EP1051556B1 - Motor vehicle locking system with open-ended code and identification - Google Patents

Motor vehicle locking system with open-ended code and identification Download PDF

Info

Publication number
EP1051556B1
EP1051556B1 EP99907432A EP99907432A EP1051556B1 EP 1051556 B1 EP1051556 B1 EP 1051556B1 EP 99907432 A EP99907432 A EP 99907432A EP 99907432 A EP99907432 A EP 99907432A EP 1051556 B1 EP1051556 B1 EP 1051556B1
Authority
EP
European Patent Office
Prior art keywords
code
identification
keyword
locking
unlocking
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
EP99907432A
Other languages
German (de)
French (fr)
Other versions
EP1051556A1 (en
Inventor
Alain Brillon
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Continental Automotive France SAS
Original Assignee
Siemens VDO Automotive SAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens VDO Automotive SAS filed Critical Siemens VDO Automotive SAS
Publication of EP1051556A1 publication Critical patent/EP1051556A1/en
Application granted granted Critical
Publication of EP1051556B1 publication Critical patent/EP1051556B1/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • E—FIXED CONSTRUCTIONS
    • E05—LOCKS; KEYS; WINDOW OR DOOR FITTINGS; SAFES
    • E05B—LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
    • E05B49/00—Electric permutation locks; Circuits therefor ; Mechanical aspects of electronic locks; Mechanical keys therefor
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
    • G07C2009/00206—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the keyless data carrier being hand operated
    • G07C2009/00214—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the keyless data carrier being hand operated by one push button
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
    • G07C2009/0023—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks with encription of the transmittted data signal
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
    • G07C2009/00238—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the transmittted data signal containing a code which is changed
    • G07C2009/00246—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the transmittted data signal containing a code which is changed periodically, e.g. after a time period
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
    • G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
    • G07C2209/06—Involving synchronization or resynchronization between transmitter and receiver; reordering of codes

Definitions

  • the present invention relates to a locking system for doors of a motor vehicle, and more particularly to such a system comprising a remote control with an evolving code likely to require a resynchronization between transmitter and receiver.
  • the object of the present invention is therefore to propose a system which allows reliable resynchronization between transmitter and receiver, whatever the because of the desynchronization.
  • the present invention therefore also aims to propose a system which allows a reliable resynchronization between transmitter and receiver, which is economical, safe and transparent for the user.
  • a locking system for a vehicle automobile comprising a device for locking / unlocking vehicle doors suitable for receiving a locking / unlocking code doors and to control unlocking if the code received corresponds to a expected code, said code being of the evolving type composed from a first keyword basic and a second pseudo-random keyword; an identification device and minus a key comprising on the one hand a remote control transmitter adapted for transmit a control code to the vehicle door control device locking / unlocking doors, on the other hand an identification responder adapted to transmit a key identification code in response to a request from the identification device.
  • the command upon reception of a lock / unlock code doors that do not correspond to the expected code, the command memorizes the code received and updates its image of the second keyword by function of the code received if the identification device confirms a positive identification of the key.
  • the updating day is only allowed if the confirmation of a positive identification of the key intervenes in a predetermined time interval after reception of the locking / unlocking.
  • control device calculates the image of the second keyword by partial inversion of the code received according to the first basic keyword.
  • control device determines the image of the second keyword by searching for the code received in a list of codes established from the basic keyword and a sequence of second keywords possible.
  • the locking / unlocking code includes a public identification header of the key separate from the identification code and the device command memorizes the code received only if this header corresponds to one of the keys authorized.
  • FIG. 1 in which a vehicle 1 has been represented. equipped with a door locking / unlocking control device 10 conventionally comprising a remote control receiver, a decoder adapted for compare a code received with an expected code and control means of motors or actuators operating the vehicle door locks. These means, well known in the prior art, will not be detailed further and are not shown explicitly in the drawing. Vehicle 1 is also equipped with an identification device 20, possibly forming part of a vehicle immobilizer. The control device 10 and the device 20 are connected to each other by a communication bus B.
  • a key 30 equipped on the one hand a remote control transmitter 31, controlled by a switch 33 and powered by a battery 34, and on the other hand an identification responder 32.
  • the driver presses the switch 33, which induces the remote control transmitter 31 to send an unlock code Ci to the locking control device 10.
  • This transmission can be carried out by the 'Intermediate electromagnetic waves in radio frequencies, or by emission of infrared radiation.
  • the code Ci issued is of the evolving type, that is to say that successive codes are different from each other.
  • One classically carries out such a code by combining by an algorithm f a first basic keyword Cb with a second pseudo-random keyword Ni.
  • This second keyword is generally developed from the number of presses on the switch 33 from an initialization step in which the control device 10 and the remote control transmitter 31 have been programmed with the same basic keyword.
  • control device 10 receives an unlocking code Ci, it compares it with an expected code, developed by the same algorithm f, from the basic keyword Cb and the current image N'i of the second keyword it holds. If the code received corresponds to the expected code, the vehicle doors are unlocked.
  • the image of the second keyword held by the remote control transmitter 31 can be modified and the Ci code issued does not correspond more to the code expected by the control device 10.
  • the control device 10 stores the Ci unlock code received, but does not command unlocking of doors.
  • the user is then led to mechanically unlock the doors at the using the mechanical part of the key and inserting the key into the contact cylinder of the vehicle to start the engine.
  • This action then triggers a process identifying the key by means of an identification device 20, known as Phone.
  • the identification device 20 sends an identification request by means of a magnetic coupling loop, request to which the identification responder 32 placed in the key responds by modulating the magnetic field emitted according to a code Xp identification.
  • This identification code is compared to a reference code programmed in the identification device 20, to authorize the start of the engine in case of a match.
  • the device identification 20 transmits via bus B, to the control device lock confirmation that the key presented is a key authorized.
  • the control device 10 uses the unlocking code Ci received and memorized for update its image of the second keyword Ni.
  • this update is carried out by calculating the value of the second keyword from the code Ci received and from the basic keyword Cb.
  • the algorithm f for encryption of the code is at least partially invertible, that is to say that there is an algorithm f N -1 which makes it possible to obtain the value of Ni knowing Ci and Cb.
  • Such algorithms are known to those skilled in the art and do not significantly degrade the security of the system because only knowledge of the basic keyword Cb makes it possible to find the second keyword Ni, and this basic keyword is never exchanged between the key and the vehicle outside the factory initialization phase.
  • updating the second keyword can be performed, by analogy with the prior art, by searching for the code received Ci in a list of possible codes developed using the algorithm f of encryption from the basic keyword Cb and a sequence of second keywords Ni possible.
  • searching for the code received Ci in a list of possible codes developed using the algorithm f of encryption from the basic keyword Cb and a sequence of second keywords Ni possible.
  • the locking system according to the invention can be further improved by introducing certain additional checks before authorizing the update of the second keyword by the control device 10.
  • the unlocking code Ci may include a header Public identification ID of the key, for example corresponding to a serial number of the key.
  • a list of authorized keys can then be stored in the device.
  • command 10 which will only react if the Ci code received includes an ID header corresponding to one of the keys in the list.
  • This identification header stored in a non-volatile memory of the remote control transmitter 31, will not be affected by a possible reset linked to a battery change. Of course, it will Dispute of the identification code Xp of the identification responder which must remain secret.
  • the locking system described above is not limited by the resynchronization technique exposed. It can be advantageously combined with the autonomous resynchronization method described in the preamble, in the cases where it gives satisfaction, and keep the characteristic of the association of the memorization of an unlocking code not recognized by the control device lock 10, with positive identification of the key by the identification device 20 in special cases (battery change for example) where resynchronization autonomous is failing.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Lock And Its Accessories (AREA)

