DE102017202086A1 - Authentication device, authentication system and method for authenticating a user of a vehicle - Google Patents

Abstract

The invention relates to an authentication device (30) for a vehicle (20), comprising: - a microcontroller (32); - a card radio interface (31) for bidirectional communication with the vehicle, wherein the authentication device (30) is adapted to an authentication state, in particular a challenge-response authentication to perform an active state, wherein a sensor means (33) by means of which the authentication device (30) from the active state can be brought into a passive state, wherein in the passive state, no authentication method is performed.

Description

The invention relates to an authentication device, an authentication system and a method for authenticating a user of a vehicle.

Known authentication system / authorization systems for vehicles, such. So-called passive keyless systems or so-called hands-free entry / go systems or keyless entry / go systems, do not require an authorization means or an authentication device, e.g. a mechanical or wireless key to take in hand to trigger certain actions.

Thus, it is possible with such systems, for example, to unlock a vehicle without active use of an authorization means or authentication system and start by the mere pressing a start button. This is made possible by the authorization means or a keyless entry key with a chip, which the user carries with him.

In prior art systems, the vehicle transmits a faint signal with a range of a few meters that the authentication device receives. The authentication device then sends a signal to the vehicle, which uses the vehicle to decide whether it is an authorized authorization means and whether based on access authorization commands can be implemented (see Challenge-Response authentication).

Thus, such authentication system do not require conscious user interaction at the authentication device, but only check whether the authentication device in the moments in which a review of the authorization should be in the immediate vicinity of the car - in the case of access - or in the car - in the case a driving authorization - is.

In the context of this authentication system, attack scenarios, which rely on special features of the associated technologies, come to the fore.

Thus, attack scenarios are now known in which the associated radio link of the authorization system or the radio link between the key and the vehicle is extended. These are so-called relay attacks or relay station attacks (RSA).

In such a relay attack the signal of the vehicle is forwarded or extended to the authorization means by means of an antenna pair. One antenna / relay station must be close to the vehicle (typically less than 2 meters) and the other antenna / relay station close to the authorized authority (typically a few meters). The distance between the two relay stations (radio link extension stations) can be very large and is only dependent on the specific implementation of the relay stations whose goal is typically criminal in nature and in which one can not assume that regulatory provisions have a limiting effect.

Thus, the vehicle may be opened and / or started by means of a relay attack, although the authentication device is far out of the usual distance for an opening or driving authorization of the vehicle.

The invention is therefore based on the object to provide an authentication device with a better security standard. Furthermore, a corresponding system and method should be specified.

• - einen Mikrokontroller;
• - eine Karten-Funkschnittstelle zur (bidirektionalen) Kommunikation mit dem Fahrzeug, wobei die Authentifikationseinrichtung dazu ausgebildet ist, in einem Aktivzustand ein Authentifizierungsverfahren, insbesondere eine Challenge-Response-Authentifizierung, durchzuführen,
• - ein Sensormittel mittels dem die Authentifikationseinrichtung aus dem Aktivzustand in einen Passivzustand bringbar ist, wobei in dem Passivzustand kein Authentifizierungsverfahren durchgeführt wird.

This object is achieved by the vehicle according to claim 1 and by the system according to claim 6. In particular, the object is achieved by an authentication device for a vehicle, wherein the authentication device comprises:

• a microcontroller;
• a card radio interface for (bidirectional) communication with the vehicle, wherein the authentication device is designed to perform an authentication method, in particular a challenge-response authentication, in an active state,
• - A sensor means by which the authentication device from the active state can be brought into a passive state, wherein in the passive state, no authentication method is performed.

A core of the present invention therefore consists in equipping the authentication device with a sensor means which makes it possible, preferably manually, to place the authentication device in a passive state. In a corresponding passive state, the authentication device may be configured such that it does not respond to requests from, for example, a vehicle. As such, it is possible to intervene in the authentication process and shut down in situations where keyless access to the vehicle is undesirable or unnecessary. For example, the user of the vehicle can deactivate his authentication device when he is at home and on no longer wants access to his vehicle for the foreseeable future.

By providing the sensor means and the passive state, it is possible to avoid or at least limit the described relay attacks in such a way that a loss of the vehicle can be recognized in a timely manner.

The sensor means can be designed in different ways. According to the invention, the sensor means may comprise a fingerprint sensor, a (mechanical) switch, a touch sensor and / or other actuators.

In one embodiment, the sensor means is a preferably mechanical switch for interrupting a circuit and / or a circuit. As far as the authentication device is a battery-operated device, a very simple but advantageous embodiment of the authentication device can simply interrupt the power supply of the authentication device. A prominent example of this can be an active RFI D tag.

