JP2010023548A - Vehicular function limitation system, and key corresponding to vehicular function limitation - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a vehicular function limitation system and a key corresponding to the vehicular function limitation in which a situation that a vehicle is mistakenly set in a limit state hardly occurs. <P>SOLUTION: After a door of a vehicle 1 is locked, an emergency key 42 is detached from a portable machine 4, and a portable machine body 44 is set in a valet state setting mode. A user operates operation buttons of the portable machine body (a lock button, an unlock button, a panic button, etc.) 36, etc. in a predetermined operational order and the number of operations. In this state, if the operational procedure of the operation buttons 36, etc. follows the regular procedure, the valet trigger radio wave Sbt is transmitted from the portable machine body 44 toward the vehicle 1. When the valet trigger radio wave Sbt is received, the vehicle 1 is in a valet state in which the use of the vehicle is limited. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a vehicle function restriction system and a vehicle function restriction corresponding key that can restrict a vehicle function that can be used in a vehicle at the time when a user operates the vehicle with an electronic key.

Conventionally, in hotels that sell various high services, for example, if a vehicle key is deposited with the hotel man when entering the hotel entrance, there is a place where the hotel man performs a valet parking service to carry the vehicle to the parking lot. . However, when such a service is used, even if the vehicle is lent to the hotel as a customer, there is no denying that the vehicle may be illegally operated by a hotel man who has given the vehicle key depending on the situation. In view of this situation, various systems have been developed to limit the use of vehicles (usable vehicle functions) when lending a vehicle to a third party. This type of vehicle function restriction system is disclosed in, for example, Patent Documents 1 and 2.
JP 2006-225976 A Special table 2003-511588 gazette

  By the way, the disclosed technology of Patent Literatures 1 and 2 is a technology that provides a divided part that can be attached to and detached from a vehicle key, and restricts vehicle use when the divided part is separated from the vehicle key. However, in this technique, for example, it is assumed that the divided parts may fall off the key body due to impact or the like against the user's will. At this time, the vehicle use is restricted regardless of the user's intention. End up. Therefore, if the user does not notice the dropout of the divided parts and tries to operate the vehicle with the vehicle key in this state, the vehicle does not move freely. Therefore, at this time, the user must confirm that the divided parts are attached to the key body, and it becomes necessary to reattach the divided parts to the key body and perform the key operation again. There was a problem that felt troublesome.

  In particular, in the case of today, a kind of key operation free system is widely used as a vehicle key system. This key operation free system is an electronic key system that sends a key code reply request from the vehicle, and when the electronic key receives this key code, it automatically returns its own key code to the vehicle and makes the vehicle perform key verification. It is a kind of. When the vehicle has this kind of key operation free system, the user often takes a use state with the electronic key stored in a pocket of clothes. Therefore, when the above-mentioned usage state is taken, if the divided parts drop out as described above, it is assumed that the user enters the restricted state without noticing that the divided parts are dropped. Some countermeasures were necessary to avoid the situation.

  An object of the present invention is to provide a vehicle function restriction system and a vehicle function restriction key that can make it difficult for a situation in which a vehicle is erroneously set to a restricted state.

  In order to solve the above problems, in the present invention, an electronic key that transmits a key code to a vehicle by wireless communication and performs key collation with the vehicle is used as a vehicle key. When using the electronic key, it is possible to limit the use, the key body of the electronic key includes a split part that can be attached to and detached from the key body, and an operating means as an operation system of the electronic key. In the vehicle function restriction system, the detecting means for detecting whether or not the divided parts are attached to the key body, and the operating means are operated in a normal procedure while the divided parts are removed from the key body. The gist of the present invention is to provide a limiting means for limiting the vehicle functions that can be used with the electronic key.

  According to this configuration, when the user lends the vehicle to a third party, for example, when restricting the use of the vehicle, not only removing the divided parts from the key body but also operating means provided on the key body. It is also a condition whether or not the operation is performed according to a predetermined procedure. For this reason, when the vehicle is restricted in use, there is always a user's will to operate the key body operating means in accordance with a predetermined procedure, so that the vehicle is erroneously set to the restricted state. It can be made difficult to occur.

  In the present invention, the divided part is a mechanical key that performs the key verification by inserting a key plate into the key cylinder of the vehicle and turning the key plate, and is used as an emergency key of the electronic key. And

According to this configuration, since the divided part is a mechanical key, even if the electronic key falls out of the battery, it is possible to operate the vehicle using this mechanical key.
The gist of the present invention is that it comprises operation function changing means for switching the operation function of the operation means to a dedicated function for inputting the regular procedure when the divided part is removed from the key body. To do.

  According to this configuration, when the divided part is removed from the key body, the operation function of the operation means is switched to a dedicated function for inputting the normal procedure. In addition, it is not necessary to be influenced by the function that the operation means has in advance. Therefore, even if the operating means is used as an input system when the vehicle is in a restricted state, it is difficult for special troubles to occur, and this system can be made highly functional.

  In the present invention, the restricting means applies the use restriction to the vehicle on the vehicle side when the operating means is operated in the regular procedure while the divided parts are removed from the key body, The gist is to put the vehicle into use restrictions.

  According to this configuration, since the use restriction of the vehicle is managed on the vehicle side, the main function for restricting the vehicle is incorporated in the vehicle. Therefore, since it is not necessary to incorporate this kind of restriction function in the electronic key, it is possible to make it difficult to cause various problems such as a complicated function and structure of the electronic key or a corresponding increase in the size of the parts. Become.

The gist of the present invention is the provision of notifying means for notifying at least one of the electronic key and the vehicle when the vehicle enters a restricted state.
According to this configuration, when the vehicle enters the restricted state, the notification means notifies the user to that effect, so that the user can easily recognize whether or not the vehicle has entered the restricted state. Become.

