Vehicle remote operation information provision device, vehicle-mounted remote operation information acquisition device, and vehicle remote operation system comprising these devices

In a vehicle remote operation system, when acquiring remote operation request information from a user of a vehicle 100, a server 210 in a command administration center 200 transmits access request information, requesting an access to the center 200 as a predetermined connection destination, to a command acquisition ECU 110a mounted on the vehicle 100. When acquiring the access request information transmitted from the center 200, the ECU 110a accesses to the center 200 as the predetermined connection destination connected to a network 400. Thus, the command information server 212 in the center 200 provides command information, corresponding to a remote operation command corresponding to a remote operation requested by the user of the vehicle 100, to the ECU 110a via the network 400. The ECU 110a then supplies the command information to the corresponding vehicle ECU 110 for allowing the vehicle 100 to operate as requested by the user.

TECHNICAL FIELD

The present invention relates to a vehicle remote operation information provision device that provides various information pieces including command information indicating a remote operation command for remotely operating a vehicle, a vehicle-mounted remote operation information acquisition device that is mounted on the vehicle and that acquires various information pieces including the remote operation command from an outside, and a vehicle remote operation system comprising these devices.

BACKGROUND ART

Recently, devices and systems of this type has been actively studied and proposed. For example, the patent document 1 described below describes a vehicle remote operation device that can use a power-saving mode and a simple-operation mode as a control system, according to need. In this conventional vehicle remote operation device, unit control means provided to a vehicle-mounted communication device that receives a wireless signal from a mobile communication device controls a door lock unit based on the wireless signal from the mobile communication device. The unit control means is configured to execute a switch operation control system for controlling the door lock unit based on the wireless signal transmitted from the mobile communication device by a switching operation of the mobile communication device and a switch non-operation control system for controlling the door lock unit based on the wireless signal transmitted from the mobile communication device according to a call signal continuously or intermittently transmitted from the vehicle-mounted communication device. In this conventional vehicle remote operation device, the control system can be switched between these control systems.

The patent document 2 described below describes a phone control system for an electric vehicle, the system being capable of managing a charging state and an air-conditioning state, even if the system is located at a place far apart from the vehicle. In the conventional phone control system for an electric vehicle, a phone controller forming an automobile telephone deciphers a code input made by a sound or tone signal from a mobile phone from a driver, and a charging controller and an air-conditioner controller start or stop an operation of an air-conditioner immediately or after a lapse of a predetermined time, in cooperation with each other based on the control of the phone controller.

The patent document 3 described below describes a vehicle including a remote control system and a remote operation device that can realize a remote operation of a vehicle-mounted device by arbitrating plural operation requests issued for this vehicle-mounted device. In this conventional vehicle including the remote control system and the remote operation device, a remote operation of the vehicle-mounted device is requested to the vehicle via a center from an operation terminal by the user of the vehicle according to the operation of the operation terminal by the user of the vehicle, whereby the remote operation of the vehicle-mounted device is executed. The system allows the vehicle to transmit local operation information and remote operation result information to the center, and when the center receives the request of the remote operation for the vehicle-mounted device from the operation terminal, the system allows the center to determine whether or not the remote operation for the vehicle-mounted device has to be requested to the vehicle based on the local operation information and the remote operation result information from the vehicle.

The patent document 4 described below describes a remote unlocking method, remote unlocking system, information processing device, and information processing program that can unlock an open/close section, provided to a vehicle, by a third person with security being assured and without deteriorating usability of an owner of the vehicle, in the case where the open/close section is unlocked by a remote control. In the conventional remote unlocking method, remote unlocking system, information processing device, and information processing program described above, when a request of unlocking the open/close section of the vehicle is transmitted to an information center from a terminal of the third person, the information center transmits an unlocking code for unlocking the open/close section to a vehicle-mounted device of the vehicle, under the condition in which a terminal of the owner transmits an unlocking permission of the open/close section of the vehicle to the information center, and the information center receives the unlocking permission.

PRIOR ART DOCUMENT

Patent Document

SUMMARY OF THE INVENTION

In the conventional devices and systems described above, the vehicle might be remotely operated according to the transmitted remote operation command, even when a malicious third person pretends to be an authorized owner (user) of the vehicle and transmits the remote operation command (instruction) to the vehicle, or even when the remote operation command is transmitted to the vehicle from a fake center. According to this, an undesirable situation that is not intended by the authorized owner (user) of the vehicle might occur on the vehicle.

The present invention has been accomplished in order to solve the above-described problems, and one of its objects is to provide a vehicle remote operation information provision device, and a vehicle-mounted remote operation information acquisition device, which surely realize a remote operation requested by an authorized user of a vehicle, and to provide a vehicle remote operation system comprising these devices.

In order to achieve the above-described object, the present invention provides a vehicle remote operation information provision device that provides various information pieces relating to a remote operation for a vehicle requested by a user of the vehicle, and that includes remote operation request information acquisition means, access request information transmission means, and remote operation command provision means.

Specifically, the remote operation request information acquisition means acquires remote operation request information indicating a request of a remote operation for the vehicle by the user of the vehicle. The access request information transmission means transmits access request information, which requests an access to a predetermined connection destination, to the vehicle based on the remote operation request information acquired by the remote operation request information acquisition means. The remote operation command provision means is provided to the connection destination accessed by the vehicle based on the access request information transmitted from the access request information transmission means, and provides command information indicating a remote operation command for realizing the remote operation requested by the user of the vehicle according to the access from the vehicle.

In this case, the vehicle remote operation information provision device according to the present invention can include communication means that realizes indirect communication with the vehicle through a predetermined network, or direct communication with the vehicle, wherein the access request information transmission means can transmit the access request information to the vehicle by using the communication means, and the remote operation command provision means provided to the connection destination can transmit the command information to the vehicle by using the communication means. More specifically, the access request information transmission means can transmit the access request information to the vehicle by using, for example, the indirect communication by the communication means, and the remote operation command provision means provided to the connection destination can transmit the command information to the vehicle by using, for example, the direct communication by the communication means.

