GB2433093A

GB2433093A - Disabling a motor vehicle following unauthorized use, using a cellular communication system

Info

Publication number: GB2433093A
Application number: GB0525128A
Authority: GB
Inventors: Ian C Doig; Ban Al-Bakri
Original assignee: Motorola Inc
Current assignee: Motorola Solutions Inc
Priority date: 2005-12-09
Filing date: 2005-12-09
Publication date: 2007-06-13
Also published as: GB0525128D0

Abstract

An apparatus for disabling a vehicle comprises a remote terminal (101) arranged to communicate with a base station (105) over a cellular air interface of a cellular communication system (100). A vehicle disable server (117) transmits a disable message over the cellular air interface which is received by the first remote terminal (101). In response, a mode processor (203) determines if the vehicle is in a safe mode of operation for disablement. If the vehicle is in a safe mode of operation, a disable processor (201) then proceeds to disable the vehicle. The vehicle may for example be disabled by blocking of the fuel supply to an engine of the vehicle. The invention may in particular allow a vehicle anti-theft service to be provided by a cellular communication system.

Description

APPARATUS AND METHOD FOR DISABLING A VEHICLE

Field of the invention

The invention relates to disabling of a vehicle and in particular, but not exclusively, to disabling of a vehicle following unauthorized use.

Background of the Invention

Currently, the most ubiquitous cellular communication system is the 2nd generation communication system known as the Global System for Mobile communication (GSM). Further description of the GSM TDMA communication system can be found in The GSM System for Mobile Communications' by Michel Mouly and Marie Bernadette Pautet, Bay Foreign Language Books, 1992, ISBN 2950719007.

To further enhance the services and performance of the GSM communication system, a number of enhancements and additions have been introduced to the GSM communication system over the years.

* *. 25 * , * 3rd generation systems have recently been rolled out in many areas to further enhance the communication services provided to mobile users. One such system is the Universal Mobile Telecommunication System (UMTS), which is currently being deployed. Further description of CDMA and specifically of the Wideband CDMA (WCDMA) mode of UMTS can be found in WCDMA for UMTS', Harri Holma (editor), Antti Toskala (Editor), Wiley & Sons, 2001, ISBN 0471486876. The core network of UMTS is built on the use of SGSNs and GGSN5 thereby providing commonality with GPRS.

In order to further enhance the services and functionality that can be provided by cellular communication systems, standardisation of new services and functionality is continually ongoing. Specifically, standardisation activities are currently ongoing to provide embedded emergency services for cars and similar vehicles.

Specifically, standardisation of emergency services known as eCall are currently ongoing in response to a specific request by the European Commission.

The eCall system requires a cellular device to be installed (as an integrated part) in the vehicle during manufacture.

This device (cellular UE/MS) can be triggered via sensors/signals in the vehicle to initiate an emergency call. For example, air-bag activation, accelerometers etc can be used to instigate an emergency call.

However, although eCall provides additional and valuable services and extends the usability of cellular communication systems, it is limited to emergency services and therefore a ::. 25 system providing improved functionality and services for vehicles would be advantageous.

Summary of the Invention

Accordingly, the Invention seeks to preferably mitigate, alleviate or eliminate one or more of the above mentioned disadvantages singly or in any combination.

According to a first aspect of the invention there is provided an apparatus for disabling a vehicle, the apparatus comprising: a cellular transceiver for communicating over a cellular air interface of a cellular communication system; mode determining means for determining if the vehicle is in a safe mode of operation; disabling means for disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation.

The invention may allow improved and/or additional services to be provided in vehicles by a cellular communication system. The invention may in particular reduce the possibility of unauthorized use of the vehicle and may provide an efficient theft prevention, reduction and/or deterrent system.

The invention may allow an efficient system and may in particular allow low complexity and/or synergy between functionality used for emergency services and for providing vehicle disabling functionality.

The invention may furthermore provide for a safe disabling of the vehicle and may in particular significantly reduce any risk of accidents.

The disabling means may be arranged to ignore disable messages (which may be repeated) if the vehicle is not in a safe mode of operation and/or may e.g. delay a disablement in response to a disablement message until the vehicle enters a safe mode of operation.