In another embodiment, the switch is integrated into a circuit such that it interrupts the circuit in the passive state and / or switches without function. An example of this may be a passive RFI D tag, where the necessary energy to drive the circuit is picked up by the antenna. For example, in this configuration, the switch may disconnect the antenna from the processor so that the energy received by the antenna does not reach the processor.

In a (further) embodiment, the microcontroller of the authentication device is designed to perform the authentication method and to query at least one state of the sensor means to determine whether the authentication device is in the passive state. Finally, the authentication device can comprise a full-fledged microcontroller or microprocessor, which can execute complex arithmetic operations. In this constellation, regardless of an existing or non-existent power supply, it can be ascertained in which state the authentication device is located and, depending thereon, responded to an authentication request.

In this embodiment, for example, the sensor means may be configured as a fingerprint sensor, wherein the switching between a passive to an active state only takes place when a known finger on the authentication device, in particular placed on the fingerprint sensor. Of course, a corresponding embodiment is also conceivable without a fingerprint sensor, in which the microcontroller, for example, simply queries the state of a mechanical switch or any other sensor means.

In one embodiment, the authentication device is relatively small and portable. Preferably, it is executed in credit card format.

The object mentioned at the outset is furthermore achieved by an authentication system. In one embodiment, this authentication system comprises a vehicle and an authentication device. The authentication device is preferably one of the authentication devices described above. The vehicle may be a motor vehicle.

In one embodiment, the vehicle has a microprocessor and a vehicle radio interface to authenticate the authentication device, wherein the vehicle is configured to change to an open and / or running state in response to a successful authentication of the authentication device.

According to the invention, therefore, the vehicle can initiate the authentication process and release the vehicle depending on the result achieved. A release may be, for example, unlocking or opening one or more doors and / or switching the vehicle to a ready-to-drive state. In the running state, for example, it is possible to start the engine by pressing a button.

In one embodiment, the vehicle and the authentication device each comprise at least one (digital) key to establish an encrypted communication link between the two units. The encrypted communication connection may be based on a symmetric or asymmetric encryption method.

In one embodiment, a challenge-response authentication is performed over the encrypted communication connection. Preferably, therefore, a two-stage security mechanism is implemented, wherein first a secure communication connection between the authentication device and the vehicle is established. After establishing this encrypted communication link, the authentication device authenticates in response to a corresponding request from the vehicle. Through a corresponding two-stage mechanism is the Security of the authentication process further increased.

• - Empfang einer Nachricht seitens einer/der Authentifikationseinrichtung des Nutzers;
• - Abfragen eines Sensorzustands eines durch einen Benutzer betätigbaren bzw. benutzbaren Sensormittels;
• - Ermittlung eines Aktivierungszustands basierend auf dem Sensorzustand, wobei die Antwort auf die empfangene Nachricht nur dann übermittelt wird, wenn der Aktivierungszustand angibt, dass sich die Authentifikationseinrichtung in einem Aktivzustand befindet.

The object mentioned at the outset is furthermore achieved by a method for authenticating a user of a vehicle, which comprises the following steps:

• - Receiving a message from one / the authentication device of the user;
• - sensing a sensor state of a user-operable sensor means;
• Determining an activation state based on the sensor state, wherein the response to the received message is transmitted only if the activation state indicates that the authentication device is in an active state.

The method has similar advantages as have already been described in connection with the authentication system and the authentication device.

In one embodiment, the method is performed using one of the authentication devices already described. In a (further) embodiment, the method is performed by an authentication system, as has already been described.

The object mentioned at the outset is furthermore achieved by a computer-readable storage medium which contains instructions which cause at least one processor to implement the described method. Again, there are the advantages already explained.

The invention will be described with reference to further embodiments, which are explained in more detail with reference to figures.

• 1 ein erfindungsgemäßes Authentifikationssystem 30, umfassend ein Fahrzeug sowie eine Authentifikationseinrichtung;
• 2 eine schematische Darstellung des Bordnetzes des Fahrzeugs aus 1;
• 3 eine schematische Darstellung der Authentifikationseinrichtung aus 1.

Hereby show:

• 1 an authentication system 30 according to the invention comprising a vehicle and an authentication device;
• 2 a schematic representation of the electrical system of the vehicle 1 ;
• 3 a schematic representation of the authentication device 1 ,

In the following description, the same reference numerals are used for identical and equivalent parts.

1 shows a vehicle 20 as well as an authentication device that communicate with each other in communication. In the exemplary embodiment shown, the communicative connection is based on a radio link between the authentication device 30 and the vehicle 20 ,

2 schematically shows the structure of a vehicle electrical system 21 of the vehicle 20 , Within the electrical system 21 is via a bus 27 communicated. On this bus 27 hangs a microcontroller 23 , several sensors 22 as well as several actuators 24 ,

At the actuators 24 it can be, for example, an ignition and the sensors 22 a button that starts the vehicle 20 triggers. It is obvious that the electrical system 21 is greatly simplified to illustrate the invention.