In these cases, the connection destination to which the remote operation command provision means is provided can be, for example, a command administration center that is connected to a predetermined network to which the vehicle is connected, and that provides the command information by communication through the predetermined network, or an information terminal that is carried by the user of the vehicle, and that provides the command information by either one of the indirect communication with the vehicle through the predetermined network and the direct communication with the vehicle. In this case, the connection destination to which the remote operation command provision means is provided can include not only the command administration center and the information terminal but also a LAN constructed at home, a server provided on this LAN, a company network constructed in a company, and a server provided on this network.

In these cases, the remote operation command provision means can provide the command information after encrypting the command information with an encryption process.

In order to achieve the above-described object, the present invention provides a vehicle-mounted remote operation information acquisition device that is mounted on a vehicle for acquiring various information pieces, relating to a remote operation for the vehicle requested by a user of the vehicle, from an outside, and that includes access request information acquisition means and remote operation command acquisition means.

Specifically, the access request information acquisition means acquires access request information that is transmitted from the outside for requesting an access to a predetermined connection destination. The remote operation command acquisition means accesses to the connection destination based on the access request information acquired by the access request information acquisition means for acquiring command information, indicating a remote operation command for realizing the remote operation requested by the user of the vehicle, from the connection destination.

In this case, the vehicle-mounted remote operation information acquisition device according to the present invention can also include communication means that realizes indirect communication with the outside through a predetermined network, or direct communication with the outside, wherein the access request information acquisition means can acquire the access request information from the outside by using the communication means, and the remote operation command acquisition means can acquire the command information from the connection destination by using the communication means. More specifically, the access request information acquisition means can acquire the access request information from the outside by using, for example, the indirect communication by the communication means, and the remote operation command acquisition means can acquire the command information from the connection destination by using, for example, the direct communication by the communication means.

In these cases, the predetermined connection destination can be a command administration center that is connected to a predetermined network to which the vehicle is connected, and that provides the command information by communication through the predetermined network, or an information terminal that is carried by a user of the vehicle, and that provides the command information by either one of the communication through the predetermined network and the direct communication with the vehicle.

In these cases, the remote operation command acquisition means can acquire the command information by decrypting the command information, which is encrypted at the connection destination, with a decryption process.

In order to achieve the above-described object, the present invention provides a vehicle remote operation system including the vehicle remote operation information provision device and the vehicle-mounted remote operation information acquisition device.

Specifically, in the vehicle remote operation system according to the present invention, the vehicle remote operation information provision device can include remote operation request information acquisition means configured to acquire remote operation request information indicating a request of a remote operation for the vehicle by the user of the vehicle; access request information transmission means configured to transmit access request information, which requests an access to a predetermined connection destination, to the vehicle-mounted remote operation information acquisition device based on the remote operation request information acquired by the remote operation request information acquisition means; and remote operation command provision means that is provided to the connection destination accessed by the vehicle-mounted remote operation information acquisition device based on the access request information transmitted from the access request information transmission means, and that provides command information indicating a remote operation command for realizing the remote operation requested by the user of the vehicle according to the access from the vehicle-mounted remote operation information acquisition device. In the vehicle remote operation system according to the present invention, the vehicle-mounted remote operation information acquisition device can include access request information acquisition means configured to acquire the access request information that is transmitted from the access request information transmission means in the vehicle remote operation information provision device; and remote operation command acquisition means configured to access to the connection destination based on the access request information acquired by the access request information acquisition means for acquiring the command information from the remote operation command provision means in the vehicle remote operation information provision device.

Accordingly, in this vehicle remote operation system, the vehicle remote operation information provision device and the vehicle-mounted remote operation information acquisition device can include communication means that realizes indirect communication with each other through a predetermined network, or direct communication with each other. The access request information transmission means in the vehicle remote operation information provision device and the access request information acquisition means in the vehicle-mounted remote operation information acquisition device can transmit and receive the access request information by using the communication means, and the remote operation command provision means in the vehicle remote operation information provision device and the remote operation command acquisition means in the vehicle-mounted remote operation information acquisition device can transmit and receive the command information by using the communication means. Specifically, in this vehicle remote operation system, the access request information transmission means in the vehicle remote operation information provision device and the access request information acquisition means in the vehicle-mounted remote operation information acquisition device can transmit and receive the access request information by using the indirect communication by the communication means, and the remote operation command provision means in the vehicle remote operation information provision device and the remote operation command acquisition means in the vehicle-mounted remote operation information acquisition device can transmit and receive the command information by using the direct communication by the communication means.

In the vehicle remote operation system described above, the predetermined connection destination can be, for example, a command administration center that is connected to a predetermined network to which at least the vehicle-mounted remote operation information acquisition device is connected, and that provides the command information by communication through the predetermined network, or an information terminal that is carried by a user of the vehicle, and that provides the command information by either one of the communication through the predetermined network and the direct communication with the vehicle-mounted remote operation information acquisition device.

In the vehicle remote operation system described above, the remote operation command provision means in the vehicle remote operation information provision device can provide the command information after encrypting the command information with an encryption process, and the remote operation command acquisition means in the vehicle-mounted remote operation information acquisition device can acquire the command information by decrypting the command information, which is encrypted by the remote operation command provision means in the vehicle remote operation information provision device, with a decryption process.

In the vehicle remote operation system described above, the vehicle remote operation information provision device can include, for example, authentication means configured to authenticate a vehicle, to which the vehicle-mounted remote operation information acquisition device is mounted, with an access to the connection destination by the remote operation command acquisition means, and the vehicle-mounted remote operation information acquisition device can include, for example, authentication means configured to authenticate the vehicle remote operation information provision device with the transmission of the access request information from the access request information transmission means.

According to the configuration described above, when an authorized user requests a remote operation for a vehicle, or when the authorized user actually operates the vehicle with a remote operation, the vehicle remote operation information provision device can request that the vehicle to which the vehicle-mounted remote operation information acquisition device is mounted accesses to a predetermined connection destination. When the vehicle accesses to the predetermined connection destination according to this access request, the vehicle-mounted remote operation information acquisition device can acquire command information for realizing the remote operation requested by the authorized user.