  In the present invention, the limiting means determines with a time limit whether or not the operating means is operated in the regular procedure when the divided part is removed from the key body. And

  According to this configuration, since a time limit is set for the operation of switching the vehicle to the restricted state, for example, even if a third party tries to restrict the use of the vehicle to the dark clouds, if the user does not know the normal procedure of the operation means, the input operation The input operation is forcibly terminated after the time limit of the time elapses. For this reason, since it becomes difficult to produce the situation where a vehicle is restricted by a third party, it is possible to make it difficult to produce a situation where use restriction is improperly applied to the vehicle.

  In the present invention, the key body is provided with a split part that can be attached to and detached from the key body, and an operating means as an operation system for the key. A key code is transmitted to the vehicle by wireless communication, and the wireless communication is performed. In a vehicle function restriction compatible key capable of performing key collation with the vehicle, detection means for detecting whether or not the divided parts are attached to the key body, and the operating means while removing the divided parts from the key body Provided that the vehicle function that can be used with the key is restricted on the condition that the key is operated in a regular procedure, and that the key functions as a key that is restricted in use of the vehicle. And

  According to the present invention, it is possible to prevent a situation in which the vehicle is erroneously set to the restricted state.

Hereinafter, an embodiment of a vehicle function restriction system and a vehicle function restriction key embodying the present invention will be described with reference to FIGS.
As shown in FIG. 1, the vehicle 1 is a kind of an electronic key system 2 that uses an electronic key as a vehicle key, and performs vehicle operations such as door locking / unlocking and engine start / stop without actual key operations. The key operation free system 3 that can be used is mounted. In the key operation free system 3, a portable device 4 capable of transmitting an ID code (key code) unique to a key by wireless communication is used as a vehicle key. The key operation free system 3 transmits a request signal Srq by narrow-range communication as an ID code reply request from the vehicle 1, and when the portable device 4 receives the request signal Srq, the portable device 4 responds to the request signal Srq by its own ID. The ID signal Sid carrying the code is automatically returned to the vehicle 1 by narrow area communication. When the ID code of the portable device 4 matches the ID code of the vehicle 1, door locking / unlocking and engine start / stop are permitted or executed. The portable device 4 corresponds to an electronic key (vehicle key, vehicle function restriction support key).

  The key operation free system 3 includes a smart entry system 5 as a function that does not require a key operation at the time of door lock locking / unlocking operation. In such a smart entry system 5, a verification ECU 6 is provided in the vehicle 1 as a controller that performs ID verification with the portable device 4. In addition, the vehicle 1 includes an out-of-vehicle LF transmitter 7 capable of transmitting an LF band signal outside the vehicle, an in-vehicle LF transmitter 8 capable of transmitting an LF band signal into the vehicle, and an RF band transmitted by the portable device 4. An RF receiver 9 capable of receiving signals is provided. In addition, a door ECU 10 that controls door locking / unlocking / unlocking is connected to the verification ECU 6 via an in-vehicle LAN 11. A door lock motor 12 is connected to the door ECU 10 as a drive source at the time of locking and unlocking the door lock. The verification ECU 6 constitutes a limiting means.

  In addition, the portable device 4 is provided with a communication control unit 13 that performs overall control of various operations of the portable device 4. The communication control unit 13 has various devices such as a CPU 14 and a memory 15, and an ID code is registered as a unique key code of the portable device 4. The communication control unit 13 is connected to an LF receiver 16 capable of receiving LF band radio signals and an RF transmitter 17 capable of transmitting RF band radio signals. The communication control unit 13 sequentially monitors which type of radio signal is received by the LF receiver 16 and manages the operation of signal transmission from the RF transmitter 17. The communication control unit 13 constitutes a limiting unit and an operation function changing unit.

  When the vehicle 1 is parked (the engine is stopped and the door lock is locked), the verification ECU 6 intermittently transmits the LF band request signal Srq from the outside LF transmitter 7, and the outside communication area of the request signal Srq around the vehicle. Form. When the portable device 4 enters the outside communication area and receives the request signal Srq, the portable device 4 responds to the request signal Srq and sends the ID signal Sid carrying the ID code registered in its own memory 15 to the RF band. Reply with the signal. When the wireless communication (hereinafter referred to as smart communication) is established by receiving the ID signal Sid by the RF receiver 9, the verification ECU 6 illuminates the ID code registered in its own memory 18 and the ID code of the portable device 4. In addition, ID verification, so-called smart verification (external vehicle verification) is performed. When the verification ECU 6 recognizes that the vehicle verification has been established, it sets a vehicle verification flag in the memory 18 for a certain period of time, and activates the touch sensor 20 embedded in the vehicle door handle knob 19 during that period. . When the door ECU 10 detects that the outside door handle knob 19 is touched by the activated touch sensor 20 when the door lock is locked, the door ECU 10 drives the door lock motor 12 to unlock all of the locked vehicle doors.

  On the other hand, when the vehicle 1 is in a stopped state (engine stop and door lock unlocked state), the verification ECU 6 detects that the lock button 21 provided on the vehicle exterior door handle knob 19 has been pressed, and detects the vehicle outside LF transmitter. 7 sends a request signal Srq. When the verification ECU 6 receives the request signal Srq and recognizes that the verification outside the vehicle is established in the ID signal Sid returned from the portable device 4, the verification ECU 6 outputs a door lock locking request to the door ECU 10. When the door ECU 10 receives this door lock locking request when the door lock is unlocked, the door ECU 10 drives the door lock motor 12 to lock all the vehicle doors in the unlocked state.

