JP2004013200A - Vehicle-mounted control system and vehicle-mounted electronic control unit - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a vehicle-mounted control system and an electronic control unit that make it difficult for a thief, who steals a vehicle, to flee. <P>SOLUTION: An ETC-ECU (electronic toll collection-electronic control unit) 200 is provided for automatically paying/collecting the toll of a toll road while communicating with a roadside reader. When a CPU 18 of a security ECU 100 detects an unauthorized access to a vehicle based on the detection by sensors 20-22, the ETC-ECU 200 is made inoperable. Therefore, the thief who steals the vehicle cannot use the ETC-ECU 200 when the thief flees using the toll road. Therefore, the thief must receive a highway ticket at the entrance booth of a highway or stop at the exit to pay the toll. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an in-vehicle control system and an electronic control device mounted on a vehicle.
[0002]
2. Description of the Related Art
2. Description of the Related Art Conventionally, there has been proposed a security system that uses a sensor for detecting the intrusion of a thief into a vehicle interior and generates an alarm in response to the detection of the sensor to prevent theft of a vehicle.
[0003]
However, with this system, if the thief clears the alarm in any way, he can flee freely. For example, when a vehicle is equipped with an ETC (Electronic Toll collection) vehicle-mounted device, when a thief escapes, if the ETC vehicle-mounted device is used on an expressway, the vehicle escapes from the vehicle stolen site to a distant place in a short time. Possibly, even if police checked in near the theft, it was difficult for the check to catch a thief.
[0004]
In view of the above, an object of the present invention is to provide an in-vehicle control system and an electronic control device that make it difficult for a thief stealing a vehicle to escape.
[0005]
[Means for Solving the Problems]
According to the first aspect of the present invention, the ETC on-vehicle device for communicating with the on-road device to automatically receive the toll road usage fee, the detecting device for detecting unauthorized access to the vehicle, and the detecting device for detecting unauthorized access to the vehicle include: And invalidating means for invalidating the on-board ETC device upon detection.
[0006]
As described above, when an unauthorized access to the vehicle is detected, the ETC on-vehicle device is invalidated, so that the thief cannot use the ETC on-vehicle device when fleeing on a toll road. Therefore, it is possible to make it difficult for a thief stealing the vehicle to escape.
[0007]
According to a second aspect of the present invention, there is provided an activating means for activating the disabled ETC on-vehicle device.
[0008]
Thus, when the stolen vehicle returns to its owner, the on-board ETC device of this vehicle can be reactivated.
[0009]
Specifically, as in the invention as set forth in claim 3, there is provided an operating means operated by a user, and when the operating means receives a predetermined operation, the enabling means is set to the disabled ETC vehicle-mounted device. Is preferably configured to be effective. For example, as in the invention as set forth in claim 4, when the operation means performs a cryptographic input operation as a predetermined operation, the activating means activates the invalidated ETC on-vehicle device. Is also good.
[0010]
Further, the invalidation means for invalidating the ETC on-vehicle device may be configured to prohibit the processing for automatically collecting the usage fee for the CPU of the ETC on-vehicle device as in the invention according to claim 5. Alternatively, the power supply from the vehicle-mounted battery to the vehicle-mounted ETC device may be stopped.
[0011]
Further, in carrying out the inventions of claims 1 to 6 as described above, as in the invention of claim 5, detection means for detecting unauthorized access to the vehicle and detection means for detecting unauthorized access to the vehicle include When it is detected, it is preferable to use an electronic control device having invalidating means for invalidating the ETC vehicle-mounted device for communicating with the road device and automatically collecting the toll road usage fee.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
(1st Embodiment)
FIG. 1 shows a schematic configuration of a vehicle-mounted control system according to a first embodiment of the present invention.
[0013]
As shown in FIG. 1, the on-vehicle control system includes a security ECU 100 and an ETC-ECU 200. The security ECU 100 includes a power supply control circuit 10, interface circuits (I / F) 11, 12, and a radio circuit (R / F) 13. , An antenna 14, a ROM 15, a RAM 16, a non-volatile memory 17, and a CPU (Central Processing Unit) 18.
[0014]
The power supply control circuit 10 is directly connected to the positive terminal of the vehicle battery BT and supplies power to the circuits 11 to 13 and 15 to 18 at a constant voltage. The power supply control circuit 10 is connected to the positive terminal of the vehicle battery BT via the ignition switch IG, and receives an output signal of the ignition switch IG. Further, the power supply control circuit 10 is connected to the positive terminal of the vehicle battery BT via the accessory switch ACC, and receives an output signal of the accessory switch ACC.
