Local operation remote cancellation authorizing method and system under remote operation

When a local operation is carried out on a vehicle, a local operation record is stored in a storage section of a remote operation control master unit and a storage section of a smart entry key. When a remote operation of canceling the local operation is carried out, the local operation record stored in the smart entry key is transmitted to the vehicle through a cellular phone. The local operation record received by an in-vehicle communication device is compared with the local operation record stored in the storage section of the remote operation control master. When the comparison result indicates the agreement between the local operation records, the authority for canceling the local operation is given.

CROSS REFERENCE TO RELATED APPLICATION

This application is based on and incorporates herein by reference Japanese Patent Application No. 2005-182458 filed on Jun. 22, 2005.

FIELD OF THE INVENTION

The present invention relates to local operation/remote cancellation authorizing method and system, and particularly to method and system for authorizing cancellation of a local operation by a remote operation e.g., when a local operation executed on a vehicle is canceled by a remote operation.

In a remote notification service, when an abnormality such as an unexpected start of an engine, a forced opening of a door or the like occurs in a vehicle, this abnormality is notified to a user by mail, a telephone call or the like. In addition, in a remote operation service, a user (e.g., an owner of a vehicle or a person who is allowed to use the vehicle) carries out an operation such as on/off engine start, turn-on/turn-off of a hazard light, lock/unlock of doors, opening/closing of windows or the like on the vehicle by means of a remote operating unit such as a cellular phone or the like from a remote place.

The operations such as the on/off engine start, the turn-on/turn-off of the hazard light, the lock/unlock of the doors, the opening/closing of the windows, etc. on the vehicle are also carried out with intention by a person (local operator) who actually gets in a vehicle and drives the vehicle, and thus persons other than the local operator concerned should not cancel the operations (local operations) which are locally carried out by the local operator. However, with respect to a vehicle for which remote operation is allowed, local operations are allowed to be canceled irrespective of the intention of the local operator through an operation (remote operation) by a person (remote operator) such as the owner of the vehicle or the like at a remote place away from the vehicle. Therefore, even in a situation that the local operation must be continued, the local operation is allowed to be canceled by the remote operation (e.g., JP-A-2004-102940).

However, it is impossible for a remote operator at a remote place to cancel the local operation under the condition that the remote operator understands the local operator's intention. Thus, various drawbacks will occur if cancellation of the local operation through the remote operation is allowed without limitation.

For example, in one case, a vehicle owner's spouse carries out a local operation of turning on the start of an engine with an intention of using the vehicle early in the morning in winter, but the owner of the vehicle carries out a remote operation of turning off the start of the engine from a remote place because he does not use the vehicle in the morning. The wife who is about to go out cannot use the vehicle with the engine warmed up sufficiently.

Furthermore, when a local operation of turning on a hazard light of a vehicle is carried out, a local operator recognizes that the vehicle is under an abnormal state and thus carries out the local operation of turning on of the hazard light with an intention of preventing any person from carelessly approaching the vehicle. Accordingly, if the owner of the vehicle turns off the hazard light from a remote place by the remote operation without understanding the abnormal situation, some disadvantage may arise. Particularly when the hazard light is turned on, there may be a legal provision of prohibiting any person other than the person turning on the hazard light from turning off the hazard light. Therefore, this cancellation by the remote operation will result in violation of the regulation.

SUMMARY OF THE INVENTION

An object of the present invention is to provide a local operation cancellation authorizing method and system, in which only a local operator is authorized to cancel a local operation when an attempt is made to cancel the local operation by a remote operation.

