WO2017110207A1

WO2017110207A1 - Vehicular on-board device and authentication system

Info

Publication number: WO2017110207A1
Application number: PCT/JP2016/079727
Authority: WO
Inventors: 竜介石川; 昇錫呉
Original assignee: 株式会社デンソー
Priority date: 2015-12-24
Filing date: 2016-10-06
Publication date: 2017-06-29
Also published as: JP2017115439A; JP6451622B2; KR20180067605A; KR102071406B1

Abstract

Provided is a vehicular on-board device that is used in a vehicle and that comprises a first authentication unit (714) to authenticate using code verification via wireless communication with an electronic key, wherein the vehicular on-board device comprises: a second authentication unit (715) that authenticates with a method not using the code verification via wireless communication used by the first authentication unit; and a notification instruction unit (719) that notifies a personal mobile device (3) of a vehicle user that an illegal authentication using wireless communication has been performed on the vehicle when authentication with the first authentication unit 714 was successful but authentication with the second authentication unit 715 was not successful .

Description

In-vehicle device and authentication system

Cross-reference of related applications

This application is based on Japanese Application No. 2015-252252 filed on December 24, 2015, the contents of which are incorporated herein by reference.

This disclosure relates to an in-vehicle device that performs authentication using wireless communication with a portable device carried by a user, and an authentication system including the in-vehicle device.

2. Description of the Related Art Conventionally, there is known an authentication system that enables vehicle control such as locking / unlocking of a vehicle door and engine starting based on the fact that code verification by wireless communication is established between an in-vehicle device and a portable device such as an electronic key. . Since the distance range in which wireless communication is possible is limited to a short distance around the vehicle, authentication using wireless communication is normally possible only when the portable device is located in the vicinity of the vehicle.

However, in such an authentication system, there is a concern about a relay attack in which a malicious third party indirectly establishes authentication by indirectly realizing communication between the portable device and the in-vehicle device using a repeater. . In the relay attack, although it is not intended by a legitimate user, authentication is established and vehicle control such as unlocking the vehicle door and starting the engine becomes possible.

On the other hand, for example, in Patent Document 1, the intensity of a request signal transmitted from an in-vehicle device mounted on a vehicle (also referred to as the subject vehicle or the host vehicle) changes midway. In a portable device, a technique for preventing a relay attack by responding only when a change in strength is detected is disclosed.

JP 2010-185186 A

However, with the technique disclosed in Patent Document 1, even if it becomes possible to prevent relay attack, the user cannot recognize whether or not relay attack has been performed on the vehicle. When the user cannot recognize that the relay attack is being performed on the own vehicle, the user cannot recognize that the own vehicle is the target of theft, and cannot strengthen the crime prevention against the own vehicle theft.

An object of the present disclosure is to provide an in-vehicle device and an authentication system that allow a user to recognize that unauthorized authentication using wireless communication has been performed on the vehicle.

In order to achieve the above object, according to one aspect of the present disclosure, an in-vehicle device is used in a vehicle and authenticated by code verification via wireless communication with a portable device used as an electronic key. An in-vehicle device including a first authenticating unit that performs authentication, the second authenticating unit that authenticates by a method other than code verification via wireless communication used in the first authenticating unit, and the first authenticating unit, And a notification instructing unit that notifies the vehicle user's communication terminal that unauthorized authentication using wireless communication has been performed on the vehicle when the second authentication unit has not been authenticated.

In order to achieve the above object, according to another aspect of the present disclosure, an authentication system performs wireless communication between a portable device used as an electronic key and a vehicle used in a vehicle. A first authentication unit that includes a first authentication unit that performs authentication by code verification via a second authentication unit that performs authentication by a method other than code verification via wireless communication used in the first authentication unit; If the authentication is established in the second authentication unit but is not established in the second authentication unit, the communication terminal of the user of the own vehicle is notified that the unauthorized authentication using the wireless communication has been performed on the own vehicle. And an in-vehicle device including a notification instruction unit.

If authentication is established by code verification via wireless communication used in the first authentication unit, but authentication is not established in the second authentication unit by any other method, wireless communication in the first authentication unit is used. It can be said that the authenticated authentication was illegally established. Therefore, the notification instruction | indication part can notify this to the communication terminal of the user of the own vehicle, when the unauthorized authentication via wireless communication is performed with respect to the own vehicle. In addition, since the communication terminal of the user of the own vehicle is notified that the unauthorized authentication via the wireless communication has been performed on the own vehicle, the user automatically performs the unauthorized authentication via the wireless communication from the communication terminal. You can recognize what happened to the car.

