EP3078159A1

EP3078159A1 - Installation of wireless nodes in motor vehicles

Info

Publication number: EP3078159A1
Application number: EP14867358.5A
Authority: EP
Inventors: Oscar BLOMKVIST
Original assignee: Scania CV AB
Current assignee: Scania CV AB
Priority date: 2013-12-02
Filing date: 2014-11-25
Publication date: 2016-10-12
Also published as: EP3078159A4; SE539785C2; SE1351427A1; WO2015084232A1

Abstract

A method and a computer device for installing wireless nodes in motor vehicles, such that at least one wireless node (1) is installed in a motor vehicle (3) which is provided with at least one electronic control unit ECU (30) suited to wireless communication with the wireless node (1). The computer device (5) comprises, or is connected communicatively to, a database (51) containing identities, e.g. chassis numbers, of a plurality of motor vehicles. The computer device (5) is provided with an authentication unit (52) configured to couple a manufacturing identity of a wireless node (1), e.g. a serial number, to an identity of the vehicle (3) in the database (51), and with a communication unit (53) configured to transmit the manufacturing identity of the wireless node (1) to the respective vehicle (30). The method comprises registering (105) a unique manufacturing identity, e.g. a serial number, belonging to the wireless node (1), in a database (51), which manufacturing identity of the wireless node (1) is coupled to an identity of the vehicle (3), e.g. a chassis number, in the database (51), which registration is effected by the computer device (5). The method further comprises transmitting (107) the manufacturing identity of the wireless node (1) from the computer device (5) to the vehicle (3), thereby authenticating the wireless node (1) for wireless communication with the vehicle (3). Also cited are a motor vehicle (3) and a computer programme product which comprises a computer programme for execution by the computer device.

Description

Installation of wireless nodes in motor vehicles

BACKGROUND TO THE INVENTION AND PRIOR ART

The present invention relates generally to electronic control systems in a motor vehicle. It relates in particular to a method and a computer device for installing wireless nodes in motor vehicles according to the respective preambles of claims 1 and 8. Installation authenticates at least one wireless node for internal communication in a motor vehicle. The invention relates also to a motor vehicle with an electronic control system according to the preamble of claim 11 , which vehicle is suited to the installing of wireless nodes. The invention further relates to a computer programme and a computer programme product comprising the computer programme according to the preambles of claims 14 and 15.

Electronic control units (ECUs) are employed generally in more recent cars, buses and trucks. In each vehicle there is normally a plurality of ECUs which communicate with one another by means of a data communication bus. A well-known standard for such systems is CAN (controller area network). Each ECU is itself usually cable-connected to components on board the vehicle, e.g. one or more sensors and/or actuators. An ECU is often coupled to two or more sensors and two or more actuators. Such an ECU then receives signals or input data from two or more sensors and sends control signals or control data to two or more actuators. For this interaction with sensors and actuators the ECUs are provided with software comprising software functions suited to each type of sensor and each type of actuator. The fact that the ECUs communicate via the CAN bus makes it possible for information which a first ECU receives from a sensor to be used by another second ECU to control an actuator connected to this second ECU. The sensors and the actuators may be of different kinds, both for control of the vehicle and the driver environment. A particular kind of sensor takes the form of devices, e.g. buttons, which are operated by the driver.

US 2011/0245933 A1 describes an instrument management system for vehicle-internal communication comprising an operating device, which sends command signals wirelessly to a vehicle's electronic control system. An advantage of such a wireless operating device is that it may be situated at any desired location and also be relocated without having to fit new cables. The operating device transmits commands in the form of status information (so-called "device information") which is transmitted wirelessly to other parts of the instrument management system via an RFID (radio frequency identification) receiver (a so-called "tag reader"). The RFID receiver has itself a wired connection to the vehicle's ECUs. The wireless operating device transmits its identity together with the status information. The RFID receiver is also connected to a database which is used to identify the control command to which the status information received pertains The combination of status information and the identity of the operating device is thus used to create a control command for the ECUs. As in other RFID systems, the wireless operating device may be powered by wireless transmission of energy from the RFID receiver to the operating device.

Although the wireless operating devices for vehicle-internal communication described in the abovementioned specification can be situated in user-friendly locations, there are a number of disadvantages. One disadvantage of wireless communication in motor vehicles is that signals from a wireless operating device in one vehicle might be received in another vehicle. The RFID technology used is also usable in other environments than vehicles, e.g. in households. As vehicles travel over long distances, through different environments and even between different countries, there is a risk that signals received from a source other than the vehicle's own operating device might be interpreted by the veh icle's electron ic control system as a command directed to the veh icle's EC Us.