[0015]
Further, the interface circuit 11 outputs a transmission signal from the CPU 18 to the interface circuit 44 of the ETC-ECU 200 and outputs a transmission signal from the interface circuit 44 to the CPU 18. The interface circuit 12 outputs sensor outputs of the sensors 20 to 22 to the CPU 18. As these sensors 20 to 22, sensors for detecting unauthorized access to the vehicle are used to prevent theft.
[0016]
For example, as the sensor 20, a wire for detecting breakage of the windshield by a thief can be used, and this wire is arranged so as to be broken when the windshield is broken. The sensor 21 includes, for example, a transmitting unit that transmits a transmission wave (for example, an ultrasonic wave, a radio wave, or an infrared ray) in order to detect a thief that has entered a vehicle interior, and a reflection of the transmission wave reflected by the thief. And a receiving unit for receiving the wave.
[0017]
As the sensor 22, a vehicle inclination detection sensor can be used. This inclination detection sensor detects a thief carrying out the vehicle with a tow truck or the like, and detects a thief who lifts the vehicle with a tow truck. Detect tilt.
[0018]
Further, the interface circuit 12 outputs a control signal output from the CPU 18 to the alarm device 23 to generate a siren from the alarm device 23 and also outputs the control signal from the CPU 18 in order to notify an unauthorized access to the vehicle to the outside. The control signal is output to the lamp 24 to turn on the lamp 24.
[0019]
The wireless circuit 13 performs wireless communication with a portable device (not shown) via the antenna 14. The portable device is used for unlocking a door lock and performing remote control for locking via communication with a wireless circuit 13. The ROM 15 stores a computer program of the CPU 18, and the RAM 16 stores data associated with the processing of the CPU 18 together with the nonvolatile memory 17.
[0020]
The CPU 18 performs a process for unlocking and locking the door lock through communication with the portable device via the wireless circuit 13 and an unauthorized access to the vehicle based on the outputs of the sensors 20 to 21 input via the interface circuit 12 ( (E.g., destruction of a windshield, a burglar invading a vehicle cabin, or lifting a vehicle by a tow truck), and processing for notifying the detected unauthorized access to the outside using an alarm device 23 and a lamp 24. In addition, as described later, the CPU 18 performs processing for invalidating the ETC-ECU 200 based on unauthorized access detected using the sensors 20 to 21.
[0021]
The ETC-ECU 200 includes a power supply control circuit 40, interface circuits (I / F) 41 and 44, a ROM 42, a RAM 43, a radio circuit (R / F) 45, an antenna 46, and a CPU (central processing unit) 47. I have.
[0022]
The power supply control circuit 40 is directly connected from the positive terminal of the vehicle battery BT and supplies power to the circuits 41 to 45 and 47 at a constant voltage. The power supply control circuit 40 is connected to the positive terminal of the vehicle battery BT via the ignition switch IG and to the positive terminal of the vehicle battery BT via the accessory switch ACC.
[0023]
The interface circuit 41 outputs a control signal output from the CPU 47 to the display unit 51 and outputs an operation signal output from the operation unit 50 to the CPU 47. The operation unit 50 is used for inputting an encryption as described later. The interface circuit 44 transmits a signal output from the CPU 47 to the interface circuit 11 of the security ECU 100, and outputs a signal transmitted from the interface circuit 11 to the CPU 47.
[0024]
The ROM 42 stores a computer program of the CPU 47, and the RAM 43 stores data accompanying the processing of the CPU 47. The wireless circuit 45 transmits a transmission signal from an antenna 46 to a road device on a toll road such as a highway, and receives a reception signal from the road device via the antenna 46.
[0025]
The CPU 47 performs a process (hereinafter, referred to as an ETC process) for automatically collecting a toll road usage fee through communication with a road device via the wireless circuit 45. Further, the CPU 47 performs a process for inhibiting the ETC process based on the control from the security ECU 100, as described later.
[0026]
Next, the operation of this embodiment will be described with reference to FIGS. 2 (a) and 2 (b).
[0027]
FIG. 2A is a flowchart illustrating a process of the CPU 18 of the security ECU 100, and FIG. 2B is a flowchart illustrating a process of the CPU 47 of the ETC-ECU 200.
[0028]
First, the CPU 18 of the security ECU 100 starts executing a computer program according to the flowchart shown in FIG. This computer program is repeatedly executed at regular intervals.
