Classifications

• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B60—VEHICLES IN GENERAL
  • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
  • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
  • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B60—VEHICLES IN GENERAL
  • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
  • B60R25/00—Fittings or systems for preventing or indicating unauthorised use or theft of vehicles
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
  • G07C2009/00206—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the keyless data carrier being hand operated
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
  • G07C2009/00555—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks comprising means to detect or avoid relay attacks
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
  • G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
  • G07C2009/00793—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means by Hertzian waves
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C9/00944—Details of construction or manufacture
  • G07C2009/0096—Electronic keys comprising a non-biometric sensor
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
  • G07C2209/60—Indexing scheme relating to groups G07C9/00174 - G07C9/00944
  • G07C2209/63—Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle

Definitions

• the present invention relates to a portable authentication means and a vehicle security system for a motor vehicle.
• Such vehicle security systems are often called keyless.
• the user of a vehicle receives a means of portable authentication without
• an access authorization control mechanism is activated, without the user must order it manually.
• the access authorization control mechanism is based on wireless signal transmission between the motor vehicle and the control system. It is then sufficient for the user to carry the authentication means, for example in a pocket or in a suitcase.
• a coded signal is sent from the control system to the authentication means, for example, and the authentication means decodes this signal and sends it back with a new code.
• the two codes are stored in the control unit on the vehicle, so that the control device can make a comparison of the own coded signal with the signal immediately received from the authentication means. If the codes match, authentication is performed and the locks of the doors of the motor vehicle are automatically unlocked, in such a way that the user has access to the motor vehicle, without having to open the motor vehicle by an operation of manual opening. If, on the other hand, the codes do not match, the motor vehicle remains closed so that no unauthorized person can have access to the motor vehicle. In order for the motor vehicle to be unlocked only when the user actually wants to be able to access the vehicle, the on-board control unit is coupled to embedded antennas, which have a very low transmission range. When the user carrying the authentication means moves further away from the vehicle, no unlocking occurs.
• the starting blocking of the vehicle is controlled, so that the user wearing the authentication means can start the engine by means of a simple switch and the start blocking is disabled when it is detected that the means of authentication "correct" is for example inside the vehicle.
• a problem with such access and use authorization systems is that there are known mechanisms for circumventing the mentioned security barriers. For example, it is known to bypass the system by the fact that an unauthorized person closely follows the authorized user who leaves the vehicle he has just parked, while a second unauthorized person remains close to the vehicle .
• the first and second unauthorized persons each carry means for transmitting radio signals to increase the range of the signal transmission between the authentication means and the control device, so that the coded signal transmitted by the control apparatus is conducted by the radio signal transmission means to the authentication means of the authorized user and that the newly encoded signal of the authentication means is sent back to the control device by the transmission means of the radio signal, without the user being near the vehicle or noticing something.
• the vehicle is then unlocked without the actual code being known to unauthorized persons.
• the second unauthorized person then has access to the vehicle.
• Such an attack is usually known as "relay attack” or in English “Relay-Station-Attack (RSA)”.
• the object of the present invention is to provide a portable authentication means and a vehicle security system for a motor vehicle, which provides increased security against abuse and in particular effectively reduces the possibility of a relay attack.
• a portable authentication means in particular for use with a motor vehicle, the authentication means comprising a transmission unit and a reception unit for transmitting wireless signals between the means of transmission. authentication and an integrated control device in the motor vehicle for the control of the authorization of access and / or the authorization of use for the motor vehicle, wherein the means of authentication furthermore presents a coding unit and decoding for decoding the received signals and for encoding the transmitted signals, the authentication means comprising an inertial detector and / or a motion detector.
• a portable authentication means which has a transmission unit and a reception unit for wireless signal transmission with a control device integrated into a vehicle for controlling the authorization of access and / or authorization of use for the vehicle, in which the means of
• the authentication unit has a coding and decoding unit for decoding the received signals and for coding the transmitted signals, in which the means
• the authentication device has an inertial detector and / or a motion detector.
• the inertial detector and / or the motion detector it is possible, by means of the inertial detector and / or the motion detector, to measure whether the authentication means is in motion.