  In addition, the key operation free system 3 has a one-push engine start system 22 as a function capable of performing an engine start / stop operation by a simple switch operation without requiring an actual vehicle key operation at the time of engine start / stop operation. There is. In such a one-push engine start system 22, an engine switch 23 is provided at the driver's seat of the vehicle 1 as an operation system for switching the power state (power position) of the vehicle 1. This engine switch 23 is a push operation type that pushes in and operates a switch operation unit 24 that is an operation location, and an engine start / stop operation function for switching the engine 25 to a start state or a stop state, and a power state is turned off → ACC on A power supply transition operation function that repeatedly switches between the state and the IG on state is provided.

  The vehicle 1 is provided with an engine ECU 26 that performs ignition control and fuel injection control of the engine 25, a shift ECU 27 that controls the automatic transmission based on the operation of the select lever, and a power supply ECU 28 that performs power management of in-vehicle electrical components. It has been. These ECUs 26 to 28 are connected to various ECUs such as the verification ECU 6 through the in-vehicle LAN 11. Further, a vehicle speed sensor 29 that detects the speed of the vehicle 1 and a brake sensor 30 that detects an operation amount of a brake pedal are connected to the power supply ECU 28. The power supply ECU 28 can determine whether or not the brake pedal is depressed based on the pedal depression amount information acquired from the brake sensor 30 while recognizing the current speed of the vehicle 1 based on the vehicle speed information acquired from the vehicle speed sensor 29. . Further, an ACC relay 31 connected to various on-vehicle accessories, an IG relay 32 connected to the engine ECU 26, and a starter relay 33 connected to the starter motor of the engine 25 are connected to the power supply ECU 28.

  The verification ECU 6 transmits a request signal Srq from the in-vehicle LF transmitter 8 when it recognizes that the driver has boarded by opening the door with the courtesy switch 34, for example, after the vehicle external verification is established and the door lock is unlocked. Thus, an in-vehicle communication area for the request signal Srq is formed throughout the vehicle. When the ID signal Sid returned by the portable device 4 entering the in-vehicle communication area is received by the RF receiver 9, the verification ECU 6 compares the ID code registered in itself with the ID code of the portable device 4. Verification, so-called smart verification (in-vehicle verification) is performed. When the in-vehicle collation is established, the collation ECU 6 sets an in-vehicle collation establishment flag in the memory 18 and recognizes that the in-vehicle collation is established.

  When the power supply ECU 28 detects that the engine switch 23 is pressed while the brake pedal is depressed while the engine 25 is stopped, the power supply ECU 28 starts the stopped engine 25 on condition that the vehicle interior verification is established. Accordingly, an activation signal is output to the engine ECU 26 while turning on the three relays 31 to 33. If this is not established when the in-vehicle collation is confirmed, the power supply ECU 28 causes the collation ECU 6 to re-execute in-vehicle collation and confirms once again whether or not the in-vehicle collation has been established. The engine ECU 26 that has received the activation signal performs confirmation of the in-vehicle collation result and pairing for confirming whether the collation ECU 6 is paired with itself by encrypted communication. After confirming both of these conditions, the engine ECU 26 starts ignition control and fuel injection control and starts the engine 25. The verification ECU 6 periodically checks whether or not in-vehicle verification can be established while the engine is running. On the other hand, when the power supply ECU 28 detects that the engine switch 23 is pressed while the engine 25 is operating, the three relays 31 to 33 are provided on the condition that the vehicle 1 is stopped (vehicle speed “0”). Are all turned off, and the engine 25 is stopped. When the engine 25 is switched to stop, the verification ECU 6 turns off the flag that has been set in the memory 18 until then.

  On the other hand, when the power supply ECU 28 detects that only the engine switch 23 is pressed without being depressed by the brake pedal when the engine 25 is stopped, the shift lever is set to P while the in-vehicle verification is satisfied. If it is in the range position, each time the engine switch 23 is pressed, the power supply state is sequentially switched between the off state, the ACC on state, and the IG on state. That is, when only the engine switch 23 is pressed, the power state is repeatedly switched between the off state, the ACC on state, and the IG on state every time the switch is operated.

  The electronic key system 2 includes a wireless key system 35 that transmits a door lock locking / unlocking request by operating a button of the portable device 4. The wireless key system 35 is a kind of electronic key system that requires the button operation of an operation button 36 provided as an operation system of the portable device 4 when various signals are transmitted from the portable device 4. In this wireless key system 35, the portable device 4 is provided with a lock button that is operated when all the seats are locked and an unlock button that is operated when all seats are unlocked. In addition, the portable device 4 is provided with a trunk button that is operated when the trunk is opened, and a panic button that is operated when the horn and the light of the vehicle 1 are remotely operated to intimidate the vehicle. ing. These buttons 36, 36... Are electrically connected to the communication control unit 13, and the presence or absence of button operation is monitored by the communication control unit 13.

  When the communication control unit 13 detects that the operation button 36 is operated on the portable device 4, the wireless signal (operation request) Swl having a command corresponding to the corresponding operation button at that time is a signal in the RF band. Called from. This wireless signal Swl includes an ID code as a key code and a function code corresponding to the operation button 36 operated at that time. The function code is a command for causing the vehicle 1 to execute an operation corresponding to the operation button 36 operated by the user. When the vehicle 1 receives this wireless signal Swl by the RF receiver 9, if the ID code in the wireless signal Swl is correct, the function code (vehicle door locking, vehicle door unlocking, trunk opening) included in the same wireless signal Swl is received. Operation, panic operation), and operates according to the function code. The operation button 36 corresponds to an operation unit.

  The vehicle 1 is provided with an alarm ECU 37 connected to the in-vehicle LAN 11 as a controller for performing various notifications and warnings. The alarm ECU 37 manages operations of the hazard 38, the buzzer 39, the horn 40, and the like based on commands from various other ECUs. When the locking and unlocking of the door lock is completed by smart communication or wireless communication, the alarm ECU 37 lights the hazard 38 a plurality of times and answers the user to that effect. Further, when the alarm ECU 37 receives a wireless signal (panic operation request) Swl transmitted from the portable device 4 when the panic button in the operation button 36 is operated on the portable device 4, the alarm ECU 37 or the horn Sounds 40 to perform a threatening action. The hazard 38 constitutes a notification unit.