Description

La présente invention est relative à un système de verrouillage des portières d'un véhicule automobile, et plus particulièrement à un tel système comportant une télécommande à code évolutif susceptible de nécessiter une resynchronisation entre émetteur et récepteur.The present invention relates to a locking system for doors of a motor vehicle, and more particularly to such a system comprising a remote control with an evolving code likely to require a resynchronization between transmitter and receiver.

On connaít de la technique antérieure, par exemple du brevet US 4,825,210, un système de verrouillage à télécommande utilisant un code évolutif. Le problème principal rencontré dans ces systèmes est la désynchronisation entre la séquence des codes émis par l'émetteur et la séquence des codes attendus par le récepteur. Le document cité ci-dessus propose, pour résoudre ce problème, de comparer le code reçu à une première liste de codes dite séquence de capture, et si le code reçu appartient à cette liste, de déverrouiller immédiatement les portières. Dans le cas où le code reçu n'appartient pas à cette première liste, on le compare à une liste étendue dite séquence de synchronisation, et on attend la réception d'un second code, immédiatement suivant dans la séquence pour confirmer l'autorisation de déverrouillage, et resynchroniser le récepteur sur la séquence de l'émetteur. Cependant un tel système, s'il donne satisfaction lorsque la désynchronisation provient d'appuis répétés sur la touche de télécommande en dehors du champ de réception du véhicule, présente un inconvénient certain lorsque la désynchronisation provient d'un changement de pile de la télécommande. En effet, dans ce dernier cas, la séquence des codes émis peut repartir d'un point aléatoire dans la séquence des codes possibles et n'avoir aucun code commun avec la séquence de synchronisation, sauf si cette dernière couvre l'ensemble des codes possibles, ce qui est coûteux en place mémoire et en temps de calcul, voire même impossible avec des codes comportant plusieurs milliards de combinaisons possibles.We know from the prior art, for example from the patent US 4,825,210, a remote control locking system using an evolving code. The main problem encountered in these systems is the desynchronization between the sequence of codes issued by the transmitter and the sequence of codes expected by the receiver. The document cited above proposes, to resolve this problem, compare the code received with a first list of codes known as the capture sequence, and if the code received belongs to this list, to immediately unlock the doors. If the code received does not belong to this first list, we compare it to an extended list called the synchronization sequence, and we await the reception of a second code, immediately following in the sequence to confirm authorization unlock, and resynchronize the receiver to the transmitter sequence. However such a system, if it gives satisfaction when the desynchronization comes from repeated presses of the remote control button outside the field of vehicle reception, has a certain drawback when the desynchronization comes from a change of battery in the remote control. Indeed, in the latter case, the sequence of codes issued can start from a random point in the sequence of possible codes and have no common code with the synchronization sequence, unless the latter covers all possible codes, which is costly to memory space and computation time, even impossible with codes with several billion possible combinations.