The above and other objects, features and advantages of the present disclosure will become more apparent from the following detailed description with reference to the accompanying drawings.
It is a figure which shows an example of a schematic structure of the authentication system of 1st Embodiment. It is a figure which shows an example of a schematic structure of an electronic key. It is a figure which shows an example of schematic structure of authentication ECU. It is a figure which shows an example of a schematic structure of the main controller of authentication ECU. It is a flowchart which shows an example of the flow of the authentication related process in the main controller of authentication ECU. It is a figure which shows an example of the correspondence of the combination of the authentication result of a 1st authentication part and a 2nd authentication part, and the process corresponding to it. It is a figure which shows an example of a schematic structure of the authentication system of 2nd Embodiment. It is a figure which shows an example of a schematic structure of authentication ECU of 2nd Embodiment. It is a flowchart which shows an example of the flow of the authentication related process in the main controller of authentication ECU of 2nd Embodiment. It is a figure which shows an example of schematic structure of authentication ECU of a modification. It is a figure which shows an example of schematic structure of authentication ECU of another modification.

A plurality of embodiments and modifications for disclosure will be described with reference to the drawings. For convenience of explanation, among the plurality of embodiments and modifications, portions having the same functions as those shown in the drawings used in the previous description are denoted by the same reference numerals and description thereof is omitted. There is a case. For the portions with the same reference numerals, the description in other embodiments and modifications can be referred to.

(Embodiment 1)
<Schematic configuration of authentication system 1>
Hereinafter, Embodiment 1 of the present disclosure will be described with reference to the drawings. An authentication system 1 shown in FIG. 1 includes an electronic key 2 and a personal portable device 3 (also referred to as a portable terminal) carried by a user, a sensor 5 used in a vehicle HV, a DCM (Data Communication Module) 6, and an authentication. ECU7. The configuration including at least the electronic key 2 and the authentication ECU 7 in the authentication system 1 corresponds to the authentication system. The vehicle HV is also referred to as the subject vehicle or the host vehicle.

The authentication system 1 performs biometric authentication based on the user's biometric information acquired by the sensor 5, and permits the unlocking of the door of the vehicle HV when biometric authentication is established. Further, when code verification is performed by wireless communication between the electronic key 2 and the authentication ECU 7 and authentication by code verification via wireless communication is established, and when biometric authentication is established, the vehicle HV In addition to locking and unlocking the door, the vehicle HV is allowed to start. The electronic key 2 and the authentication ECU 7 will be described in detail later. “Information” is used not only as a countable noun but also as a countable noun, and is equivalent to an information item. One information item is equivalent to one information item, and a plurality of information items are equivalent to a plurality of information items.

The personal portable device 3 is a communication terminal that a user carries or wears, and communicates with the DCM 6 via a public communication line network. Examples of the personal portable device 3 include a multi-function mobile phone and a wearable communication terminal. In the first embodiment, the case where the personal portable device 3 is a multi-function mobile phone will be described as an example.

The sensor 5 is a contact-type biometric sensor that is provided on the outer door handle 4 of the vehicle HV and acquires biometric information from a user who holds the outer door handle 4. Examples of the sensor 5 include a contact light emission type fingerprint sensor and a vein recognition sensor. In the first embodiment, the sensor 5 is a contact light emission type fingerprint sensor, and the biological information acquired by the sensor 5 is fingerprint information. An example will be described.

The sensor 5 may be provided on all outer door handles 4 of the driver's seat door, passenger seat door, rear seat door, and trunk room door of the vehicle HV, or may be provided on some outer door handles 4. Good. When it is provided on some outer door handles 4, for example, it may be configured to be provided on the outer door handle 4 of the driver's seat door.

DCM 6 is an in-vehicle communication module used for a telematics service, and communicates with a personal portable device via a public communication line network.

<Schematic configuration of electronic key 2>
Next, a schematic configuration of the electronic key 2 will be described with reference to FIG. As shown in FIG. 2, the electronic key 2 includes a main controller 21 (also referred to as a main control circuit), an LF receiver 22, and a UHF transmitter 23. This electronic key 2 corresponds to a portable device.

The LF receiver 22 has an LF antenna provided on the outer door handle 4 and receives an LF band request signal transmitted from the authentication ECU 7 via the LF antenna. The LF receiver 22 is connected to the main controller 21 and outputs a request signal received by the LF antenna to the main controller 21.

The UHF transmitter 23 has a UHF antenna, and transmits a response signal by radio waves in the UHF band to the authentication ECU 7 via the UHF antenna. The UHF transmitter 23 is connected to the main controller 21 and transmits a response signal output from the main controller 21 from the UHF antenna.

The main controller 21 includes a CPU, a volatile memory, a nonvolatile memory, an I / O, and a bus connecting them, and executes various processes by executing a control program stored in the nonvolatile memory. For example, the main controller 21 executes response-related processing such as transmitting a response signal corresponding to the request signal transmitted from the authentication ECU 7.

