DE10202321A1 - System and method for electronic authentication - Google Patents

Abstract

An electronic authentication system (2) for providing controlled access to an area, the system being designed to receive a transponder signal (B) and to authenticate the transponder signal (B), characterized in that the transponder signal has a secret security identification code and a public one Identification code included.

Description

FIELD OF THE INVENTION

The present invention relates to an electronic Authentication system to provide security access to an area. In particular, the invention relates to a transponder-based electronic Authentication system to enable access to a vehicle.

BACKGROUND OF THE INVENTION

Effective and convenient security access to a vehicle is important Characteristic for vehicles that are expensive and of high quality Have security systems. State-of-the-art vehicle safety systems Technology activate or block vehicle safety systems by transmitting a High-frequency signal to the vehicle from a key ring signal transmitter in the Possession of the driver. The transmitter is activated, for example, by pressing an unlock button or a lock button on the key ring device. Such Key ring device does not store or transmit information that is itself specifically refer to the driver or several drivers of the vehicle, but instead transmits a safety signal that is vehicle-specific.

Specific publications of systems based on the state of the art also describe passive communication devices that do not operate a key on a key ring before sending a signal to it Require vehicle. U.S. Patent No. 5,519,260 (Washington) describes one Tire worn by a person with a limited driving license. The foot tire serves as a transmitter, which sends a signal for reception by one Vehicle control system transmitted. A microprocessor inside the Vehicle control system recognizes the signal as a specific signal of the Person wearing a tire and determined according to one in the vehicle memory saved schedule of whether the person is authorized to drive the vehicle. The Tires can effectively serve as a transmitter, but do not transmit a signal to be obtained access to the vehicle, but only serves as an identifier, when the person is inside the vehicle.

Australian Patent Application No. 17904/95 describes a card that is known as electronic passport is used and on the personal details of the cardholder Transmission at border crossings are stored. The card transmitted Information by high frequency signals in response to coil excitation inside the card by an electrical field. Personal biometric characteristics the cardholder are stored on the card, such as B. the three-dimensional Geometry of the hand or face of the cardholder, and this information is then sent to an appropriate card reader to identify the Allow cardholder. This card is not for use with any Vehicle security system proposed and transmitted no secret Security code to gain access to the vehicle or other area gain.

SUMMARY OF THE INVENTION

An electronic authentication system to provide a controlled Access to an area, the system being designed to use a transponder Receive signal and authenticate the transponder signal, thereby characterizes that the transponder signal has a secret security identification code and includes a public identification code.

A preferred embodiment of the invention is installed in a vehicle in such a way that the area is inside the vehicle and the secret Security identification code is specific to the vehicle and the public Identification code a driver's license number or a passport number of the driver Vehicle. The vehicle preferably includes a display unit for Example on the dashboard inside the vehicle to display a picture the person corresponding to the driver's license number or passport number. This allows the observer to confirm that the driver and the picture to match.

A preferred embodiment of the electronic authentication system includes also a transponder device for transmitting the transponder signal in Response to a transponder request signal from the vehicle. The vehicle can have a passive access system, which is the approach of a person or the Proximity of the transponder and which is transmitted by sending a Transponder interrogation signal reacts. The transponder can be a small unit, such as B. act a card, which is passive and which in the Wallet or in the person's purse. In this form the transponder can also be used as a driver’s license or passport Corresponding identification information is graphically represented on it and designed in this way is that the transponder and the driver's license or passport are inseparable. alternative the transponder can be part of a hand-held, wireless Telecommunication unit, such as. B. a mobile phone or "personal digital assistant ". This hand-held device is preferably designed to store a visual image of the driver or a number of authorized drivers, and gives the holder of the device the possibility to choose among the authorized ones Drivers before the transponder signal is sent out. This enables the Vehicle to automatically redo certain vehicle settings so that they the pre-recorded preferred settings of the driver concerned correspond. Neither the transponder nor the vehicle actually transmit that Image of the driver as this would require too much data transmission. Instead the vehicle system stores the image in its memory along with the relevant public identification code for the driver and the hand-held Unit stores the image in its memory in a similar manner. If the Transponder is in the form of a card with no visual display means, the picture is not in saved in the card memory.