La présente invention a donc pour but de proposer un système qui permette une resynchronisation fiable entre émetteur et récepteur, quelle que soit la cause de la désynchronisation.The object of the present invention is therefore to propose a system which allows reliable resynchronization between transmitter and receiver, whatever the because of the desynchronization.

Pour ce faire, on tire avantage de la coexistence dans la clé de l'émetteur de télécommande précité et d'un répondeur d'identification, encore appelé transpondeur, utilisé par exemple par un dispositif d'immobilisation du véhicule, tel que décrit dans les brevets GB 2 051 442 ou US 4,738,334.To do this, we take advantage of the coexistence in the transmitter key of the aforementioned remote control and of an identification responder, also called transponder, used for example by a vehicle immobilizer, such as as described in patents GB 2 051 442 or US 4,738,334.

On connait par exemple des documents FR 2 738 587 ou EP 0 711 892, des procédés de synchronisation qui font appel à la reconnaissance de la clé, soit par transpondeur, soit par correspondance mécanique avec une serrure, pour permettre cette synchronisation. Cependant, ces procédés exigent soit une opération volontaire de la part du conducteur qui doit appuyer sur le bouton de sa télécommande à un moment précis (FR 2 738 587), soit une reprogrammation systématique du code, faite même en l'absence de désynchronisation (EP 0 711 892), opération coûteuse et risquée en cas d'échec. Un autre procédé (DE 195 33191) nécessite l'utilisation d'un appareil de diagnostic pour forcer le récepteur en mode de programmation afin de le synchroniser avec l'émetteur de télécommande, ce qui impose l'intervention d'un garagiste.We know for example documents FR 2 738 587 or EP 0 711 892, synchronization methods which call for the recognition of the key, either by transponder, either by mechanical correspondence with a lock, to allow this synchronization. However, these methods require either a voluntary operation on the part of the driver who must press the button on his remote control at a specific time (FR 2 738 587), i.e. a systematic reprogramming of the code, made even in the absence of desynchronization (EP 0 711 892), an expensive operation and risky in case of failure. Another process (DE 195 33191) requires the use of a diagnostic device to force the receiver into programming mode in order to synchronize with the remote control transmitter, which requires the intervention of a garage.

La présente invention a donc également pour but de proposer un système qui permette une resynchronisation fiable entre émetteur et récepteur, qui soit économique, sûre et transparente pour l'utilisateur.The present invention therefore also aims to propose a system which allows a reliable resynchronization between transmitter and receiver, which is economical, safe and transparent for the user.

On atteint ces buts de l'invention, ainsi que d'autres qui apparaítront dans la suite de la présente description, avec un système de verrouillage pour véhicule automobile, comportant un dispositif de commande de verrouillage /déverrouillage des portières du véhicule adapté pour recevoir un code de verrouillage / déverrouillage des portières et pour commander le déverrouillage si le code reçu correspond à un code attendu, ledit code étant du type évolutif composé à partir d'un premier mot clé de base et d'un second mot clé pseudo aléatoire; un dispositif d'identification et au moins une clé comprenant d'une part un émetteur de télécommande adapté pour transmettre au dispositif de commande des portières du véhicule un code de verrouillage / déverrouillage des portières, d'autre part un répondeur d'identification adapté pour transmettre un code d'identification de la clé en réponse à une requête du dispositif d'identification.These objects of the invention are achieved, as well as others which will appear in the continuation of this description, with a locking system for a vehicle automobile, comprising a device for locking / unlocking vehicle doors suitable for receiving a locking / unlocking code doors and to control unlocking if the code received corresponds to a expected code, said code being of the evolving type composed from a first keyword basic and a second pseudo-random keyword; an identification device and minus a key comprising on the one hand a remote control transmitter adapted for transmit a control code to the vehicle door control device locking / unlocking doors, on the other hand an identification responder adapted to transmit a key identification code in response to a request from the identification device.

Selon l'invention, lors d'une réception d'un code de verrouillage /déverrouillage des portières ne correspondant pas au code attendu, le dispositif de commande mémorise le code reçu et met à jour son image du second mot clé en fonction du code reçu si le dispositif d'identification confirme une identification positive de la clé.According to the invention, upon reception of a lock / unlock code doors that do not correspond to the expected code, the command memorizes the code received and updates its image of the second keyword by function of the code received if the identification device confirms a positive identification of the key.