  The vehicle 1 is equipped with a valet parking system 41 that is used when it is desired to limit the use of the vehicle 1 such as when renting the vehicle 1 to another person. In this example, the valet parking system 41 removes the emergency key 42 provided in the portable device 4 from the portable device main body 44, and in this state, operates the operation buttons 36 in a predetermined operation sequence and the predetermined number of operations. When the operation procedure at the time is in line with the regular procedure, the vehicle 1 is a system that is restricted in use. After the vehicle 1 enters the restricted state, the user attaches the emergency key 42 to the portable device main body 44 again, passes the portable device 4 to the vehicle borrower, and lends the vehicle 1. The valet parking system 41 corresponds to a vehicle function restriction system, the emergency key 42 corresponds to a divided part, and the portable device main body 44 corresponds to a key main body.

  As shown in FIG. 4, the emergency key 42 includes a mechanical key having a knob portion 45 serving as a grip portion when the key 42 is held and a key plate 46 having key grooves formed in an uneven shape. Here, the mechanical key refers to a key that requires a mechanical operation in which the key plate 46 is inserted into a key cylinder (not shown) of the vehicle 1 and rotated in the key verification between the vehicle and the key. Say. The emergency key 42 can operate the vehicle 1 by a mechanical key operation when the battery of the portable device 4 runs out and the portable device 4 cannot transmit the ID signal Sid (including the wireless signal Swl). In order to do so, it is provided in the portable device 4. Further, a key storage portion 47 is formed on the side surface of the portable device main body 44 as a storage destination of the emergency key 42. The divided parts correspond to the emergency key 42.

  As shown in FIG. 1, the portable device main body 44 is provided with a key detection unit 48 that detects whether or not the emergency key 42 is inserted into the key storage unit 47. The key detection unit 48 includes, for example, a contact switch and is electrically connected to the communication control unit 13. The key detection unit 48 outputs a switch signal corresponding to whether or not the emergency key 42 is inserted into the key storage unit 47 to the communication control unit 13, for example, when the emergency key 42 is inserted into the key storage unit 47. A signal is output, and an ON signal is output when the emergency key 42 is not inserted into the key storage portion 47. The key detection unit 48 corresponds to detection means.

  A key side restriction program is registered in the memory 15 of the portable device 4 as a key side control program of the valet parking system 41. This vehicle function restriction program monitors whether or not the emergency key 42 is inserted into the portable device main body 44 by the key detection unit 48, and the operation button 36 is set in a predetermined state with the emergency key 42 removed from the portable device main body 44. When it is confirmed that the operation is performed according to the operation order and the number of operations, this is a program for transmitting the valley trigger radio wave Sbt from the RF transmitter 17 to the vehicle 1 as a command for causing the vehicle 1 to enter the restricted state. In the verification ECU 6 of the vehicle 1, a vehicle side restriction program is registered as a vehicle side control program of the valet parking system 41. The vehicle-side restriction program monitors whether or not the valley trigger radio wave Sbt transmitted from the portable device main body 44 is received by the RF receiver 9, and when the verification ECU 6 receives the valley trigger radio wave Sbt, It is a program for shifting to a valley state (restricted state) where use is restricted.

  An indicator 49 is connected to the alarm ECU 37 as a notification system for the valet parking system 41. The indicator 49 is turned off when the vehicle 1 is in a normal state where no restriction is applied, and is turned on when the vehicle 1 enters a valley state. The indicator 49 may be installed in the vehicle as an independent part, for example, or may be incorporated in the instrument panel together with other indicators. The indicator 49 constitutes a notification unit.

Next, operation | movement of the valet parking system 41 of this example is demonstrated.
First, as shown in FIGS. 2A to 2E, the vehicle 1 is moved from the normal state where the vehicle functions usable in the vehicle 1 are not restricted to the valley state where the usable vehicle functions are restricted. Assume the case of setting. 2A to 2E are examples in which the vehicle 1 is set to the valley state after the engine 25 of the vehicle 1 is stopped and the vehicle door is locked. In this case, as shown in FIG. 2A, after the user gets off the vehicle 1, the user pushes the lock button of the portable device 4 to put the vehicle doors in the all seats locked state.

  After locking the vehicle door, the user removes the emergency key 42 from the portable device main body 44 as shown in FIG. The communication control unit 13 recognizes that the emergency key 42 has been extracted from the portable device main body 44 when an ON signal is input from the key detection unit 48 until that time. When the communication control unit 13 confirms that the emergency key 42 has been removed from the portable device main body 44, the communication control unit 13 switches its own operation mode from the normal mode to the valley state setting mode. Note that the valley state setting mode here refers to switching the operation function of the operation button 36 to a function for setting the valley state so that the operation button 36 functions as a dedicated button for setting the valley state. Mode.

  Subsequently, as shown in FIG. 2C, the user places an operation button 36 located in the wireless communication area of the portable device 4 and provided on the portable device 4 with a predetermined operation procedure (for example, an operation order). And the number of operations). The predetermined operation procedure is the operation button 36 to be satisfied when the operation state of the vehicle 1 is switched from the normal state in which the vehicle use is freely permitted to the valley state in which the vehicle 1 is restricted in use. Refers to the operation sequence and operation procedure. Examples of the button operation include an operation procedure of operating the unlock button twice, the lock button once, and the panic button twice.