The operating device in the aforesaid specification is also limited to transm ission of commands in one d irection. U S 8 ,229 ,625 B2 describes an arrangement for a wireless network in a motor vehicle. The specification refers to a plu rality of wireless nodes, exemplified as sensors, particu larly push-buttons, and actuators, wh ich commu nicate wirelessly with one another and with an EC U on board the veh icle. The wireless nodes are provided with wireless interfaces comprising micro control u nits and the ECU is provided with a corresponding wireless interface. The wireless nodes which have sensors produce information for the ECU , and the wireless nodes which have actuators act in response to information from the EC U . When installing a wireless node such as a pushbutton node , the user will ind icate a predetermi ned code wh ich may have been loaded into a control u nit on board the vehicle during manufacture.

R ISKS AN D D I SADVANTAGES O F TH E STATE OF TH E ART It is desirable to util ise the advantages of wireless technology in terms of it being easy to install and place various components on board a vehicle, such as sensors and actuators. However, a widening spread of the technology among manufacturers of different components may entail more risk of misinterpretation of signals .

The greater possibility of relocating wireless nodes does for example make it possible for them to be sold and moved to other vehicles. Such sale does however entail the risk of a wireless node being installed in two or more vehicles at the same time.

The fact that such wireless nodes are easy to make and easy to install also entails a risk of copies being manufactu red and sold without at the same time ensuring that the nodes do not transmit signals which might be misinterpreted by unintended recipients, e.g. a receiving ECU or receiving wireless node on board a passing vehicle. None of the abovementioned specifications are concerned with these problems, and none of them indicate solutions thereto.

SUMMARY OF THE INVENTION

There is thus a need for enlarged functionality for vehicle- internal wireless communication, and at the same time a need for greater security.

One object of the invention is to reduce the risk that a vehicle might receive wireless signals from another source which does not belong to the vehicle, and might interpret them as part of its own internal communication. Another object of the invention is to make it possible to use wireless communication for various kinds of components in a vehicle's electronic control system, such as sensors and actuators which interact with the vehicle's equipment or surrounding environment. For these objects the invention proposes a wireless node, a computer device, a system and a method for installing wireless nodes in a motor vehicle, and a motor vehicle with an electronic control system suited to communication with wireless nodes and an electronic control unit, ECU, for interaction with wireless nodes.

In one aspect the invention refers to a method for installing wireless nodes in motor vehicles whereby at least one wireless node is installed in a motor vehicle which is provided with an electronic control system comprising at least one electronic control unit, ECU, suited to wireless communication with the wireless node. The method comprises registration of a unique manufacturing identity, e.g. a serial number, belonging to the wireless node, in a database, which manufacturing identity of the node is coupled to an identity of the vehicle, e.g. a chassis number, in the database, which registration takes place by means of a computer device and transmission of the node's manufacturing identity from the computer device to the vehicle, thereby authenticating the node for wireless communication with the vehicle.

In one embodiment of this aspect of the invention the method comprises authentication of the wireless node on board the vehicle, which authentication comprises storage of the node's manufacturing identity in the vehicle, preferably in the vehicle's ECU. This is advantageous in that the node need not be authenticated each time communication is to be initiated. In one embodiment of this aspect of the invention the transmission of the wireless node's manufacturing identity takes place by remote communication. This is advantageous in that the vehicle need not be close to the computer device at the time of installation. Wireless nodes may be installed at the time of the vehicle's manufacture but may also be supplemented or repaired later.

In one embodiment of this aspect of the invention the transmission of the wireless node's manufacturing identity is encrypted, with consequently greater security against eavesdropping and copying.

In one embodiment of this aspect of the invention the remote communication comprises transmission of the wireless node's manufacturing identity via a mobile telecommunication system to a telematic unit on board the vehicle. This is advantageous in that a wireless node can be installed without the vehicle having to go to a workshop, enabling its owner to copy and install a wireless node without visiting a workshop or even moving the vehicle. In one embodiment of this aspect of the invention the remote communication comprises transmission of the wireless node's manufacturing identity via a wired connection to a data communication bus in the vehicle's electronic control system. This is advantageous in that the ECU need not have means for mobile telecommunication but may instead receive the node's manufacturing identity from a telematic unit on board the vehicle or via a cable connection during a workshop visit.

In one embodiment of this aspect of the invention the registration comprises verification that the node's manufacturing identity is not coupled to another vehicle in the database, e.g. to another chassis number. This is advantageous in preventing the risk of a node being authenticated for wireless communication with two vehicles at the same time. Another aspect the invention refers to a computer device for installing wireless nodes in motor vehicles whereby at least one wireless node is installed in a vehicle provided with an electronic control system comprising at least one electronic control unit, ECU. The computer device comprises, or is connected communicatively to, a database containing the identities of a plurality of vehicles, e.g. chassis numbers, a registration unit configured to couple a wireless node's manufacturing identity, e.g. its serial number, to an identity of the vehicle, and a communication unit configured to transmit the node's manufacturing identity to the respective vehicle.