The access request information acquisition means in the vehicle-mounted remote operation information acquisition device can acquire access request information that includes a connection destination, or acquire access request information that does not include the connection destination, from the access request information transmission means in the vehicle remote operation information provision device. In this case, when the access request information includes the connection destination, the remote operation command acquisition means can access to this connection destination, and when the access request information does not include the connection destination, the remote operation command acquisition means can access to the connection destination predetermined to the vehicle. When the access request information includes the connection destination, and the remote operation command acquisition means accesses to this connection destination, the authentication means in the vehicle-mounted remote operation information acquisition device and the authentication means in the vehicle remote operation information provision device can mutually authenticate with each other.

According to this configuration, the vehicle-mounted remote operation information acquisition device cannot acquire the command information (remote operation command), unless it accesses to the connection destination predetermined to the vehicle remote operation information provision device. Consequently, the vehicle cannot execute a remote operation command other than the command information (remote operation command) acquired from this connection destination. Accordingly, only the command information (remote operation command) provided from the predetermined connection destination is executed on the vehicle. With this configuration, even if a malicious third person other than the user pretends to be the user to unilaterally provide the command information (remote operation command), the improper command information (remote operation command) is not acquired by the vehicle-mounted remote operation information acquisition device. Accordingly, this configuration can surely prevent the vehicle from being operated by a remote operation intended by a third person (i.e., not intended by the authorized user).

BEST MODE FOR CARRYING OUT THE INVENTION

a. First Embodiment

Hereinafter, a vehicle remote operation system according to embodiments of the present invention will be described with reference to the drawings.FIG. 1is a schematic block diagram schematically illustrating a vehicle remote operation system including a vehicle remote operation information provision device and a vehicle-mounted remote operation information acquisition device according to the present invention.

The vehicle remote operation system according to the first embodiment includes a vehicle100that is to be remotely operated, a command administration center200serving as a vehicle remote operation information provision device that provides various information pieces, which include a remote operation command indicating the detail of the remote operation, to the vehicle100, and an information terminal300carried by a driver or a fellow passenger (hereinafter collectively referred to as a user) of the vehicle100. The vehicle100, the command administration center200, and the information terminal300are organically connected via a network400(e.g., the secure Internet, a dedicated network, etc.) such that the user can remotely operate the vehicle100.

As illustrated inFIG. 1, the vehicle100is provided with a plurality of electronic control units110(hereinafter referred to as vehicle ECUs110) for controlling the state of the vehicle. The vehicle ECUs110are connected to a CAN communication line120of a CAN (Controller Area Network) communication system such that they can input and output various signals with one another through the CAN communication line120. Each vehicle ECU110is mainly composed of a microcomputer including a CPU, a ROM, a RAM, etc. Each vehicle ECU110has a nonvolatile memory, an input/output interface, a drive circuit for driving various actuators using signals received from sensors, and others.

As one of the vehicle ECUs110connected to the CAN communication line120, a command acquisition ECU110ais provided as access request information acquisition means, remote operation command acquisition means, and authentication means, which form a vehicle-mounted remote operation information acquisition device that accesses to the command administration center200at the outside to acquire a remote operation command, and changes the state of the vehicle to the state according to this command, as described later. The nonvolatile memory in the command acquisition ECU110astores address information, such as an IP address of a predetermined (pre-specified) connection destination (the command administration center200in the first embodiment) accessed by the vehicle100, as described later. In the first embodiment, a door lock control ECU110bis also provided as the vehicle ECU110for controlling the state of the vehicle. The door lock control ECU110bcontrols a door lock device provided to a door, not illustrated, of the vehicle100to be locked or unlocked.

In addition, a data communication module130(hereinafter referred to as a DCM130) for communication with the command administration center200via the network400is connected to the CAN communication line120. The DCM130serves as communication means forming the vehicle-mounted remote operation information acquisition device. The DCM130includes an external communication control section131which indirectly sends and receives data to/from a later-described server210of the command administration center200via the network400; a primary control section132which sends various information pieces from the command administration center200to the command acquisition ECU110aand receives various information pieces from the command acquisition ECU110a, via the CAN communication line120; and a GPS unit133which detects the coordinates of the current position of the vehicle100on the basis of the radio waves from GPS satellites. With this configuration, the DCM130accesses (logs in) to the command administration center200via the network400by utilizing a mobile phone base station around the current position of the vehicle100, thereby being capable of making communication with the server210in the command administration center200.

A short-range communication control device140serving as communication means forming the vehicle-mounted remote operation information acquisition device is connected to the CAN communication line120for realizing short-range communication with the information terminal300. The short-range communication control device140is provided to directly communicate with the information terminal300. In the first embodiment, Bluetooth (registered trademark) is applied as the communication system. However, it is obvious that any other short-range wireless communication system such as Wi-Fi (registered trademark) can be applied as other communication systems.

An electric vehicle (EV) which includes a traction motor driven by electric power of a mounted battery, a hybrid vehicle (HV) that includes a traction motor and an internal combustion engine and that can charge a mounted battery, or a plug-in hybrid vehicle (PHV) that can be charged by a charger provided at the outside can be employed as the vehicle100applied to the vehicle remote operation system. However, the vehicle100may be a conventional vehicle which does not have a traction motor and which travels through use of power of the internal combustion engine. The vehicle100may be of any drive type.

The command administration center200is a facility that supplies (sends) access request information, which requests an access to the command administration center200that is a predetermined connection destination, and command information indicating a remote operation command for remotely operating the vehicle100, to the vehicle100according to a request for the remote operation from the user of the vehicle100. For this, the command administration center200includes the server210having a computer as a main component, as illustrated inFIG. 1. The server210includes a communication control section211serving as communication means that controls indirect communication with the vehicle100via the network400, a command information server212that forms remote operation request information acquisition means, access request information transmission means, and remote operation command provision means, a vehicle information server213that forms authentication means, and a user information server214.