  When the operation mode of the communication control unit 13 is in the valley state setting mode, the communication control unit 13 monitors whether or not the operation button 36 is operated in a predetermined operation procedure. When the communication control unit 13 confirms that the operation button 36 is operated in a predetermined operation procedure, the valley trigger radio wave Sbt is transmitted from the RF transmitter 17 to the RF band as a wireless signal Swl as shown in FIG. A signal is transmitted toward the vehicle 1. The valley trigger radio wave Sbt includes an ID code as a key code of the portable device 4 and a valley state switching command as a function code. Note that the communication control unit 13 has a time limit in the operation time of the valley state setting mode, and the input operation by the operation button 36 is not yet completed even if the execution time of the valley state setting mode exceeds the time limit. Even if the operation is in the middle of input, the valley state setting mode is forcibly canceled to return the operation mode of the portable device 4 to the original normal mode.

  When the verification ECU 6 receives the valley trigger radio wave Sbt by the RF receiver 9, the verification ECU 6 compares the ID code included in the valley trigger radio wave Sbt with the ID code registered in itself, thereby performing ID verification on the valley trigger radio wave Sbt. I do. When the verification ECU 6 confirms the establishment of ID verification in the valley trigger radio wave Sbt, the verification ECU 6 operates in accordance with the valley state switching command included in the valley trigger radio wave Sbt. When the verification ECU 6 accepts a valley state switching command with the ID verification of the valley trigger radio wave Sbt established when the operation state of the valley parking system 41 is the normal state, the verification ECU 6 sets a valley state execution flag in its own memory 18. The vehicle 1 is shifted to the valley state.

  When the verification ECU 6 sets the valley state execution flag in its own memory 18, it sends a valley state setting notification Dba for notifying that the vehicle 1 is set to the valley state to ECUs of various in-vehicle devices (for example, the in-vehicle LAN 11). The engine ECU 26 and the like) to enter a use restriction state where use of these in-vehicle devices is restricted. The types of use restrictions include, for example, glove box opening / closing operation prohibition, trunk (luggage door) opening / closing operation prohibition, fuel filler door opening / closing operation prohibition, car audio system use prohibition, car navigation system use prohibition ( Use restrictions), and prohibition of opening and closing the rear left and right doors (unlocking is not allowed). Other usage restrictions include, for example, vehicle speed restriction, travel distance restriction, travel section (travel area) restriction, and the like.

  When the verification ECU 6 sets the valley state execution flag in its own memory 18 and shifts the vehicle 1 to the valley state, the verification ECU 6 also outputs the previous valley state setting notification Dba to the alarm ECU 37 via the in-vehicle LAN 11. When the alarm ECU 37 receives the valley state setting notification Dba from the verification ECU 6, the alarm ECU 37 answers the user to that effect, for example, by blinking the hazard 38 several times. Further, the alarm ECU 37 lights the indicator 49 that has been turned off until then, and maintains the lighting state while the vehicle 1 is in the valley state.

  When the user confirms that the vehicle 1 has normally entered the valley state by looking at this answerback, the emergency key 42 removed from the portable device main body 44 is returned to the portable device main body 44 in FIG. As shown, the emergency key 42 is inserted into the key storage portion 47. The communication control unit 13 recognizes that the emergency key 42 has been inserted into the portable device main body 44 when an off signal is input from the key detection unit 48 to the current on signal. When the communication control unit 13 confirms that the emergency key 42 is reattached to the portable device main body 44, the communication control unit 13 switches its own operation mode from the previous valley state setting mode to the original normal mode. The user lends the portable device 4 after reattaching the emergency key 42 to the portable device main body 44 as a vehicle key to the vehicle borrower.

  When the vehicle borrower drives the vehicle 1, the vehicle borrower drives the vehicle 1 with the portable device 4 lent by the user. At this time, the vehicle borrower performs ID verification with the vehicle 1 using the portable device 4, and when the ID verification is established, driving of the vehicle 1 is permitted. However, at this time, since the vehicle 1 is set to the valley state, the vehicle 1 is allowed to be used under a situation where usage restrictions are applied. Therefore, even when the user lends the vehicle 1 to a third party vehicle borrower, the user can lend the vehicle under a restricted situation in which the vehicle 1 is not freely used.

  Further, as shown in FIG. 3, the valet parking system 41 is provided with a valet state canceling function for returning the vehicle 1 set to the valet state to the normal state where the original use restriction is not applied. The example shown in FIGS. 3A to 3E is an example in which the vehicle 1 in a valley state in which the engine is stopped and the vehicle doors are locked in all seats is returned to the original normal state. In this case, the user returns the portable device 4 from the vehicle borrower, enters the wireless communication area and pushes the lock button of the portable device 4 as shown in FIG. To unlock all seats.

  After unlocking the vehicle door, the user removes the emergency key 42 from the portable device main body 44 as shown in FIG. When the communication control unit 13 inputs an ON signal from the OFF signal so far from the key detection unit 48 and confirms that the emergency key 42 has been removed from the portable device main body 44, the communication control unit 13 sets its own operation mode to the normal operation mode until then. Switch from mode to valley state setting mode. Note that the valley state setting mode in which the communication control unit 13 enters at this time is the same mode as the valley state setting mode in which the communication control unit 13 enters when the vehicle 1 is switched from the normal state to the valley state.

  Next, as shown in FIG. 3C, the user places an operation button 36 located in the wireless communication area of the portable device 4 and provided on the portable device 4 with a predetermined operation procedure (operation order or Operate by (number of operations). The operation procedure required at this time is the same as the procedure applied when the vehicle 1 is switched from the normal state to the valley state. When the communication control unit 13 confirms that the operation button 36 has been operated in a predetermined operation procedure when the operation mode of the communication control unit 13 is in the valley state setting mode, as shown in FIG. As Swl, a valley trigger radio wave Sbt is transmitted from the RF transmitter 17 to the vehicle 1 as an RF band signal. The valley trigger radio wave Sbt is the same radio wave as that transmitted when the vehicle 1 is switched from the normal state to the valley state.