Suivant une caractéristique importante de la présente invention, la mise à jour n'est autorisée que si la confirmation d'une identification positive de la clé intervient dans un intervalle de temps prédéterminé après la réception du code de verrouillage / déverrouillage.According to an important characteristic of the present invention, the updating day is only allowed if the confirmation of a positive identification of the key intervenes in a predetermined time interval after reception of the locking / unlocking.

Selon une première variante de l'invention, le dispositif de commande calcule l'image du second mot clé par inversion partielle du code reçu en fonction du premier mot clé de base.According to a first variant of the invention, the control device calculates the image of the second keyword by partial inversion of the code received according to the first basic keyword.

Selon une seconde variante de l'invention, le dispositif de commande détermine l'image du second mot clé par recherche du code reçu dans une liste de codes établie à partir du mot clé de base et d'une séquence des seconds mots clé possibles.According to a second variant of the invention, the control device determines the image of the second keyword by searching for the code received in a list of codes established from the basic keyword and a sequence of second keywords possible.

Avantageusement, le code de verrouillage / déverrouillage comporte un en-tête d'identification public de la clé distinct du code d'identification et le dispositif de commande ne mémorise le code reçu que si cet en-tête correspond à une des clés autorisées.Advantageously, the locking / unlocking code includes a public identification header of the key separate from the identification code and the device command memorizes the code received only if this header corresponds to one of the keys authorized.

D'autres caractéristiques et avantages du système suivant l'invention apparaítront à la lecture de la description qui va suivre et à l'examen des dessins annexés dans lesquels:

  • la figure 1 représente un schéma fonctionnel du système suivant l'invention, et
  • la figure 2 représente le format d'un code transmis.
Other characteristics and advantages of the system according to the invention will appear on reading the description which follows and on examining the appended drawings in which:
  • FIG. 1 represents a functional diagram of the system according to the invention, and
  • FIG. 2 represents the format of a transmitted code.

On se réfère à la figure 1 sur laquelle on a représenté un véhicule 1 équipé d'un dispositif de commande 10 de verrouillage / déverrouillage des portières comportant classiquement un récepteur de télécommande, un décodeur adapté pour comparer un code reçu avec un code attendu et des moyens de commande de moteurs ou d'actionneurs manoeuvrant les serrures des portières du véhicule. Ces moyens, bien connus de la technique antérieure, ne seront pas détaillés plus avant et ne sont pas représentés de manière explicite sur le dessin. Le véhicule 1 est également équipé d'un dispositif d'identification 20, formant éventuellement partie d'un dispositif d'immobilisation du véhicule. Le dispositif de commande 10 et le dispositif d'identification 20 sont reliés entre eux par un bus de communication B.Reference is made to FIG. 1 in which a vehicle 1 has been represented. equipped with a door locking / unlocking control device 10 conventionally comprising a remote control receiver, a decoder adapted for compare a code received with an expected code and control means of motors or actuators operating the vehicle door locks. These means, well known in the prior art, will not be detailed further and are not shown explicitly in the drawing. Vehicle 1 is also equipped with an identification device 20, possibly forming part of a vehicle immobilizer. The control device 10 and the device 20 are connected to each other by a communication bus B.

On a également représenté sur la figure 1 une clé 30, équipée d'une part d'un émetteur de télécommande 31, commandé par un interrupteur 33 et alimenté par une batterie 34, et d'autre part d'un répondeur d'identification 32.Also shown in Figure 1 a key 30, equipped on the one hand a remote control transmitter 31, controlled by a switch 33 and powered by a battery 34, and on the other hand an identification responder 32.

On va maintenant décrire le fonctionnement du système de verrouillage selon l'invention. Pour déverrouiller les portières du véhicule, le conducteur appuie sur l'interrupteur 33, ce qui induit l'émetteur de télécommande 31 à émettre un code de déverrouillage Ci à destination du dispositif de commande de verrouillage 10. Cette émission peut s'effectuer par l'intermédiaire d'ondes électromagnétiques en radiofréquences, ou encore par émission d'un rayonnement infrarouge. Le code Ci émis est du type évolutif, c'est à dire que des codes successifs sont différents les uns des autres. On réalise classiquement un tel code en combinant par un algorithme f un premier mot clé de base Cb avec un second mot clé pseudo-aléatoire Ni. Ce second mot clé est en général élaboré à partir du nombre de pressions exercés sur l'interrupteur 33 depuis une étape d'initialisation dans laquelle le dispositif de commande 10 et l'émetteur de télécommande 31 ont été programmés avec le même mot clé de base Cb et une valeur N0 identique pour le second mot clé. Cette valeur est ensuite régulièrement incrémentée, d'une part à chaque pression sur l'interrupteur 33 pour la clé, et d'autre part, à chaque réception d'un code Ci pour le dispositif de commande 10. Lorsque le dispositif de commande 10 reçoit un code de déverrouillage Ci, il le compare avec un code attendu, élaboré par le même algorithme f, à partir du mot clé de base Cb et de l'image actuelle N'i du second mot clé qu'il détient. Si le code reçu correspond au code attendu, les portières du véhicules sont déverrouillées.We will now describe the operation of the locking system according to the invention. To unlock the doors of the vehicle, the driver presses the switch 33, which induces the remote control transmitter 31 to send an unlock code Ci to the locking control device 10. This transmission can be carried out by the 'Intermediate electromagnetic waves in radio frequencies, or by emission of infrared radiation. The code Ci issued is of the evolving type, that is to say that successive codes are different from each other. One classically carries out such a code by combining by an algorithm f a first basic keyword Cb with a second pseudo-random keyword Ni. This second keyword is generally developed from the number of presses on the switch 33 from an initialization step in which the control device 10 and the remote control transmitter 31 have been programmed with the same basic keyword. Cb and an identical value N 0 for the second keyword. This value is then regularly incremented, on the one hand each time the switch 33 is pressed for the key, and on the other hand, each time a code Ci is received for the control device 10. When the control device 10 receives an unlocking code Ci, it compares it with an expected code, developed by the same algorithm f, from the basic keyword Cb and the current image N'i of the second keyword it holds. If the code received corresponds to the expected code, the vehicle doors are unlocked.