In the main controller 21, a vehicle identification code for identifying the vehicle HV of the authorized user is registered in an electrically rewritable nonvolatile memory. The main controller 21 verifies whether or not the vehicle HV on which the authentication ECU 7 as the transmission source of the request signal received by the LF receiver 22 is a legitimate user's vehicle. The code verification is performed between the vehicle identification code included in the request signal received from the authentication ECU 7 and the vehicle identification code registered in the nonvolatile memory of the main controller 21.

The main controller 21 returns a response signal including an electronic key identification code for identifying the own device when the code verification is established. What is necessary is just to set it as the structure which reads and uses what was stored in the non-volatile memory of the main controller 21 for an electronic key identification code.

<Schematic configuration of authentication ECU 7>
Next, a schematic configuration of the authentication ECU 7 will be described with reference to FIG. As shown in FIG. 3, the authentication ECU 7 is connected to the sensor 5, the DCM 6, the body ECU 8, and the power unit control ECU 9. As an example, the sensor 5, the DCM 6, the body ECU 8, the power unit control ECU 9, and the authentication ECU 7 may be connected by an in-vehicle LAN. This authentication ECU 7 corresponds to an in-vehicle device.

The body ECU 8 locks and unlocks each vehicle door by outputting a drive signal for controlling locking and unlocking of each vehicle door of the vehicle HV to a door lock motor provided in each vehicle door. The body ECU 8 is connected to a touch sensor provided on the outer door handle 4 of each vehicle door, and detects that the user touches the outer door handle of each vehicle door.

The power unit control ECU 9 controls the travel drive source of the vehicle HV. Examples of the driving source include an engine and a motor. When the power unit control ECU 9 obtains the start permission signal for the travel drive source from the authentication ECU 7, the power unit control ECU 9 enters a start standby state in which the travel drive source can be started. For example, taking the case where the traveling drive source is an engine as an example, an engine start standby state in which a starter motor or the like can be started is set.

Further, as shown in FIG. 3, the authentication ECU 7 includes a main controller 71 (also referred to as a main control circuit), an LF transmitter 72, and a UHF receiver 73.

The LF transmitter 72 transmits a request signal to the electronic key 2 using an LF band radio wave via an LF antenna such as the door antenna 10 of each vehicle door. The LF band is a frequency band of 30 kHz to 300 kHz, for example. The range in which signals can be transmitted from the LF antenna using radio waves in the LF band corresponds to the short-range wireless communication area in which short-range wireless communication is possible. The request signal is a signal for requesting transmission of an electronic key identification code for code verification, and includes a vehicle identification code for identifying the vehicle HV. The door antenna 10 is provided on a door handle of a vehicle door of the vehicle HV.

The LF transmitter 72 may be configured to transmit a request signal by radio waves in the LF band to the vehicle interior via an indoor antenna provided in the vehicle interior. However, for convenience, the first embodiment will be described only when a request signal is transmitted to the outside of the passenger compartment via the door antenna 10.

The UHF receiver 73 has a UHF antenna 11 and receives a response signal transmitted from the electronic key 2 by radio waves in the UHF band by the UHF antenna 11. The UHF band is a frequency band of 300 MHz to 3 GHz, for example. The response signal is a signal returned from the electronic key 2 in response to a request signal transmitted from the authentication ECU 7.

The main controller 71 includes a volatile memory, a non-volatile memory, an I / O, and a bus connecting them, and executes various processes by executing a control program stored in the non-volatile memory. The main controller 71 executes processing related to authentication (hereinafter, authentication-related processing). The main controller 71 will be described in detail later. Note that some or all of the functions executed by the main controller 71 may be configured in hardware by one or a plurality of ICs.

<Detailed configuration of main controller 71>
As shown in FIG. 4, the main controller 71 includes a transmission processing unit 711, a reception processing unit 712, a registration unit 713, a first authentication unit 714, a second authentication unit 715, an authentication result integration unit 716, and an unlocking / unlocking permission unit 717. A start permission unit 718 and a notification instruction unit 719 are provided.

The transmission processing unit 711 transmits a request signal including the vehicle identification code of the vehicle HV from the door antenna 10 via the LF transmitter 72. As an example, the transmission of the request signal may be performed intermittently while the vehicle HV is parked. The vehicle identification code may be the device ID of the authentication ECU 7 mounted on the vehicle HV or the vehicle ID of the vehicle HV. What is necessary is just to set it as the structure which reads and uses what was stored in the non-volatile memory of authentication ECU7 for vehicle identification code. The reception processing unit 712 receives a response signal transmitted from the electronic key 2 using a UHF band radio wave in response to the request signal via the UHF receiver 73.

The registration device 713 is, for example, an electrically rewritable nonvolatile memory, and the electronic key identification code of the authorized user's electronic key 2 is registered among the electronic key identification codes. In addition, the biological information of the legitimate user is also registered. In the example of the first embodiment, fingerprint information (hereinafter, regular fingerprint information) acquired by a sensor 5 from a regular user is registered.