• the control authorization it is possible to check whether the authorized user, who is wearing the authentication means, is in motion during the control of the authorization of access and / or use (hereinafter referred to as the control authorization). If a movement of the user is detected during the authorization check, it must be considered that a relay attack is in progress, because the user, who is in front of his vehicle to be able to access the vehicle, is normally at a standstill.
• the control of the authorization of use is interrupted, when a movement of the authentication means is detected via the inertial detector and / or the motion detector.
• the authentication means does not send a signal (newly coded) to the control device when motion is detected, or that the motion information is transmitted from the authentication means to the apparatus control device and the control device interrupts the control of the authorization of use, when the movement information indicates a movement of the authentication means.
• the control device interrupts the control of the authorization of use, when the movement information indicates a movement of the authentication means.
• the inertial sensor and / or the motion detector comprise an acceleration sensor and / or a rotational speed sensor.
• the inertial detector and / or the motion detector comprise a sensor for recognizing a change of position of the authentication means.
• a sensor for recognizing a change of position of the authentication means With an acceleration sensor and / or a speed sensor and / or a sensor for recognizing a change of position of the authentication means, it is advantageously possible according to the present invention that the position or the state of
• User movement carrying authentication means can be determined accurately and with moderate costs.
• the inertial detector and / or the motion detector generates a signal which is transmitted to the
• control unit For consideration by the control unit.
• Another object of the present invention is a vehicle safety system for a motor vehicle, which comprises the control apparatus integrated in the vehicle and the portable authentication means described, which is configured for wireless signal transmission with the control apparatus for performing the control of the access authorization and / or the authorization of use for the vehicle.
• Another object of the present invention is a method for controlling the authorization of access and / or the authorization of use for a vehicle, in which, in a first step, a first coded signal is wirelessly transmitted. of the control unit integrated in the vehicle by means of portable authentication, in which, in a second step, a second coded signal of the authentication means is transmitted wirelessly to the control device, in which the apparatus control system compares the first signal and the second signal with each other and, depending on the comparison, allows or prevents access to the vehicle and / or the use of the vehicle, in which furthermore it is permitted or prevented access to the vehicle and / or the use of the vehicle according to a movement information of the authentication means.
• the motion information is produced by an inertial detector and / or a motion detector integrated in the authentication means. More preferably, the wireless motion information is transmitted to the control apparatus.
• the inertial detector comprises an acceleration sensor and / or a speed sensor.
• the motion detector preferably comprises a sensor for the recognition of a change of position, for example a GPS sensor, and / or a magnetic field detector, for example an electronic compass.
• the vehicle security system has a position recognition unit, which is configured to recognize the movement of the authentication means using field measurements.
• the field strength of the second signal sent by the authentication means is measured and compared with an earlier signal and / or with a threshold value.
• a comparison of the second signal with second signals received previously in time advantageously allows the construction of a movement profile of the authentication means.
• the use of the vehicle is permitted only when the movement profile essentially corresponds to a change of position typical of the user or of a luggage from the position outside the vehicle in front of the driver's door to the vehicle. inside the vehicle.
• the motion information of the inertial detector and / or the motion detector is also used for the determination of the actual motion profile. In this way, it is ensured that departure with the vehicle is only possible when the authentication means describes a typical movement for the step of installing a driver of the vehicle.
• FIG. vehicle security system according to the embodiment of the present invention, in the presence of an attack RSA (relay attack)
• FIG. 2 schematically shows a perspective representation of a contact according to the state of the art
• FIG. 1 there is shown a vehicle security system 1 and an authentication means 4 according to an exemplary embodiment of the present invention.
• the vehicle security system 1 comprises a control apparatus 3 installed in a vehicle 2 and a portable authentication means 4.
• authentication 4 is carried by the user 8 of the vehicle 2 and serves to release a keyless access to the vehicle 2 and to start the engine of the vehicle 2 without a key, that is to say by pressing a start button .
• the notion without key means that the user 8 must not manually operate any key, to obtain access to the vehicle 2, and also that he must not engage a key in the start contact to start the engine and use the 2.
• the control apparatus 3 is coupled to unrepresented antennas, for sending a first coded signal 5 to an authentication means 4 located in the nearby surrounding field (also called the action zone) of the vehicle 2 for the execution of a procedure for controlling the access authorization and the authorization of use.
• the transmission of the first signal 5 is carried out for example at periodic intervals of time and / or when the outside handle of a vehicle door of the vehicle 2 is touched and / or when the arrival of a person near the vehicle 2 is detected.