Cependant, comme on l'a évoqué dans le préambule, lors d'un changement de la batterie 34 par exemple, l'image du second mot clé détenu par l'émetteur de télécommande 31 peut être modifiée et le code Ci émis ne correspond plus au code attendu par le dispositif de commande 10.However, as mentioned in the preamble, during a change of battery 34 for example the image of the second keyword held by the remote control transmitter 31 can be modified and the Ci code issued does not correspond more to the code expected by the control device 10.

Selon l'invention, dans ce cas, le dispositif de commande 10 mémorise le code de déverrouillage Ci reçu, mais ne commande pas le déverrouillage des portières. L'utilisateur est alors conduit à déverrouiller mécaniquement les portières au moyen de la partie mécanique de la clé et à insérer la clé dans le barillet de contact du véhicule afin de démarrer le moteur. Cette action déclenche alors un processus d'identification de la clé au moyen d'un dispositif d'identification 20, connu en tant que tel. Le dispositif d'identification 20 émet une requête d'identification au moyen d'une boucle de couplage magnétique, requête à laquelle le répondeur d'identification 32 placé dans la clé répond en modulant le champ magnétique émis selon un code d'identification Xp. Ce code d'identification est comparé à un code de référence programmé dans le dispositif d'identification 20, pour autoriser le démarrage du moteur en cas de correspondance. Dans ce cas, toujours selon l'invention, le dispositif d'identification 20 transmet par l'intermédiaire du bus B, au dispositif de commande de verrouillage une confirmation selon laquelle la clé présentée est bien une clé autorisée. A reception de cette confirmation d'identification positive de la clé 30, le dispositif de commande 10 utilise le code de déverrouillage Ci reçu et mémorisé pour mettre à jour son image du second mot clé Ni.According to the invention, in this case, the control device 10 stores the Ci unlock code received, but does not command unlocking of doors. The user is then led to mechanically unlock the doors at the using the mechanical part of the key and inserting the key into the contact cylinder of the vehicle to start the engine. This action then triggers a process identifying the key by means of an identification device 20, known as Phone. The identification device 20 sends an identification request by means of a magnetic coupling loop, request to which the identification responder 32 placed in the key responds by modulating the magnetic field emitted according to a code Xp identification. This identification code is compared to a reference code programmed in the identification device 20, to authorize the start of the engine in case of a match. In this case, still according to the invention, the device identification 20 transmits via bus B, to the control device lock confirmation that the key presented is a key authorized. Upon receipt of this positive identification confirmation of the key 30, the control device 10 uses the unlocking code Ci received and memorized for update its image of the second keyword Ni.

Selon un premier mode de réalisation, cette mise à jour est effectuée en calculant la valeur du second mot clé à partir du code Ci reçu et du mot clé de base Cb. Pour cela il est nécessaire que l'algorithme f de cryptage du code soit au moins partiellement inversible, c'est à dire qu'il existe un algorithme fN -1 qui permette d'obtenir la valeur de Ni connaissant Ci et Cb. De tels algorithmes sont connus de l'homme du metier et ne dégradent pas sensiblement la sécurité du système car seule la connaissance du mot clé de base Cb permet de retrouver le second mot clé Ni, et ce mot clé de base n'est jamais échangé entre la clé et le véhicule en dehors de la phase d'initialisation en usine.
A titre d'exemple volontairement simplifié, on peut proposer un algorithme f de cryptage du type Ci = Cb XOR Ni où la fonction XOR est un OU exclusif portant sur les mots binaires Cb et Ni. Dans ce cas, l'algorithme fN -1 inverse serait Ni = Cb XOR Ci.According to a first embodiment, this update is carried out by calculating the value of the second keyword from the code Ci received and from the basic keyword Cb. For this it is necessary that the algorithm f for encryption of the code is at least partially invertible, that is to say that there is an algorithm f N -1 which makes it possible to obtain the value of Ni knowing Ci and Cb. Such algorithms are known to those skilled in the art and do not significantly degrade the security of the system because only knowledge of the basic keyword Cb makes it possible to find the second keyword Ni, and this basic keyword is never exchanged between the key and the vehicle outside the factory initialization phase.
As a voluntarily simplified example, we can propose an encryption algorithm f of the type Ci = Cb XOR Ni where the function XOR is an exclusive OR relating to the binary words Cb and Ni. In this case, the inverse f N -1 algorithm would be Ni = Cb XOR Ci.

