Portable communication apparatus, vehicle control apparatus, and vehicle control system

A portable communication apparatus, which communicates with vehicle control apparatuses that respectively control vehicles to achieve authentication with respect the vehicle control apparatuses, includes an authentication information change section and a post-change communication section. The authentication information change section communicates with a first vehicle control apparatus, by using a first communication technique, to change authentication information that is used in the first vehicle control apparatus to authenticate the portable communication apparatus. Upon receipt of a notice indicative of having changed the authentication information from the first vehicle control apparatus, the post-change communication section communicates with a second vehicle control apparatus, by using a second communication technique.

CROSS REFERENCE TO RELATED APPLICATIONS

The application is a U.S. National Phase Application under 35 U.S.C. 371 of International Application No. PCT/JP2014/005423 filed on Oct. 27, 2014 and published in Japanese as WO 2015/107578 A1 Jul. 23, 2015. This application is based on and claims the benefit of priority from Japanese Patent Application No. 2014-007873 filed on Jan. 20, 2014. The entire disclosures of all of the above applications are incorporated herein by reference.

TECHNICAL FIELD

The present disclosure relates to a portable communication apparatus capable of being authenticated with respect to a vehicle control apparatus, to the vehicle control apparatus, and to a vehicle control system that includes the portable communication apparatus and the vehicle control apparatus.

BACKGROUND ART

There is conventionally known a vehicle control system that allows a portable communication apparatus to be authenticated with respect to a vehicle control apparatus and, if the authentication is successful, permits vehicle control to be exercised to unlock a door or start an engine (e.g., refer to Patent Literature 1).

PRIOR ART LITERATURES

Patent Literature

SUMMARY OF INVENTION

When authentication information about the portable communication apparatus is to be changed and registered in the vehicle control apparatus in the above-mentioned vehicle control system, the portable communication apparatus is positioned near the vehicle control apparatus to establish a short-range wireless communication and let the vehicle control apparatus read the authentication information recorded in the portable communication apparatus and change its registration. The vehicle control system is demanded to provide increased work efficiency by exchanging the authentication information with a plurality of the vehicle control apparatuses while maintaining an adequate level of security.

It is an object of the present disclosure to enable a portable communication apparatus capable of being authenticated with respect to a vehicle control apparatus, the vehicle control apparatus, and a vehicle control system including the portable communication apparatus and the vehicle control apparatus to exchange, for example, authentication information with a plurality of the vehicle control apparatuses while maintaining an adequate level of security.

To achieve the above object, according to an example of the present disclosure, a portable communication apparatus is provided to be capable of communicating with a plurality of vehicle control apparatuses that respectively control a plurality of vehicles, and capable of achieving authentication with respect the vehicle control apparatuses. The portable communication apparatus includes an authentication information change section and a post-change communication section. The authentication information change section communicates with a first vehicle control apparatus that is one of the plurality of vehicle control apparatuses, by using a predefined first communication technique, to change authentication information that is used in the first vehicle control apparatus to authenticate the portable communication apparatus. Upon receipt of a notice indicative of having changed the authentication information from the first vehicle control apparatus, the post-change communication section communicates with a second vehicle control apparatus that is one of the plurality of vehicle control apparatuses and different from the first vehicle control apparatus, by using a second communication technique that is different from the first communication technique.

That is, the portable communication apparatus according to the example of the present disclosure communicates with the first vehicle control apparatus in order to overwrite the authentication information recorded in the first vehicle control apparatus, register new authentication information, delete registered authentication information, or otherwise change the authentication information, and then communicates with the second vehicle control apparatus upon completion of the above authentication information change.

The above-described portable communication apparatus communicates with the second vehicle control apparatus upon completion of an authentication information change in the first vehicle control apparatus. This configuration provides improved security as compared to a configuration where communication is constantly established. Further, the use of different communication techniques provides a higher level of security than the use of a single communication technique. The authentication information can therefore be exchanged with a plurality of the vehicle control apparatuses while maintaining an adequate level of security.

According to another example of the present disclosure, the present disclosure may be configured as a vehicle control apparatus or as a vehicle control system that includes a portable communication apparatus and a vehicle control apparatus.