According to an aspect of the present invention, a local operation record is stored in a vehicle and a portable unit, when a local operation is carried out in a vehicle. The local operation record stored in the portable unit is transmitted to the vehicle, when a remote operation for canceling the local operation is carried out by a remote unit. An authority for canceling the local operation is given, when the local operation records transmitted from the portable unit and stored in the vehicle are in agreement, by comparing the local operation records.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

First Embodiment

Referring first toFIG. 1, a local operation cancellation authorizing system under remote operation is constructed with plural local operation switches10A,10B, . . . ,10N, plural electric loads20A,20B, . . . ,20N, plural electric control units30A,30B, . . . ,30N, an in-vehicle local area network (LAN)40, a remote operation control master50and an in-vehicle communication device60. Those are provided in a vehicle1. The system is further constructed with a smart entry key70, a cellular phone80and a communication network90, which are provided outside the vehicle1. The smart entry key70and the cellular phone80are carried by a user, etc. and hence are brought into the vehicle1when the user is in the vehicle1.

The local operation switches10A,10B, . . . ,10N may be ON/OFF switches for a start of the engine, a turn-on/turn-off switch of a hazard light, a lock/unlock switch of doors, an open/close switch of windows, etc. They are connected to the respective electric control units30A,30B, . . . ,30N corresponding to an engine system, a body system, a security system, etc.

The electrical loads20A,20B, . . . ,20N may be a fuel injector of the engine, a hazard light, a door lock motor, a window motor, etc., in which the ON/OFF is controlled by the local operation switches10A,10B, . . . ,10N.

The electrical control units30A,30B, . . . ,30N are respectively provided for every function of the engine system, the body system, the security system, etc., and they are connected to the in-vehicle LAN40to mutually communicate with one another.

The in-vehicle LAN40may be constructed by wires or optical fibers, and a communication system such as a body electronic area network (BEAN), a controller area network (CAN), a media oriented system transport (MOST), a local interconnect network (LIN) or the like may be used.

The remote operation control master50is a device for relating the ECUs30A,30B, . . . ,30N and the in-vehicle communication device60, and is equipped with a storage section (S)51for storing a local operation record. The remote operation control master50may be installed in any one of the electric control units30A,30B, . . . ,30N.

A data communication module (DCM) of a code division multiple access (CDMA) system or the like may be assumed for the in-vehicle communication device60. However, a cellular phone device or the like provided separately from the cellular phone80may be used.

The smart entry key70is a mobile terminal used for an electronic key system that can control the lock mechanism of each door, etc. of the vehicle1from a place away from the vehicle1. Each of the owner of the vehicle and the persons (for example, family) who are allowed to drive the vehicle by the owner of the vehicle owns the smart entry key70. The smart entry key70is equipped with a transmitting/receiving circuit therein. Identification codes (IDs, terminal identification information) each of which is specifically assigned every smart entry key70is stored in the transmitting/receiving circuit, and the ID code is output to the electronic control unit30of the security system. The smart entry key70is connectable to the remote control master50through communication wires or short-range wireless communication (or wired communication) such as Bluetooth (registered trademark) or the like, and performs a keyless door opening/closing function, a keyless immobilizer function, a keyless engine starter function, etc. Furthermore, the smart entry key70is equipped with a storage section71for storing a local operation record.

As well known, the cellular phone80has input keys, a liquid crystal display, a wireless circuit, etc. It communicates with the in-vehicle wireless communication device60through a communication network90. Furthermore, the cellular phone80contains a communicating section (not shown) adapted to a communication standard such as Bluetooth using 2.4 GHz band or the like. It is designed so that it can execute short-distance wireless communication with the smart entry key70. The cellular phone80may be an Internet Protocol (IP) cellular phone for transmitting data in packets, etc. through the wireless local area network (LAN) via the Internet.

The connection between the smart entry key70and the cellular phone80is not limited to the communication section that can perform the short-distance wireless communication. For example, it may be a communicating section for wired connection or direct connection. The communication network90is not limited to the cellular phone network, but it may be the Internet using IP (Internet Protocol), a public telephone network or the like.