Selon un second mode de réalisation, la mise à jour du second mot clé peut être effectuée, par analogie avec la technique antérieure, en recherchant le code reçu Ci dans une liste de codes possibles élaborés au moyen de l'algorithme f de cryptage à partir du mot clé de base Cb et d'une séquence des seconds mots clé Ni possibles. En effet, contrairement à la technique antérieure dans laquelle cette liste des codes possibles devait être préétablie, dans le cas présent, la recherche de la valeur de Ni permettant d'obtenir le code Ci reçu n'est opérée que lorsque la clé a été identifiée positivement, et après l'entrée de l'utilisateur dans le véhicule, ce qui allège considérablement les exigences de temps de calcul et de place mémoire nécessaire. En outre, des stratégies plus adaptées peuvent être employées, par exemple une recherche portant sur les codes suivant le code attendu (cas de désynchronisation lié à de nombreuses pressions hors de portée du dispositif de commande 10) peut être suivie d'une recherche autour des codes susceptibles d'être obtenus avec des valeurs probables du second mot clé lors d'une remise à zéro liée à un changement de batterie.According to a second embodiment, updating the second keyword can be performed, by analogy with the prior art, by searching for the code received Ci in a list of possible codes developed using the algorithm f of encryption from the basic keyword Cb and a sequence of second keywords Ni possible. Indeed, unlike the prior art in which this list possible codes had to be pre-established, in this case looking for the value of Ni used to obtain the code Ci received is only operated when the key has been positively identified, and after the user has entered the vehicle, which alleviates considerably the computation time and memory space requirements. In addition, more suitable strategies can be employed, for example a research on the codes following the expected code (case of linked desynchronization at many pressures outside the reach of the control device 10) can be followed by a search around the codes likely to be obtained with values probable of the second keyword during a reset linked to a change of drums.

Le système de verrouillage selon l'invention peut encore être amélioré en introduisant certaines vérifications complémentaires avant d'autoriser la mise à jour du second mot clé par le dispositif de commande 10. Ainsi, on pourra introduire un délai maximal entre la reception d'un code Ci non reconnu et la confirmation de l'identité de la clé afin d'éviter qu'un code émis à destination d'un autre véhicule dans le voisinage ne perturbe le fonctionnement du système en déclenchant un processus de mise à jour lorsque l'utilisateur autorisé se présente un peu plus tard. De même, ainsi qu'on l'a représenté sur la figure 2, le code de déverrouillage Ci peut comporter un en-tête ID d'identification publique de la clé, correspondant par exemple à un numéro de série de la clé. Une liste des clés autorisées peut être alors mémorisée dans le dispositif de commande 10, qui ne réagira que si le code Ci reçu comporte un en-tête ID correspondant à une des clés de la liste. Cet en-tête d'identification, mémorisé dans une mémoire non volatile de l'émetteur de télécommande 31, ne sera pas affecté par une éventuelle réinitialisation liée à un changement de batterie. Bien entendu, il sera différend du code d'identification Xp du répondeur d'identification qui doit rester secret.The locking system according to the invention can be further improved by introducing certain additional checks before authorizing the update of the second keyword by the control device 10. Thus, we can introduce a delay maximum between receipt of an unrecognized Ci code and confirmation of the identity of the key to prevent a code issued to another vehicle in the vicinity disrupts the operation of the system by triggering an update process day when the authorized user shows up a little later. Likewise, as we represented in FIG. 2, the unlocking code Ci may include a header Public identification ID of the key, for example corresponding to a serial number of the key. A list of authorized keys can then be stored in the device. command 10, which will only react if the Ci code received includes an ID header corresponding to one of the keys in the list. This identification header, stored in a non-volatile memory of the remote control transmitter 31, will not be affected by a possible reset linked to a battery change. Of course, it will Dispute of the identification code Xp of the identification responder which must remain secret.

