EP1302374A2 - Method of initialising an entry control system with several electronic keys and several objects - Google Patents

Abstract

If a first key (A1) already allocated with an access authority to a first object/motor vehicle (A) comes close to a second object/motor vehicle (B), which has been initialized for access control, then data for the first key is registered into the second object/motor vehicle or data for the second object/motor vehicle is registered into the first key, which is now allocated with an access authority to the second object/motor vehicle.

Description

The invention relates to a method for initializing a Access control system with multiple electronic keys, the multiple objects are assigned to an access authorization demonstrated.

In access control systems will be the authorization for access to an object and to use the object through authorized keys proved. To the highest possible To obtain security, electronic keys are used where the authorization is usually wireless as Code signal is transmitted.

From the prior art is an access control system, there an immobilizer for a motor vehicle known (DE 195 26 530 C1). The motor vehicle has several control units, which is integrated in a so-called distributed immobilizer are. With the help of electronic keys can be a permission be proven to start the vehicle and to use it. When a controller is replaced must, then the new control unit must first be initialized be, d. H. provided with a valid and authorized code so that the control unit the code signal the key can recognize as justified.

At least two keys are needed to initialize both of them during an initialization state their code signals to the new controller. There are then in stored coded data contained in the code signal.

In order to get into the initialization state, is in the known access control system an external diagnostic device connected to the motor vehicle, the proof only an additional permission all the controllers in the Initialization state offset. Only in this initialization state the encoding data of the keys are in the too initializing control units.

In the known access control system is the authorization only within the system, i. of a motor vehicle and the Assign this assigned key. Only new controllers, which are installed in the motor vehicle, and thus belong to the access control system of the motor vehicle, can be initialized. So only with the keys initializes an access control system of a single motor vehicle become. Thus, one or more keys are also assigned to a single motor vehicle.

An object of the invention is to provide a simple method for Initializing an access control system with multiple electronic To create keys and multiple objects.

This object is achieved by a method with the Characteristics of claim 1 achieved.

At first a key, which already becomes a first Object is legitimately assigned (initialized is) brought near a second object to which he is previously not assigned. The second object will then be in set an initialization state. During the initialization state sends the already initialized key a code signal having a characteristic identifier and Coding data has. The characteristic identifier then becomes stored in the second object as a new, valid identifier if the new identifier has a higher priority than the previous identifier or it will be the identifier of the second object as new, valid identifier for the key stored.

This has the advantage that at least one key more Objects can be assigned as eligible to use this Key allows all these objects to lock or unlock or to use. There may also be several keys be assigned to the objects. Already with a key then several objects can be initialized. To this Way, multiple access control systems can use multiple Keys that were each assigned to an object become one single access control system with multiple objects and linked to multiple keys.

The invention is advantageously developed by the subclaims.

Figuren

1 ein Zugangskontrollsystem für mehrere Objekte und mit mehreren Schlüsseln am Ausführungsbeispiel eines Zugangskontrollsystem für Kraftfahrzeuge,

Figuren

2 und 3 jeweils eine schematische Ansicht eines Zugangskontrollsystems am Ausführungsbeispiel eines Kraftfahrzeugs, und

Figur 4

ein Ablaufdiagramm eines Verfahrens zum Initialisieren eines Zugangskontrollsystems mehrerer Objekte.

Embodiments of the invention are explained in more detail below with reference to the schematic drawings. Show it:

characters

1 shows a multi-object and multi-key access control system in the embodiment of an access control system for motor vehicles,

characters

2 and 3 each show a schematic view of an access control system on the embodiment of a motor vehicle, and

FIG. 4

a flowchart of a method for initializing a access control system of multiple objects.

A method for initializing an access control system with several electronic keys A1, A2, ... C1, C2 (Figure 1) and a plurality of objects is exemplified at a Access control system for a motor vehicle A, B or C described. Of course, this method can also be used other objects, such as entrance doors, garage doors, Hotel rooms, safes, etc. are used.

