with an indicator 26 that is operated by pressing a SW provided on the electronic key 20. The indicator 26 (notification means) indicates whether the captured iris image data is stored in the memory 25 or whether the iris image data is cleared from the memory 25, that is, whether the iris authentication state is currently set. The function of notifying the user whether the iris is in an unauthenticated state is fulfilled, and the iris authentication state is indicated by lighting thereof, and the iris non-authentication state is indicated by turning off. By pressing SW when the indicator 26 is turned off, the photographing state is set. When the authentication is successful, the indicator 26 is turned on (the buzzer 27 (notification means) provided on the electronic key 20 is blown), and when it fails, it is blinked. ing.

  Next, the operation of the first embodiment configured as described above will be described based on the control program of FIG. First, a case where the user gets on will be described. A user takes his / her own iris outside the key response area outside the room or inside the key response area with the camera 23 of the electronic key 20, and the iris image data is held in the key response area with the electronic key 20 stored in the memory 25. When entering, the iris image data and ID data encrypted in response to the inquiry signal from the transmitter 13 are transmitted to the in-vehicle device 10 by the key control unit 24.

  When the vehicle control unit 11 receives data from the electronic key 20 (S11: YES), the received iris image data and ID data are respectively stored in the memory 12 as master iris image data and master ID data (master ID data). ID code) (S12), and if it is determined that the data matches (authentication accepted) (S13: YES), the door unlock operation or engine start is permitted (S14). ). That is, the vehicle control unit 11 outputs a door unlock request to the door lock control unit 41 when the user receives an ON signal from the door unlock SW when the user operates the door unlock SW, that is, the door unlock. Send a control signal. The door lock control unit 41 that has received the door unlock control signal drives the door lock mechanism 42 to unlock all doors in the locked state.

  At this time, the vehicle control unit 11 does not perform control when at least one of the iris image data and the ID data does not match (S13: NO), and the buzzer 61 (notification unit) provided in the vehicle. Sound. Furthermore, the vehicle control unit 11 transmits a signal indicating a mismatch to the electronic key 20 (S15). In response to this, the electronic key 20 sounds a buzzer 27 (notification means).

  When the user presses the engine SW to start the engine, the vehicle control unit 11 drives the transmitter 14 (indoor antenna), and the electronic key 20 responds to the inquiry signal from the transmitter 14 with the iris image data and the electronic key. 20 ID data is transmitted, and the engine SW transmits an ON signal to the vehicle control unit 11 (S14).

  Next, a case where the user gets off will be described. When the user gets off and enters the outdoor key response area, the iris image data and the ID data of the electronic key 20 are transmitted to the in-vehicle device 10 by the key control unit 24 in response to an inquiry signal from the transmitter 13. .

  When receiving the data from the electronic key 20 (S11: YES), the vehicle control unit 11 uses the received iris image data and ID data as master iris image data and master ID data (master ID) registered in the memory 12 in advance. Code) (S12), and if it is determined that the data matches (authentication accepted) (S13: YES), the door lock operation is permitted (S14). That is, the vehicle control unit 11 outputs a door lock request to the door lock control unit 41, that is, transmits a door lock control signal, when receiving an ON signal from the door lock SW when the user operates the door lock SW. To do. The door lock control unit 41 that has received the door lock control signal drives the door lock mechanism 42 to lock the door in the unlocked state.

  If the door lock SW is not operated after the indicator 26 is turned on, that is, until the predetermined time T elapses after the iris is authenticated, the key control unit 24 displays the indicator when the predetermined time T elapses. 26 is turned off. Thereafter, a transition is made from the iris authentication state to the iris non-authentication state.

  Further, even after the door lock SW is operated until the predetermined time T elapses and the door is locked by the door lock control unit 41, the iris authentication state is shifted to the iris non-authentication state.

  According to the first embodiment, on the condition that the iris of the user is photographed using the camera 23 mounted on the electronic key 20 and the iris authentication and the ID authentication of the electronic key 20 are performed by the vehicle control unit 11. Processing (S12 to S14) executed by the vehicle control unit 11 is provided to permit the start of the vehicle engine. As a result, the vehicle engine cannot be started simply by stealing the electronic key 20, so that the security can be enhanced compared to the conventional system.