The first authentication unit 714 verifies whether the electronic key 2 that is the transmission source of the response signal received by the reception processing unit 712 is the electronic key 2 of the authorized user. The code verification is performed between the electronic key identification code included in the response signal received from the electronic key 2 and the electronic key identification code registered in the register 713. And when both correspond, the authentication by the code collation via wireless communication shall be materialized. If they do not match, the authentication is not established.

The second authentication unit 715 performs fingerprint authentication to check whether the fingerprint information acquired by the sensor 5 matches the regular fingerprint information. Fingerprint authentication is performed between the fingerprint information acquired by the sensor 5 and the regular fingerprint information registered in the register 713. It is assumed that fingerprint authentication is established when the two match. If they do not match, the authentication is not established.

The authentication result integration unit 716 integrates the authentication result from the first authentication unit 714 and the authentication result from the second authentication unit 715 and outputs the result to the locking / unlocking permission unit 717, the start permission unit 718, and the notification instruction unit 719. .

The locking / unlocking permission unit 717 sends a signal permitting the locking / unlocking of the vehicle door to the body ECU 8 when either of the first authentication unit 714 and the second authentication unit 715 is authenticated. The locking / unlocking permission unit 717 corresponds to an unlocking permission unit. When the locking / unlocking of the vehicle door is permitted, the body ECU 8 starts energizing the touch sensor provided on the outer door handle 4 of the vehicle door, and enters a standby state in which the user can detect the outer door handle operation. When the body ECU 8 detects that the user has touched the touch sensor, the body ECU 8 outputs a drive signal to the door lock motor to lock and unlock the vehicle door.

When the sensor 5 is configured to be provided on each vehicle door of the vehicle HV, the vehicle door that is locked and unlocked by the locking / unlocking permission unit 717 may be limited to the vehicle door that has detected the outer door handle operation. According to this, it becomes possible to lock / unlock only the vehicle door touched by the user on the outer door handle 4.

When the sensor 5 is configured to be provided only in the vehicle door of the driver's seat of the vehicle HV, the vehicle door that is locked and unlocked by the locking / unlocking permission unit 717 may be configured as all the vehicle doors of the vehicle HV. . Locking and unlocking all the vehicle doors of the vehicle HV by touching the outer door handle 4 of the vehicle door of the driver's seat is the same as the function of the existing electronic key system. good. Therefore, according to the above configuration, it is possible to reduce the cost by reducing the number of sensors 5 provided on the vehicle HV while maintaining good convenience for the user.

In addition, although the structure where the locking / unlocking permission part 717 performs both locking and unlocking here was shown, it does not necessarily restrict to this. For example, it is good also as a structure which performs only locking or unlocking.

The start permission unit 718 sends a start permission signal of the travel drive source to the power unit control ECU 9 when both the first authentication unit 714 and the second authentication unit 715 have been authenticated. The power unit control ECU 9 that has acquired the start permission signal sets the travel drive source in the start standby state as described above. These locking / unlocking permission unit 717 and start permission unit 718 correspond to a permission unit.

The notification instruction unit 719 has been authenticated by the first authentication unit 714, but if the authentication has not been established by the second authentication unit 715, unauthorized authentication using wireless communication has been performed on the vehicle. This is notified from the DCM 6 to the personal portable device 3.

<Authentication-related processing in the main controller 71>
Here, an example of the flow of authentication-related processing in the main controller 71 of the authentication ECU 7 will be described using the flowchart of FIG. The flowchart of FIG. 5 is started when the vehicle door of the vehicle HV is locked.

The described flowchart includes a plurality of sections (or referred to as steps), and each section is expressed as, for example, S1. Further, each section can be divided into a plurality of subsections, while a plurality of sections can be combined into one section. Each section can be referred to as a device or a unique name and with structural modifiers, for example, an authentication section can be referred to as an authentication device, an authenticator. In addition, the section includes (i) not only a section of software combined with a hardware unit (eg, a computer) but also (ii) a section of hardware (eg, an integrated circuit, a wiring logic circuit) and related devices. It can be realized with or without the function. Furthermore, the hardware section can be included inside the microcomputer.

First, in S1, when the second authentication unit 715 acquires fingerprint information via the sensor 5 (YES in S1), the process proceeds to S2. On the other hand, if fingerprint information has not been acquired (NO in S1), the process of S1 is repeated. In S <b> 2, the second authentication unit 715 performs fingerprint authentication for verifying whether the fingerprint information acquired via the sensor 5 matches the regular fingerprint information.

In S3, the transmission processing unit 711 transmits a request signal including the vehicle identification code from the door antenna 10 via the LF transmitter 72. In S4, when the reception processing unit 712 can receive the response signal transmitted from the electronic key 2 in response to the request signal via the UHF receiver 73 (YES in S4), the process proceeds to S5. On the other hand, if it cannot be received (NO in S4), the process proceeds to S10.