First, it is assumed that several motor vehicles (for example - As shown in Figure 1 - three motor vehicles A, B and C) exist, for example, each two Key A1, A2; B1, B2; or C1, C2 already considered eligible for the respective access control system of each motor vehicle assigned. With the keys A1, etc. door locks can 1 of the respective associated motor vehicle legitimately locked or unlocked or its immobilizer 2 solved become. Thus, with the keys to each motor vehicle authorized to receive access, i. it can thus be used legitimately become.

In each key is a specific, characteristic ID stored. The identifier of the keys A1 and A2 Let X / 1 be the first, of the keys B1 and B2 first Y / 1 and of the keys C1 and C2 first Z / 1. The identifier is together with an identification number for a motor vehicle, Coding data and possibly control data in the signal from sent out the keys. The identifiers can be through others Tags are overwritten.

The identifier is used during initialization, as described later will be described in more detail, to each motor vehicle and If necessary, tell each key which identifier for all parts assigned to the access control system are valid is. The identifier also serves as a so-called "wake-up", with the key - upon receipt of the identifier - from the idle state be put into normal operation.

The respective identification number identifies a specific one Motor vehicle and is unique to every motor vehicle. The identification number (e.g., vehicle ID number) is commonly used for encrypting / encoding.

The electronic keys have a transponder function on. A transponder is a device to understand which sends a signal (e.g., question or request signal) a receiver receives and then automatically a signal (e.g., response or code signal) via a transmitter. Thus, a bidirectional dialogue (also as a question-answer dialog designated) between an object and the Key be carried out.

The electronic keys can also have a remote control function exhibit. This is the unidirectional sending a closing command connected by the example Locking system can be locked or unlocked.

When sending the signals are cryptological or encrypted Data (referred to as coding data) is modulated with sent out. Only if this encoding data in the receiver be recognized as justified, so will according to the also with transmitted control command a function in controlling object executed.

When a user approaches his motor vehicle, he can with the key (sending the code signal, for example, by Pressing a key remote control key) the doors unlock and sit in his car, then the Question-answer dialogue between an immobilizer 2 and the to carry out the respective key. If authorized, the Immobilizer 2 is released and the user can start the engine and drive away, i. his motor vehicle unrestricted to use.

So that key and motor vehicle "understand" must matching coding data both in the motor vehicle and to be included in the key. The assignment of this coding data can for each vehicle during a so-called initial initialization at the end of the tape in the manufacture of the motor vehicle happen. In doing so, both the key and the motor vehicle (a central control device 3 for access control) the corresponding data (identification and identification number) transmitted and stored there. These dates can not be read from the outside, but can only used in normal operation of the access control system become.

Through the electronic systems for access control are high code variations and thus the security so high that each motor vehicle in each case at least one key with its own Coding data can be assigned. This prevents that the key happens to be another access control system can serve, i. another object so that he can use it as long as he does not initialize for it is.

In the invention, however, the problem arises, a Key that already has an access control system Motor vehicle is assigned, even for another access control system of another motor vehicle. It Should even more keys for each of several vehicles be admitted, i. multiple access control system should be linked together to form an access control system become. Such situations are especially great Fleets in front of which several vehicles of several drivers should be used. Each driver can then one Key, which then entitles you to several vehicles should be.

To initialize such access control system is initially requires a portable key, which advantageously has a transponder to receive signals and which to send. Consequently, the object is also a Transmitting and receiving unit 4 (Figure 2), which requires a signal when triggered and then send a code signal of Key can receive.

The object-side transmitting and receiving unit 4 is in the Embodiment of Figure 2 arranged in the vehicle interior. The range 5 of the transmitting and receiving unit 4 emitted signals is due to the attenuation / shading essentially through the body to the interior of the Motor vehicle limited. The transmitting and receiving unit 4 is via a bus line 6 with a central control unit 3 for the access control system connected. The central control unit 3 can also be present in an already present in the motor vehicle control unit be integrated (for example, the engine control unit).