In one embodiment of this aspect of the invention the registration unit is suited to checking whether the wireless node's manufacturing identity is coupled to any other vehicle in the database. This results in the aforesaid advantage of preventing the node from being authenticated in two vehicles at the same time.

In one embodiment of this aspect of the invention the communication unit is suited to communicating with the vehicle by telecommunication, e.g. mobile telecommunication or wired data communication. This has the aforesaid advantage that installation need not take place close to the central server. In one embodiment the communication unit is suited, alternatively or complementarily, to being connected by short-distance wireless connection to wired data communication, e.g. by wi-fi to the internet via a wi-fi gateway.

A further aspect the invention refers to a motor vehicle provided with an electronic control system comprising at least one electronic control unit, ECU, which has an interface for wireless communication with at least one wireless node. The vehicle is characterised in that it is provided with an authentication unit configured to authenticate a wireless node for communication with the ECU, which authentication unit registers the node's manufacturing identity, e.g. its serial number.

In one embodiment of this aspect of the invention the ECU comprises a control unit for wireless communication with a wireless node via the wireless interface, which control unit is suited to verifying that the node is authenticated. Communication with a wireless node on board another vehicle may thus be prevented.

In one embodiment of this aspect of the invention the vehicle's electronic control system comprises also a telematic unit and a data communication bus which is configured to connnect the telematic unit to the ECU. The telematic unit is configured to receive the wireless node's manufacturing number from a mobile telecommunication system and pass the node's manufacturing identity on to the ECU. This means that installation need not take place geographically near to the central server. In one embodiment of this aspect of the invention the vehicle's electronic control system comprises a data communication bus connected to the ECU, and the vehicle is provided with a connection, e.g. a connection contact, to the data communication bus. The connection will be arranged to enable an external computer unit to be connected to the vehicle, and the vehicle will be suited to receiving the wireless node's manufacturing identity in the ECU from the external computer unit via the connection and the data communication bus. Installation will thus for example be possible at a workshop and the vehicle need not be provided with any unit for mobile telecommunication. This also represents an alternative for vehicles provided with a telematic unit for mobile telecommunication.

In one embodiment the vehicle has, alternatively or complementarily, a communication unit for short-distance wireless communication which is connected to the data communication bus so that the wireless node's manufacturing identity can be transmitted to the ECU by short-distance wireless transmission, e.g. during a workshop visit.

In another aspect the invention refers to a node configured for wireless communication with an electronic control unit, ECU, on board a motor vehicle. The node comprises a physical interface, a wireless communication interface arranged for short- distance communication with the ECU, and a connection unit configured to connect the ECU operatively to the physical interface via the wireless communication interface. The node preferably comprises a connection, e.g. a connection contact for a power supply cable. The node further comprises an identity unit configured to transmit a manufacturing identity of the node, e.g. a serial number, to the ECU.

In one embodiment the node comprises encryption means configured to encrypt the communication over the wireless communication interface. In one embodiment the encryption means are suited to using an encryption key based on the node's manufacturing identity. Using the node's manufacturing identity has the advantage of making it easy to create a unique encryption key. In one embodiment the node is provided with a component situated in the physical interface and chosen from among a sensor, an actuator or a user interface. The node is suited to the chosen component and the component's physical interface. The node preferably has a control unit with processor and memory, which control unit in conjunction with the component serves as the connection unit for the ECU. An advantage of this is that it can be used for different types of components. One example is sensors adapted to detecting or measuring the state of parts of a vehicle and their various internal and external environments, in particular a sensor suited to measuring a physical magnitude or quantity. Another example is actuators which can be used to control or act upon components in parts of the engine, air conditioning or accessories such as lifting devices. A further example is operating devices for the driver which have a user interface.

In yet another aspect the invention refers to a computer programme for installing at least one wireless node in a motor vehicle, such that the programme is suitable for execution in a computer device which has a communication interface for remote communication and that the programme during execution in the computer device makes it possible to register a unique manufacturing identity, e.g. a serial number, belonging to the node, in a database, which manufacturing identity of the node is coupled to an identity of the vehicle, e.g. a chassis number, in the database, and to transmit the node's manufacturing identity from the computer device to the vehicle, thereby authenticating the node for wireless communication with the vehicle.