EMBODIMENTS FOR CARRYING OUT INVENTION

Embodiments of the present disclosure will now be described with reference to the accompanying drawings.

A vehicle control system1according to an embodiment of the present disclosure is capable of providing vehicle control by establishing communication for authentication between a UID (user identification device)40, which is a portable instrument possessed by a user, and BCMs (body control modules)10a,10b, which are respectively mounted in two vehicles. Particularly, the vehicle control system1according to the present embodiment is adapted so that, if vehicle information for authentication is changed in one BCM, the associated vehicle information can be changed in the other BCM by performing a single process.

In the present application, the word “information” is used not only as an uncountable noun but also as a countable noun.

More specifically, as inFIG. 1, the vehicle control system1includes the BCMs10a,10b, the UID40, a registration tool60, and RFTs (radio-frequency transceivers)30a,30b.

The BCMs10a,10bare respectively mounted in different vehicles and used to authenticate the UID40. When the authentication is successful, the BCMs10a,10btransmit an operation permission signal to a vehicle's drive apparatus (for example, an engine control apparatus (unshown)). In other words, the UID40functions as a vehicle's wireless key (portable instrument), and the BCMs function as an authentication apparatus for the wireless key.

The RFTs30a,30bare respectively incorporated in the BCMs10a,10b. The BCMs10a,10band the registration tool60are configured as a computer (microcomputer) having, for example, a CPU and a memory (unshown).

Various registration modes61are recorded in the registration tool60and used to select one registration mode. When the user selects one of the registration modes61while the registration tool60is connected to a BCM (BCM [2]10bin the present example), a command for changing the vehicle information is outputted to the connected BCM.

The BCMs10a,10beach function as a registration mode selection section12, a registration management section13, a registration control section14, an immobilizer transmission/reception request section15, and an RF transmission/reception request section16. Further, secret keys17and vehicle information18are recorded in the BCMs10a,10b. In the drawings, the immobilizer is abbreviated to “immobi”.

When the registration tool60is connected to BCM [2]10b, the registration mode selection section12selects a process from prepared programs on the basis of a mode selected from the registration tool60, and performs the selected process. The present embodiment will be described mainly with reference to a process of changing authentication information (vehicle information). A process of achieving authentication with respect to the UID40and transmitting the operation permission signal will not be described in detail. A well-known technology can be applied to the process of achieving authentication with respect to the UID40and transmitting the operation permission signal.

The registration management section13, for example, reads or writes the vehicle information18and reads the secret keys17on the basis of a process performed by the registration mode selection section12.

The registration control section14manages the transmission and reception of data on the basis of the function of the registration mode selection section12. When the data is to be transmitted or received, the registration control section14provides highly confidential communication by performing encryption or decryption through the use of one of a plurality of secret keys recorded in a recording area for the secret keys17.

The immobilizer transmission/reception request section15manages the operation of an interface that manages the transmission and reception of data for LF (low-frequency) communication. More specifically, the immobilizer transmission/reception request section15communicates with the UID40to let the BCMs10a,10bfunction as a well-known immobilizer, and exchanges data (update the vehicle information) about registration for functioning as an immobilizer.

The RF transmission/reception request section16manages the operation of an interface that manages the transmission and reception of data for RF (radio-frequency) communication. More specifically, RF transmission/reception request section16exchanges data (update the vehicle information) about registration for functioning as an immobilizer.

The BCMs10a,10binclude LFICs20a,20b, which are circuits for LF communication, and a communication driver22, which communicates with the RFTs30a,30b. The LFICs20a,20bare disposed between LF antennas25a,25band microcomputers11a,11b, and function as an immobilizer transmission/reception control section21that transmits data through LF communication in compliance with a transmission instruction from the microcomputers11a,11band transmits data received through the LF antennas25a,25bto the microcomputers11a,11b.

The RFTs30a,30binclude a communication driver31, an RFIC32, and an RF antenna34. The communication driver31communicates with communication drivers for the BCMs10a,10b, and other apparatuses. The RFIC32functions as an RF transmission/reception control section33that establishes RF communication to transmit and receive data through the RF antenna34.