Another embodiment of the invention includes an external query system of the vehicle to determine the driver's identity. For example at border inspection posts or at authorities to use transit, travel or identify identity information as needed. The external system includes an interface unit, preferably hand-held, which one Display. The interface unit is in communication with one public information tools so if it is public Identification code on the part of the driver of the vehicle in response to one receives transmitted query signal, the interface unit is able to which to access public information database and optionally a picture of the Driver's display, as well as other relevant ones related to the driver related information. The external system is preferably such configured to receive public identification in one Record data acquisition means in communication with the interface unit.

In one embodiment of the invention, the system activates the ignition of the vehicle via a vehicle control system as soon as the authentication of the Transponder signal is carried out. The vehicle also becomes ordinary unlocked automatically after authentication. The transponder signal can Vehicle transmitted in such a way that the secret Security identification code and public identification code in parallel or in Series are transmitted. If the transponder signal is transmitted in parallel, the secret security identification code of the authentication of the public Identification code prefers authenticated to unlocking or To activate the engine ignition as soon as possible. For parallel transmission the secret security identification code and the public identification code transmitted simultaneously over different frequency bandwidths. If that Transponder signal is transmitted in serial form, the secret Security identification code transmitted first, so that authentication can be carried out as soon as possible, so that the complete transmission of the public identification code can only take place after the secret security identification code has been authenticated.

The transponder signal is preferably at least partially encrypted, whereby the secret security identification code is encrypted and the public one Identification code is optionally encrypted. The vehicle control system only has the key to decrypt the secret security identification code, which prevents third parties from fraudulently disclosing the secret Security identification code by stimulating the transmission of the Can receive transponder signal.

The present invention also includes an electronic method Authentication to provide controlled access to an area including the steps to initiate a transponder, a transponder signal to transmit, to receive the transponder signal and to the transponder signal authenticate, characterized in that the transponder signal has a secret Security identification code and a public identification code includes.

The present invention proposes a transponder suitable for use with the authentication system described and claimed above is.

The present invention also proposes a vehicle which Authentication system according to the description and stress above.

The preferred embodiments of the present invention represent the vehicle or the driver is not necessarily ready for automatic or fail-safe security. It it may happen that the actual Driver and the authorized driver is legitimate. However, the system does interested observers or authorities have useful feedback on which can trigger further verification or action.

The electronic authentication system advantageously offers the preferred one Practical and secure identification and authentication of the versions Driver of a vehicle.

BRIEF DESCRIPTION OF THE DRAWINGS

Fig. 1 is a block diagram of an electronic authentication system of one embodiment of the invention;

Fig. 2 is a block diagram of an electronic authentication system of another embodiment of the invention; and

Fig. 3 is a flow diagram of a method that is used by an electronic authentication system of one embodiment of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Reference is made to FIG. 1, where an electronic authentication system 2 is presented. The system 2 comprises a vehicle 12 with a vehicle control system 10 , which can communicate with a portable transponder unit 5 via radio frequency transmissions via the air interface. The vehicle control system 10 is in communication with a display unit 15 for displaying an image of a person recorded by the system 2 as the driver of the vehicle 12 . When a person carrying the portable transponder unit 5 approaches the vehicle 12 , the vehicle checks the approach (using a passive input sensor system of a known type) and outputs a transponder request signal A. The transponder interrogation signal A can have a generic form of transponder interrogation for a number of vehicle access systems or it can have a narrower target area for a specific vehicle or system model. The portable transponder unit 5 receives the transponder request signal A within a certain distance from the vehicle, for example in the order of a few meters, and then provides a transponder signal B. Depending on the security requirements, the transponder signal B can be partially or completely encrypted during transmission.