In a further aspect the invention refers to a computer programme product comprising the computer programme and a storage medium, in particular a non-transitory storage medium, in which the programme is stored.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention will now be explained in more detail on the basis of embodiments described by way of examples and with reference to the attached drawings.

Figure 1 is a schematic diagram of a system for installing wireless nodes in motor vehicles;

Figure 2 illustrates a wireless node, with Figure 2A depicting hardware and Figure 2B depicting functions of the wireless node, which functions are performed by the hardware during execution of the software; Figure 3 illustrates an electronic control unit or ECU, with Figure 3A depicting hardware components in the ECU and Figure 3B depicting the ECU as functional units;

Figure 4 depicts a flowchart illustrating a method for installing at least one wireless node in a motor vehicle according to an embodiment of the present invention.

DESCRIPTION OF EMBODIMENTS

The wireless communication systems described above (US 2011/0245933 A1 and US 8,229,625 B2) are mainly concerned with wireless communication. For further understanding of systems suitable for being supplemented by the invention, known technology for vehicle-internal communication in general will be described below with reference to two other specifications, SE 526826 C2 and US 2012/0072055 A1, which exhaustively describe electronic control systems in modern motor vehicles, but without wireless communication between nodes and ECUs. Figures 1-4 described below mainly indicate aspects of the invention which make it possible for the state of the art to be improved in accordance with the invention.

Swedish patent SE 526826 C2 describes a system and method for maintenance of a motor vehicle which has an electronic control system with ECUs connected to a data communication bus, exemplified by a CAN bus. E P 1 583 039 A1 is an English language version of SE 526826 C2. One object of that system is to facilitate mod ification of the vehicle if for example an ECU needs chang ing . The system comprises a database contai ning inter alia information about the ECUs on board the veh icle, information about the vehicle and information about servicing carried out. Examples of th is information are parameter set-ups for the ECUs and a specification of the ECUs which are on board the veh icle . Figure 1 in SE 526826 C2 shows how a computer at a workshop is con nected to a truck's CAN bus via contacts. The connection is authenticated with a software key so that alterations can be made to the vehicle's parameter settings and software. The computer is also connected up to a central server for changing of data concern ing the vehicle. The con nection between the workshop's computer and the central server may be wired or wireless.

It is thus possible for settings in a vehicle's electron ic control system to be altered and software to be updated with information from a server via a workshop computer.

American patent application U S 201 2/0072055 A1 refers to a system whereby a server with a database connects itself wirelessly directly to a veh icle. The server has a wireless interface for com mu nication with the veh icle , and the vehicle has a corresponding wireless interface and a user u nit. The user u nit is further con nected to the veh icle's CAN bus and an ECU on board the veh icle.

U S 201 2/0072055 A1 further describes how the ECU is provided during manufactu re with a great deal of software wh ich may subsequently be activated and inactivated depending on whether the customer is licensed for the software or not. Via the user u nit and the wireless commu n ication interface the veh icle can ask the database's server whether the vehicle has a licence for given software , which l icensing information wi ll be in the database. If there is a licence in the database, the server will transmit activation information to the vehicle via an encrypted wireless telecommu n ication link or alternatively over the internet via a diagnostic device , e .g. at a workshop, wh ich device will have a wired connection to the CAN bus.

Figure 1 illustrates the main features of a system for installing a wireless node 1 in a motor vehicle 3 in accordance with an embodiment of the present invention . The diagram depicts a central computer device 5, in the form of a server, con nected commu nicatively to a database 51 . It also depicts a computer programme product 57 in the form of a computer program me stored on a disc and arranged to adapt a computer device to fu nction ing in accordance with the computer device 5 illustrated, in particu lar so that during the execution of the program me the computer device will perform the method steps cited as a su mmary of the invention and the method steps exemplified in the description of the invention. The computer programme product 57 may alternatively have the programme stored on some other permanent or non-transitory storage med ium than a disc.

I n the embodiment depicted in Figure 1 the central computer device 5 comprises a registration u nit 52 and the database 51 . The registration unit is connected operatively to the database. The database may alternatively be situated i n an external u n it relative to the computer device 5 , in which case the registration unit 52 will be su ited to being connected commu nicatively to the database. The computer device 5 is su ited to stori ng the identities, e.g . chassis nu mbers, of nu merous motor vehicles in the database 51 by means of the registration u nit 52. The computer device may comprise two or more computers or servers but is central in that it is intended to provide a central comprehensive register of motor vehicles 3, in particu lar a central register to make secu re installing of wireless nodes in veh icles possible . To effect installation of a wireless node 1 in one of the vehicles registered in the database, the registration unit 52 is therefore suited to registering the node's manufacturing number in the database 51. The registration may be effected by an operator who puts the particulars into the computer device 5 via a user interface (not depicted). The registration unit 52 is further suited to checking that the node 1, i.e. the node's manufacturing identity, is not registered for any other vehicle in the database.