The UID40includes an LF antenna41, an RF antenna42, an RFIC43, and an LFIC50. The RFIC43is configured as a circuit that transmits or receives data through the RF antenna42in compliance with an instruction from the LFIC50.

The LFIC50functions as an immobilizer transmission/reception control section51, a registration control section52, and a registration management section53. These functional sections are equivalent to the immobilizer transmission/reception control section21, registration control section14, and registration management section13in the BCMs10a,10b.

Further, the LFIC50records secret keys54and vehicle information55. The secret keys54and the vehicle information55are equivalent to the secret keys17and the vehicle information in the BCMs10a,10b. The recorded vehicle information55includes vehicle information56about vehicle [1] (BCM [1]10a) and vehicle information57about vehicle [2] (BCM [2]10b).

[Processes of Present Embodiment]

In the vehicle control system1configured as above, BCM [2]10bperforms an overwrite registration process illustrated inFIG. 2.

It is noted that a flowchart or the processing of the flowchart in the present application includes sections (also referred to as steps), each of which is represented, for instance, as S110. Further, each section can be divided into several sub-sections while several sections can be combined into a single section. Furthermore, each of thus configured sections can be also referred to as a device, module, or means. Each or any combination of sections explained in the above can be achieved as (i) a software section in combination with a hardware unit (e.g., computer) or (ii) a hardware section (e.g., integrated circuit, hard-wired logic circuit), including or not including a function of a related apparatus; furthermore, the hardware section may be constructed inside of a microcomputer.

The overwrite registration process is performed when the user replaces an old vehicle (with a newly purchased vehicle). This process is performed to register (overwrite) key information about the UID40in the new vehicle (BCM [2]10b) and delete the key information in the old vehicle (BCM [1]10a).

The overwrite registration process by BCM [2]10bis initiated when a vehicle in which BCM [2]10bis mounted is turned on, and subsequently repeated at fixed time intervals. In the overwrite registration process, a check is performed to determine whether an overwrite registration request is issued from the registration tool60to BCM [2]10b(S110), as inFIG. 2.

The registration tool60includes a display63and a manipulation section64as inFIG. 3. The display63displays an image indicative of selectable registration modes. The manipulation section64enables the user to select a registration mode. The user is supposed to select and execute one of the registration modes displayed on the display63.FIG. 3depicts four registration modes, namely, (1) new key registration (no key is registered in the vehicle), (2) new key additional registration (a key is registered in the vehicle), (3) overwrite key registration (overwriting a registered key), and (4) additional vehicle key registration (registering a registered key in another vehicle).

In S110, when the user selects “3. Overwrite Key Registration” from the display63, it is determined that an overwrite registration request is issued. If the overwrite registration request is not issued (S110: NO), S110is repeated.

If the overwrite registration request is issued (S110: YES), a response indicative of the reception of the overwrite registration request (reception OK) is returned to the registration tool60(S120). Next, the UID40is requested to start overwrite registration through immobilizer communication (encrypted LF communication) (S130).

A check is performed to determine whether a signal indicating that overwrite registration can be started (start OK) is received from the UID40(S140). If such a signal is not received (S140: NO), a check is performed to determine whether a signal indicating that there is no registered vehicle information is received from the UID40(S150). If such a signal is not received (S150: NO), processing returns to S120.

If the signal indicating that there is no vehicle information is received (S150: YES), normal immobilizer communication is established with the UID40to perform conventional common new key registration (vehicle information registration) (S160). In other words, vehicle authentication information for achieving authentication with respect to the UID40(part of wake ID [2]) and traveled distance [2] are transmitted to the UID40. Further, the key information (part of wake ID [2]) in the UID40is acquired. Mutual registration is then performed to achieve authentication by sharing the informations.

Upon completion of the above-described processing, the overwrite registration by BCM [2]10bterminates. If the signal indicating that overwrite registration can be started (start OK) is received from the UID40in S140(S140: YES), the vehicle information (vehicle authentication information and traveled distance [2]) is transmitted to the UID40(S210), and then a check is performed to determine whether the key information is received from the UID40(S220).