In the process of S4, when the electronic key 2 does not exist within the communication range of the door antenna 10, or when the code verification of the vehicle identification code is not established with the electronic key 2, the response signal from the electronic key 2 can be received. Disappear.

The reception processing unit 712 may determine whether or not the response signal has been received depending on whether or not the response is received within a predetermined time after the request signal is transmitted. The predetermined time is longer than the time until the electronic key 2 that has sent the request signal transmits the response signal, and can be arbitrarily set. In addition, the reception processing unit 712 may determine that the response signal is not received when the response signal is not received despite the request signal being transmitted a plurality of times periodically such as every 100 msec. .

In S <b> 5, the first authentication unit 714 performs authentication by code verification between the electronic key identification code included in the response signal received by the reception processing unit 712 and the electronic key identification code registered in the registration unit 713.

In S6, when the authentication by the code verification in the first authentication unit 714 is established (YES in S6), the process proceeds to S7. On the other hand, if authentication by code verification is not established (NO in S6), the process proceeds to S10.

In S7, if fingerprint authentication is established in the second authentication unit 715 in S2 (YES in S7), the process proceeds to S8. On the other hand, if fingerprint authentication has not been established (NO in S7), the process proceeds to S9.

In S8, the locking / unlocking permission unit 717 permits the unlocking of the vehicle HV, and the start permission unit 718 permits the starting of the vehicle HV, and the authentication-related processing ends. In S9, it is assumed that an unauthorized authentication such as a relay attack has been performed on the own vehicle, the locking / unlocking permission unit 717 does not permit the unlocking of the vehicle HV, and the start permission unit 718 does not permit the starting of the vehicle HV. In addition, the notification instruction unit 719 notifies the personal portable device 3 from the DCM 6 that unauthorized authentication using wireless communication has been performed on the vehicle. Then, the authentication related process ends.

In the personal portable device 3 that has received the notification, by performing display and / or voice output indicating that unauthorized authentication using wireless communication has been performed on the vehicle, unauthorized authentication using wireless communication is performed. Let the user know what has been done to the vehicle. An example of the notification may be text display or icon display as long as it is a display. As long as it is an audio output, text may be read out or a buzzer sound may be output.

When the response signal cannot be received in S4, or in S10 when the authentication by code verification is not established in S6, the fingerprint authentication in the second authentication unit 715 is established in S2 (YES in S10) To S11. On the other hand, if fingerprint authentication has not been established (NO in S10), the process proceeds to S12.

In S11, while the locking / unlocking permission unit 717 permits the unlocking of the vehicle HV, the start permission unit 718 does not permit the starting of the vehicle HV and ends the authentication-related processing. In S12, the locking / unlocking permission unit 717 does not permit the unlocking of the vehicle HV, and the start permission unit 718 does not permit the starting of the vehicle HV, and the authentication-related processing is ended.

Here, FIG. 6 is used to summarize an example of a correspondence relationship between a combination of authentication results of code verification by wireless communication in the first authentication unit 714 and fingerprint authentication in the second authentication unit 715 and processing corresponding thereto. .

As shown in FIG. 6, when both code verification and fingerprint authentication by wireless communication are established, both unlocking and starting of the vehicle HV are permitted. If code verification by wireless communication is established but fingerprint authentication is not established, both the unlocking and starting of the vehicle HV are not permitted, and unauthorized authentication using wireless communication is applied to the vehicle. The personal portable device 3 is notified that this has been done. Code verification by wireless communication is not established, but when fingerprint authentication is established, starting of the vehicle HV is not permitted, but unlocking is permitted. When neither the code verification by wireless communication nor the fingerprint authentication is established, neither unlocking nor starting of the vehicle HV is permitted.

<Summary of Embodiment 1>
If authentication is established by code verification via wireless communication in the first authentication unit 714, but fingerprint authentication is not established in the second authentication unit 715, wireless communication in the first authentication unit 714 is used. It can be presumed that the authenticated authentication was illegally established by a relay attack or the like. On the other hand, according to the configuration of the first embodiment, when authentication is established by code verification via wireless communication in the first authentication unit 714, but fingerprint authentication is not established in the second authentication unit 715. In this case, the personal portable device 3 is notified that unauthorized authentication via wireless communication has been performed on the vehicle. Therefore, the user can recognize from this personal portable device 3 that unauthorized authentication via wireless communication has been performed on the vehicle. Therefore, the user can recognize that the vehicle HV is the target of theft, and can enhance crime prevention against the vehicle theft, for example, by locking the anti-theft on the wheel of the vehicle HV.

Further, according to the configuration of the first embodiment, authentication is not established by code verification via wireless communication in the first authentication unit 714, but when fingerprint authentication is established in the second authentication unit 715, The vehicle HV is not allowed to start but is allowed to unlock. According to this, when a legitimate user does not need to start the vehicle HV and loads and unloads the luggage, the vehicle HV can be unlocked without having the electronic key 2, which is convenient. improves.