[0029]
First, it is determined whether or not a security process (security system) for preventing theft is in operation (step 300). This security processing is performed based on sensor outputs from the sensors 20 to 22 input via the interface circuit 12 to illegally access the vehicle (thief intrudes into the passenger compartment, breaks the windshield by a thief, lifts the vehicle by a tow truck). This is a process for detecting an alarm and generating an alarm.
[0030]
Therefore, if the anti-theft security process is in operation, it is determined as YES, and based on the sensor outputs from the sensors 20 to 22, the security system has responded to the unauthorized access, that is, whether or not the unauthorized access to the vehicle has been performed. Is determined (step 310).
[0031]
If no unauthorized access to the vehicle is detected, the determination is NO, and the operation determination process of the security process (Step 300) is repeated until the unauthorized access to the vehicle is detected. Thereafter, if an unauthorized access to the vehicle is detected and the determination is YES, the siren is generated from the alarm device 23 and the lamp 24 is turned on to notify the unauthorized access to the vehicle to the outside, and the ETC-ECU 200 is disabled. Is transmitted from the interface circuit 11 to the ETC-ECU 200 (step 320).
[0032]
In response to the invalidation signal transmitted in this manner, ETC-ECU 200 operates as follows. Hereinafter, the process of the CPU 47 of the ETC-ECU 200 will be described with reference to FIG. The CPU 47 executes a computer program according to the flowchart shown in FIG.
[0033]
First, it is determined whether an invalidation signal has been received from the security ECU 100 (step 330). Here, when the invalidation signal is received via the interface circuit 44, YES is determined in the step 330, and the ETC-ECU 200 is invalidated. That is, the execution of the ETC process by the CPU 47 itself is prohibited (step 340).
[0034]
Next, based on the operation to operation 50, it is determined whether or not the invalidation of ETC-ECU 200 is released (step 350). Thereafter, if the predetermined operation for canceling the invalidation of the ETC process is not performed on the operation 50, the determination is NO in step 350, and the release determination is performed until the predetermined operation is performed on the operation 50. The process (step 350) is repeated.
[0035]
Here, for example, when an encryption input is used as a predetermined operation for canceling the invalidation of the ETC process, in step 350, it is determined whether or not the encryption input to the operation 50 matches the predetermined encryption. Is determined, when the two codes match, it is determined that a predetermined operation for canceling the invalidation of the ETC process has been performed, and the determination is YES, and the ETC process of the CPU 47 itself is enabled, that is, the ETC process is performed. (Step 360). Thereby, it is possible to automatically collect the toll road usage fee by communicating with the on-road unit via the wireless circuit 45. If no invalidation signal is received from the security ECU 100 in step 320, the determination is NO and the execution of the ETC process is permitted.
[0036]
As described above, according to the present embodiment, the ETC-ECU 200 (ETC vehicle-mounted device) for communicating with the road device and automatically collecting the toll road usage fee is provided, and the CPU 18 of the security ECU 100 includes the sensors 20 to 22. When an unauthorized access to the vehicle is detected based on the detection of the ETC-ECU, the ETC-ECU 200 is invalidated. Therefore, when the thief stealing the vehicle escapes using the toll road, the ETC-ECU 200 cannot be used. Therefore, it is necessary to stop at the entrance gate of the high-speed road to receive the use ticket of the highway or to pay the usage fee at the exit. This makes it difficult for a thief stealing the vehicle to escape.
[0037]
(2nd Embodiment)
In the first embodiment, an example has been described in which the security ECU 100 transmits the invalidation signal to the ETC-ECU 200 regardless of whether the ignition switch IG is on or off. In this case, when the ignition switch IG is turned off, the on-vehicle generator stops generating power. Therefore, when communication is performed between the security ECU 100 and the ETC-ECU 200 when the ignition switch IG is turned off, the remaining on-vehicle battery BT is lost. The capacity may be reduced and the battery may run down.
[0038]
Therefore, in the second embodiment, the security ECU 100 transmits the invalidation signal to the ETC-ECU 200 only when the ignition switch IG is turned on. FIGS. 3A and 3B show the processing of the security ECU 100 and the ETC-ECU 200 in this case. FIG. 3A is a flowchart showing the processing of the CPU 18 of the security ECU 100. 2A, the same steps as those in FIG. 2A indicate the same processing. FIG. 3B is a flowchart showing processing of the CPU 47 of the ETC-ECU 200, and this flowchart is the same as the flowchart shown in FIG.