If the key information is not received (S220: NO), processing returns to S210. If, by contrast, the key information is received (S220: YES), the existing key information is overwritten by the received key information for registration purposes (S225). More specifically, the key information registered in BCM [2]10bis deleted to register the newly received key information.

A check is performed to determine whether an overwrite registration completion notice indicative of the completion of overwrite registration in the UID40is received from the UID40(S230). If the overwrite registration completion notice is not received (S230: NO), processing returns to S210.

If the overwrite registration completion notice is received (S230: YES), the UID40is requested to delete information recorded in BCM [1]10a(S240). Next, a check is performed to determine whether a deletion completion notice indicative of the deletion of the information is received from the UID40(S250).

If the deletion completion notice is not received (S250: NO), S250is repeated. If, by contrast, the deletion completion notice is received (S250: YES), the overwrite registration process by BCM [2]10bterminates.

As inFIG. 4, the UID40performs an overwrite registration process that corresponds to the overwrite registration process by BCM [2]10b. The overwrite registration process by the UID40starts, for example, on a periodic basis.

In the overwrite registration process by the UID40, a check is performed to determine whether an overwrite registration start request is received from BCM [2]10bthrough immobilizer communication, as inFIG. 4(S310). If the overwrite registration start request is not received (S310: NO), the overwrite registration process terminates.

If the overwrite registration start request is received (S310: YES), a check is performed to determine whether overwrite registration can be started (S320). The overwrite registration can be started when relevant conditions are satisfied, that is, when the vehicle information is already registered and an operating voltage (battery voltage) for the UID40is adequate.

If there is a problem with starting the overwrite registration (S320: NO), a check is performed to determine whether there is registered vehicle information (S330). If there is registered vehicle information (S330: YES), processing returns to S310.

If there is no registered vehicle information (S330: NO), normal immobilizer communication is established with BCM [2]10bto perform new registration (vehicle information registration) in a normal manner (S340). Upon completion of such a new registration, the overwrite process by the UID40terminates.

If there is no problem with starting the overwrite registration (S320: YES), a signal indicating that the overwrite registration can be started (start OK) is returned to BCM [2]10b(S350). Next, a check is performed to determine whether vehicle information is received from BCM [2]10b(S360).

If the vehicle information is not received (S360: NO), processing returns to S360. If, by contrast, the vehicle information is received (S360: YES), key information is transmitted to BCM [2]10b(S370) in order to perform the overwrite registration (S380). This overwrite registration is a process of overwriting the vehicle information (particularly wake ID [2] and traveled distance [2]) in vehicle [2].

An overwrite registration completion notice is transmitted to BCM [2]10b(S390), and then a check is performed to determine whether a deletion request for deleting information registered in BCM [1]10ais received (S410). If the deletion request is not received (S410: NO), S410is repeated.

If the deletion request is received (S410: YES), a signal indicative of the start of a process relevant to the deletion request (start OK) is transmitted to BCM [2]10b(S420), and then an information deletion request is transmitted to BCM [1]10athrough RF communication (S430). Subsequently, a check is performed to determine whether a deletion completion notice is received from BCM [1]10a(S440).

If the deletion completion notice is not received (S440: NO), processing returns to S430. If, by contrast, the deletion completion notice is received (S440: YES), the overwrite registration process by the UID40terminates.

BCM [1]10aperforms an overwrite registration process that corresponds to the overwrite registration process by the UID40. The overwrite registration process by BCM [1]10ais initiated when a vehicle in which BCM [1]10ais mounted is turned on, and subsequently repeated at fixed time intervals.

In this process, a check is performed to determine whether an information deletion request (a request for deleting information recorded in BCM [1]10a) is received from the UID40(RFT30a,30b) (S510). If the information deletion request is not received (S510: NO), S510is repeated.

If the information deletion request is received (S510: YES), information (key information) about the UID40, which is registered as the vehicle information, is deleted (S520). A deletion completion notice is then transmitted to the UID40through RF communication (S530) to terminate the overwrite registration process by BCM [1]10a.