A safe mode of operation is a safe mode for disabling and may in particular be a mode wherein measured operating characteristics (such as a speed of the vehicle) meet a given criterion. This criterion may be predetermined to be indicative of a disablement of the vehicle being associated with a 5fficiently low risk of a dangerous situation resulting from the disablement.

The vehicle may for example be a car, a lorry, a motorbike or a similar vehicle.

According to an optional feature of the invention, the mode determiflifl9 means is arranged to determine that the vehicle is in a safe mode of operation if a speed of the vehicle is below a threshold.

This provides for an effective, low complexity and/or reliable determination of whether the vehicle is in a safe mode of operation for the disablement and may increase the safety to driver and passengers of the vehicle. e.

According to an optional feature of the invention, the mode etermifliflg means is arranged to determine that the vehicle is in a safe mode of operation if a speed of the vehicle is at a standstill.

II *S* S

S

This provides for an effective, low complexity and/or reliable determination of whether the vehicle is in a safe mode of operation for the disablement and may increase the safety to driver and passengers of the vehicle.

According to an optional feature of the invention, the disable message is a text messaging service message.

This may allow an efficient communication of the disable message and may reduce the communication bandwidth required for operating the system. It may furthermore facilitate implementation and may in particular allow or facilitate an

introduction of the service to existing systems.

According to an optional feature of the invention, the disabling means is arranged to block a fuel supply to an engine of the vehicle.

This may allow a practical and/or reliable implementation and/or operation. In particular, it may allow a low complexity and easy to implement apparatus.

According to an optional feature of the invention, the disabling means is arranged to disable ignition for an :.:::. 25 engine of the vehicle. * S S...

This may allow a practical and/or reliable implementation S.....

* and/or operation. In particular, it may allow a low complexity and easy to implement apparatus. : 30

S..... S *

According to an optional feature of the invention, the apparatus comprises means for re-entering the vehicle into a non-disabled mode of operation following a disabling.

This may provide facilitated and/or improved operation and/or an improved service.

According to an optional feature of the invention, the means for re-entering is arranged to re-enter the vehicle into the non-disabled mode of operation in response to an enabling message received over the cellular air interface.

This may provide facilitated and/or improved operation and/or an improved service. In particular, it may allow a centrally controlled enablement and disablement of the vehicle. The enabling message may for example be an encrypted message or may e.g. comprise a secure identification which can be checked by the vehicle.

According to an optional feature of the invention, the means for re-entering is arranged to re-enter the vehicle into the non-disabled mode of operation in response to a manual user input.

This may provide facilitated and/or improved operation and/or an improved service. In particular, it may allow a locally controlled enablement and disablement of the * vehicle. The manual user input may for example be by use of a key or by entering an enablement code. a.. * S S S. S

According to an optional feature of the invention, the apparatus further comprises: means for determining a location of the vehicle; and means for transmitting a location indication over the cellular air interface in response to receiving the disable message.

This may allow improved service and may in particular assist in the localization of a vehicle following unauthorized use.

According to another aspect of the invention, there is provided a vehicle comprising: a cellular transceiver for communicating over a cellular air interface of a cellular communication system; mode determining means for determining if the vehicle is in a safe mode of operation; disabling means for disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation.

According to another aspect of the invention, there is provided a system for disabling a vehicle, the system comprising: a server coupled to a network of a cellular communication system, the server comprising: means for receiving a disable request message identifying the vehicle, means for generating a disable message for the vehicle in response to the disable request message, and means for transmitting the disable message over a cellular interface; and a disable apparatus located in the vehicle, the disable apparatus comprising: a cellular transceiver for S.....

communicating over the cellular air interface, mode determining means for determining if the vehicle is in a safe mode of operation, and disabling means for disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation.

According to an optional feature of the invention, the apparatus comprises means for determining a location of the vehicle; and means for transmitting a location indication to the server over the cellular air interface in response to receiving the disable message.

The feature may allow a practical and convenient implementation and may in particular allow a centralized and facilitated introduction of a disablement service in a cellular communication system.

According to an optional feature of the invention, the means for transmitting the disable message over a cellular interface is arranged to broadcast the disable message.