[0039]
Next, the operation of the present embodiment will be described with reference to FIGS. 3 (a) and 3 (b).
[0040]
The CPU 18 of the security ECU 100 starts executing the computer program according to the flowchart shown in FIG.
[0041]
First, in step 300, it is determined that the security processing (security system) for preventing theft is in operation, and YES is determined. Thereafter, in step 310, unauthorized access to the vehicle is detected based on the sensor outputs from the sensors 20 to 22. If YES is determined, a siren is generated from the alarm device 23 and the lamp 24 is turned on to notify the unauthorized access to the vehicle to the outside. In addition, it is set to invalidate the ETC-ECU 200 (step 400). That is, the ETC invalidation flag included in the nonvolatile memory 17 is set.
[0042]
Next, based on an output signal from the ignition switch IG, it is determined whether or not the ignition switch IG is turned on (step 410). Thereafter, when the ignition switch IG is turned on, the determination is YES, and the state of the ETC invalidation flag included in the nonvolatile memory 17 is read.
[0043]
Here, when it is determined that the invalidation of the ETC-ECU 200 is set based on the invalidation flag of the nonvolatile memory 17 (Step 430: YES), the invalidation signal is transmitted to the ETC-ECU 200 (Step 320). .
[0044]
Here, as in the first embodiment, the CPU 47 of the ETC-ECU 200 performs the invalidation reception determination processing (Step 320), the ETC invalidation processing (Step 340), the cancellation determination processing (Step 350), and the ETC activation processing (Step 350). (Step 360), ETC operation permission processing (Step 370) is performed.
[0045]
As described above, the CPU 18 of the security ECU 100 transmits an invalidation signal to the ETC-ECU 200 when the ignition switch IG is turned on, so that communication between the security ECU 100 and the ETC-ECU 200 is performed during power generation of the vehicle-mounted generator. Will be Therefore, it is possible to suppress a decrease in the remaining capacity of the vehicle-mounted battery BT and prevent the battery from running down.
[0046]
In the present embodiment, an ETC invalidation flag included in the nonvolatile memory 17 is used to store the invalidation setting of the ETC-ECU 200. Therefore, for example, even if the CPU 47 of the security ECU 100 controls the power supply control circuit 10 to intermittently supply power to the circuits 11 to 13 and 15 to 16 in order to reduce power consumption, the ETC is invalidated. As the flag information, the setting for invalidating the ETC-ECU 200 can be held. Therefore, when an unauthorized access to the vehicle is detected, the invalidation signal can be reliably transmitted to the ETC-ECU 200, and the ETC-ECU 200 can be reliably invalidated.
[0047]
(Third embodiment)
In the first embodiment, an example has been described in which the CPU 18 of the security ECU 100 transmits a disabling signal to the CPU 47 of the ETC-ECU 200 to disable the ETC-ECU 200 in order to disable the ETC-ECU 200. However, in the third embodiment, an example will be described in which the CPU 18 of the security ECU 100 stops the power supply to the ETC-ECU 200 and invalidates the ETC-ECU 200. FIG. 4 shows the configuration in this case.
[0048]
In the on-vehicle control system according to the present embodiment, as shown in FIG. 4, a security ECU 100A is used instead of the security ECU 100 shown in FIG. 1, and in this security ECU 100A, the interface circuit 11A is used instead of the interface circuit 11 shown in FIG. Used. The interface circuit 11A is a normally-closed relay, and connects or disconnects between the positive terminal (+ B) of the vehicle battery BT and the input terminal of the power supply control circuit 10 of the ETC-ECU 200. The normally closed relay is controlled by the CPU 18 as described later. In FIG. 4, the configuration other than the interface circuit 11A of the security ECU 100 is the same as the configuration shown in FIG.
[0049]
In the present embodiment configured as described above, the CPU 18 of the security ECU 100 closes the normally-closed relay 11A to connect the positive terminal of the vehicle battery BT to the input terminal of the power control circuit 10 of the ETC-ECU 200. . For this reason, the power supply control circuit 10 is supplied with power from the positive terminal of the vehicle battery BT and supplies power to the circuits 41 to 45 and 47 at a constant voltage. Along with this, the circuits 41 to 45 and 47 of the ETC-ECU 200 operate.