  When the verification ECU 6 receives the valley trigger radio wave Sbt by the RF receiver 9, the verification ECU 6 performs ID verification for the ID code included in the valley trigger radio wave Sbt. When the ID verification is confirmed, the verification ECU 6 includes the valley trigger radio wave Sbt. Operates according to the valley state switching command. When the operation state of the valet parking system 41 is the valley state, the verification ECU 6 receives the valley state switching command with the ID verification of the valley trigger radio wave Sbt established, and the valley state execution flag that has been raised in its own memory 18 Is turned off, and the operation state of the vehicle 1 is returned from the valley state to the original normal state.

  When the verification ECU 6 turns off the valley state execution flag set in its own memory 18, various in-vehicle use of the in-vehicle LAN state release notification Dbb for notifying that the vehicle 1 is set to the original normal state is performed. It outputs to ECU (for example, engine ECU26 etc.) of apparatus, and these vehicle equipment is returned to the normal use state which can be used freely. As a result, the vehicle 1 returns to the normal state in which the vehicle 1 can be freely used as it is, and the user can drive the vehicle 1 that is not restricted in use.

  Further, when the verification ECU 6 lowers the valley state execution flag that was standing in its own memory 18 and returns the vehicle 1 to the original normal state, the verification ECU 6 sends the previous valley state release notification Dbb to the alarm ECU 37 via the in-vehicle LAN 11. Output. When the alarm ECU 37 receives the valley state release notification Dbb from the verification ECU 6, the alarm ECU 37 answers the user to that effect, for example, by blinking the hazard 38 only once. Further, the alarm ECU 37 turns off the indicator 49 that has been on until then, and notifies the user that the valley state of the vehicle 1 has been released by the indicator 49 as well.

In addition, the valley state cancellation function of this example incorporates an unauthorized cancellation prevention function in order to give this cancellation function high security. This unauthorized release prevention function is an additional function that disables the release operation along the above-described valley release function when the following situation examples (A) to (C) occur.
(A) When the emergency key 42 is removed from the portable device main body 44 and the operation button 36 is not operated at all within a certain time (B) ... Within a certain time after removing the emergency key 42 from the portable device main body 44 When the operation button 36 cannot be operated correctly to cancel the valley state of the vehicle 1 (C)... After the emergency key 42 is removed from the portable device body 44, the operation button 36 is operated more than the allowable number of times. The communication control unit 13 performs the normal operation of the operation button 36 on the portable device 4 so as to disallow the valley state release function when the situations (A) to (C) occur. Also, the radio wave transmission lock state in which the valley trigger radio wave Sbt is not transmitted is set. That is, when the vehicle 1 is in the valley state, even if the emergency key 42 is removed from the portable device main body 44 and the operation button 36 is operated in accordance with the normal procedure, the communication control unit 13 does not respond to this button operation. The operation of transmitting the valley trigger radio wave Sbt is not performed. Therefore, after this, even if the operation button 36 is operated regardless of whether it is correct or not, the valley state of the vehicle 1 is maintained.

  Further, the vehicle 1 is provided with a lock state release function for releasing the radio wave transmission lock state of the communication control unit 13. When the radio wave transmission lock state of the communication control unit 13 is released with this lock state release function, the release screen 52 is displayed on the display 50 by operating the input buttons 51, 51,. increase. This release screen 52 has a plurality of input fields 53, 53... For inputting names, telephone numbers, contract numbers, passwords, etc. When the data input to these input fields 53, 53. Authenticates the user based on the input data. When the vehicle 1 confirms that the personal authentication has been established, the vehicle 1 turns off the valley state setting flag set in the verification ECU 6 to cancel the valley state.

  In addition, the vehicle 1 causes the release request Skk to be transmitted from the in-vehicle LF transmitter 8 (or the out-of-vehicle LF transmitter 7) as a signal in the LF band, together with the release of its own valley state. The release request Skk includes an ID code as a key code of the portable device 4 and a lock state release request as a function code. When the LF receiver 16 receives the release request Skk, the portable device 4 performs ID verification on the ID code included in the release request Skk. If this ID verification is established, the lock state release included in the release request Skk is performed. According to the request, the radio wave transmission state set in itself is canceled. As described above, the radio wave transmission lock state of the portable device main body 44 is released, and the original normal mode is restored.

  In this example, when the vehicle 1 is set to the valley state, the emergency key 42 is removed from the portable device main body 44, and then the operation button 36 of the portable device main body 44 is operated according to a predetermined operation procedure. It is said. Therefore, when the vehicle 1 is put into the valley state, not only the operation of removing the emergency key 42 from the portable device main body 44 but also the operation of the operation button 36 according to a predetermined procedure is also a condition. Therefore, when the vehicle 1 is put into the valley state, the user's intention to operate the operation button 36 in accordance with a predetermined procedure is necessarily required. For this reason, it becomes possible to make it difficult to produce the situation where the vehicle 1 enters into a valley state against the user's will.

According to the configuration of the present embodiment, the following effects can be obtained.
(1) When the vehicle 1 is set to the valley state and the use is restricted, not only the emergency key 42 is removed from the portable device main body 44 but also the operation button 36 is operated in accordance with a regular procedure. It has become. For this reason, when the vehicle 1 is set to the valley state, the user's intention to operate the operation button 36 of the portable device main body 44 in accordance with a predetermined regular procedure is surely entered. It can be made difficult to enter.

  (2) When the vehicle 1 is set to the valley state, the removal of one part from the portable device main body 44 is a condition for setting the valley state. In this example, this divided part is used as the emergency key 42. For this reason, since the emergency key 42 is always provided in the portable device 4, even if the portable device 4 runs out of batteries, the emergency key 42 can be used to operate the vehicle 1.