The computer device 5 comprises also a communication unit 53 configured for remote communication via a mobile telecommunication system 59 (e.g. GSM, 3G or 4G) and a communication unit 54 for remote communication via a wired data communication system 58, e.g. a wired connection or wireless connection to the internet or to a telenetwork suited to data communication. The computer device is further suited to transmitting the manufacturing identity of a registered wireless node to the vehicle 3 so that a node can be authenticated for communication on board the vehicle. Transmission may be by either of the two communication units 53, 54. In an alternative version the computer device 5, e.g. the central server, comprises either a communication unit 53 configured for remote communication via a mobile telecommunication system 59, or a communication unit 54 for remote communication via a wired data communication system 58. The computer device 5 may also be suited to storing software for ECUs 30 and to transmitting such software to a motor vehicle 3. Such transmission may take place during the installation of a wireless node, to make it possible for an ECU 30 to interact with the node. The motor vehicle 3 is provided with an electronic control system 4 comprising two ECUs 30, 30A and a data communication bus 40, e.g. a CAN bus, Ethernet bus, Flexray bus or LIN (local interconnect network) bus, which is connected to the two ECUs 30, 30A and makes data transmission between them possible. The vehicle is further provided with a connection in the form of a connection contact 49 to the data communication bus 40 to connect the latter, and hence the vehicle, to an external computer unit PC. One of the vehicle's ECUs 30, 30A is further suited to mobile telecommunication in the mobile telecommunication system 59. Such ECUs 30A are previously known and are usually called telematic units. The vehicle is arranged for remote communication with the central server 5 through the vehicle's connection contact 49 and the telematic unit 30A.

The telematic unit 30A may also be suited to short-distance wireless communication, e.g. Bluetooth or wi-fi, for wireless connection via a gateway to the internet.

As an alternative or complement to a connection contact 49 and a telematic unit 30A suited to short-distance communication, the vehicle 3 may be provided with a separate communication unit comprising a short-distance wireless communication interface connected to the vehicle's data communication bus 40.

The computer device 5 and the vehicle 3 are further suited to authenticating communication, e.g. the transmission of the manufacturing identities of the wireless nodes. In particular, the computer device may comprise at least one communication unit 53, 54 suited to authenticating the transmission of the manufacturing identities of wireless nodes, and the vehicle may be provided with at least one unit, e.g. a telematic unit 30A or an ECU 30, suited to authenticating the transmission of the manufacturing identities of wireless nodes. These units may be suited to using a software key, encryption of traffic and/or exchange of one or more passwords to authenticate the transmission of the nodes' manufacturing identities.

Figures 2A and 2B illustrate a node 1 configured for wireless communication, depicted in two different ways. It takes the form of a combination of hardware and software. Figure 2A depicts an embodiment of the node's hardware. Figure 2B depicts an embodiment of the functions which the node is configured to perform and which take place when the software is executed by the hardware. Figure 2A depicts a wireless node 1 comprising a control unit 10 with a processor 11 and a memory 12. The node further comprises a physical interface 13, e.g. a sensor providing physical input or an actuator effecting a physical output. The node has a wireless communication interface 14 for short- distance communication, the control unit 10 may comprise a transmitting and receiving unit for two-way communication over the wireless interface, and the interface may take the form of an antenna. Alternatively the wireless interface may comprise a transmitting and receiving unit for two-way communication which is connected communicatively to the control unit. The node is preferably configured for short-distance communication in accordance with a short-distance wireless communication standard such as Bluetooth, wi-fi, ZigBee or wireless USB, or the licence-free frequency 433 MHz, and is suited to radio communication, microwave communication or IR communication.

The node 1 comprises also power supply means 15, e.g. a battery or a connection to an electric power supply line. This means 15 may thus be a cable connection, in which case the node is suited to being powered from the vehicle's electrical system.

Although in many cases the node 1 is preferably energised via cables of the vehicle's electrical system, it may alternatively be provided with batteries. It may also be provided with electricity generating means, e.g. solar cells or a converter configured to convert vibrations to electricity, which generating means will be connected to and charge the battery.

The control unit 10 is configured to control the node 1 and in particular the information flow between the physical interface 13 and the wireless communication interface 14. The control unit is in all essentials configured to control the functions of the node. The control unit performs the various functions and is suited to using the wireless communication interface and the physical interface when its own processor 11 executes software stored in the memory 12.