Furthermore, according to the configuration of the first embodiment, the vehicle HV is started unless both authentication by code verification through wireless communication in the first authentication unit 714 and fingerprint authentication in the second authentication unit 715 are not established. Therefore, the anti-theft effect is enhanced by double authentication.

Further, since the sensor 5 is provided on the outer door handle 4 of the vehicle HV, the fingerprint authentication at the second authentication unit 715 can be performed only by the user performing an operation at the time of getting on. Therefore, it is not necessary to force the user to perform an extra operation for authentication in the second authentication unit 715, and convenience is not impaired.

(Embodiment 2)
In Embodiment 1, although the structure which provides the sensor 5 in the outer door handle 4 was shown, it does not necessarily restrict to this. For example, the sensor 5 may be provided on the start / stop button 12 (hereinafter, a second embodiment).

<Schematic configuration of authentication system 1a, authentication ECU 7a, main controller 71a>
As shown in FIG. 7, the authentication system 1 a according to the second embodiment is provided with a sensor 5 provided on the start / stop button 12 instead of the outer door handle 4 and a point including the authentication ECU 7 a instead of the authentication ECU 7. This is the same as the authentication system 1 of the first embodiment. As shown in FIG. 8, the authentication ECU 7a is the same as the authentication ECU 7 of the first embodiment except that a main controller 71a (also referred to as a main control circuit) is provided instead of the main controller 71.

The main controller 71a is the same as the main controller 71 of the first embodiment except that the processing procedure of authentication-related processing is different. Similar to the main controller 71, the main controller 71a includes a transmission processing unit 711, a reception processing unit 712, a registration unit 713, a first authentication unit 714, a second authentication unit 715, an authentication result integration unit 716, an unlocking / unlocking permission unit. 717, a start permission unit 718, and a notification instruction unit 719 are provided.

The start / stop button 12 is a button operated by the user to start the traveling drive source of the vehicle HV, and is provided in the passenger compartment. The start / stop button 12 corresponds to a start input unit. In the second embodiment, the sensor 5 acquires biological information from the user who operates the start / stop button 12. Also in the second embodiment, the case where the sensor 5 is a contact light emission type fingerprint sensor and the biological information acquired by the sensor 5 is fingerprint information will be described as an example.

LF transmitter 72 in Embodiment 2 assumes that the short-range wireless communication area includes a driver seat of a vehicle HV. In the second embodiment, the reason why the sensor 5 is provided on the start / stop button 12 is that the number of required sensors 5 can be reduced as compared with the configuration in which the sensor 5 is provided on all vehicle doors of the vehicle HV. .

<Authentication-related processing in the main controller 71a>
Here, an example of the flow of authentication-related processing in the main controller 71a of the authentication ECU 7a will be described using the flowchart of FIG. The flowchart of FIG. 9 is started when the start / stop button 12 is operated after the vehicle door of the driver's seat of the vehicle HV is unlocked and the vehicle door is opened. For example, unlocking may be permitted when code verification by wireless communication in the first authentication unit 714 is established.

First, in S21, similarly to S3, the transmission processing unit 711 transmits a request signal including a vehicle identification code. In S22, similarly to S4, when the reception processing unit 712 has received a response signal (YES in S22), the process proceeds to S23. On the other hand, if it cannot be received (NO in S22), the process proceeds to S33.

In S23, as in S5, the first authentication unit 714 performs authentication by code verification. In S24, when the authentication by the code verification in the first authentication unit 714 is established (YES in S24), the process proceeds to S25. On the other hand, if authentication by code verification is not established (NO in S24), the process proceeds to S33.

In addition, when it is set as the structure which permits unlocking by the code verification by the wireless communication in the 1st authentication part 714, you may abbreviate | omit the process of S21-S24 and below-mentioned S33.

In S25, the main controller 71a enables power transfer of the vehicle HV, and proceeds to S26. The power transfer mentioned here is a power transfer from turning off the vehicle HV to turning on the accessory (ie, ACC) and turning on the ignition (ie, IGN), and excluding permission to start the vehicle HV. And

In S26, when the second authentication unit 715 acquires fingerprint information via the sensor 5 (YES in S26), the process proceeds to S27. On the other hand, if fingerprint information has not been acquired (NO in S26), the process proceeds to S31. In S27, the second authentication unit 715 performs fingerprint authentication in the same manner as S2.

In S28, when fingerprint authentication is established in the second authentication unit 715 (YES in S28), the process proceeds to S29. On the other hand, if fingerprint authentication has not been established (NO in S28), the process proceeds to S30.

In S29, the start permission unit 718 permits the start of the vehicle HV and ends the authentication-related processing. In S30, it is assumed that an unauthorized authentication such as a relay attack has been performed on the vehicle, the start permission unit 718 does not permit the vehicle HV to start, and the notification instruction unit 719 performs an unauthorized authentication using wireless communication. Is notified from the DCM 6 to the personal portable device 3. Then, the authentication related process ends.