This may allow facilitated implementation and/or operation with efficient performance.

According to another aspect of the invention, there is :,:::I 25 provided a method of disabling a vehicle, the method comprising: communicating over a cellular air interface of a cellular communication system; determining if the vehicle is IScS4 in a safe mode of operation; disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling being performed only when the vehicle is in the safe mode of operation.

S

These and other aspects, features and advantages of the invention will be apparent from and elucidated with reference to the embodiment(s) described hereinafter.

Brief Description of the Drawings

Embodiments of the invention will be described, by way of example only, with reference to the drawings, in which FIG. 1 illustrates an example of a cellular communication system in accordance with some embodiments of the invention; and FIG. 2 illustrates an example of a disabling apparatus in accordance with some embodiments of the invention.

Detailed Description of Some Embodiments of the Invention The following description focuses on embodiments of the invention applicable to a UMTS cellular communication system. However, it will be appreciated that the invention is not limited to this application but may be applied to * I, *,, , 25 many other cellular communication systems including for

example GSM.

* FIG. 1 illustrates an example of a cellular communication system 100 in which embodiments of the invention may be employed. 0S S *5IIS

In a cellular communication system, a geographical region is divided into a number of cells each of which is served by a base station. The base stations are interconnected by a fixed network which can communicate data between the base stations. A remote terminal (e.g. a User Equipment (UE) or a mobile station) is served via a radio communication link by the base station of the cell within which the remote terminal is situated.

As a remote terminal moves, it may move from the coverage of one base station to the coverage of another, i.e. from one cell to another. As the remote terminal moves towards a base station, it enters a region of overlapping coverage of two base stations and within this overlap region it changes to be supported by the new base station. As the remote terminal moves further into the new cell, it continues to be supported by the new base station. This is known as a handover or handoff of a remote terminal between cells.

A typical cellular communication system extends coverage over typically an entire country and comprises hundreds or even thousands of cells supporting thousands or even millions of remote terminals. Communication from a remote terminal to a base station is known as uplink, and * 25 communication from a base station to a remote terminal is l's.

known as downlink.

I

ISSSS

* In the example of FIG. 1, a first remote terminal 101 and a second remote terminal 103 are in a first cell supported by * 30 a first base station 105. Is I *.S4I

The first base station 105 is coupled to a first RNC 107. An RNC performs many of the control functions related to the air interface including radio resource management and routing of data to and from appropriate base stations.

The first RNC 107 is coupled to a core network 109. A core network interconnects RNC5 and is operable to route data between any two RNCs, thereby enabling a remote terminal in a cell to communicate with a remote terminal in any other cell. In addition, a core network comprises gateway functions for interconnecting to external networks such as the Public Switched Telephone Network (PSTN), thereby allowing remote terminals to communicate with landline telephones and other communication terminals connected by a landline. Furthermore, the core network comprises much of the functionality required for managing a conventional cellular communication network including functionality for routing data, admission control, resource allocation, subscriber billing, remote terminal authentication etc. * ** 20 The core network 109 is further coupled to a second RNC 111 S...

which is coupled to a second base station 113. The second base station 113 supports a third remote terminal 115.

In the specific example of FIG. 1, the three remote terminals 101, 103, 115 are eCall terminals integrated in vehicles during manufacture. The vehicles may for example be cars, lorries or motorbikes. The three remote terminals 101, 103, 115 are specifically used to provide eCall emergency call functionality wherein automated calls may be made to an emergency server by the remote terminals 101, 103, 115 in response to a detection of an emergency condition. For example, an automated call may be made to a predetermined emergency server in response to a detection of an activation of an air bag.

In addition, in the system of FIG. 1, the remote terminals 101, 103, 115 support a vehicle disablement service which allows the vehicles to be disabled by messages transmitted from the fixed network of the cellular communication system 100. specifically, the fixed network comprises a vehicle disable server 117 which remotely can control the disablement of the individual vehicles. Each of the vehicles comprises a disable apparatus which is arranged to disable the vehicles in response to receiving disable commands/messages from the vehicle disable server 117.