The processor 11 is suited to using the memory 12 for storage of data and to controlling communication via the wireless communication interface 14 and is connected operatively to the physical interface 13, e.g. the sensor or actuator in the physical interface.

The node 1 may be suited to different purposes and have different types of physical interface integrated in it. Examples of physical interfaces comprise vehicle speed sensors, temperature sensors and flow sensors, enabling the control unit to receive respective signals related to the speed of the vehicle, the temperature of the driving cab and the fuel flow in the engine. The control unit may be suited to passing the signals on to an ECU 30 (in Figure 1) via the wireless communication interface 14. Alternatively it may be suited to converting the signals to measured values and passing them on to the ECU 30 via the wireless communication interface.

An example of a wireless node 1 which serves as a temperature sensor is a node with a physical interface 13 comprising a temperature sensor adapted for example to measuring temperatures of the fuel or the temperature of the cooling water. The node will thus monitor some part of the vehicle's equipment and communicate the temperature wirelessly to an ECU 30.

Another example is a node 1 which serves as a speed sensor and has a physical interface 13 comprising a sensor suited to monitoring a speed of a vehicle part, e.g. a wheel or a shaft. In this case the node is suited to monitoring a movement and communicating it in the form for example of numbers of pulses, numbers of pulses per unit time or rotation speed.

The physical interface 13 may take the form of an operating unit such as a button, joystick or touchscreen suited to being handled by an operator, e.g. the vehicle's driver, in which case the processor 11 will be suited to receiving the operator's commands via the physical interface. The processor may store command data received via the physical interface in the memory 12 and also be configured to transmit command data to an ECU 30 via the wireless communication interface 14.

An example of a wireless node 1 which has an operating unit is a unit provided with a button. Such a button is intended for operation by, for example, the vehicle's driver, and the node will monitor the pressing of the button and communicate wirelessly to an ECU 30 the button's status, e.g. "pressed in" or "released". The unit provided with a button may be generic in that it may be used to control any desired functions not known to the node. Such a function may be allocated to the node in a memory in an ECU 30 so that it is known to the ECU 30 which receives the status communicated. Such a function may also be allocated to the node so that it is known to the driver/user by the provision of a so-called cowl on the button so that the function will be known to the driver/user.

The physical interface 13 may take the form of an actuator, in which case the processor may be suited to controlling the actuator, e.g. in accordance with instructions and commands received via the wireless communication interface 14 and in accordance with software stored in the memory 12. The control unit 10 is preferably suited to connecting an ECU 30 operatively to the physical interface when the node receives commands from the ECU via the wireless interface so that the ECU controls the actuator. The control unit may also be suited to controlling the actuator in accordance with instructions received from an ECU 30 via the wireless communication interface and also in accordance with software in the memory 12.

An example of a wireless node 1 in the form of an actuator is a valve, e.g. a water or fuel valve. Such a node will have a physical interface provided with a valve and be configured to control the position of the valve and hence a supply of water or fuel on the basis of commands received wirelessly from an ECU 30.

The physical interface 13 may be an integral part of the node, as illustrated in Figure 2A, but may alternatively be connected to it by a cable. Such a two-part node may in particular be placed for example at locations which are very difficult to reach or particularly exposed, e.g. hot or cold spots.

Figure 2B illustrates an embodiment of a wireless node 1 comprising a number of function units for performing the functions which the node is configured to perform. The node here comprises an identification unit 17 and a connection unit 16. The identification unit has an individual identity unique to the wireless node 1 relative to other similar nodes. Wireless nodes which are of the same kind may be provided during manufacture with an identification which identifies their type, e.g. an article number, while at the same time each of the nodes of a certain type may also have a manufacturing identity, e.g. a serial number, which gives it an individual identity. The individual identity is thus unique for every node and not merely unique in the vehicle's electronic control system 4 in Figure 1.

The node 1 is configured to communicate with an ECU 30 which controls and/or monitors an actuator, button or sensor in the node's physical interface 13. The node is therefore provided with means to make such monitoring or control possible. Its means for monitoring and control are hereinafter called a connection unit 16. The node 1 thus has a connection unit configured to enable an ECU 30 to control or monitor sensors, buttons and actuators. The node is configured to communicate with an ECU 30 via the wireless interface 14, and the connection unit 16 is configured to connect the ECU 30 operatively to the physical interface 13. To authenticate the node for the operative connection, the identification unit 17 is configured to identify the node via the wireless interface 14 by transmitting the node's manufacturing identity to the ECU.