  In the first embodiment, on the condition that iris authentication and ID authentication of the electronic key 20 are performed by the vehicle control unit 11, the vehicle control unit 11 permits the vehicle door to be locked or unlocked. Processing to be executed (S12 to S14) is provided. As a result, it is not possible to get into the vehicle simply by stealing the electronic key 20, so that the security can be further enhanced compared to the conventional system.

  In the first embodiment, the iris authentication is set to be invalidated after a predetermined time T has elapsed since the iris authentication. As a result, for example, in order to start the engine after the elapse of time T, it is necessary to perform iris authentication again, so that the security of the vehicle can be enhanced.

  In the first embodiment, the vehicle control unit 11 is configured to perform both the authentication of the iris authentication and the ID authentication of the electronic key 20, but in the following second embodiment, the key control unit of the electronic key 20 is used. While 24 performs iris authentication, the vehicle control unit 11 is configured to perform ID authentication of the electronic key 20. In the second embodiment, the key control unit 24 executes the control program shown in FIG. 3, and the vehicle control unit 11 executes the control program shown in FIG. Other configurations are the same as those of the first embodiment.

  The operation of the second embodiment configured as described above will be described based on the control program shown in FIGS. First, a case where the user gets on will be described. A user takes his / her own iris outside the key response area outside the room or inside the key response area with the camera 23 of the electronic key 20, and the iris image data is held in the key response area with the electronic key 20 stored in the memory 25. Upon entering and receiving an inquiry signal from the transmitter 13 (S21: YES), the key control unit 24 collates the captured iris image data with the master iris image data registered in advance in the memory 25 (S22). ). If the key control unit 24 determines that the verification matches (authentication accepted) (S23: YES), the key control unit 24 transmits the ID data stored in the memory 25 to the receiver 15 (S24).

  At this time, the key control unit 24 does not transmit ID data when the verification of the iris image data indicates a mismatch (S23: NO) and sounds the buzzer 27. Further, the key control unit 24 transmits a signal indicating a mismatch to the in-vehicle device 10 (S25). In response to this, the vehicle control unit 11 sounds a buzzer 61 provided in the vehicle.

  When receiving the data from the electronic key 20 (S31: YES), the vehicle control unit 11 collates the received ID data with the master ID data (master ID code) registered in the memory 12 (S32). Are in agreement (authentication accepted) (S33: YES), the door unlock operation or engine start is permitted (S34). That is, the vehicle control unit 11 outputs a door unlock request to the door lock control unit 41 when the user receives an ON signal from the door unlock SW when the user operates the door unlock SW, that is, the door unlock. Send a control signal. The door lock control unit 41 that has received the door unlock control signal drives the door lock mechanism 42 to unlock all doors in the locked state.

  At this time, when the collation of the ID data indicates a mismatch, the vehicle control unit 11 does not perform control (S33: NO) and blows the buzzer 61 provided in the vehicle. Further, the vehicle control unit 11 transmits a signal indicating a mismatch to the electronic key 20 (S35). In response to this, the electronic key 20 sounds the buzzer 27.

  When the user presses the engine SW to start the engine, the vehicle control unit 11 drives the transmitter 14 (indoor antenna), and the electronic key 20 controls the iris according to the inquiry signal from the transmitter 14 as described above. Collation is performed and ID data is transmitted only when it is determined that the collation matches, and the engine SW transmits an ON signal to the vehicle control unit 11 (S34).

  Next, a case where the user gets off will be described. When the user gets off and enters the outdoor key response area and receives an inquiry signal from the transmitter 13 (S21: YES), the key control unit 24 stores the captured iris image data in the memory 25 in advance. The registered master iris image data is collated (S22). If the key control unit 24 determines that the verification matches (authentication accepted) (S23: YES), the key control unit 24 transmits the ID data of the electronic key 20 to the receiver 15 (S24).

  When receiving the data from the electronic key 20 (S31: YES), the vehicle control unit 11 collates the received ID data with the master ID data (master ID code) registered in the memory 12 (S32). Are in agreement (authentication accepted) (S33: YES), the door lock operation is permitted (S34). That is, the vehicle control unit 11 outputs a door lock request to the door lock control unit 41, that is, transmits a door lock control signal, when receiving an ON signal from the door lock SW when the user operates the door lock SW. To do. The door lock control unit 41 that has received the door lock control signal drives the door lock mechanism 42 to lock the door in the unlocked state.