A specific example of an application using this functionality is an anti-theft vehicle disabling system which utilizes the (eCall) remote terminals 101, 103, 115 to disable the vehicle on receipt of network activated : *. 20 signaling from the vehicle disable server 117.

FIG. 2 illustrates an example of a disable apparatus in accordance with some embodiments of the invention. Each vehicle comprises an integrated eCall remote terminal 101, 103, 115 as part of the disable apparatus. In the following, S..

.. : a disable apparatus as illustrated in FIG. 2 will specifically be described for the vehicle comprising the first remote terminal 101 of FIG. 1.

The disable apparatus of FIG. 2 comprises the first remote terminal 101 which is arranged to communicate with the first base station 105 over the air interface of the UMTS cellular communication system 100.

The first remote terminal 101 is coupled to a disable processor 201 which is arranged to determine if and when the vehicle should be disabled.

Specifically, the vehicle disable server 117 may be instructed by an operator to transmit a message to the first remote terminal 101 which instructs the disable apparatus to disable the vehicle. For example, the vehicle may have been reported as stolen to the operator of the vehicle disable service by the owner of the vehicle or the police, and in response thereto the instruction to disable the vehicle can be sent to the first remote terminal.

When the first remote terminal 101 receives a message from the vehicle disable server 117, this is fed to the disable processor 201. If the message corresponds to a disable * 20 instruction for the vehicle, the disable processor 201 then proceeds to evaluate if this is feasible. S... * S S...

For this purpose, the disable processor 201 is coupled to a mode processor 203 which is arranged to determine if the vehicle is in a safe mode of operation. The mode processor : 203 is coupled to one or more sensors 205 which provide inputs to the mode processor 203 that are used to determine the current mode of operation for the vehicle.

It will be appreciated that the mode processor 203 can use any suitable algorithm or criterion for determining if the vehicle is in a safe mode of operation or not. Specifically, the mode processor 203 can comprise one or more specific rules that relate the sensor inputs to a safe or non-safe mode of operation. This safe mode of operation is generally considered to be a mode of operation where the risk associated with disablement of the vehicle is considered sufficiently low.

As a specific example, the mode processor 203 can be coupled to a speed sensor which provides a measurement of the current speed of the vehicle. The mode processor 203 can simply determine the mode of operation as a function of this speed measure. For example, if the speed is below a given predetermined threshold, say 3mph, the mode processor 203 can determine that the vehicle is in a safe mode operation for a disabling and if the speed is above this predetermined threshold it can determine that the vehicle is in a non-safe mode of operation.

In some embodiments, the mode processor 203 can specifically * 20 determine that the vehicle is in a safe mode of operation only when it is at a standstill. * S *5*I

It will be appreciated that in many embodiments a more complicated determination of the safe or non-safe mode of operation based on a plurality of sensor inputs may be used.

*::: : For example, if the vehicle comprises location determination *:sSS functionality (such as a GPS receiver) the location of the vehicle can furthermore be used to determine if the vehicle is in a safe mode of operation. This can for example prevent that the vehicle is disabled in an unsuitable location, such as on a motorway.

When the disable processor 201 receives a disable message from the vehicle disable server 117 via the first remote terminal 101 it proceeds to determine if the mode processor 203 indicates that the vehicle is currently in a safe mode of operation for disablement. If so, the disable processor 201 proceeds to disable the vehicle.

specifically, in the example of FIG. 2, the disable processor 201 is coupled to a disable actuator 207 which physically disables the vehicle.

It will be appreciated that the actual disablement of the vehicle can be achieved in many different ways and using many different characteristics of the vehicle. For example, the disable actuator 207 can continuously apply a maximum brake force to the vehicle by actuating the brakes of the vehicle.

In the example of FIG. 2, the disable actuator 207 controls * 20 the operation of an engine 209 of the vehicle. The disable actuator 207 can directly control the engine 209 or can **..

control the supply of resources or signals to the engine * 209.

*s**** As a specific example, the disable actuator 207 can block : the fuel supply to the engine 209 and/or can interrupt the ignition of the engine thereby ensuring that the vehicle is brought to a standstill.