The connection unit 16 may in principle be transparent to the ECU 30 and thus be suited to transmitting signals from the physical interface 13 directly to the ECU. Alternatively it may be suited to converting the signals to values, e.g. converting measurement signals to measured values. It may be suited to transmitting control signals or commands directly to an actuator in the physical interface. It may alternatively be suited to converting control data received to signals or commands suited to the actuator in the physical interface.

The node may also be configured for encrypted communication and have an encryption unit 18 configured to encrypt and de- encrypt communication over the wireless communication interface 14, in particular communication with the ECU 30. The encryption unit 18 will be configured to use an encryption key which is unique to the node. This key may be installed in the node during manufacture. The ECU 30 may for its part be suited to receiving the encryption key during the authentication of the node. The encryption unit will be suited to using the node's manufacturing identity for the creation of an encryption key for communication with the ECU 30. The ECU will correspondingly be suited to using the node's manufacturing identity to create an encryption key for communication with the node.

Figures 3A and 3B illustrate an ECU 30 configured to communicate with a wireless node 1. The ECU comprises a control unit 31 with a processor 32 and memory 33. The control unit is configured to control the ECU'S hardware, and the processor 32 executes software in the memory 33 to provide the ECU'S functions. The ECU has an interface 34 for wireless communication, particularly short-distance communication, with a wireless node. The ECU is preferably configured for communication with wireless nodes in accordance with one or more wireless communication technologies, e.g. one or more from among Bluetooth, wi-fi, ZigBee, the licence-free frequency 433 MHz and wireless USB. The ECU is preferaby also configured for communication with wireless nodes via one and more from among radio communication, microwave communication or IR communication. It further comprises a bus interface 35 for connection and communication via the vehicle's data communication bus 40. The ECU may be a telematic unit 30A and in that case also have a communication interface 36 for mobile telecommunication. The ECU comprises also interfaces, general ref. 37, with respective cable connections 39A, 39B, 39C to sensors, actuators and power supply.

The ECU 30 may also comprise a user interface 38, e.g. keyboard and screen, such as a so-called touchscreen, and be suited to receiving commands or instructions from a user and displaying control information on the screen for the user.

Figure 3B illustrates functions of the ECU 30. The ECU has a receiver 41 configured to receive manufacturing units of wireless nodes from a central server 5. The receiver is further suited to receiving software which enables interaction with the node 1. The receiving may be via the electronic control system's data communication bus 40, from the telematic unit 30A or the connection contact 49 for an external computer unit. The ECU may take the form of a telematic unit 30A and receive manufacturing identities and/or software via a mobile telecommunication system 59. The receiver may be configured to verify communication from the computer device 5 by being suited to encrypted communication and/or exchange of passwords with the computer device.

The ECU 30 also has an authenticating unit 43 configured to authenticate wireless nodes by storing their manufacturing identities. The authentication unit is further suited to activating pre-installed software or software received.

The ECU 30 further comprises a node control unit 45 configured to interact with the wireless node 1. The node control unit is suited to communicating with authenticated nodes and may be suited to blocking communication with those which have not been authenticated.

To interact with the wireless node 1, the node control unit 45 is configured with software which may have been stored during the manufacture of the ECU 30 and be activated during authentication, or be received by the receiver 41 during the authentication, or be received by the receiver as an update of the software. The ECU is configured for encrypted communication, particularly with wireless nodes, and also has for this purpose an encryption unit 47 which is configured to use a unique encryption key for each wireless node. In one version the encryption unit is suited to creating an encryption key which is based on the node's manufacturing identity and which the ECU is configured to use for encrypted short-distance communication with the node via the wireless communication interface 34. The encryption unit may alternatively or complementarily to this version be suited to using an encryption key received during the authentication of the node. In this case the ECU will be suited to receiving encryption keys of wireless nodes from the central computer device 5 when the respective nodes are registered by the central computer device and are authenticated in the ECU. The ECU will preferably be adapted to receiving the encryption keys via the receiver 41 and storing them when the authentication unit 43 stores the idenitities of corresponding nodes during the authentication, so that the encryption keys will be accessible to the encryption unit.

Figure 4 illustrates a method for installing a wireless node 1 in a motor vehicle 3. Installation comprises substantially three steps, viz. registration 105 of the node, transmission 107 of its manufacturing identity to the vehicle and authentication 109 of the node in the vehicle.

Figure 4 also illustrates other suitable method steps for implementing the invention, although these steps need not be performed during every installation.

Installing two or more wireless nodes in a motor vehicle comprises registration 105 of each node, transmission 107 of each node's manufacturing identity and authentication 109 of each node in the vehicle.

The method comprises the setting up 101 close to a central server 5 of a database 51 provided with a vehicle register containing vehicle-specific information such as chassis number, and each vehicle's model designation and equipment level. The register may also be provided with software for the vehicles' electronic control systems, particularly software which enables interaction of the ECUs 30, 30A with wireless nodes, comprising sensors or actuators, and interaction with wired sensors and actuators.