The bus line 6 has a diagnostic interface 7, via an external diagnostic device 8 to the motor vehicle and all connected to the bus 6 connected electronic devices can be.

In Figure 3, the transmitting and receiving unit 4 in the vehicle interior shown in more detail. It has an antenna 9 can be sent on the signals and received. Furthermore, it can have a key holder 10, in FIG the key is inserted to the question-and-answer dialog perform with the transmitting and receiving unit 4. The key can also be used in the key holder 10 Performing the initialization are plugged.

The key holder 10 may, for example, a conventional Be the ignition. However, this presupposes that a key conventional mechanical beard exists while the electronics are transmitting the code signals integrated in the key handle. It can also be one Key receptacle 10 may be present in the vehicle, the other Keys picks up, for example, a chip card-sized card 11th

When the signals transmitted by the transmitting and receiving unit 4 via the antenna will be sent out, a long range (1 to 2 m), the key does not necessarily have to be in the Key holder 10 can be plugged in but can be arbitrary be stored in the vehicle or the user in the Bag remain. However, this assumes that the Transmitter of the key signals with likewise long range emits, so that these of the transmitting and receiving unit. 4 can be received.

The method of initializing the key to the motor vehicle will now be explained with reference to FIG 4. There the process steps are shown on the left side, which are executed on the key side and on the right Page the process steps that take place on the object side.

Exemplary embodiment with defined training order:

First, in step S1, a key A1, which already has to an access control system of a first object (the vehicle A) authorized trained or assigned (initialized) is, in the vicinity of the second object, here the second motor vehicle B, be brought.

The second object (here the motor vehicle B) is in step S2 is set to an initialization state. For this purpose can for example, the external diagnostic device 8 to the diagnostic interface 7 are connected. About the diagnostic device 8 becomes - with additional proof of a permission to this - Sent a signal to the central control unit 3, whereby this the access control system of the motor vehicle in the initialization state added.

This has the consequence that the keys B1 and B2 (the were assigned to the motor vehicle B) deleted as entitled become. This can with the keys B1 and B2 the motor vehicle B are no longer used except these keys will be trained again later for the motor vehicle B.

During this initialization state can now in step S3, a request signal is triggered, which depends on the transmission and receiving unit 4 in the motor vehicle to the key A1 is sent out (prerequisite for this is in this Embodiment that the motor vehicle B is unlocked and the key A1 is in the interior).

The triggering of the request signal can, for example by switching an ignition switch or manual operation done another switch. The key A1 can located by sensors as inside the motor vehicle be recognized. Then - in the initialization state - automatically the request signal sent out.

When the key A1 receives the request signal, so For its part, it sends a coded response signal in step S4 back. This response signal has a characteristic Identification X / 1 on, by which all parts belonging to the access control system are assigned as being associated with it become. Apart from the identifier, the response signal contain more information, such as a Code and a vehicle identification number.

With the response signal, the motor vehicle B is the identifier and the identification number of the motor vehicle A communicated. The central control unit 3 assumes the step S5 transmitted identifier as the future valid identifier. Farther directs vehicle B from the received identification number a different from this identification number.

Thus, those keys that were previously available for the Motor vehicle A were entitled to the same identifier as the Motor vehicle B.

Subsequently, the keys B1 and B2, which are not now are more entitled to the motor vehicle B, in step S6 and S7 are also trained to the vehicle B.

Now the keys B1 and B2 can still be connected to the motor vehicle A are taught (not shown in Figure 4). In all Keys (A1 to B2) are then the new identifier and its associated Identification numbers of all to the access control system associated motor vehicles (A and B) stored.

Now the motor vehicle C can be initialized with the key B1 or B2 become. And there can be more motor vehicles and Key initialized.

Embodiment with variable training order:

First, the key B1 to the motor vehicle A, then the key C1 to the motor vehicle A and then the key A1 taught to the motor vehicle C.

First, the key B1 becomes close to the motor vehicle A. brought and the motor vehicle A in the initialization state added. However, the keys A1 and A2 remain initially authorized for the vehicle A. (unlike that previous embodiment).