A multiple registration process will now be described. This process corresponds to “4. Additional Vehicle Key Registration” (additional registration request) of the registration tool60. The earlier-described overwrite registration process is used when one vehicle is to be replaced by another. However, the multiple registration process is used when a vehicle possessed by the user is to be added. Particularly, in the multiple registration process, vehicle information about a new vehicle (BCM [1]10a) is additionally registered to permit a user possessing a certain other vehicle (BCM [2]10b) to use the new vehicle with one UID40.

The multiple registration process by BCM [2]10bis initiated when a vehicle in which BCM [2]10bis mounted is turned on, and subsequently repeated at fixed time intervals. Further, the multiple registration process is performed in parallel with the earlier-described overwrite registration process.

In the multiple registration process, a check is performed to determine whether an additional registration request is issued from the registration tool60to BCM [2]10b(S610). If the additional registration request is not issued (S610: NO), S610is repeated.

If the additional registration request is issued (S610: YES), a signal indicative of the reception of the additional registration request (reception OK) is returned to the registration tool60(S620). Subsequently, the UID40is requested to start additional vehicle registration by establishing immobilizer communication (S630).

A check is performed to determine whether a signal indicating that additional vehicle registration can be started (start OK) is received from the UID40(S640). If such a signal is not received (S640: NO), a check is performed to determine whether a signal indicating that there is no registered vehicle information is received from the UID40(S650). If such a signal is not received (S650: NO), processing returns to S620.

If the signal indicating that there is no registered vehicle information is received (S650: YES), the multiple registration process by BCM [2]10bterminates.

If the signal indicating that additional vehicle registration can be started (start OK) is received from the UID40in S640(S640: YES), the UID40is requested to update the vehicle information (S670). Subsequently, a check is performed to determine whether a signal permitting the start of update (start OK) is received from the UID40(S680).

If the signal permitting the start of update is not received (S680: NO), processing returns to S670. If, by contrast, the signal permitting the start of update is received (S680: YES), a check is performed to determine whether an update completion notice is received from the UID40(S690).

If the update completion notice is not received (S690: NO), S690is repeated. If, by contrast, the update completion notice is received (S690: NO), the vehicle information is transmitted to the UID40(S720), and then a check is performed to determine whether key information (including vehicle information about BCM [1]10a) is received from the UID40(S730).

If the key information is not received (S730: NO), processing returns to S720. If, by contrast, the key information is received (S730: YES), a key information update is performed (S740). In other words, newly received key information is registered without deleting the key information registered in BCM [2]10b.

The key information includes the vehicle information about BCM [1]10aso that BCMs10a,10bshare mutual vehicle information. Further, a storage area is generated for the registration of new vehicle information18(vehicle information about BCM [1]10a).

Upon completion of the above steps, the multiple registration process by BCM [2]10bterminates.

The UID40performs a multiple registration process that corresponds to the multiple registration process by BCM [2]10b. The multiple registration process by the UID40starts, for example, on a periodic basis.

In the multiple registration process by the UID40, a check is performed inFIG. 7to determine whether an additional vehicle registration start request is received from BCM [2]10bthrough immobilizer communication (S810). If the additional vehicle registration start request is not received (S810: NO), the multiple registration process terminates.

If the additional vehicle registration start request is received (S810: YES), a check is performed to determine whether or not to start multiple registration (S820). The overwrite registration can be started when relevant conditions are satisfied, that is, when the vehicle information is already registered and the operating voltage (battery voltage) for the UID40is adequate.

If there is a problem with starting the multiple registration (S820: NO), a check is performed to determine whether there is registered vehicle information (S830). If there is registered vehicle information (S830: YES), processing returns to S810.

If there is no registered vehicle information (S830: NO), a signal indicating that no vehicle information is found is returned to BCM [2]10b(S835). If there is no problem with starting the multiple registration in S820(S820: YES), a signal indicating that the multiple registration can be started (start OK) is returned to BCM [2]10b(S825). Next, a check is performed to determine whether an update request is received from BCM [2]10b(S840).