The command information server212acquires command information, corresponding to the user's request for the remote operation, by utilizing a command information database215storing command information pieces such that they can be searched, and outputs the acquired command information to the communication control section211. The vehicle information server213authenticates the vehicle100used by the user by utilizing a vehicle ID information database216. The vehicle ID information database216stores vehicle ID information pieces (e.g., information corresponding to the registration number or chassis number of the vehicle, or a MAC address or phone number assigned to the DCM130) for specifying the vehicle100in such a manner that these information pieces can be searched. The user information server214authenticates the user using the vehicle100by utilizing a user ID information database217. The user ID information database217stores user ID information pieces for identifying the user (information corresponding to the user name, the phone number or MAC address of the information terminal300, the mail address, etc.) in such a manner that these information pieces can be searched. The vehicle ID information and the user ID information are stored in the vehicle ID information database216or the user ID information database217so as to be associated with each other, whereby one of the vehicle ID information and the user ID information can be specified by using the other one.

The information terminal300carried by the user includes an external communication control section301serving as communication means that is a communication interface used for the connection to the network400; a short-range communication control section302serving as communication means that is a communication interface for realizing short-range wireless communication, such as Bluetooth (registered trademark) or Wi-Fi (registered trademark); a GPS unit303that detects a current position of the information terminal300based on the radio waves from GPS satellites; a touch-panel-type liquid crystal display304which serves as a display device and an operating device; a primary control section305which is mainly composed of a microcomputer and is adapted to execute communication control and various application programs; and a nonvolatile memory306which stores various types of data such as application programs. Notably, for example, a cellular phone (e.g., a smartphone) or a tablet terminal having an external communication function can be employed as the information terminal300. In the present embodiment, a compact information terminal that can be carried by the user is employed. However, a personal computer that is installed in his/her house and can be connected to the network400or a notebook computer that the user can carry and can be connected to the network400can also be employed as the information terminal300.

The operation of the vehicle remote operation system thus configured according to the first embodiment, more specifically, the operations of the vehicle-mounted remote operation information acquisition device (specifically, the command acquisition ECU110a), the vehicle remote operation information provision device (specifically, the server210in the command administration center200), and the information terminal300, will be described with reference toFIG. 2. In the vehicle remote operation system according to the first embodiment, the user who is an authorized owner of the vehicle100remotely operates the vehicle100via the command administration center200by using the information terminal300.

Specifically, as illustrated inFIG. 2, the user firstly makes an access to the command administration center200connected to the network400by using the information terminal300. In this case, the user inputs the user ID information that is given beforehand for identifying the user, and transmits the user ID information to the command administration center200, by operating the touch-panel-type liquid crystal display304of the information terminal300. The user also inputs and transmits remote operation request information, indicating the operation of the vehicle100(hereinafter referred to as “requested operation”) requested (realized) by the remote operation, through the operation of the touch-panel-type liquid crystal display304of the information terminal300. Examples of the requested operation include a request for operations of various devices mounted on the vehicle100(specifically, an air-conditioning unit, door lock unit, light unit, and other units) and a request for an operation of collecting the state of the vehicle100(specifically, failure information such as diagnostic information including operating states (charged state) of various devices, such as a battery, mounted on the vehicle100).

In the command administration center200, the server210receives (acquires) the user ID information and the remote operation request information, which are transmitted from the information terminal300via the network400, by using the communication control section211. The server210temporarily stores the acquired user ID information and the remote operation request information into a memory not illustrated. The user information server214in the server210searches the user ID information database217with the user ID information acquired from the information terminal300, by utilizing the user ID information database217, thereby specifying (authenticating) the user. The vehicle information server213in the server210searches the vehicle ID information database216by using the user ID information authenticated by the user information server214to extract the vehicle ID information associated with the user ID information, and supplies the extracted vehicle ID information to the command information server212in the server210.

The command information server212transmits the access request information, which requests an access from the vehicle100to the command administration center200that is the predetermined connection destination, and center identification information (e.g., IP address) set beforehand for identifying the command administration center200, to the vehicle100having the vehicle ID information acquired from the vehicle information server213by using this vehicle ID information. The transmission of the center identification information is not essential for the embodiment (operation) of the present invention, but this is effective for preventing unnecessary communication by the vehicle100(command acquisition ECU110a).

When the command information server212transmits the access request information and the center identification information, the DCM130mounted on the vehicle100may not be started, so that the DCM130may not be capable of making communication. Therefore, the command information server212transmits start information via the network400by utilizing push-based communication that is an external trigger such as a sound signal or SMS (Short Message Service) to start the DCM130, and then, transmits the access request information and the center identification information to the vehicle100. When transmitting the access request information and the center identification information, the command information server212can also transmit type information indicating a type of the requested operation intended by the user (specifically, whether the requested information is an operation of each of various devices or a collecting operation of various information pieces, without including the remote operation command).

The primary control section132of the DCM130in the vehicle100acquires the access request information and the center identification information, which are transmitted through the external communication control section131. The primary control section132supplies the access request information and the center identification information to the command acquisition ECU110avia the CAN communication line120. When acquiring the access request information and the center identification information, the command acquisition ECU110arefers to the address information (IP address) stored beforehand in the nonvolatile memory in the command acquisition ECU110ato determine whether or not the IP address indicated by the center identification information matches (or is included in) the address information stored beforehand, in order to authenticate the command administration center200.

When authenticating that the command administration center200is the proper center, the command acquisition ECU110aacquires the address information that is stored in the nonvolatile memory for an access to the command administration center200in accordance with the access request information, and outputs connection request information, which requests the connection to the address indicated by the address information, to the primary control section132in the DCM130via the CAN communication line120together with the address information. In this case, when the type information is transmitted from the command administration center200, for example, the command acquisition ECU110acan select the address information, corresponding to the type information, out of the plural address information pieces stored in the nonvolatile memory according to the type information acquired via the DCM130, and output the selected information to the DCM130.

When the primary control section132in the DCM130acquires the address information and the connection request information from the command acquisition ECU110a, it accesses to the command administration center200, which is the connection destination, via the network400according to these information pieces. In this case, the primary control section132in the DCM130also transmits the vehicle ID information (specifically, the MAC address or phone number) to the command administration center200. Specifically, the primary control section132in the DCM130accesses to the command administration center200that is the connection destination indicated by the acquired address information, and transmits the vehicle ID information to the accessed command administration center200.