Then the identifier Y of the question-answer dialog is displayed Key B1 to the transmitting and receiving unit 4 and thus to Central control unit 3 transmitted. There will then be transmitted Identifier Y compared with a previous identifier X. Depending on whether the currently transmitted identifier Y is greater is or should have priority, it will be the new identifier Y in the Central control unit 3 taken over or not. The priority or the priority of the identifiers are already in the production or Initialization once set.

If the new identifier Y is taken over in the central control unit 3 is, so the previous identifier Y remains in the key B1 as valid (and the motor vehicle A has the identifier of Key B1). The keys A1 and A2 must then be added again the motor vehicle A are brought, these then the Identification Y of the key B1 transmitted from the motor vehicle A ago becomes.

If the identifier Y of the key B1 is not accepted, so the previous identifier X from the motor vehicle A on the Key B1 are transmitted and there as a new valid identifier X are saved.

If the key B1 now has a new identifier X of one Motor vehicle has received this identifier in the other Motor vehicle and its keys are still being transmitted, so that the keys are valid for all motor vehicles.

Therefore, the keys A1 and A2 are then sent to the Motor vehicle A brought (if the identifier changed Has). Likewise, the keys B1 and B2 to the motor vehicle B brought

Now, the keys C1 and C2 to the motor vehicle A as well as the keys B1 and B2 to the motor vehicle A trained become. Finally, the keys A1 and A2 can the vehicle C are taught.

However, it may be that no changes in the identifiers must be made if the authorized identifier already saved.

After saving the identifier, the initialization for the respective motor vehicle are automatically terminated.

Instead of an external diagnostic device the initialization state other methods can be used be to the motor vehicle in the initialization state to move. For example, the ignition key in the ignition switch are plugged in and by an unusual one Operation (for example, nine times switching on and off) detected be taken that now an initialization state shall be. It can be any other, but previously defined as a trigger for the initialization actions be made by the then the initialization state is taken. These actions must, however unusual actions that the driver usually when using his vehicle does not do so for the Access control system clearly recognizes that an initialization state should be taken.

The characteristic identifier can be a so-called wake-up pattern (WUP) through which the access control system immediately recognizes that it is an associated key and then only the coding is checked accordingly must be whether it matches an associated encoding. The wake-up pattern becomes the key from hibernation (low power consumption) to normal operation (normal energy consumption) offset when the key has an identifier associated with the access control system assigned.

For coding, conventional encryption methods used as they are already often used for Motor vehicles are known (alternating code, fixed code, cryptocode, etc.). For coding or encryption, the identification number of the motor vehicle advantageously with be used. If the received coding data is not direct can match the expected encoding data, so can by further calculating the coding within a so-called Catch area are recognized, whether an authorization exists or not.

The term "key" is an electronic key or also a so-called ID transmitter or code transmitter understand that - regardless of the shape of the case in which it is arranged - is suitable to encode a code signal or send encrypted data to an object, by giving permission to access the object is detected. In the case of the motor vehicle, this is concretely the Authorization for locking or unlocking door locks 1 (and / or trunk lid lock) or to release an immobilizer Second

The signals between the respective object and the Keys can be wired or wired wirelessly transmitted inductively, by radio, optically or acoustically become.

In such access control system can a variety from keys to a variety of objects as authorized be assigned for all objects. In addition to the identifier and the identification numbers for the respective object also the number of all existing keys in the system - for example for insurance purposes - to be stored.

Such access control systems can be advantageous for rental cars and fleets are used. This will be the logistics for keys, key collection and vehicle handover easier. Even if a vehicle is out of the access control system leaves the remaining keys for the remaining vehicles remain valid. The "eliminated" Vehicle can be reinitialized with its keys so these keys are no longer for that either remaining access control systems are valid.

If a key is lost, the access control system needs it just to be reinitialized. With the Lost keys will no longer be valid access possible to the associated objects. In case of a damaged one Key, no action is necessary anymore, as long as with this Key no abuse can be operated.