After receiving the transponder signal B from the vehicle control system 10 , the transponder signal B is decrypted as required and broken down into its components, namely a secret security identification code and a public identification code. The secret security identification code is checked by the control system in comparison with a secret vehicle security code which is specific to the vehicle. If the secret security identification code matches the secret vehicle security code, then it is considered authenticated and the control system continues the verification and compares the public identification code with one or more such codes stored in a memory of the control system 10 . The control system 10 stores the same number of driver data in its memory as the drivers programmed therein as authorized drivers of the vehicle, each record including an image of the driver that corresponds to an image on the driver's license or passport, and optionally additional ones. Information about the driver. If the public identification code provided with the transponder signal B matches the code in the memory of the control system 10 , the authentication of the transponder signal B is considered complete and the image of the authorized driver corresponding to the relevant public identification code is displayed on the display unit 15 . The control system 10 will also unlock the car and can additionally activate automatic ignition of the vehicle engine.

In one embodiment, the portable transponder unit 5 is a passive unit with an antenna 8 for radio frequency (RF) transmission of the transponder signal B in response to the transponder query signal A. In this embodiment, the portable transponder unit 5 is in the form of a card and can serve as a driver's license, where appropriate indications and information are presented. The card has a battery (not shown) and suitable storage capacity for signal processing and communications. In this form, the portable transponder unit 5 easily fits into a driver's wallet or handbag and does not need to be removed when approaching the vehicle or before entering the vehicle.

The transponder functions of the portable transponder unit 5 are integral and inseparable from the driver's license or passport functions to ensure that the unit 5 cannot be used to fraudulently confuse a person's identification.

In an alternative embodiment of the portable transponder unit 5 , the transponder functions of the unit can be included in the functions of another unit, such as. B. a radio telephone or a "personal digital assistant", which is the wireless high-frequency signal transmission via the antenna 8 powerful. In this embodiment, the transponder interrogation signal A can be received in a frequency band that differs from that of the previously described embodiment due to the sophisticated telecommunication capabilities of the portable transponder unit 5 of this embodiment. Similarly, transponder signal B can be transmitted to vehicle 12 in a different frequency band. The transponder signal B is received by a vehicle antenna 22 and decrypted by a portable base station 18 in the vehicle 12 . The control system 10 communicates with the portable base station 18 as described below with reference to Fig. 2. The portable transponder unit 5 of this embodiment includes a transponder display 6 for normal display functions of the unit and optionally includes the ability to display an image of a person corresponding to that of the public identification code transmitted to the transponder signal B. If several drivers are authorized to drive the vehicle 12 , the portable transponder unit 5 of this embodiment can preferably include data from these authorized drivers, which are the same as those stored in the control system 10 , and allows the owner of the portable transponder unit 5 to use a different driver than the one who identified as the standard driver. This selection can take place while the person is approaching the vehicle or after entry into the vehicle 12 has been obtained after the authentication has already been carried out automatically on the basis of the public identification code of the standard driver. Activating the driver selection with the portable transponder unit 5 has the advantage that preferred vehicle settings for a specific driver are made automatically by the vehicle after the public identification code for the driver in question has been received. The transponder display 6 additionally provides the visual confirmation of the relevant authenticated driver. The selection from among the various authorized drivers of the vehicle using the portable transponder unit 5 can be carried out on the basis of already known functions and key operations in conjunction with a radio telephone, “personal digital assistant” or other devices. Alternatively, the portable transponder unit 5 can be designed such that it transmits the transponder signal B into the unit 5 after the driver has entered the relevant public identification code manually.

In a preferred embodiment, the secret security identification code is encrypted before the transponder signal B is transmitted, or it can be stored in encrypted form in the portable transponder unit 5 . The control system 10 contains the key for decrypting the secret security identification code. The encryption and decryption is carried out according to secure methods from the known prior art. Optionally, the public identification code can also be encrypted using either the same form of encryption as that used for the secret security identification code or a different encryption method using a (secret - limited access) public key to enable public authorities to access the public identification code decrypt.