In the command administration center200, the communication control section211in the server210receives the vehicle ID information transmitted from the vehicle100via the network400, and outputs this vehicle ID information to the vehicle information server213. The vehicle information server213searches the vehicle ID information database by using the acquired vehicle ID information to authenticate whether or not the vehicle is the vehicle100transmitting the access request information. The user information server214acquires the user ID information associated with the vehicle ID information from the user ID information database217by using the vehicle ID information authenticated by the vehicle information server213. The command information server212acquires the temporarily stored remote operation request information together with the user ID information acquired by the user information server214, and acquires the command information corresponding to this remote operation request information by searching the command information database215.

When acquiring the command information as described above, the command information server212transmits the acquired command information to the vehicle100(i.e., command acquisition ECU110a) authenticated by the vehicle information server213via the network400. Upon transmitting the command information, the command information server212can execute an encryption process to this command information with a known method (system), and then, transmit the encrypted command information. This process can assure further security.

In the vehicle100, the command acquisition ECU110aacquires the command information via the DCM130. The command acquisition ECU110asupplies the command information to the corresponding vehicle ECU110according to the acquired command information. In the case where the command information is encrypted by the command information server212in the command administration center200, the command acquisition ECU110acan acquire the command information after performing a decryption process to the command information with a known method (system).

If the operation indicated by the command information is a remote operation, specifically, a remote operation for allowing the door lock device to be locked or unlocked, the command acquisition ECU110asupplies the command information to the door lock control ECU110b. With this process, the door lock control ECU110bunlocks the door lock device according to the remote operation, if the door lock device is in a locked state, and locks the door lock device according to the remote operation, if the door lock device is in an unlocked state, based on the supplied command information, for example. The door lock ECU110boutputs the result of the remote operation for the door lock device (hereinafter referred to as a remote operation result) to the command acquisition ECU110avia the CAN communication line120.

The command acquisition ECU110acollects the remote operation result information indicating the outputted remote operation result, transmits the collected remote operation result information to the DCM130, and instructs the DCM130to transmit this information to the command administration center200. In this case, the command acquisition ECU110acan output the address information according to the type of the remote operation to the DCM130together with the remote operation result information. With this process, the DCM130transmits the remote operation result information to the command administration center200together with the vehicle ID information via the network400.

In the command administration center200, the user information server214in the server210extracts the user ID information, which is associated with the transmitted vehicle ID information, by using the user ID information database217, and outputs the extracted user ID information to the command information server212. The command information server212provides the remote operation result information transmitted from the vehicle100to the user of the vehicle100specified by the outputted (extracted) user ID information. Specifically, the command information server212specifies the information terminal300carried by the user of the vehicle100by using the user ID information outputted from the user information server214, and transmits the remote operation result information to this information terminal300that is defined as a transmission destination. Thus, the user of the vehicle100can very easily recognize whether the vehicle100properly operates at present by the remote operation that the user demands (hopes). Specifically, the user can easily and surely recognize (confirm) whether the door lock device is changed from the locked state to the unlocked state, or changed from the unlocked state to the locked state, by the user's remote operation (i.e., command), by using the information terminal300.

As understood from the above description, according to the vehicle remote operation system according to the first embodiment, when an authorized user remotely operates the vehicle100, the system allows the vehicle100to access to (to be connected to) the command administration center200, whereby the system can allow the vehicle100to acquire the command information. Thus, the vehicle remote operation system according to the first embodiment can surely prevent an occurrence of a situation in which a third person other than the authorized user remotely operates the vehicle100, as stated in (a) to (d) below. This will be specifically described below.

(a) Situation in which a Third Person Directly Makes a Remote Operation to the Vehicle100by Using an Information Terminal Other than the Information Terminal300Carried by the Authorized User

Under this situation, an information terminal (hereinafter referred to as an unauthorized information terminal) carried by a third person other than the user of the vehicle100can make communication with the DCM130or the short-range communication control device140for any reason, and the third person can directly transmit command information for remotely operating the vehicle100via the unauthorized information terminal, as illustrated inFIG. 3. Under this situation, even if the third person transmits command information from the unauthorized information terminal to the vehicle100(more specifically, the command acquisition ECU110a), for example, the command acquisition ECU110aof the vehicle100does not acquire the transmitted command information.

Specifically, the command acquisition ECU110aacquires command information by accessing to the command administration center200, which is the predetermined (pre-specified) connection destination, based on the access request information transmitted from the command information server212in the command administration center200via the network400, as described above. In other words, the command information is acquired such that the command acquisition ECU110atemporarily accesses to the command administration center200via the network400. Therefore, under the situation in which the command information is directly transmitted from the unauthorized information terminal as described above, the command acquisition ECU110adoes not acquire the command information, resulting in that the operation of the vehicle100by the remote operation intended by the third person (i.e., not intended by the authorized user) can surely be prevented.

(b) Situation in which a Third Person Transmits Command Information by Using a Network Other than the Network400

Under this situation, a server (hereinafter referred to as a fake server) connected to a mobile phone network different from the network400can transmit access request information and command information to the vehicle100by using this mobile phone network, as illustrated inFIG. 4. Under this situation, when the third person other than the user of the vehicle100transmits access request information to the vehicle100via the mobile phone network by using the fake server, the command ECU110atries to access to the command administration center200, which is the predetermined (pre-specified) connection destination, based on the transmitted access request information via the network400. Therefore, the command acquisition ECU110adoes not have a chance to acquire the command information by accessing to the fake server.

Specifically, the command acquisition ECU110aacquires command information by accessing to the command administration center200, which is connected to the network400and which is the predetermined (pre-specified) connection destination, based on the acquired access request information, as described above. Therefore, even if the fake server transmits the access request information, the command acquisition ECU110aaccesses to the predetermined (pre-specified) command administration center200. Accordingly, the command acquisition ECU110adoes not have a chance to acquire the command information by accessing to the fake server. Consequently, the operation of the vehicle100by the remote operation intended by the third person (i.e., not intended by the authorized user) can surely be prevented.