  (3) When the emergency key 42 is removed from the portable device main body 44, the switch function of the operation button 36 of the portable device main body 44 is switched to function as a dedicated button for setting the vehicle 1 to the valley state. Therefore, even if the operation button 36 is operated when the vehicle 1 is set to the valley state, the operation of radio wave transmission, which is a function that the operation button 36 has in advance, is not performed. For this reason, even if these operation buttons 36 are shared as an input system for valley setting, a special problem does not occur, so that the system 41 can be made highly functional. Further, if the switch function of the operation button 36 is switched when the emergency key 42 is removed from the portable device main body 44, the switch function of the operation button 36 can be increased, so that the functionality is increased. Effective from the aspect.

  (4) When the portable device 4 is operated to switch to the valley state, if the vehicle 1 receives the valley trigger radio wave Sbt transmitted from the portable device 4 at this time, the vehicle 1 stores the valley trigger radio wave in the memory 18 of the verification ECU 6. By setting a state setting flag, a state in which usage is restricted is taken. For this reason, since the use restriction of the vehicle 1 is managed on the vehicle 1 side, the main vehicle restriction function is incorporated in the vehicle 1. Therefore, it is not necessary to incorporate this kind of restriction function in the portable device 4, so that it is difficult to cause various problems such as a complicated function and structure of the portable device 4 or an accompanying increase in size of parts. Can do.

  (5) When the vehicle 1 enters the valley state, the user is notified by the hazard 38 or the indicator 49, so that the user can easily recognize whether or not the vehicle 1 has entered the valley state. it can. This is the same when the valley state of the vehicle 1 is canceled.

  (6) When the emergency key 42 is removed from the portable device main body 44, the portable device main body 44 enters the valley state setting mode, and an input operation is performed in accordance with the normal procedure of the operation button 36. Otherwise, the valley state setting mode is forcibly terminated. Therefore, since the time limit is provided for the input operation by the operation button 36 when the portable device main body 44 is in the valley state setting mode, for example, a third party who does not know the order of the regular procedure of the operation button 36 Even if a button operation is performed on the dark cloud to set the valley state, the time limit expires at this time, so the input operation is forcibly terminated. For this reason, it can be made difficult to produce the situation where the vehicle 1 is illegally switched to the valley state by a third party.

  (7) In the operation description of this example, the example in which the vehicle 1 is set to the valley state after locking the vehicle door has been described. However, in this example, the vehicle 1 receives the valley trigger radio wave Sbt transmitted from the portable device 4. When the signal is received, the vehicle 1 enters the valley state by receiving the signal, so that the vehicle 1 can enter the restricted state even with the engine 25 running.

(8) Since the valet parking system 41 is provided with an unauthorized release prevention function, security can be enhanced.
(9) Since the portable device 4 is used as a lending key when lending the vehicle 1 to a lending partner, it is not necessary to prepare a dedicated key for lending. Therefore, problems such as an increase in the number of parts and an increase in parts cost required for the parts do not occur.

Note that the embodiment is not limited to the configuration described so far, and may be modified as follows.
The switching between the normal state and the valley state of the vehicle 1 is not limited to a method in which the operation state is repeatedly switched between the normal state and the valley state every time the vehicle 1 receives the valley trigger radio wave Sbt. That is, when the vehicle 1 receives the valley trigger radio wave Sbt, the vehicle 1 is not limited to a method of switching to the valley state if the vehicle 1 is in the normal state, and switching to the normal state if the vehicle 1 is in the valley state. For example, when the portable device main body 44 can grasp whether the vehicle 1 is in the normal state or the valley state, and the vehicle 1 is in the normal state, the portable device 4 performs a regular operation for valley switching. A volley state setting request (ID code + function code) is transmitted from the main body 44 to the vehicle 1 to switch the vehicle 1 to the valley state. On the other hand, when the vehicle 1 is in the valley state, the portable device 4 performs a regular operation for valley switching. Then, a volley state cancellation request (ID code + function code) may be transmitted from the portable device main body 44 to the vehicle 1 to return the vehicle 1 to the normal state.

  -When the vehicle 1 is put in the valley state, the restriction function applied to the vehicle 1 at this time may be changed according to, for example, the borrower of the vehicle 1. An example of setting the restriction function in this case is an example in which the restriction function level is set by operating the operation button 36 of the portable device main body 44 in accordance with a regular procedure and then by one operation of the specific operation button 36. That is, when the specific operation button 36 is operated once, the security level is set to “1” and the vehicle functions to be restricted are set to be small, and when the specific operation button 36 is operated twice. The security level is set to “2” and many vehicle functions to be restricted are set. In this case, since the level of the valley state of the vehicle 1 can be switched, the valet parking system 41 can have high functionality.

  When the vehicle 1 in the normal state receives the valley trigger radio wave Sbt, it is not limited to switching various ECUs (in-vehicle devices) to the restricted state immediately at the time of receiving the radio wave. For example, when the ECU that manages the operation of these in-vehicle devices executes the operation, the verification ECU 6 checks whether or not a valley state is set. It may be something that applies.

  For example, when the portable device main body 44 is provided with a notification component such as an LED or a lamp, when the emergency key 42 is removed from the portable device main body 44 and the valley state setting mode is entered, the notification component is turned on. The user may be notified that the portable device main body 44 is still within the time limit.

  -When the emergency key 42 is removed from the portable device main body 44 and the operation button 36 is operated in accordance with the regular procedure, it is not always necessary to provide a time limit for this input operation, and this time limit may be omitted.

The divided parts are not necessarily limited to the emergency key 42 and may be any kind of parts as long as they can be separated from the portable device main body 44.
The operation means is not necessarily limited to the operation button 36 that performs radio wave transmission when the button is operated. In short, any kind of button may be used as long as it is a button (input unit or operation unit) provided in the portable device main body 44.