In S31 when fingerprint information is not acquired in S26, the start permission unit 718 does not permit the start of the vehicle HV, and proceeds to S32. If it is the end timing of the authentication related process in S32 (YES in S32), the authentication related process is ended. On the other hand, if it is not the end timing of the authentication related process (NO in S32), the process returns to S26 and is repeated. The end timing of the authentication-related processing here is when the user gets off the vehicle HV. The main controller 71a may determine that the user has exited the vehicle HV from the detection result of the seating sensor of the vehicle HV, the presence or absence of a response of the electronic key 2 to the request signal transmitted from the indoor antenna of the vehicle HV, and the like.

In S33 when the response signal cannot be received in S22, or in the case where the authentication by the code verification is not established in S24, the start permission unit 718 does not permit the start of the vehicle HV and ends the authentication related process.

In the second embodiment, a configuration in which the sensor 5 is provided in the start / stop button 12 in the vehicle interior is employed instead of the configuration in which the sensor 5 of the first embodiment is provided in the outer door handle 4. Even when such a configuration is adopted, the same effects as in the first embodiment can be obtained except that the vehicle HV can be unlocked without having the electronic key 2. Can do.

Further, since the sensor 5 is provided on the start / stop button 12 of the vehicle HV, the user can perform fingerprint authentication at the second authentication unit 715 only by performing an operation at the time of starting. Therefore, it is not necessary to force the user to perform an extra operation for authentication in the second authentication unit 715, and convenience is not impaired.

(Modification 1)
When a contact-type biometric sensor is used as the sensor 5, the sensor 5 is provided on a member other than the outer door handle 4 and the start / stop button 12 as long as the user touches the vehicle HV when getting on or starting the vehicle. It is good also as a structure.

(Modification 2)
The configuration using a contact-type biometric sensor as the sensor 5 is not necessarily limited. For example, a configuration using a non-contact type biometric sensor may be used. As an example, a configuration using a non-contact type fingerprint sensor or a vein recognition sensor may be used. In addition, it is good also as a structure which uses the imaging device used with the apparatus which performs a personal authentication from the captured image which imaged the user as the sensor 5. FIG.

(Modification 3)
The authentication performed by the second authentication unit 715 is not necessarily biometric authentication as long as the authentication is performed by a method other than code verification via wireless communication used by the first authentication unit 714. For example, authentication via wireless communication with the personal portable device 3 may be used. For example, when Bluetooth (registered trademark) is used as a wireless communication standard, the second authentication unit 715 may perform authentication by collating a PIN code used during pairing. When the second authentication unit 715 performs authentication via wireless communication with the personal portable device 3, a communication unit for mediating communication between the personal portable device 3 and the main controller 71 is provided. What is necessary is just to set it as the structure with which authentication ECU7 is further provided.

Even if the authentication performed by the second authentication unit 715 is not biometric authentication, the same effect as that of the first embodiment can be obtained as long as authentication is performed by a method other than code verification via wireless communication used by the first authentication unit 714. it can.

(Modification 4)
In addition, a display and / or audio output indicating that unauthorized authentication using wireless communication has been performed on the own vehicle, which is performed by the personal portable device 3 that is notified from the notification instruction unit 719 via the DCM 6, It may be immediately after the notification or may not be immediately after. As a configuration not immediately after, there is a configuration in which the notification is received by the personal portable device 3 and the user confirms the content of the notification at an arbitrary timing.

(Modification 5)
In the first and second embodiments, the configuration in which the personal portable device 3 such as a multi-function mobile phone is used as a communication terminal has been described. For example, it is good also as a structure which uses PC in a user's home, a home security terminal, etc. as a communication terminal.

(Modification 6)
In the first and second embodiments, the configuration in which the notification instruction unit 719 notifies the personal portable device 3 from the DCM 6 that unauthorized authentication using wireless communication has been performed on the own vehicle has been described. Not exclusively. For example, when the user gets on the vehicle HV, the notification instructing unit 719b notifies the display device 13 mounted on the own vehicle that the unauthorized authentication using wireless communication has been performed on the own vehicle. It is good also as a structure (henceforth modification 6) to be made.

Hereinafter, Modification 6 of the present disclosure will be described with reference to the drawings. As shown in FIG. 10, the authentication ECU 7b of Modification 6 includes a notification instruction unit 719b instead of the notification instruction unit 719, and notifies the display device 13 instead of notifying the portable device 3 via the DCM 6. Except for the point to perform, it is the same as the authentication ECU 7 of the first embodiment.

The display device 13 is a display device mounted on the vehicle HV. Examples of the display device 13 include a combination meter, CID (Center Information Display), and HUD (Head-Up Display).