If the update request is not received (S840: NO), S840is repeated. If, by contrasts, the update request is received (S840: YES), a signal indicating that the update can be performed (start OK) is returned to BCM [2]10b(S850).

An update request for the update of vehicle information is issued to BCM [1]10athrough RF communication (S870). A check is then performed to determine whether the vehicle information is received from BCM [1]10a(S880).

If the vehicle information is not received from BCM [1]10a(S880: NO), processing returns to S870. If, by contrast, the vehicle information is received from BCM [1]10a(S880: YES), an update completion notice indicative of the completion of update preparation is transmitted to BCM [2]10b(S890).

A check is performed to determine whether vehicle information is received from BCM [2]10b(S900). If the vehicle information is not received (S900: NO), S900is repeated. If, by contrast, the vehicle information is received (S900: YES), key information (including the vehicle information about BCM [1]10a) is transmitted to BCM [2]10b(S910), and additional vehicle registration is performed locally (S915).

In the additional vehicle registration process, the vehicle information about BCM [1]10ais registered in the UID40. After the vehicle information is registered in this manner, the registered vehicle information is transmitted as the key information when authentication is to be achieved with respect to BCMs10a,10b.

A registration completion notice is transmitted to BCM [2]10b(S920), and then additional vehicle registration information is transmitted to BCM [1]10athrough RF communication (S930). Here, the additional vehicle registration information is the vehicle information about BCM [2]10b.

A check is performed to determine whether an additional registration information OK notice indicative of the completion of additional registration is received from BCM [1]10a(S940). If the additional registration information OK notice is not received (S940: NO), processing returns to S930.

If the additional registration information OK notice is received (S940: YES), the multiple registration process by the UID40terminates.

BCM [1]10aperforms a multiple registration process that corresponds to the multiple registration process by the UID40. The multiple registration process by BCM [1]10ais initiated when a vehicle in which BCM [1]10ais mounted is turned on, and subsequently repeated at fixed time intervals.

In this process, a check is performed as inFIG. 8to determine whether an update request is received from the UID40(RFT30a,30b) (S1010). If the update request is not received (S1010: NO), S1010is repeated.

If the update request is received (S1010: YES), the locally possessed vehicle information is transmitted to the UID40(S1020). Next, a check is performed to determine whether additional vehicle registration information is received from the UID40(RFT30a,30b) (S1030).

If the additional vehicle registration information is not received (S1030: NO), processing returns to S1020. If, by contrast, the additional vehicle registration information is received (S1030: YES), the vehicle information is changed based on the received additional vehicle registration information (S1040), and then an additional registration information OK signal (additional registration completion) indicative of the completion of additional registration is transmitted to the UID40(S1050). This terminates the multiple registration process performed by BCM [1]10a.

[Advantageous Effects of Present Embodiment]

The vehicle control system1, which has been described in detail above, includes BCM [1]10a, BCM [2]10b, and the UID40. BCM [1]10aand BCM [2]10bis used to control a vehicle. The UID40is possessed by the user and used to achieve authentication with respect to BCM [1]10aand BCM [2]10b.

BCM [1]10aand BCM [2]10b, which are mounted in a vehicle, control the vehicle when authentication is achieved with respect to the UID40possessed by the user. Further, BCM [1]10aand BCM [2]10bacquire authentication information from the UID40through predefined LF communication, change locally possessed authentication information, and additionally establish RF communication, which is different from the LF communication. Moreover, BCM [1]10aand BCM [2]10bchange the locally possessed authentication information upon receipt of an authentication information change command that is used to change the authentication information for achieving authentication with respect to the UID40through RF communication.

The UID40establishes LF communication with BCM [2]10bin order to change the authentication information for authenticating the UID40with respect to BCM [2]10b. Upon receipt of a notice indicative of the authentication information change from BCM [2]10b, the UID40establishes RF communication, which is different from the LF communication, in order to communicate with BCM [1]10a, which is different from BCM [2]10b.