Le système de verrouillage décrit ci-dessus n'est pas limité par la technique de resynchronisation exposée. Il peut être combiné avantageusement avec la methode de resynchronisation autonome décrite dans le préambule, dans les cas où celle-ci donne satisfaction, et reserver la caractéristique de l'association de la mémorisation d'un code de déverrouillage non reconnu par le dispositif de commande de verrouillage 10, avec l'identification positive de la clé par le dispositif d'identification 20 aux cas particuliers (changement de batterie par exemple) où la resynchronisation autonome est défaillante.The locking system described above is not limited by the resynchronization technique exposed. It can be advantageously combined with the autonomous resynchronization method described in the preamble, in the cases where it gives satisfaction, and keep the characteristic of the association of the memorization of an unlocking code not recognized by the control device lock 10, with positive identification of the key by the identification device 20 in special cases (battery change for example) where resynchronization autonomous is failing.

Claims (5)

  1. A locking system for a motor vehicle comprising
    a) a control unit (10) for locking/unlocking the vehicle doors adapted for receiving a code (Ci) for locking/unlocking the doors and for commanding the unlocking if the code received corresponds to an anticipated code (Cj), said code being of a rolling type composed from a first base keyword (Cb) and a second pseudo random keyword (Ni)
    b) an identification device (20) and
    c) at least one key (30) comprising
    firstly, a remote control emitter (31) adapted for transmitting to the vehicle door lock control unit a code (Ci) for locking/unlocking the doors,
    secondly,an identification transponder (32) adapted for transmitting an identification code (Xp) from the key in response to a request from the identification device,
    characterised in that the control unit comprises
    means of memorising adapted for memorising the code received when the code received for locking/unlocking doors does not correspond to the code anticipated, and
    means of updating adapted for carrying out an update of the image of the second keyword according to the received code if the identification device carries out a positive identification of the key.
  2. A locking system according to Claim 1, characterised in that the means of updating does not carry out the updating unless there is a positive identification of the key within a predetermined time interval following receipt of the locking/unlocking code.
  3. A locking system according to Claim 1, characterised in that the control unit is adapted for determing the image of a second keyword (Ni) by partially inverting the code received (Ci) according to the first base keyword (Cb).
  4. A locking system according to Claim 1, characterised in that the control unit is adapted for determining the image of the second keyword (Ni) by searching for the received code (Ci) in a list of codes generated using the base keyword and a sequence of possible second keywords.
  5. A locking system according to Claim 1, characterised in that the locking/unlocking code includes a public key authentication (ID) header distinct from the identification code (Xp) and in that the memorising means only memorises the received code if the header corresponds to an authorised key.
EP99907432A 1998-01-29 1999-01-26 Motor vehicle locking system with open-ended code and identification Expired - Lifetime EP1051556B1 (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
FR9800982 1998-01-29
FR9800982A FR2774121B1 (en) 1998-01-29 1998-01-29 LOCKING SYSTEM FOR MOTOR VEHICLE WITH SCALABLE CODE AND IDENTIFICATION
PCT/EP1999/000520 WO1999039066A1 (en) 1998-01-29 1999-01-26 Motor vehicle locking system with open-ended code and identification

Publications (2)

Publication Number Publication Date
EP1051556A1 EP1051556A1 (en) 2000-11-15
EP1051556B1 true EP1051556B1 (en) 2004-12-01

Family

ID=9522322

Family Applications (1)

Application Number Title Priority Date Filing Date
EP99907432A Expired - Lifetime EP1051556B1 (en) 1998-01-29 1999-01-26 Motor vehicle locking system with open-ended code and identification

Country Status (6)

Country Link
EP (1) EP1051556B1 (en)
KR (1) KR100591471B1 (en)
DE (1) DE69922345T2 (en)
ES (1) ES2234242T3 (en)
FR (1) FR2774121B1 (en)
WO (1) WO1999039066A1 (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AT501291B8 (en) * 2005-02-09 2007-02-15 Evva Werke KEY
US9670694B2 (en) 2007-04-12 2017-06-06 Utc Fire & Security Americas Corporation, Inc. Restricted range lockbox, access device and methods
CN103835579A (en) * 2013-08-30 2014-06-04 苏州众显电子科技有限公司 Intelligent induction key with electric quantity caution light
US10124765B2 (en) 2016-12-20 2018-11-13 Ford Global Technologies, Llc Keypad master code
DE102018002157A1 (en) * 2018-03-16 2019-09-19 Zf Active Safety Gmbh Device and method for the encrypted transmission of a digital control signal from a motor vehicle key to a motor vehicle
CN111080857B (en) * 2019-12-30 2022-05-03 华人运通(上海)云计算科技有限公司 Vehicle digital key management and use method and device, mobile terminal and storage medium

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2051442B (en) 1979-03-30 1984-02-01 Howard J A Security system
DE3536377A1 (en) 1985-10-11 1987-04-16 Bayerische Motoren Werke Ag SAFETY DEVICE FOR MOTOR VEHICLES
DE3774364D1 (en) 1986-08-12 1991-12-12 Siemens Ag ELECTRONIC LOCKING SYSTEM WITH AT LEAST ONE LOCK, ESPECIALLY FOR MOTOR VEHICLES.
DE4440349A1 (en) * 1994-11-11 1996-05-15 Bayerische Motoren Werke Ag Method for synchronizing two dialog-capable transceiver units for a code signal in a motor vehicle locking system
JPH09170365A (en) * 1995-09-08 1997-06-30 Kiekert Gmbh & Co Kg Operating method of locking device for automobile with remote controller and transponder
DE19533191B4 (en) * 1995-09-08 2006-01-05 Kiekert Ag A method of reconfiguring a central locking system of a motor vehicle with a remote control device
DE19607017C2 (en) * 1996-02-24 2000-06-29 Daimler Chrysler Ag Remote control device and operating method therefor, in particular for controlling motor vehicle-related devices