The local operation record stored in the storage section51of the remote operation control master50and the storage section71of the smart entry key70may be formatted as shown inFIG. 2. The local operation record includes the ID code of the smart entry key70, the operation content of the local operation and the date and time of the local operation. With respect to the local operation record, in the case of the same operation content, the operation content of the latest date and time is overwritten and stored. The reason for this is as follows. That is, when the vehicle owner turns on the hazard light by the local operation and then the owner's spouse also takes the precaution of turning on the hazard light again by the local operation, the vehicle owner is prohibited from using his discretion in canceling the turn-on of the hazard light from a remote place by the remote operation.

In operation, when a user (owner of the vehicle1or a person who is allowed to use the vehicle1by the owner) gets into a vehicle1while owning the smart entry key70, the remote operation control master50connects to the smart entry key70by short-distance wireless communication (or wired communication) such as Bluetooth (registered trademark) or the like (Yes at step101). Specifically, the remote operation control master50in the vehicle1and the smart entry key70carried into the vehicle1communicate with each other at all times.

When the user-recognized connection state of the smart entry key70(the state that the user is in the vehicle1), for example, turns on the hazard switch serving as the local operation switch for turning on the hazard light (Yes at step102), the remote operation control master50stores into the storage section51of the remote operation control master50the local operation record when the local operation is carried out on the vehicle1(step103). Specifically, the remote operation control master50stores the ID code of the smart entry key70, the operation content of the local operation (turn-on of the hazard light) and the date and time as the local operation record into the storage section51of the remote operation control master50. When the local operation record of the same operation content has been already stored, the operation content is overwritten on the old operation content so that only the latest local operation record is maintained in the storage section51.

Next, the remote operation control master50instructs the storage section71of the smart entry key70to store the same local operation record (step104). Specifically, the ID code of the smart entry key70, the operation content (turn-on of the hazard light) of the local operation and the date and time of the local operation are stored as the local operation record into the storage section71of the smart entry key70. When the local operation record of the same operation content has been already stored, the operation content is overwritten on the old operation content so that only the latest local operation record is maintained in the storage section71.

Thereafter, the remote operation control master50repeats the steps103and104insofar as the local operation is repeated under the user-recognized connection state of the smart entry key70.

Subsequently, when the user (that is, the local operator) gets out of vehicle1while possessing the smart entry key70, the remote operation control master50is disconnected from the smart entry key70through the wireless communication or the wired communication (No at step101).

When the user wishes to cancel the local operation (turn-on of the hazard light) by the remote operation from outside of the vehicle1(Yes at step201), the local operation concerned being carried out by the user when he/she was in the vehicle, the user transmits the local operation record stored in the storage section71of the smart entry key70through the communication network90to the vehicle1by using his/her own cellular phone80(step202).

When the local operation record is received through the in-vehicle communication device60at the vehicle1(Yes at step301), the remote operation control master50compares the received local operation record with the local operation record stored in the storage section51of the remote operation control master50to determine whether both the local operation records are in coincidence with each other (step302).

If the comparison result indicates that both the local operation records are in coincidence with each other, the remote control master50determines that the local operator has requested the remote operation of canceling that local operation, and gives the authority for canceling the local operation to the cellular phone80(step303).

If the comparison result indicates that both the local operation records are not in coincidence with each other, the remote operation control master50determines that a person other than the local operator has requested the remote operation of canceling the local operation, and prohibits the remote cancel operation (step304). That is, the master50does not give any authority for remotely canceling the local operation to the cellular phone80.

The local operation record may have information other than the three record items (fields) such as the ID code, the operation content and the date and time shown inFIG. 2. For example, when storing items of the local operation record are set to only the operation content of the local operation and the date and time of the local operation as shown inFIG. 6, it may be hard to check whether the local operation record is the local operation record stored in the storage section71of the smart entry key70of the local operator. However, there is little probability that the local operations having the same operation content are carried out at the same date and time. Accordingly, by merely making the coincidence determination in the operation content and operation date and time of the local operation, it can be also found that the request is a remote operation request for canceling the local operation by the local operator.