If the mode processor 203 indicates that the vehicle is not in a safe mode of operation when the disable message is received by the disable processor 201, the disable processor 201 can delay disabling of the vehicle until the mode processor 203 indicates that the vehicle has entered a safe mode of operation. For example, following the receipt of the disable message, the disable processor 201 may periodically poll the mode processor 203 to determine if the vehicle is in a safe mode of operation. When the mode processor 203 returns an indication that the vehicle is in a safe mode of operation, the disable processor 201 proceeds to control the disable actuator 207 to disable the vehicle.

In addition to the disablement of the vehicle the disable processor 201 may activate lights, alarms etc. to encourage the driver to stop the vehicle.

The system thus provides an efficient and highly useful service in a cellular communication system. For example, a value added anti-theft service can be provided to users of vehicles already having eCall functionality built into their vehicles. In contrast to conventional emergency services envisaged for eCall, such a value added service is suitable for generation of revenue to the network operator of the cellular communication system. Furthermore, the system is easy to implement, has low complexity and is suitable for reuse of equipment already used for other purposes (such as eCall equipment in the vehicles). fl * * *

It will be appreciated that any suitable means of communicating the disable message may be used. Specifically the disable instruction can be transmitted as a text message using a standard text messaging service of the cellular communication system, such as an SMS (Short Messaging Service) service. This can provide efficient and reliable communication of the disable message without requiring

introduction of complex functionality.

In some embodiments the disable message is directly addressed to the individual remote terminal and thus to the individual vehicle. However, in other embodiments the transmission over the cellular air interface may be via broadcast channels. Specifically the remote terminals embedded in vehicles can continuously monitor a specific broadcast channel of the serving cell and can detect any disable messages transmitted thereon. Each disable message can include an identification of the vehicle(s) to which it relates. The individual disable apparatuses can then decode the disable broadcast messages to determine if the disable instruction relates to the specific vehicle.

In some embodiments, the disable processor 201 can furthermore be arranged to re-enter the vehicle into a non-disabled mode of operation.

:.:::. In particular, a message can be received from the vehicle S...

ws disable server 117 instructing the disable processor 201 to terminate the disablement of the vehicle and thus to re-enter the vehicle into a normal mode of operation. This message may for example be sent by the vehicle disable : server 117 in response to an operator input.

As a specific example, after a vehicle has been recovered by e.g. the police following a disablement, the operator of the disable service can be informed and can consequently instruct the vehicle to exit from the disabled mode. When the enabling message is received from the vehicle disable server 117 the disable processor 201 can actively modify the operation of the vehicle to return to normal operation or it can simply terminate the disabling action. For example, if the disablement was achieved by blocking a fuel supply, this blocking can simply be terminated.

In some embodiments, the re-entering into a non-disabled mode of operation can be achieved by a local operation such as a local user entering a secure code or using a dedicated key.

In the example of FIG. 2, the disable apparatus also comprises a location processor 211 which determines a location of the vehicle. The location processor 211 can specifically be a GPS (Global Positioning System) receiver which determines the location in response to the GPS satellite as will be well known to the person skilled in the art.

In such embodiments, the disable apparatus can furthermore be arranged to generate a location message comprising a location estimate and to transmit this to the vehicle disable server 117 in response to receiving the disable message. In some such embodiments, when an operator of the vehicle disable server 117 disables the vehicle, the vehicle ::: : returns its current position thereby allowing the operator :.** to localize the vehicle. This may substantially facilitate location of the vehicle following a non-authorized use and can for example allow the police to find stolen vehicles.

It will be appreciated that the above description for clarity has described embodiments of the invention with reference to different functional units and processors.

However, it will be apparent that any suitable distribution of functionality between different functional units or processors may be used without detracting from the invention. For example, functionality illustrated to be performed by separate processors or controllers may be performed by the same processor or controllers. Hence, references to specific functional units are only to be seen as references to suitable means for providing the described functionality rather than indicative of a strict logical or physical structure or organization.

The invention can be implemented in any suitable form including hardware, software, firmware or any combination of these. The invention may optionally be implemented partly as computer software running on one or more data processors and/or digital signal processors. The elements and components of an embodiment of the invention may be physically, functionally and logically implemented in any suitable way. Indeed the functionality may be implemented in a single unit, in a plurality of units or as part of other * * functional units. As such, the invention may be implemented in a single unit or may be physically and functionally distributed between different units and processors.