According to the invention hangs on the bus 27 a vehicle radio interface, which is designed with the authentication device 30 to communicate. In the embodiment shown, first an encrypted connection between the authentication device 30 and the vehicle 20 produced. After that leads the microcontroller 23 a program code resulting in a challenge-response authentication. As far as the authentication process is completed positively, ie the authentication device 30 responds to the request in the correct way, the microcontroller changes 23 in a state in which it is possible to start the vehicle.

In one (other) embodiment, the sensors 22 a proximity sensor, wherein the authentication method is triggered in response to a user approaching the vehicle. In this constellation, a successful authentication can unlock the vehicle 20 to lead. For example, the actuators 24 also include the necessary electric motors for central locking.

3 shows a highly schematic of an inventive authentication device 30 , The authentication device 30 includes a card radio interface 31 , a card microcontroller 32 as well as a mechanical switch 33 , The card microcontroller 32 is in communication with the card radio interface 31 as well as with the switch 33 , Regarding the switch 33 it is the card microcontroller 32 possible to determine in which switching state the switch 33 located. The card radio interface 31 is designed to be with the vehicle radio interface 25 to communicate. In an active state of the authentication device 30 receives the card radio interface 31 a request for authentication from the vehicle radio interface 25 , processes this request and answers it.

Correctly answering the request will then result in the vehicle as already explained 20 unlocked and / or put into a running condition.

The desk 33 can be operated by the user. By means of this switch, it is possible for the user to switch the authentication device from the already described active state into a passive state. Once the card microcontroller 32 determines that the switching state of the switch 33 has changed, this changes to the passive state. In this passive state are via the card radio interface 31 received requests are no longer answered.

By assuming the passive state, the user gets an active control over how the authentication device 30 to a request. Due to this active control, various attacks that aim to steal the vehicle can be fended off. In this respect, the system according to the invention makes it possible 1 to increase the security of the authentication system.

The individual embodiments described can be combined in various ways.

LIST OF REFERENCE NUMBERS

1

system

20

vehicle

21

board network

22

sensors

23

microcontroller

24

actuators

25

Vehicle radio interface

27

bus

30

authenticator

31

Card radio interface

32

Card microcontroller

33

switch

Claims (11)

An authentication device (30) for a vehicle (20), comprising: - a microcontroller (32); - A card radio interface (31) for bidirectional communication with the vehicle, wherein the authentication device (30) is adapted to perform in an active state, an authentication method, in particular a challenge-response authentication, characterized by : a sensor means (33) by means of the authentication device (30) from the active state in a passive state can be brought, wherein in the passive state, no authentication method is performed. Authentification device (30) according to Claim 1 , characterized in that the sensor means (33) comprises a switch for interrupting a circuit and / or a circuit. Authentification device (30) according to Claim 1 or 2 characterized in that the microcontroller (32) is adapted to perform the authentication method (30) and to interrogate at least one state of the sensor means (33) to determine if the authentication device (30) is in the passive state. Authentification device (30) according to Claim 1 Characterized in that the sensor means (33) comprises a fingerprint sensor. Authentification device (30) according to Claim 1 , characterized in that the authentication device (30) has a credit card format. Authentication system (1) comprising a vehicle (20), in particular a motor vehicle, and at least one authentication device according to one of the preceding claims, characterized in that the vehicle comprises a microprocessor (23) and a vehicle radio interface (25) to the authentication device (30), wherein the vehicle (20) is adapted to switch to an open and / or running state in response to a successful authentication of the authentication device (30). Authentication system after Claim 6 , characterized in that the vehicle and the authentication device (30) each comprise at least one key to communicate with each other via an encrypted communication connection, in particular via a symmetric or asymmetric encryption method. Authentication system after Claim 6 or 7 , especially after Claim 7 , characterized in that the vehicle (20) is adapted to perform a challenge-response authentication via the encrypted communication connection. Authentication system according to one of Claims 6 to 8th , especially after Claim 8 , by characterized in that the vehicle comprises a proximity sensor and / or a position sensor for detecting the position of a user and / or the authentication device (30) relative to the vehicle (20). Method for authenticating a user of a vehicle (20), in particular by means of an authentication device (30) according to one of Claims 1 to 5 and / or in an authentication system according to one of Claims 6 to 9 comprising the steps of: receiving a message from an authentication device (30); - Inquiry of a sensor state of a user operable or usable sensor means; - Determining an activation state based on the sensor state, wherein a response to the message is transmitted only if the activation state indicates that the authentication device (30) is in an active state. A computer readable storage medium containing instructions that cause at least one processor to retry a method Claim 10 to implement.

Images