After receiving the transponder interrogation signal A, the portable transponder unit 5 transmits the transponder signal B in parallel over two different frequency bands, so that the secret security identification code and the public identification code are transmitted simultaneously. In this case, the vehicle control system 10 receives both frequency bands simultaneously and decrypts them accordingly. If necessary, the decoding and decoding of the secret security code is given priority over the public identification code. This enables the control system 10 to initiate unlocking and vehicle ignition processes as soon as possible after receipt of the transponder signal B, the decoding and processing of the public identification code being only temporarily delayed.

In a further embodiment, the portable transponder unit 5 transmits the transponder signal B in a serial manner using a single frequency band. In this embodiment, the secret security identification code is transmitted prior to the transmission of the public identification code to provide early authentication of the driver in a similar manner and for a similar purpose as described above with regard to the parallel transmission execution.

The control system 10 shown in FIGS. 1 and 2 integrates the functions of the electronic authentication system 2 located in the vehicle, including signal transmission and reception (via the base station 18 ), coding and decoding and decoding of signals and authentication procedures. These functions are in addition to all other normal vehicle control system functions, such as. B. unlocking and engine ignition functions performed by the overall control system of the vehicle. Alternatively, the control system 10 described here can have distributed control functions, so that a dedicated controller is provided for handling the electronic authentication and signal processing and transmission functions, the controller remaining in communication with the remaining parts of the overall control system via a vehicle network (car area network = CAN) , As a further alternative, the authentication, signal processing and transmission / reception functions can be distributed to separate controllers within the control system 10 .

Fig. 3 shows a process flow diagram used by the electronic authentication system 2 of a preferred embodiment. Referring now to FIG. 3, step 100 , where vehicle 12 tests a person's approach using a passive entrance tester. In step 105 , the control system 10 transmits the transponder query signal A. In step 110 , the control system 10 monitors whether a transponder signal B is received in response to the transmitted query signal A; and if a transponder signal B is not received, the vehicle remains locked at step 115 . If a transponder signal B is received, this signal is processed in step 120 . If the processed transponder signal B is authenticated in step 125 , the vehicle is unlocked in step 130 . If the signal is not authenticated, the vehicle remains locked at step 115 . If there is a display unit 15 inside the vehicle, then as soon as the vehicle is unlocked at step 130 , the image of the public identification code received by the transponder signal B is shown on the display unit 15 at step 135 .

Referring now to FIG. 2, another embodiment of the electronic authentication system 2 is shown. This embodiment assumes that the driver has been authenticated, got into the vehicle 12 and drives the same, with the portable transponder unit 5 being inside the vehicle 12 . In fact, a passenger in the vehicle can also have a valid portable transponder unit 5 . (If two people in possession of valid transponder units 5 approach the locked vehicle at the same time, the vehicle will authenticate the transponder signals and unlock the vehicle as normal, but provide the driver with a selection function to inform the vehicle which of the two authenticated drivers actually drive the vehicle becomes). In this embodiment, the vehicle 12 comprises a vehicle base station 18 with an antenna 22 for transmitting and receiving the various signals required for authentication. Base station 18 may be of a type suitable for activating wireless telecommunications through a radio network. However, the base station must at least be able to communicate with wireless devices in close proximity, e.g. B. the portable transponder unit 5 and interface unit 20 (described below). The base station 18 is in communication with the control system 10 in order to forward the received transponder signal B and to transmit the transponder interrogation signal A as required.