The notification instructing unit 719b is authenticated by the first authenticating unit 714, but when the authentication is not established by the second authenticating unit 715, unauthorized authentication using wireless communication is performed on the own vehicle. This is notified to the display device 13 when the user gets on the vehicle HV. The display device 13 that has received the notification causes the display device 13 to display that unauthorized authentication using wireless communication has been performed on the vehicle.

When the user rides on the vehicle HV, the notification instruction unit 719b may determine from the vehicle door opening / closing signal obtained from the body ECU 8, the signal from the seating sensor, and the like.

According to the configuration of Modification 6, the user can recognize that unauthorized authentication via wireless communication has been performed on the host vehicle when the vehicle HV is boarded. In the sixth modification, the notification instruction unit 719b may also notify the personal portable device 3 from the DCM 6.

(Modification 7)
In the first and second embodiments, the configuration in which the body ECU 8 that locks and unlocks the vehicle door is provided separately from the

authentication ECUs

7 and 7a is shown, but the configuration is not necessarily limited thereto. For example, the body ECU 8 that locks and unlocks the vehicle door may be configured to be integrated with the

authentication ECUs

7 and 7a (hereinafter, modified example 7).

Hereinafter, Modification 7 of the present disclosure will be described with reference to the drawings. As shown in FIG. 11, the authentication ECU 7c according to the modified example 7 is the same as the authentication ECU 7 according to the first embodiment except that a locking / unlocking operation unit 720 is provided.

The locking / unlocking operation unit 720 performs a process similar to that of the body ECU 8 described in the first embodiment, thereby outputting a drive signal to the door lock motor 14 to lock / unlock the vehicle door. This locking / unlocking operation unit 720 corresponds to an unlocking operation unit.

Although the present disclosure has been described with reference to the embodiments, it is understood that the present disclosure is not limited to the embodiments and structures. The present disclosure includes various modifications and modifications within the equivalent range. In addition, various combinations and forms, as well as other combinations and forms including only one element, more or less, are within the scope and spirit of the present disclosure.

Claims

Used in vehicles,
An in-vehicle device including a first authentication unit (714) for performing authentication by code verification via wireless communication with a portable device (2) used as an electronic key,
A second authentication unit (715) that performs authentication by a method other than code verification via wireless communication used in the first authentication unit;
If authentication is established in the first authentication unit, but authentication is not established in the second authentication unit, an unauthorized authentication using wireless communication has been performed on the vehicle. Vehicle-mounted apparatus provided with the notification instruction | indication part (719,719b) which notifies to the communication terminal (3).
In claim 1,
A start permission unit (718) for allowing the vehicle to start;
The start permission unit is an in-vehicle device that does not permit start of the vehicle unless authentication is established in both the first authentication unit and the second authentication unit.
In claim 2,
An unlocking permission unit (717) for permitting unlocking of the vehicle door;
The unlocking permission unit is an in-vehicle device that permits unlocking of the door of the vehicle if authentication is established by the second authentication unit.
In claim 3,
An in-vehicle device further comprising an unlocking operation unit (720) for unlocking the door of the vehicle.
In any one of claims 1 to 4,
The second authentication unit is an in-vehicle device that performs authentication by biometric authentication.
In claim 5,
The second authentication unit is an in-vehicle device that performs biometric authentication using the biometric information of the user acquired by the sensor (5) that the user contacts.
In claim 6,
The second authentication unit is an in-vehicle device that performs biometric authentication using user biometric information acquired by the sensor provided on the outer door handle (4) of the vehicle.
In claim 6,
The second authenticating unit performs biometric authentication using the biometric information of the user acquired by the sensor provided in the starting input unit (12) operated by the user to start the traveling drive source of the vehicle. apparatus.
In any one of claims 1 to 8,
The in-vehicle device that causes the user of the vehicle to notify the communication terminal carried or worn by the vehicle user that the unauthorized authentication using wireless communication has been performed on the vehicle.
In any one of claims 1 to 9,
The notification instructing unit (719) communicates that the unauthorized authentication using wireless communication has been performed on the vehicle via a vehicle-mounted communication module (6) used for a telematics service. In-vehicle device to notify
In any one of claims 1 to 9,
The notification instructing unit (719b) indicates that unauthorized authentication using wireless communication has been performed on the vehicle when a user of the vehicle gets on the vehicle. 13) In-vehicle device to be displayed.
A portable device (2) used as an electronic key;
An in-vehicle device including a first authentication unit (714) used in a vehicle and performing authentication by code verification via wireless communication with the portable device,
A second authentication unit (715) that performs authentication by a method other than code verification via wireless communication used in the first authentication unit;
If authentication is established in the first authentication unit, but authentication is not established in the second authentication unit, an unauthorized authentication using wireless communication has been performed on the vehicle. An in-vehicle device (7, 7a, 7b, 7c) provided with a notification instructing unit (719, 719b) for notifying the communication terminal (3).