Although the present invention has been described in connection with some embodiments, it is not intended to be limited to the specific form set forth herein. Rather, the scope of the present invention is limited only by the accompanying claims. Additionally, although a feature mayappear to be described in connection with particular embodiments, one skilled in the art would recognize that various features of the described embodiments may be combined in accordance with the invefltiofl. In the claims, the term comprising does not exclude the presence of other elements or steps.

Furthermore, although individually listed, a plurality of means, elements or method steps may be implemented by e.g. a single unit or processor. Additionally, although individual features may be included in different claims, these may possibly be antage0U5lY combined, and the inclUsiOfl in different claims does not imply that a combination of features is not feasible and/or antageOus. Also the inclusion of a feature in one category of claims does not imply a limitation to this category but rather indicates that the feature is equally applicable to other claim categories as appropriate. Furthermore, the order of features in the claims does not imply any specific order in which the features must be worked and in particular the order of Individual steps in a method claim does not imply that the steps must be performed in this order. Rather, the steps may be performed fl any suitable order. S... S * S...

SSS*S5 S * *5 * S.....

S

Claims

CLAIMS

1. An apparatus for disabling a vehicle, the apparatus comprising: a cellular transceiver for communicating over a cellular air interface of a cellular communication system; mode determining means for determining if the vehicle is in a safe mode of operation; disabling means for disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation.

2. An apparatus as claimed in claim 1 wherein the mode determining means is arranged to determine that the vehicle is in a safe mode of operation if a speed of the vehicle is below a threshold.

* *, 20 3. An apparatus as claimed in claim 1 or 2 wherein the mode determining means is arranged to determine that the vehicle is in a safe mode of operation if a speed of the vehicle is at a standstill.

4. An apparatus as claimed in any previous claim wherein : the disable message is a text messaging service message.

* **.S. * *

5. An apparatus as claimed in any previous claim wherein the disabling means is arranged to block a fuel supply to an engine of the vehicle.

6. An apparatus as claimed in any previous claim wherein the disabling means is arranged to disable ignition for an engine of the vehicle.

7. An apparatus as claimed in any previous claim wherein the apparatus comprises means for re-entering the vehicle into a non-disabled mode of operation following a disabling.

8. An apparatus as claimed in claim 7 wherein the means for re-entering is arranged to re-enter the vehicle into the non-disabled mode of operation in response to an enabling message received over the cellular air interface.

9. An apparatus as claimed in claim 7 or 8 wherein the means for re-entering is arranged to re-enter the vehicle into the non-disabled mode of operation in response to a manual user input.

10. An apparatus as claimed in any previous claim wherein * ** 20 the apparatus further comprises means for determining a location of the vehicle; and **SS means for transmitting a location indication over the cellular air interface in response to receiving the disable message.

: 11. A vehicle comprising a cellular transceiver for communicating over a cellular air interface of a cellular communication system; mode determining means for determining if the vehicle is in a safe mode of operation; disabling means for disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation.

12. A system for disabling a vehicle, the system comprising: a server coupled to a network of a cellular communication system, the server comprising means for receiving a disable request message identifying the vehicle, means for generating a disable message for the vehicle in response to the disable request message, and means for transmitting the disable message over a cellular interface; and a disable apparatus located in the vehicle, the disable apparatus comprising: a cellular transceiver for communicating over the cellular air interface, mode determining means for determining if the vehicle is in a safe mode of operation, and disabling means for disabling the vehicle in response * ** * to receiving a disable message over the cellular air interface, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation. S. * * a *

13. The system of claim 12 wherein the apparatus comprises means for determining a location of the vehicle; and means for transmitting a location indication to the server over the cellular air interface in response to receiving the disable message.

14. The system of claim 12 or 13 wherein the means for ransmittiflg the disable message over a cellular interface is arranged to broadcast the disable message.