In a further embodiment shown in FIG. 2, the electronic authentication system 2 comprises an external system (outside the vehicle 12 ). The external system comprises an interface unit 20 with a display 25 and a vehicle recognition unit 24 . The interface unit 20 is in communication with a public information database 30 with access to public identification information, such as. B. Personal details that appear on driving licenses and passports, as well as photos associated with this information. The vehicle detection unit 24 can be any suitable device for detecting the presence of a vehicle, such as. B. a camera or an induction coil located under the road surface, and is arranged so that it communicates the detection of the vehicle 12 of the interface unit 20 . In response to the notification from the vehicle recognition unit that a vehicle has been recognized, the interface unit 20 sends an external trigger (or query) signal C to the vehicle 12 , which is then received by the antenna 22 . In response to the receipt of the external trigger signal C, the control system 10 sends a transponder request signal A to the one or more portable transponder units 5 inside the vehicle. The external system then monitors the transmission of the transponder signal B in response to the transponder request signal A from the control system 10 to the one or more portable transponder units 5 inside the vehicle. The external system has antennas (not shown) attached at advantageous positions, which are tuned to receive the transponder signal B from the portable transponder unit 5 in this way. Upon receipt, the signal is treated as an interrogation response signal D and decoded by the external system to obtain the public identification code while the encrypted secret security identification code is discarded. With this embodiment, the transponder signal can be obtained in response to any action that prompts the control system 10 to send the transponder query signal A - e.g. B. if the vehicle is touched by a person (e.g. police officer) - to activate the passive access detection system and to start the method described in relation to FIG. 3. In an example of a preferred embodiment, the transponder signal B is received by an antenna (not shown) in the (optional) portable interface unit 20 , which then shows an image of a person according to the received public identification code to give the police officer the opportunity to identify himself of the driver.

When the interface unit 20 receives the query response signal D from the vehicle 12 (which is actually the transponder signal B from the portable transponder unit 5 on board the vehicle 12 ), the public identification code is used for each authenticated person in the vehicle 12 , to find out the relevant public information data for each such person from the public information database 30 . Corresponding images (preferably the images on the driver's license or passport of the authenticated driver) appear on the external interface display 25 . The external system then logs the passing or checking of the vehicle and authenticated driver for monitoring and / or control. This logging is carried out by software installed in the interface unit 20 or at an external location which is connected, for example, to the public information database 30 . The logging is automatic regardless of whether the interface unit is monitored by a person or not.

In an alternative embodiment, in response to the receipt of the external trigger signal C, the control system 10 responds by transmitting a query-response signal D via antenna 22 , which contains the public identification codes of the authenticated transponder units 5 within the vehicle. In this way, the control system 10 reacts directly to the external trigger signal C without causing the transponder signal B to be transmitted by the portable transponder unit 5 located inside the vehicle. Since the control system 10 has the public identification code of the authenticated driver in its memory, it is an easy task to transmit this information via its antenna 22 without it being necessary for the external system to check for the transponder signal B (to listen in ).

External interface 20 may be a handheld or otherwise portable device used by police for spontaneous traffic controls, or it may be attached in place, for example at a border crossing. If the interface unit 20 is hand-held, then there is no vehicle recognition unit 24 . However, if the interface unit 20 is attached to a border crossing, for example, then the vehicle detection unit 24 will be located at a location before the crossing.

In a preferred embodiment, the portable transponder unit 5 is reprogrammable. This can only be carried out under the strictest security conditions, for example in such a way that a car dealer can reprogram the secret security identification code when someone buys a new vehicle or wishes to have the unit 5 additionally programmed for a second vehicle. The reprogramming is preferably carried out by a public authority or an officially approved body and under the strictest security conditions that prevent fraudulent misuse of the authentication system 2 . The public identification code is stored in a memory part of the transponder unit 5 , probably by the car dealer when the vehicle is purchased, and can be reprogrammed in response to a security access code owned by the car dealer. The secret security identification code is stored in another memory part of the transponder unit 5 by the vehicle manufacturer and can be reprogrammed in response to a different security access code than that which is used for programming the public identification code. The control system 10 is preferably also reprogrammable in order to connect different drivers to the vehicle under similarly strict safety conditions. The portable transponder unit 5 , if it includes a display 6 , can also be reprogrammed in order to change the image stored on it.