(c) Situation in which a Third Person Transmits Command Information by Using a Fake Server Pretending to be the Command Administration Center200

Under this situation, a fake server connected to the network400as in the command administration center200pretends to be the server210in the command administration center200, and can transmit command information to the vehicle100via the network400, as illustrated inFIG. 5. Under this situation, when a third person other than the user of the vehicle100transmits access request information to the vehicle100via the fake server, for example, the command acquisition ECU110atries to access to the command administration center200, which is the predetermined (pre-specified) connection destination, based on the transmitted access request information. Therefore, the command acquisition ECU110adoes not have a chance to acquire the command information by accessing to the fake server.

Specifically, the command acquisition ECU110aacquires command information by accessing to the command administration center200, which is connected to the network400and which is the predetermined (pre-specified) connection destination, based on the acquired access request information, as described above. Therefore, even if access request information and command information are transmitted from the fake server connected to the network400as described above, the command acquisition ECU110aaccesses to the command administration center200that is the predetermined (pre-specified) connection destination, whereby the command acquisition ECU110adoes not have a chance to acquire the command information by accessing to the fake server. Consequently, the operation of the vehicle100by the remote operation intended by the third person (i.e., not intended by the authorized user) can surely be prevented.

(d) Situation in which Command Information is Transmitted by Use of an External Network that can be Connected to the Network400

Under this situation, a fake server or unauthorized information terminal connected to the external mobile phone network that can be connected to the network400can transmit command information to the vehicle100via the network400from this mobile phone network, as illustrated inFIG. 6. Under this situation, when a third person other than the user of the vehicle100transmits access request information to the vehicle100via the mobile phone network and the network400by using the fake server or the unauthorized information terminal, for example, the command ECU110atries to access to the command administration center200, which is connected to the network400and which is the predetermined (pre-specified) connection destination, based on the transmitted access request information. Therefore, the command acquisition ECU110adoes not have a chance to acquire the command information by accessing to the fake server or the unauthorized information terminal connected to the external mobile phone network.

Specifically, the command acquisition ECU110aacquires command information by accessing to the command administration center200, which is connected to the network400and which is the predetermined (pre-specified) connection destination, based on the acquired access request information, as described above. Therefore, even if the fake server or the unauthorized information terminal connected to the external mobile phone network transmits the access request information via the network400, the command acquisition ECU110aaccesses to the predetermined (pre-specified) command administration center200. Accordingly, the command acquisition ECU110adoes not have a chance to acquire the command information by accessing to the fake server or the unauthorized information terminal connected to the external mobile phone network. Consequently, the operation of the vehicle100by the remote operation intended by the third person (i.e., not intended by the authorized user) can surely be prevented.

In the above first embodiment, the vehicle100acquires the access request information transmitted from the command administration center200. The vehicle100then accesses to the command administration center200, which is the connection destination, according to the access request information to acquire the command information. Thus, even if a communication system (specifically, a sound signal in push-based communication, or SMS) for the network400(mobile phone network) is different for each district, the vehicle100can surely access to the command administration center200by preparing start information or access request information according to each communication system. Accordingly, command information and remote operation result information can surely be transmitted and received in any district.

b. Modification of First Embodiment

In the above first embodiment, the authorized user accesses to the command administration center200by using the information terminal300to transmit the remote operation request information, the server210(command information server212) in the command administration center200transmits the access request information to the command acquisition ECU110aof the vehicle100via the network400, and the command acquisition ECU110aacquires command information from the command administration center200accessed by the command acquisition ECU110a, via the network400.

In this case, the command acquisition ECU110acan access to the information terminal300carried by the authorized user, instead of the command administration center200as in the first embodiment, to acquire command information, as the predetermined (pre-specified) connection destination accessed by the command acquisition ECU110aaccording to the access request information transmitted from the command administration center200. Specifically, the information terminal300can function as the vehicle remote operation information provision device. Even if the command acquisition ECU110aaccesses to the predetermined (pre-specified) information terminal300as the connection destination according to the access request information, the occurrence of the situations (a) to (d) can surely be prevented. In the case where the command acquisition ECU110aaccesses to the information terminal300to acquire command information as described above, the command acquisition ECU110acan access to the information terminal300via the DCM130and the network400. Alternatively, the command acquisition ECU110acan access to the information terminal300via the short-range communication control device140. The modification of the first embodiment will specifically be described with reference toFIG. 7.

In this modification, the user firstly inputs the remote operation request information and the user ID information by using the information terminal300as in the first embodiment, and the information terminal300accesses to the command administration center200to transmit only the user ID information, as illustrated inFIG. 7. With this process, the server210in the command administration center200transmits the access request information and center identification information to the command acquisition ECU110ain the vehicle100via the network400, as in the first embodiment. When acquiring the access request information and the center identification information, the command acquisition ECU110arefers to the address information (IP address) stored in its nonvolatile memory to determine whether or not the IP address indicated by the center identification information matches (or is included in) the address information stored beforehand in order to authenticate the command administration center200. When authenticating that the command administration center200is the proper center, the command acquisition ECU110aacquires address information (IP address or phone number), which is stored in the nonvolatile memory for accessing to the information terminal300carried by the authorized user, according to the access request information, and outputs connection request information, which requests connection to the address indicated by the address information, to the primary control section132in the DCM130via the CAN communication line120together with the address information.

With this process, the DCM130is connected to the information terminal300carried by the authorized user via the network400. The user can directly transmit the command information via the network400, when the command acquisition ECU110ain the vehicle100and the information terminal300are connected to each other to enable communication. Accordingly, the vehicle100can operate based on the remote operation intended by the authorized user.

On the other hand, the vehicle100(more specifically, the command acquisition ECU110a) and the information terminal300(e.g., a portable smartphone or tablet terminal) carried by the authorized user can directly communicate with each other via the short-range communication control device140and the short-range communication control section302, in other words, without using the network400, as illustrated by a broken line inFIG. 1. When the vehicle100(command acquisition ECU110a) and the information terminal300can directly communicate with each other as described above, the command acquisition ECU110acan access to the information terminal300, without using the network400, according to the access request information from the administration center200to directly transmit the command information.