15. A method of disabling a vehicle, the method comprising: communicating over a cellular air interface of a cellular communication system; determining if the vehicle is in a safe mode of operation; and disabling the vehicle in response to receiving a disable message over the cellular air interface, the disabling being performed only when the vehicle is in the safe mode of operation. * S * * * a's. S..' * a *51*

S 1S#SS * S

S I

I S S. S

I

* l.a.* 2c Amendments to the claims have been filed as follows

CLAIMS

1. An apparatus for disabling a vehicle, the apparatus comprising: a cellular transceiver for communicating over a cellular air interface of a cellular communication system, the cellular transceiver being arranged to monitor a specific broadcast channel to detect any disable messages transmitted thereon that include an identification of the vehicle; mode determining means for determining if the vehicle is in a safe mode of operation; disabling means for disabling the vehicle in response to receiving a broadcast disable message over the cellular air interface that includes the identification of the vehicle, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation; and means for re-entering the vehicle into a non-disabled mode of operation in response to an enabling message.

2. An apparatus as claimed in claim 1 wherein the mode determining means is arranged to determine that the vehicle is in a safe mode of operation if a speed of the vehicle is below a threshold.

3. An apparatus as claimed in claim 1 or 2 wherein the mode determining means is arranged to determine that the vehicle is in a safe mode of operation dependent upon a location of the vehicle.

(F1 424FP 4. An apparatus as claimed in any previous claim wherein the disabling means is arranged to actuate the brakes of the vehicle.

5. An apparatus as claimed in any previous claim wherein the disabling means is arranged to block a fuel supply to an engine of the vehicle.

6. An apparatus as claimed in any previous claim wherein the disabling means is arranged to disable ignition for an engine of the vehicle.

7. An apparatus as claimed in any previous claim wherein the disabling means include activating alerts in the vehicle.

8. An apparatus as claimed in claim 1 wherein the enabling message is received over the cellular air interface.

9. An apparatus as claimed in claim 1 wherein the enabling message is in response to a manual user input.

10. An apparatus as claimed in any previous claim wherein the apparatus further comprises means for determining a location of the vehicle; and means for transmitting a location indication over the cellular air interface in response to receiving the disable message.

rri,ICV)A D 11. A vehicle comprising a cellular transceiver for communicating over a cellular air interface of a cellular communication system, the cellular transceiver being arranged to monitor a specific broadcast channel to detect any disable messages transmitted thereon that include an identification of the vehicle; mode determining means for determining if the vehicle is in a safe mode of operation; disabling means for disabling the vehicle in response to receiving a broadcast disable message over the cellular air interface that includes the identification of the vehicle, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation; and means for re-entering the vehicle into a non-disabled mode of operation in response to an enabling message.

CE14924EP 12. A system for disabling a vehicle, the system comprising: a server coupled to a network of a cellular communication system, the server comprising means for receiving a disable request message identifying the vehicle, means for generating a broadcast disable message for the vehicle that includes the identification of the vehicle in response to the disable request message, and means for broadcasting the disable message over a cellular interface; and a disable apparatus located in the vehicle, the disable apparatus comprising: a cellular transceiver for communicating over the cellular air interface, the cellular transceiver being arranged to monitor a specific broadcast channel to detect any disable messages transmitted thereon that include an identification of the vehicle, mode determining means for determining if the vehicle is in a safe mode of operation, and disabling means for disabling the vehicle in response to receiving a broadcast disable message over the cellular air interface that includes the identification of the vehicle, the disabling means being arranged to only disable the vehicle when the vehicle is in the safe mode of operation; and enable apparatus for re-entering the vehicle into a non-disabled mode of operation in response to an enabling message.

CE1 4924EP 13. The system of claim 12 wherein the apparatus comprises means for determining a location of the vehicle; and means for transmitting a location indication to the server over the cellular air interface in response to receiving the disable message.

14. A method of disabling a vehicle, the method comprising: communicating over a cellular air interface of a cellular communication system by monitoring a specific broadcast channel to detect any disable messages transmitted thereon that include an identification of the vehicle; determining if the vehicle is in a safe mode of operation; and disabling the vehicle in response to receiving a broadcast disable message over the cellular air interface that includes the identification of the vehicle, the disabling being performed only when the vehicle is in the safe mode of operation; and re-entering the vehicle into a non-disabled mode of operation in response to an enabling message.

CE1 4924EP