The key detection unit 48 is not necessarily limited to a contact switch, and for example, a sensor such as an optical sensor or a magnetic sensor may be used.
The communication control unit 13 may operate so as to cancel the valley state setting mode that has been taken and return the operation mode to the original normal mode when the valley trigger radio wave Sbt is transmitted.

  -The valley state setting mode of the portable device 4 is not necessarily required and may be omitted. In short, when the vehicle 1 is set to the valley state (can be canceled), the emergency key 42 is removed from the portable device main body 44, and the operation button 36 of the portable device main body 44 is operated in accordance with the normal procedure. Should be a setting condition.

  -The valley state of the vehicle 1 is not necessarily managed on the vehicle 1 side. For example, a command for operating the vehicle 1 in a restricted state is transmitted from the portable device 4 to the vehicle 1 when a key operation of the portable device 4 is performed. The use restriction may be managed on the portable device 4 side so that the use restriction is imposed on the vehicle 1.

The release of the valley state is not necessarily performed after the vehicle door is unlocked, but may be performed while the vehicle door is in the locked state.
The notification means for notifying the user when the operation state of the vehicle 1 is switched is not limited to the hazard 38 or the indicator 49. For example, the switching of the operation state may be notified by a horn or a buzzer of the vehicle 1 or may be used if the portable device 4 is provided with a buzzer or the like.

  The operation performed when canceling the valley state of the vehicle 1 is not necessarily limited to being the same as the input operation when setting the vehicle 1 to the valley state, and may be different. For example, the release of the valley state may be performed by a screen input operation of the in-vehicle display 50.

  The release of the valley state of the vehicle 1 is not necessarily limited to the operation only on the portable device 4 side, and a specific operation on the vehicle 1 side may be added thereto. Examples of the specific operation on the vehicle 1 side include a push operation of an in-vehicle switch and a depression operation of a brake pedal.

Next, technical ideas that can be grasped from the above-described embodiment and other examples will be described below together with their effects.
(1) An electronic key that transmits a key code to a vehicle by wireless communication and performs key collation with the vehicle is used as a vehicle key, and is used when the vehicle is used with the electronic key. The key body of the electronic key is provided with a split part that can be attached to and detached from the key body, and an operating means that is operated when the key code is transmitted from the key body. In the vehicle function restriction method, the detecting means monitors whether or not the divided parts are attached to the key body, and when the operating means is operated in a normal procedure while the divided parts are removed from the key body, A vehicle function restriction method that restricts a vehicle function that can be used with an electronic key by a restriction means.

  (2) In any one of Claims 1-6, the said operation means is for the electromagnetic wave transmission operated at the time of the said key code transmission from the said key main body.

The block diagram which shows schematic structure of the valet parking system in one Embodiment. (A)-(e) is explanatory drawing which shows the procedure when setting a vehicle to a valley state. (A)-(e) is explanatory drawing which shows the procedure when returning a vehicle to the original normal state. The perspective view which shows the portable device from which the emergency key was removed from the portable device main body. The cancellation | release screen figure displayed on a display as a cancellation | release function of a valley state.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Vehicle, 4 ... Portable machine as electronic key (vehicle key, vehicle function restriction corresponding | compatible key), 6 ... Collation ECU which comprises a limiting means, 13 ... Communication control part which comprises a limiting means and an operation function change means, 36 ... operation buttons as operation means, 38 ... hazard constituting notification means, 41 ... valet parking system as vehicle function restriction system, 42 ... emergency key (mechanical key) as divided parts, 44 ... portable machine as key body Main body, 46... Key plate, 48... Key detection unit as detection means, 49.

Claims (7)

An electronic key that transmits a key code to a vehicle by wireless communication and performs key collation with the vehicle is used as a vehicle key, and the electronic key is used to restrict the use of the vehicle. In the vehicle function restriction system in which the key body of the electronic key is provided with a split part that can be attached to and detached from the key body, and an operation means as an operation system of the electronic key.
Detecting means for detecting whether or not the divided parts are attached to the key body;
And a restricting means for restricting a vehicle function that can be used with the electronic key on the condition that the operating means is operated in a regular procedure while the divided parts are removed from the key body. Vehicle function restriction system.   The divided part is a mechanical key that performs the key collation by a mechanical operation of inserting and turning a key plate into a key cylinder of the vehicle, and is used as an emergency key of the electronic key. The vehicle function restriction system according to 1.   The operation function changing means for switching the operation function of the operation means to a dedicated function for inputting the regular procedure when the divided part is removed from the key body. Or the vehicle function restriction system according to 2;   The restricting means restricts the use of the vehicle by restricting the use of the vehicle on the vehicle side when the operating means is operated in the regular procedure while the divided part is removed from the key body. The vehicle function restriction system according to any one of claims 1 to 3, wherein   The vehicle according to any one of claims 1 to 4, further comprising a notification unit that notifies at least one of the electronic key and the vehicle when the vehicle enters a restricted state. Function restriction system.   The limiting means determines, with a time limit, whether or not the operating means is operated in the regular procedure when the divided part is removed from the key body. The vehicle function restriction system according to any one of 1 to 5. The key body is provided with a split part that can be attached to and detached from the key body, and an operation means as an operation system for the key. A key code is transmitted to the vehicle by wireless communication, and the vehicle and the key are transmitted by wireless communication. In the vehicle function restriction support key that can be verified,
Detecting means for detecting whether or not the divided parts are attached to the key body;
On the condition that the operation means is operated in a regular procedure while the divided parts are removed from the key body, the vehicle function that can be used with the key is restricted, and the key is restricted to use the vehicle. A vehicle function restriction compatible key, characterized by comprising restriction means for functioning as a key.

Images