In other words, the UID40according to the present embodiment communicates, with BCM [2]10bin order to overwrite or delete the authentication information recorded in BCM [2]10b, register new authentication information in BCM [2]10b, or otherwise change the authentication information in BCM [2]10b. Upon completion of such a change, the UID40communicates with BCM [1]10a.

As above, the vehicle control system1communicates with BCM [1]10aupon an authentication information change in BCM [2]10b. Therefore, the vehicle control system1provides improved security as compared to a configuration where communication is established at all times. Further, as the communication technique is changed in this instance, the resulting level of security is higher than when a single communication technique is used. Consequently, the authentication information can be exchanged with a plurality of BCMs, namely, BCM [1]10aand BCM [2]10b, while maintaining an adequate level of security.

The UID40in the vehicle control system1transmits the authentication information change command that changes the authentication information for authenticating the UID40with respect to BCM [1]10a.

As the vehicle control system1is configured so that the authentication information change command is transmitted to BCM [1]10a, the authentication information change in a plurality of BCMs, namely, BCM [1]10aand BCM [2]10b, can be completed in a single process.

The UID40in the vehicle control system1transmits the authentication information change command that overwrites the authentication information registered in BCM [2]10bwith the authentication information for the UID40and deletes the authentication information registered in BCM [1]10a.

When a vehicle in which BCM [1]10ais mounted is to be replaced by a newly purchased vehicle in which BCM [2]10bis mounted, the vehicle control system1makes it easy to change the registered authentication information.

The UID40in the vehicle control system1registers the authentication information for the UID40in addition to the authentication information registered in BCM [2]10b. Further, the UID40transmits the authentication information change command that registers the authentication information for the UID40in addition to the authentication information registered n BCM [1]10a.

The vehicle control system1is capable of additionally registering the authentication information for the UID40in a vehicle in which authentication information is already registered. Besides, the vehicle control system1is configured so that RF communication provides longer-distance communication than LF communication.

In other words, in-vehicle short-distance communication is used in order to maintain an adequate level of security when communication is to be established to change the authentication information in BCM [2]10b. Meanwhile, for the communication with BCM [1]10a, an adequate communication distance is provided to be able to communicate with BCM [1]10afrom a host vehicle. Consequently, the vehicle control system1is capable of providing increased work efficiency when the UID40is disposed in a vehicle in which BCM [2]10bis mounted.

The vehicle control system1adopts communication techniques currently available for vehicles without having to change the maximum communication distance that varies from one communication technique to another.

The present disclosure is not to be interpreted as limited to the foregoing embodiment. Further, an exemplary configuration obtained by eliminating some elements in the configuration of the foregoing embodiment without being unable to achieve the object of the present disclosure also provides an embodiment of the present disclosure. Furthermore, an exemplary configuration obtained by combining the above-mentioned embodiments as appropriate also provides an embodiment of the present disclosure.

The UID40in the above-described vehicle control system1transmits a command for changing the authentication provided by BCM [1]10awhen the information about authentication with respect to BCM [2]10bis changed. However, an alternative would be to simply notify BCM [1]10aof the change in the information about authentication with respect to BCM [2]10b. In such an alternative embodiment, a notice process may be performed in place of processing in S240and S250, which are depicted inFIG. 2.

In the above-mentioned alternative embodiment, the vehicle control system1transmits a change in the information about authentication with respect to BCM [2]10bto BCM [1]10a. This enables BCM [1]10ato make a backup of the change in the information about authentication.

BCM [1]10aand BCM [2]10bin the foregoing embodiments are also referred to as a vehicle control apparatus. The UID40in the foregoing embodiments is also referred to as a portable communication apparatus. LF communication in the foregoing embodiments is also referred to as a first communication technique. RF communication in the foregoing embodiments is also referred to as a second communication technique.

Processing S110to S250and S610to S730in the foregoing embodiments is also referred to as an authentication acquisition and change section. Processing S360to S390and S910is also referred to as an authentication information change section. Processing S430, S440, and S930is also referred to as a post-change communication section. Processing S510to S530and S1010to S1050is also referred to as a second-technique communication section.

Further, processing step S1040in the foregoing embodiments is also referred to as a command acquisition and change section.