  In the second embodiment, as in the first embodiment, when the door lock SW is not operated between the time when the indicator 26 is lit and the predetermined time T has elapsed, the time when the predetermined time T has elapsed. The key control unit 24 controls the indicator 26 to be turned off. Thereafter, a transition is made from the iris authentication state to the iris non-authentication state. Further, even after the door lock SW is operated until the predetermined time T elapses and the door is locked by the door lock control unit 41, the iris authentication state is shifted to the iris non-authentication state.

  According to the second embodiment, the security aspect can be enhanced as in the first embodiment while reducing the load on the memory 12 of the in-vehicle device 10.

(Modification)
In the first and second embodiments, the setting is made such that the validity of the acceptance authentication is invalidated after a predetermined time T has elapsed since the iris authentication, but instead of this, for example, the step of FIG. As shown in S41, during a series of boarding periods from when the user gets on the vehicle until the user gets off, that is, the period until the engine is currently stopped and the vehicle door is closed from the closed state to the closed state. During, it may be set so that the effect of iris authentication is validated.

  According to this modification, it is possible to eliminate some of the troublesomeness of repeatedly performing iris authentication in order to improve security.

  In the first and second embodiments, the case where the camera 23 is mounted on the electronic key 20 as a vehicle key has been described. However, the present invention is not limited to this. For example, as shown by a broken line in FIG. The camera 23 can be mounted on a well-known wireless key (remote key for a remote keyless system) having an input operation unit 28 to be unlocked and a mechanical key unit (not shown) to be inserted into the ignition switch. Also in this modified example, as in the case of the first and second embodiments, a remote operation (key operation) for locking or unlocking the vehicle door by the input operation unit 28 is performed on the condition that iris authentication and key ID authentication are performed. (In addition to the ID data, control data for instructing lock or unlock is transmitted), and further, the engine key is allowed to be started by the mechanical key unit.

  Further, in the first embodiment, etc., it is configured that the vehicle door lock / unlock or engine start is permitted on condition that both iris authentication and ID authentication are performed, but ID authentication is omitted. Only iris authentication may be performed.

  In the first embodiment, etc., the mismatch of the iris image data or ID data is notified to the user by the sound of the buzzer 27 of the electronic key 20 and the buzzer 61 of the vehicle, but in addition to or instead of the buzzers 27 and 61. For example, as indicated by a broken line in FIG. 1, the electronic key 20 may be provided with a display 29 and the vehicle may be provided with a display 71 in order to notify the collation match or mismatch of each data.

10 on-vehicle equipment 11 control unit for vehicle (verification means, control means)
12 Memory 13, 14 Transmitter 15 Receiver 20 Electronic key (vehicle key)
21 Transmitter 22 Receiver 23 Camera 24 Key Control Unit 25 Memory 26 Indicator 41 Door Lock Control Unit 42 Door Lock Mechanism 51 Immobilizer 52 Engine Control Unit

Claims (7)

A vehicle key equipped with a camera that can shoot the user's iris and wirelessly transmitting data including the encrypted iris image data,
A receiver mounted on a vehicle and capable of wirelessly receiving the data;
Collating means mounted on the vehicle and collating the wirelessly received data with pre-registered master data,
A vehicle control system comprising control means for permitting start of a vehicle engine on condition that authentication is performed by the verification means.   The vehicle control system according to claim 1, wherein the data includes ID data unique to the vehicle key. Equipped with a camera that can photograph the user's iris, and equipped with collation means for collating the iris image data with the master iris image data registered in advance, and data including ID data is installed in the vehicle when the collation results match Vehicle key that can be wirelessly transmitted to the receiver,
Control means mounted on the vehicle and permitting start of the engine of the vehicle based on the data;
A vehicle control system comprising:   The vehicle control system according to any one of claims 1 to 3, further comprising means for permitting locking or unlocking of the vehicle door on the condition that authentication is performed by the verification means.   5. The vehicle control according to claim 1, wherein the control is set so that the validity of the authentication is invalidated after a predetermined time has elapsed since the authentication by the verification unit. system.   5. The vehicle according to claim 1, wherein the authentication is set to be valid during a series of boarding periods from when the user gets on the vehicle until the user gets off. Control system.   7. At least one of the vehicle key and the vehicle is provided with an informing means for informing whether the validity of the authentication is validated or invalidated. Vehicle control system.

Images