Claims (17)

1. An electronic authentication system ( 2 ) for providing controlled access to an area, the system being designed to receive a transponder signal (B) and to authenticate the transponder signal (B), characterized in that the transponder signal is a secret Includes security identification code and a public identification code. 2. The system according to claim 1, characterized in that the area is inside the vehicle ( 12 ), the secret security identification code is specific to the vehicle ( 12 ) and the public identification code is a driver's license number or a passport number of the person who authorizes is to drive the vehicle. 3. The system according to claim 1, further characterized in that the system includes at least one display unit ( 6 , 15 , 25 ) for issuing an image of a person connected to the public identification code after authentication of the transponder signal (B). 4. The system according to claim 1, further characterized in that the system includes a portable unit ( 5 ) with selection means for selecting a person from a plurality of persons and has transponder means for providing the transponder signal in response to the selection means, the public identification code of the transponder signal is connected to the selected one person. 5. The system according to claim 1, characterized in that the area is inside the vehicle ( 12 ) and that the system further includes an external system that is external to the vehicle ( 12 ) and an interface unit ( 20 ) which is in communication with a public information medium ( 30 ), the interface unit ( 20 ) having a display ( 25 ) which is designed, in response to the reception from the interface unit ( 20 ), of one of the vehicles ( 12 ) connected transponder ( 5 , 18 ) outgoing query response signal (B, D) to show an image of a person associated with the public identification code, the query response signal (B, D) being the public one Identification code of the person. 6. The system according to claim 5, further characterized in that the external system includes sensor means ( 24 ) for recognizing the vehicle ( 12 ) and query means for transmitting an external query signal (C) in response to the recognition of the vehicle ( 12 ), wherein the query response signal (B, D) is received in response to the external query signal (C). 7. A transponder unit ( 5 ) characterized in that it is suitable for use with the electronic authentication system according to claim 1 and that it is designed to transmit the transponder signal (B) in response to a transponder request signal (A). 8. The unit according to claim 7, further characterized in that the unit ( 5 ) serves as a driver's license or passport and the public identification code is shown thereon. 9. The system according to claim 1, characterized in that the system includes a control system ( 10 ) of a vehicle ( 12 ), wherein in response to the authentication of the transponder signal (B) the control system ( 10 ) is designed to ignite an engine to activate the vehicle ( 12 ). 10. The system according to claim 2, characterized in that the system is designed to transmit an unlock signal to a control system ( 10 ) of the vehicle ( 12 ) for unlocking the vehicle ( 12 ), the secret security identification code and the public security identification code in parallel are received over different radio frequency bands and the system is designed to authenticate the secret security identification code before authentication of the public identification code and to transmit the unlock signal to the control system ( 10 ) in response to the authentication of the secret security identification code. 11. The system according to claim 2, characterized in that the system is designed to transmit an unlock signal to a control system ( 10 ) of the vehicle ( 12 ) for unlocking the vehicle ( 12 ), the secret security identification code being in a serial transmission upon receipt of the public identification code, and the system is configured to authenticate the secret security identification code prior to full receipt of the public identification code and to transmit the unlock signal to the control system ( 10 ) in response to the authentication of the secret security identification code. 12. The system according to claim 1, further characterized in that it includes a transponder unit ( 5 ) which is designed to transmit the transponder signal (B). 13. The system of claim 1 further characterized in that the system is designed to provide a transponder interrogation signal (A) to stimulate the To transmit the transponder signal (B). 14. A vehicle in which the system according to claim 1 is installed. 15. The system of claim 1 further characterized in that Transponder signal (B) is encrypted. 16. A method of electronic authentication to provide controlled access to an area, including the steps of causing the transponder ( 5 ) to transmit a transponder signal (B), receive the transponder signal (B) and the transponder signal (B) to authenticate, characterized in that the transponder signal includes a secret security code and a public identification code. 17. The method according to claim 16, further characterized by the step of storing the public identification code in a first memory part of the transponder ( 5 ) after the secret security identification code has been stored in a second memory part of the transponder ( 5 ), specifically before the step the cause.