Also Published As

Publication number Publication date
DE69922345D1 (en) 2005-01-05
FR2774121A1 (en) 1999-07-30
FR2774121B1 (en) 2000-04-07
KR20010034480A (en) 2001-04-25
DE69922345T2 (en) 2005-05-12
EP1051556A1 (en) 2000-11-15
WO1999039066A1 (en) 1999-08-05
KR100591471B1 (en) 2006-06-20
ES2234242T3 (en) 2005-06-16

Similar Documents

Publication Publication Date Title
EP2621769B1 (en) Method of pairing of a mobile phone with a motor vehicle and a lock / unlock set
EP1587044B1 (en) Method for data transmission between bidirectional objects
EP2903867B1 (en) System for protecting a motor vehicle
FR2723759A1 (en) CLOSING DEVICE FOR A MOTOR VEHICLE PROVIDED WITH A REMOTE CONTROL SYSTEM AS WELL AS A TRANSPONDER
EP0926305B1 (en) Safety device, in particular for motor vehicle
FR2740414A1 (en) COMMUNICATION SYSTEM PROVIDED BETWEEN A CONTACT KEY AND A VEHICLE AND PROTECTS AGAINST FALSE MANEUVER
EP3085131A1 (en) Mobile telephone capable of automatically pairing with a motor vehicle, and automatic pairing method
FR2609086A1 (en) MODIFIABLE THEFT PROTECTION CODE DEVICE FOR MOTOR VEHICLES
FR2767764A1 (en) METHOD FOR INITIALIZING AN ANTITHEFT SYSTEM FOR A MOTOR VEHICLE
KR20000070871A (en) Code signal transmitter, especially for an anti-theft system in a motor vehicle
FR2799297A1 (en) Security system for providing access to a garage uses sensor to detect the car's approach, car's emitter and receiver and a door command
FR3084198A1 (en) METHOD FOR MANAGING THE OPENING AND LOCKING MEANS OF A TERRESTRIAL MOTOR VEHICLE AS WELL AS A TERRESTRIAL VEHICLE WITH ASSOCIATED MOTOR.
FR3084495A1 (en) Passive keyless entry system
EP1051556B1 (en) Motor vehicle locking system with open-ended code and identification
FR2751293A1 (en) Helmet-linked motorcycle theft prevention system
EP1362753A1 (en) Control for accessing and/or starting a motor vehicle in a frequency disturbed area
FR2774120A1 (en) Remote security lock for vehicles
FR2774960A1 (en) ANTI-THEFT SYSTEM FOR A MOTOR VEHICLE AND METHOD FOR INITIALIZING THE ANTI-THEFT SYSTEM
EP0582523A1 (en) Electronic antitheft system for a motor vehicle
EP1504986B1 (en) Start up system for motorized vehicle
FR2738588A1 (en) METHOD FOR RESETTING A CENTRALIZED LOCKING SYSTEM OF A MOTOR VEHICLE WITH A REMOTE CONTROL DEVICE
EP3871122B1 (en) Method and system for authenticating a user for a driving session in a motor vehicle
FR2797727A1 (en) Electronic lock for car has a base unit which emits a signal, this signal is coded by the key then sent back and analyzed by base in order to open the lock or not
FR2933437A1 (en) Exit e.g. door, unlocking method for e.g. car, involves automatically unlocking exit or group of exits near of which key is detected by vehicle, and unlocking set of other exits of vehicle after opening of unlocked exit or group of exits
FR3107153A1 (en) Access control procedures and system implementing said procedures

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20000727

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): DE ES GB IT

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: SIEMENS VDO AUTOMOTIVE S.A.S.

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): DE ES GB IT

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

GBT Gb: translation of ep patent filed (gb section 77(6)(a)/1977)

Effective date: 20041201

REF Corresponds to:

Ref document number: 69922345

Country of ref document: DE

Date of ref document: 20050105

Kind code of ref document: P

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2234242

Country of ref document: ES

Kind code of ref document: T3

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20050902

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20120126

Year of fee payment: 14

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20130131

Year of fee payment: 15

Ref country code: ES

Payment date: 20130128

Year of fee payment: 15

Ref country code: GB

Payment date: 20130122

Year of fee payment: 15

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 69922345

Country of ref document: DE

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20140126

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140801

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 69922345

Country of ref document: DE

Effective date: 20140801

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140126

REG Reference to a national code

Ref country code: ES

Ref legal event code: FD2A

Effective date: 20150327

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140127

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140126