[0050]
In such a state, when the CPU 18 of the security ECU 100A determines that unauthorized access to the vehicle has been detected based on the sensor outputs from the sensors 20 to 22 (step 310 in FIG. 2), the ETC-ECU 200 is invalidated. Therefore, the normally closed relay 11A is opened instead of transmitting the invalidation signal. Accordingly, the connection between the positive terminal of the vehicle-mounted battery BT and the input terminal of the power supply control circuit 10 of the ETC-ECU 200 is cut off. Therefore, power is not supplied to the power supply control circuit 10 from the positive electrode terminal of the vehicle battery BT, and power supply to the circuits 41 to 45 and 47 is stopped. Accordingly, ETC-ECU 200 can be invalidated.
[0051]
In the above-described third embodiment, an example has been described in which, when it is determined that an unauthorized access to the vehicle has been detected, the normally-closed relay 11A is opened instead of transmitting the invalidation signal. May be used. That is, the CPU 18 of the security ECU 100 performs the operation determination of the security processing (step 300), the unauthorized access determination processing (step 310), and the ETC invalidation setting (step 400), and then turns on the ignition switch IG in step 410. If the ETC invalidation flag is determined, the state of the ETC invalidation flag included in the nonvolatile memory 17 is read. Here, if it is determined that the invalidation of the ETC-ECU 200 has been set based on the invalidation flag of the nonvolatile memory 17 (step 430: YES), the normally-closed relay is not transmitted instead of transmitting the invalidation signal. Open 11A. Accordingly, the connection between the positive terminal of the vehicle-mounted battery BT and the input terminal of the power supply control circuit 10 of the ETC-ECU 200 is cut off.
[0052]
Further, in the third embodiment, an example is described in which a relay is used to connect or disconnect between the positive terminal of the vehicle-mounted battery BT and the input terminal of the power supply control circuit 10 of the ETC-ECU 200. Alternatively, a semiconductor element such as a bipolar transistor, IGPT, or field effect transistor may be used.
[0053]
Hereinafter, the correspondence between the above embodiment and the configuration of the claims will be described. The ETC-ECU 200 corresponds to the ETC on-vehicle device, the sensors 20 to 22 correspond to the detecting unit, and the step 320 corresponds to the invalidating unit. Correspondingly, Step 360 corresponds to an activating unit, the operation unit 50 corresponds to an operating unit, and the CPU 47 corresponds to a CPU that performs a process for automatically collecting a usage fee.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a schematic configuration of a vehicle-mounted control system according to a first embodiment of the present invention.
FIG. 2 is a flowchart showing processing of a security ECU and an ETC-ECU shown in FIG.
FIG. 3 is a flowchart illustrating processing of a security ECU and an ETC-ECU according to a second embodiment of the present invention.
FIG. 4 is a block diagram illustrating a schematic configuration of a vehicle-mounted control system according to a second embodiment of the present invention.
[Explanation of symbols]
18 CPU, 10 power supply control circuit, 11 12 interface circuit,
13 ... wireless circuit, 14 ... antenna, 15 ... ROM, 16 ... RAM,
17 nonvolatile memory, 20-22 sensor, 100 security ECU,
200: ETC-ECU.

Claims (7)

An ETC on-board unit for communicating with the on-road unit and automatically collecting toll road usage charges;
Detecting means for detecting unauthorized access to the vehicle;
Invalidating means for invalidating the on-board ETC device when the detecting means detects unauthorized access to the vehicle;
An in-vehicle control system comprising: The in-vehicle control system according to claim 1, further comprising an activation unit that activates the inactivated on-board ETC device. Having operating means operated by a user,
The in-vehicle control system according to claim 2, wherein when the operation unit receives a predetermined operation, the activating unit activates the disabled ETC vehicle-mounted device. 4. The method according to claim 3, wherein, when an operation of inputting an encryption is performed as the predetermined operation on the operation unit, the activating unit activates the invalidated ETC vehicle-mounted device. In-vehicle control system. The ETC in-vehicle device has a CPU that performs processing for automatically collecting the usage fee,
The method according to any one of claims 1 to 4, wherein the disabling unit prohibits the CPU from automatically collecting the usage fee in order to invalidate the on-board ETC device. 2. The vehicle-mounted control system according to item 1. 5. The vehicle-mounted control according to claim 1, wherein the invalidating unit stops power supply from the vehicle-mounted battery to the vehicle-mounted ETC to invalidate the vehicle-mounted ETC. 5. system. Detecting means for detecting unauthorized access to the vehicle;
Invalidating means for invalidating an ETC on-vehicle device for communicating with a road device and automatically receiving a toll road usage fee when the detecting device detects unauthorized access to the vehicle;
An in-vehicle electronic control device comprising:

Images