If a vehicle is stolen without a key, it is not Change necessary. However, the vehicle is with key stolen, the thief can his vehicle with the only one Operate the keys, but not the other vehicles, if the access control system again - without the stolen Key is initialized.

If it is provided that an initialization only over one external diagnostic device 8 and additionally by detection of a additional authorization (vehicle registration card, ID card, PIN number etc. as well as possibly transferring data from one central database of the vehicle manufacturer) at a authorized workshop can be made so can a thief steal a motor vehicle with a key, no new keys and no more, the access control system re-train assigned motor vehicles. Then it is also not possible with the so-called valet parking that the service agent with the provided key Misuse.

If the number of all learned keys stored be so in case of theft of the vehicle (without Key) with the help of the stored number of proof be made for the insurance company that actually Also, all keys are still present and only the motor vehicle was stolen.

The term "initialization" is a first-time or if necessary repeatedly storing coding data in the Keys and in the object (lock or central control unit 3) understand. Only with this data, for each object and may be individual to each user the access to the object can be obtained and with that too Use of the object will be allowed. The first initialization usually takes place after production (in the case of a Motor vehicle at the end of the tape in the manufacture of the motor vehicle) instead of. Since there was no key to the access control system is assigned no key for the all first initialization needed. At each additional, later initialization (also called re-initialization) then already initialized keys are needed. The initialization can also be described as "teaching the access control system" or "Mapping keys to objects" be designated. The invention assumes that every object by itself with a certain number of keys already initialized at least once, but no key is present for at least two Objects is initialized.

The encryption and the comparison with stored coding data can also be detected by other means of identification methods, like biometric procedures (fingerprint, Iris recognition, face recognition, speech recognition) accomplished become.

The inventive method can be performed on all objects be, in which an access (including use) only at Authorization proved by an electronic key and multiple keys to multiple objects should be assigned. So the process is not up limited use in a motor vehicle. It can can also be used in other objects, such as personal computers, Mobile phones, hotel door locks, security zones with separate access, etc.

Claims (7)

Method for initializing an access control system with a plurality of electronic keys (A1 to C2) and a plurality of objects (A, B, C) characterized by the following method steps: Bringing a first key (A1) already assigned to a first object (A) close to a second object (B), Putting the second object (B) in an initialization state, Triggering a request signal transmitted by a transmitter (4) of the second object (B), Transmitting a response signal by a transmitter of the first key (A1) if a receiver of the key has previously received the request signal, the response signal having a first characteristic identifier (X), and Storing the first identifier (X) in the second object as a new, valid identifier or transmitting the identifier (Y) of the second object (B) to the key (A1) and storing there as a new, valid identifier. A method according to claim 1, characterized in that the new, valid identifier, which is stored in both the first key (A1) and in the second object (B), during a re-initialization of the first object (A) with the first key ( A1) is stored in this or during re-initialization of the second object (B) with the second key (B1) is stored in the second key. A method according to claim 1, characterized in that each key is inserted into a key receptacle (10) of the first or second object (A, B) to receive signals. Method according to one of the preceding claims, characterized in that the first and the second object (A, B) are a motor vehicle and the keys (A1 to C2) are vehicle keys in the form of an ignition key or a card, with which an authorized access to the Motor vehicle and the use of the motor vehicle is made possible. Method according to one of the preceding claims, characterized in that the signals between the respective object and the key are wired or wireless, inductive, transmitted by radio, optical or acoustic. A method according to claim 4, characterized in that for bringing the motor vehicles in the initialization state in each case an external diagnostic device (8) to a diagnostic interface (7) of the respective motor vehicle is connected and via which a trigger signal is transmitted to the motor vehicle, by the initialization state is taken , A method according to claim 4, characterized in that the respective key is present during the initialization in the motor vehicle interior or in the ignition or other key receptacle (10) is inserted, wherein the request signal triggered by pressing the ignition, the key holder (10) or a start switch becomes.

Images