In the case where Bluetooth (registered trademark) is employed as the short-range wireless communication system between the vehicle100and the information terminal300, for example, it is necessary that the authorized user of the vehicle100preliminarily executes a paring process between the vehicle100and the information terminal300. According to the paring process between the vehicle100and the information terminal300, the authorized user can use the information terminal300in a secure state, and transmit command information to the command acquisition ECU110aof the vehicle100. The paring process in Bluetooth (registered trademark) is not directly related to the present invention, so that it will only briefly be described below.

In the paring process, the user of the vehicle100operates, for example, the short-range communication control device140of the vehicle100to bring it into a searchable state in which it can search for his/her portable information terminal300. On the other hand, the user of the vehicle100operates the portable information terminal300so as to bring its short-range communication control section302into the searchable state. Before the short-range communication control device140and the short-range communication control section302are set into the searchable state, their settings for authentication/encryption are rendered the same.

By means of bringing the respective devices in the searchable state as mentioned above, Bluetooth (registered trademark) devices existing nearby, i.e., the vehicle100(more specifically, the short-range communication control device140) and the portable information terminal300(specifically, the short-range communication control section302) are displayed on, for example, an unillustrated display mounted on the vehicle100and the touch-panel-type liquid-crystal display304of the portable information terminal300. The user designates the vehicle100as a counterpart device of the portable information terminal300, and designates the portable information terminal300as a counterpart device of the vehicle100. After selecting the vehicle100and the portable information terminal300as the counterpart devices, the user enters the same passkey (authentication key (PIN)). The short-range communication control device140and the short-range communication control section302exchange the entered passkey with each other, whereby the pairing process is completed.

Once the paring process for taking advantage of Bluetooth (registered trademark) communications is completed between the vehicle100and the portable information terminal300as mentioned above, connection for the communication can be established when the user carrying the portable information terminal300is around the vehicle100. Notably, when the connection is established, the establishment of the connection is reported to the user via the display in the compartment or the touch-panel-type liquid crystal display304in the information terminal300.

As described above, when the user accesses to the command administration center200to transmit only the user ID information in the state in which the paring process is executed beforehand, the server210in the command administration center200transmits the access request information and the center identification information to the command acquisition ECU110ain the vehicle100via the network400. With this process, the command acquisition ECU110aauthenticates the command administration center200by using the address information (IP address) and the center identification information (IP address), which are stored in its nonvolatile memory beforehand.

After authenticating that the command administration center200is the proper center, the command acquisition ECU110aoutputs connection request information, requesting the establishment of the connection with the paired information terminal300according to the access request information, to the short-range communication control device140via the CAN communication line120.

With this process, the short-range communication control device140establishes connection with the short-range communication control section302in the information terminal300that is carried by the authorized user and located around the vehicle100. Therefore, the user can directly transmit the command information to the command acquisition ECU110aof the vehicle100by using the information terminal300, without using the network400. Thus, the vehicle100can operate by the remote operation intended by the authorized user.

As understood from the above description, the vehicle100can be connected to the information terminal300, which is the predetermined (pre-specified) connection destination, and acquire the command information even in this modification, as in the above first embodiment. Accordingly, in this modification, the occurrence of the situations (a) to (d) can surely be prevented.

c. Second Embodiment

In the above first embodiment and the modification, the access request information is temporarily transmitted to the vehicle100from the command administration center200connected to the network400. With this process, the command acquisition ECU110ain the vehicle100accesses to the predetermined (pre-specified) connection destination (specifically, the command administration center200or the information terminal300carried by the authorized user), based on the access request information, and can acquire the command information.

A wireless communication using radio waves, such as an ad hoc mode (ad hoc communication) in the paired Bluetooth (registered trademark) communication or Wi-Fi (registered trademark) communication, or a wireless communication using light ray such as infrared ray or sound wave is employed between the short-range communication control device140in the vehicle100and the short-range communication control section302in the information terminal300, whereby secure communication is possible with mutual authentication being established. Accordingly, when the wireless communication system that enables the mutual authentication is employed, the direct communication connection can be established between the vehicle100and the information terminal300without using the command administration center200connected to the network400. The second embodiment will be specifically described below. The portions same as those in the first embodiment are identified by the same numerals, and their detailed description will not be repeated.

In the second embodiment, the vehicle100directly interacts with the information terminal300. Therefore, the command administration center200and the network400in the first embodiment are eliminated. As illustrated inFIG. 8, the information terminal300in the second embodiment includes a command information database215that stores command information pieces in such a manner that these information pieces can be searched, as in the command information database307in the above first embodiment. The information terminal300in the second embodiment includes a vehicle ID information database308that stores vehicle ID information pieces (e.g., information corresponding to the registration number or chassis number of the vehicle, or a MAC address or phone number of the short-range communication control section302) for specifying the vehicle100in such a manner that these information pieces can be searched, as in the vehicle ID information database216in the above first embodiment.

In the vehicle remote operation system thus configured and including the information terminal300according to the second embodiment, ad hoc mode in Bluetooth (registered trademark) communication or Wi-Fi (registered trademark) communication is employed between the paired devices, and the user who is the authorized owner of the vehicle100directly operates the vehicle100by the remote operation by using the information terminal300. For this, the user firstly inputs remote operation request information, requesting a remote operation for the vehicle100, by operating the touch-panel-type liquid crystal display304in the information terminal300as illustrated inFIG. 9. With this, the primary control section305in the information terminal300transmits access request information, requesting an access to the information terminal300, and information terminal identification information (e.g., MAC address) that is set beforehand for identifying the information terminal300, to the vehicle100.

When the information terminal300transmits the access request information and the information terminal identification information, the short-range communication control device140mounted on the vehicle100may not be started, so that the wireless communication might be impossible. Therefore, the command acquisition ECU110amay start the short-range communication control device140at predetermined time intervals by using an internal timer not illustrated, for example. Alternatively, upon transmitting the access request information and the information terminal identification information, the information terminal300may issue, to a center (base station) connected to the mobile phone network to which the DCM130of the vehicle100is connected, a request to transmit start information for starting the short-range communication control device140to the vehicle100as an external trigger utilizing push-based communication.