• An authentication means 4 located in the surrounding field of the vehicle 2 receives the first signal 5, decodes the first signal 5 and returns it with a new coding in the form of a second coded signal 6.
• the control device 3 receives the second signal 6.
• the two coding algorithms are stored in the control device 3, so that the second signal 6 can be decoded by the control device 3.
• the second decoded signal 6 is compared to the first decoded signal 5. If a concordance is detected, it is assured that it is the authentication means 4 "correct", that is to say authorized.
• Authentication occurs, so that access to the vehicle 2 is granted to the user 8, that is to say that the locks of the doors are unlocked, and / or that a start of the engine of the vehicle 2 by the user 8 is authorized, that is to say the start blocking is disabled.
• the authentication means 4 according to the invention furthermore has an inertial detector 7 intended to prevent abuse. Inertial sensor 7 detects forces
• L control apparatus 3 is configured in such a way that authentication is only performed if the authentication means 4 is at a standstill during the procedure for controlling the access authorization and / or the authorization use. In this way, it is ensured that the user 8 is actually standing in front of the vehicle 2, when the access is released, and / or that the authentication means 4 is actually inside the vehicle 2, when engine start is released.
• the vehicle security system 1 has a position recognition unit, which is configured to recognize the movement of the authentication means 4 using field measurements.
• the field strength of the second signal 6 sent by the authentication means 4 is measured and compared with previous signals and / or with a threshold value.
• a comparison of the second signal 6 with second signals received previously in time allows the construction of a motion profile of the authentication means 4.
• This motion profile can optionally be optimized by the use of the acceleration signals of the signal.
• a movement profile of the authentication means 4 is generated between the access authorization and the start-up request of the engine (press the start button) by the user 8.
• the authentication means furthermore has a sensor for recognizing a change of position, for example a GPS sensor, and / or a magnetic field detector.
• the inertial detector 7 comprises in particular an acceleration sensor.
• FIG 2 there is shown the vehicle security system 1 according to the exemplary embodiment of the present invention explained with the help of Figure 1, in the presence of an attack RSA (relay attack).
• the authorized user 8 parks his vehicle 2 and moves away from his vehicle 2 along the path 9.
• a first unauthorized person 10 approaches the vehicle 2 and triggers the transmission of the first signal 5 by the apparatus 3.
• the authorized user 8, which carries the authentication means 4 is already far from the vehicle 2, so much so that the first signal of strongly limited range no longer reaches the authentication means 4.
• the first unauthorized person 10 carries a first radio signal transmission means 11, which transmits the first signal over a long range 12 to a second corresponding radio signal transmission means 13.
• the second radio signal transmission means 13 is carried by a second unauthorized person 14, which discreetly follows the authorized user 8.
• the second radio signal transmission means 13 sends the first retransmitted signal 5 'in such a way that it stops ive in the reception area of the authentication means 4.
• the control apparatus 3 transmits the second signal 6, which is sent via the second radio signal transmission means 13 and the first radio signal transmission means 11, to the control apparatus 3 as a second retransmitted signal 6 .
• a vehicle security system 1 known from the state of the art would now release access to the vehicle 2. With the present vehicle security system 1, the movement information of the inertial detector 7 integrated into the authentication means 4, however, are sent together with the second signal 6. An evaluation of the motion information now indicates to the control device 3 that the authentication means 4 is moving rapidly. Access is therefore prevented, because the authentication means 4 has an atypical movement profile for the user 8, which carries the authentication means 4 and who wishes access to his vehicle 2. As an option, it can be imagined that the motion information is evaluated only when the engine has to be started.
• the movement between the access authorization and the request to start the engine is evaluated. If the authentication means 4 here describes a fast and continuous movement, the start blocking is not deactivated, because the motion profile is atypical.
• the vehicle security system 1 has a position recognition unit, which is configured to recognize the movement of the authentication means 4 using field measurements. In this case, the field strength of the second signal 6 sent by the authentication means 4 is measured and compared with previous signals and / or with a threshold value. A comparison of the second signal 6 with signals received previously in time makes it possible to construct a more precise movement profile of the authentication means 4.

Landscapes

• Engineering & Computer Science (AREA)
• Mechanical Engineering (AREA)
• Computer Networks & Wireless Communication (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Lock And Its Accessories (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=48793664

Family Applications (1)

Country Status (6)

Families Citing this family (21)

Family Cites Families (24)

• 2012
  • 2012-05-03 FR FR1201294A patent/FR2986202A1/fr active Pending
• 2013
  • 2013-01-22 JP JP2014553685A patent/JP2015510178A/ja active Pending
  • 2013-01-22 CN CN201380015186.1A patent/CN104169978A/zh active Pending
  • 2013-01-22 EP EP13701429.6A patent/EP2807136A1/de not_active Withdrawn
  • 2013-01-22 US US14/374,609 patent/US20140375423A1/en not_active Abandoned
  • 2013-01-22 WO PCT/EP2013/051120 patent/WO2013110596A1/fr active Application Filing

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events