Likewise, when storing items of the local operation record are set to only the ID code of the smart entry key70and the operation content of the local operation as shown inFIG. 7, it may become hard to check whether both the local operation records have the local operations carried out at the same date and time. However, there is little probability that the same local operator carries out local operations having the same operation content. Accordingly, by merely making the coincidence determination in the ID code of the smart entry key70and the operation content of the local operation, it can be also found that the request is a remote operation request for canceling the local operation by the local operator.

Furthermore, when the storing items of the local operation record are set to only the ID code of the smart entry key70and the date and time of the local operation as shown inFIG. 8, it may become hard to check whether the local operation record is a local operation record of the local operation having the same operation content. However, there is little probability that the local operations having the different operation contents are carried out at the same date and time. Accordingly, by merely making the coincidence determination in the ID code of the smart entry key70and the date and time of the local operation, it can be also found that the request is a remote request for canceling the local operation by the local operator from a remote place.

Second Embodiment

According to a second embodiment shown inFIG. 9, the smart entry key70in the first embodiment (FIG. 1) is replaced with the cellular phone80itself. The cellular phone80is equipped with a rewritable storage section (not shown) such as a flash ROM or the like therein. The operation of the second embodiment is substantially similar to the operation of the first embodiment.

Specifically, when the user (the owner of the vehicle or a person who is allowed to use the vehicle1by the owner) gets into the vehicle1while holding the cellular phone80, the remote operation control master50connects to the cellular phone80through wireless or wired communication (Yes at step101inFIG. 3).

When the user turns on, for instance, the hazard switch corresponding to the local operation switch for turning on the hazard light under the state that the user has the smart entry key70or the like (that is, under the state that it is recognized that the user gets in the vehicle) (Yes at step102), the remote operation control master50stores the cellular phone number (terminal identification information) of the cellular phone80, the operation content (turn-on of the hazard light) of the local operation, and the date and time, as the local operation record into the storage section51of the remote operation control master50(step103inFIG. 3).

Next, the remote operation control master50instructs storage of the cellular phone number of the cellular phone80, the operation content (turn-on of the hazard light) of the local operation, and the date and time, as the local operation record into the storage section of the cellular phone80(step104).

Thereafter, the remote operation control master50repeats the steps103and104insofar as the local operation is repeated under the connection state of the cellular phone80.

Subsequently, when the user (that is, the local operator) gets out of vehicle1while having the cellular phone80, the remote operation control master50is disconnected from the cellular phone80through the wireless or wired communication (No at step101).

When the user wishes to remotely cancel the local operation (the turn-on of the hazard light), which was carried out when the user got in the vehicle1, from the outside of the vehicle1by the remote cancel operation (step201), the user transmits the local operation record stored in the storage section of the cellular phone80to the vehicle1through the communication network90using the cellular phone80(step202).

When the local operation record concerned is received through the in-vehicle communication device60at the vehicle1(Yes at step301), the remote operation control master50compares the received local operation record with the local operation record stored in the storing portion51of the remote operation control master50(step302).

If the comparison result indicates coincidence between the local operation records, the remote operation control master50authorizes the user to cancel the local operation (step303).

If the comparison result indicates non-coincidence between the local operation records, the remote operation control master50prohibits or does not authorize the user to cancel the local operation (step304).

In the second embodiment, the cellular phone80serves as both a portable storage unit and a remote operating unit. However, for example, a personal digital assistance (PDA), a personal computer (PC), etc. which can connect to the communication network90may be used in place of the cellular phone80.

Furthermore, the cellular phone80is connected to the in-vehicle communication device60through the communication network90to transmit/receive the local operation record. However, in this communication style, the local operation record may be transmitted/received further via a relay device called an information center.

Still furthermore, by giving maximum level authority for remotely canceling the local operation to a specific smart entry key70, the cellular phone80or the like which serves as both the portable storage unit and the remote operating unit, these elements are given the authority for canceling the local operation even when the comparison result of the local operation records indicates non-coincidence. In this case, when a matter of urgency such as accident rescue, maintenance or the like occurs, the local operation can be canceled by a person who is not the local operator.

Further modification and alterations are also possible in the above embodiments.