In the vehicle100, the short-range communication control device140is started, and receives the access request information and the information terminal identification information. The short-range communication control device140supplies the access request information and the information terminal identification information to the command acquisition ECU110avia the CAN communication line120. When acquiring the access request information and the information terminal identification information, the command acquisition ECU110adetermines whether or not the MAC address indicated by the information terminal identification information matches (or is included in) connection device information (MAC address), which is stored beforehand in the nonvolatile memory of the command acquisition ECU110a, by referring to the connection device information in order to authenticate the information terminal300. After authenticating that the information terminal300is the proper counterpart device (connection device), the command acquisition ECU110aacquires the connection device information of the information terminal300according to the access request information, and outputs the connection request information to the short-range communication control device140via the CAN communication line120together with the connection device information.

When acquiring the connection device information and the connection request information from the command acquisition ECU110a, the short-range communication control device140transmits vehicle ID information (e.g., information corresponding to the registration number or chassis number of the vehicle) to the information terminal300with Bluetooth (registered trademark) communication or Wi-Fi (registered trademark) communication according to each of these information pieces. Specifically, the short-range communication control device140transmits the vehicle ID information to the information terminal300that is the predetermined (pre-specified) connection destination by the acquired connection device information (MAC address).

The information terminal300receives the vehicle ID information, transmitted form the vehicle100, by using the short-range communication control section302. The primary control section305searches the vehicle ID information database308by using this vehicle ID information, and authenticates whether or not the vehicle is the vehicle100transmitting the access request information. Then, the primary control section305searches the command information database307to acquire the command information corresponding to the remote operation request information inputted by the user.

After acquiring the command information as described above, the primary control section305transmits the acquired command information to the vehicle100, which is authenticated as described above, through Bluetooth (registered trademark) communication or Wi-Fi (registered trademark) communication. In the second embodiment, the primary control section305can encrypt the command information with a known method (system), and transmit the encrypted command information, upon transmitting the command information.

In the vehicle100, the command acquisition ECU110aacquires the command information via the short-range communication control device140. The command acquisition ECU110asupplies the command information to the corresponding vehicle ECU110based on the acquired command information. In the second embodiment, the command acquisition ECU110acan decrypt the encrypted command information. In the second embodiment, if the remote operation requested by the user is for bringing the door lock device into a locked state or unlocked state, the command acquisition ECU110asupplies the command information to the door lock control ECU110b. With this, the door lock ECU110ballows the door lock device to be in the unlocked state according to the remote operation, if the door lock device is in the locked state, while the door lock ECU110ballows the door lock device to be in the locked state according to the remote operation, if the door lock device is in the unlocked state. The door lock ECU110boutputs the result of the remote operation to the command acquisition ECU110avia the CAN communication line120.

The command acquisition ECU110acollects remote operation result information, indicating the outputted remote operation result. The command acquisition ECU110asupplies the collected information to the short-range communication control device140, and instructs the short-range communication control device140to transmit this information to the information terminal300. According to this, the short-range communication control device140transmits the remote operation result information to the information terminal300through Bluetooth (registered trademark) communication or Wi-Fi (registered trademark) communication.

Thus, the user of the vehicle100can very easily recognize whether or not the vehicle100properly operates at present by the remote operation that the user demands (hopes). Specifically, the user can easily and surely recognize (confirm) whether the door lock device is changed from the locked state to the unlocked state, or changed from the unlocked state to the locked state, by the user's remote operation (i.e., command), by using the information terminal300.

As understood from the above description, according to the vehicle remote operation system according to the second embodiment, the command acquisition ECU110ain the vehicle100can be connected to the information terminal300, which is the predetermined (pre-specified) connection destination based on the access request information, to acquire the command information. Thus, the vehicle remote operation system according to the second embodiment can also surely prevent the occurrence of the situations (a) to (d) described above.

Upon embodying the present invention, the present invention is not limited to the above-described embodiments and modifications, and various changes are possible without departing from the scope of the present invention.

For example, in the embodiments and the modification described above, the vehicle100(more specifically, the command acquisition ECU110a) and the command administration center200(specifically, the server210), or the vehicle100(more specifically, the command acquisition ECU110a) and the information terminal300(more specifically, the primary control section305) mutually authenticate by using any one of character string information (text information) of the vehicle ID information, the center identification information, and the information terminal identification information. In this case, it is obvious that the vehicle100(more specifically, the command acquisition ECU110a) and the command administration center200(specifically, the server210), or the vehicle100(more specifically, the command acquisition ECU110a) and the information terminal300(more specifically, the primary control section305) can mutually authenticate by using a so-called electronic certificate. In this case, stronger mutual authentication can be realized.

In the embodiments and the modification described above, the command acquisition ECU110a, the DCM130, and the short-range communication control device140in the vehicle100are separately provided. However, it is obvious that the command acquisition ECU110a, the DCM130, and the short-range communication control device140can be integrally provided. The effect similar to the above embodiments and the modification can be obtained, even if the command acquisition ECU110a, the DCM130, and the short-range communication control device140can be integrally provided.

In the second embodiment, the information terminal300directly provides command information to the vehicle100. In this case, it is also possible that access information is directly transmitted to the command acquisition ECU110afrom the information terminal300, and the vehicle100accesses to the command administration center200via the network400, configured similar to the first embodiment, based on the access information to acquire the command information, for example. Even in this case, the vehicle100can be connected to the command administration center200, which is the predetermined (pre-specified) connection destination, to acquire the command information, as in the above first embodiment. Therefore, the occurrence of the above situations (a) to (d) can surely be prevented even in this case.

In the second embodiment, the information terminal300directly acquires remote operation result information from the short-range communication control device140of the vehicle100. In this case, the remote operation result information can be outputted from the DCM130in the vehicle100, and the information terminal300can receive the remote operation result information, outputted from the DCM130, via the mobile phone network and the center (base station). With this configuration, the remote operation result information can be acquired, even if the information terminal300is not around the vehicle100, whereby the user can always recognize the remote operation state of the vehicle100.