The method comprises manufacture 103 of a wireless node 1 which is allocated an individual manufacturing identity, e.g. a serial number. During manufacture the node may with advantage be configured to wirelessly identify itself with the manufacturing identity. During manufacture of wireless nodes, each of them has to be allocated an individual manufacturing identity. Each node may be allocated an article number common to all similar nodes and be allocated a unique serial number in addition to this shared article number.

When a node 1 has thereafter to be installed in a specific motor vehicle 3 which is registered in the vehicle register, a step of registering 105 the node's manufacturing identity in the central server 5 is performed. During this registration the manufacturing identity is coupled to a vehicle identity in the database, and the node is thereby authenticated by the central server for internal communication with the vehicle's electronic control system 4. Th is reg istration 1 05 may also comprise registering the node's article nu mber which identifies which type of node it is and which model .

The registration 1 05 may comprise a first authentication whereby the central server 5 checks whether the node is of a valid type for the veh icle and/or whether it has a u nique manufacturing identity. Registration may comprise the central server checking in a first authentication that the node is not already registered for another vehicle .

Where two or more nodes are being installed in the same veh icle , registration wil l comprise the manufacturing identity of each of them being coupled to the vehicle identity.

I nstallation continues with transmission 1 07 of the manufacturing identity to the veh icle . Transmision may be encrypted and/or comprise a software key and/or an identification of the computer device 5 and/or a password . It may also comprise activation instructions for software which the veh icle , in particu lar an EC U 30 in the veh icle , needs for interaction with the node. It may also include such software. It may further comprise a encryption key for commu nication with the node .

Where two or more wireless nodes are being installed in a veh icle , the manufacturing identity of each of them wil l be transmitted (step 1 07) to the respective veh icle. Where two or more nodes of the same type are being installed, shared software and/or activation instructions for the respective type of node may be transmitted together with the manufactu ring identities, in which case the software and the activation instruction will be common to the nodes of the same type, whereas the manufacturing identity of each node will be unique. The receiving in the vehicle may comprise a subsid iary step of verification by the computer device 5 on the basis of said encryption of the transmission , the use of software keys and/or exchange of passwords . In the vehicle an authentication 109 of the node 1 for vehicle- internal communication will then be effected by storing the node's manufacturing identity in at least one ECU 30. This authentication may also comprise storage and/or activation of software for interaction with the node. The manufacturing identity will be stored in the ECU so that communication with the node will be allowed by its manufacturing identity being made available for communication by means of an authentication unit 43 in the ECU. Authentication may also comprise storing the encryption key received or producing an encryption key for the node on the basis of the manufacturing identity received.

Where two or more wireless nodes are being authenticated in the vehicle, each manufacturing identity will be stored in an ECU. Two or more nodes may be authenticated in the same ECU, in which case they will be authenticated for communication with that ECU. Each individual node may further be authenticated in more than one ECU, in which case it will be authenticated for communication with two or more of the vehicle's ECUs. In the same way, software in one or more ECUs will be installed and/or activated.

The method in Figure 4 comprises also fitting 111 the node 1 in the vehicle 3, which may be done by the user.

The method may also comprise transmitting 113 to the vehicle, from the central server 5 or another server, software which makes it possible for the ECUs to interact with wireless nodes. Such transmission 113 of software may also take place long after installation in order to update the software in new versions.

A method and a computer device for installing wireless nodes in motor vehicles have been described on the basis of embodiment examples whereby at least one wireless node (1) is authenticated, installed and fitted in a vehicle (3) which is provided with at least one electronic control unit (30) suited to wireless communication with the node (1). The computer device (5) comprises, or is connected communicatively to, a database (51) containing identities of a plurality of vehicles, e.g. chassis numbers. The computer device (5) has a registration unit (52) configured to couple the manufacturing identity of a node (1), e.g. a serial number, to an identity of the vehicle (3) in the database (51), and a communication unit (53) configured to transmit the node's manufacturing identity to the respective vehicle (3). The method comprises registration (105) of a unique manufacturing identity, e.g. a serial number, which belongs to the node (1), in a database (51) and which is coupled to an identity of the vehicle (3), e.g. a chassis number, in the database (51), which registration is effected by the computer device (5). The method further comprises transmission (107) of the node's manufacturing identity from the computer device (5) to the vehicle (3), thereby authenticating the node (1) for wireless communication with the vehicle (3). Embodiment examples of a motor vehicle (3) and electronic control units (30, 30A) for motor vehicles, suited to authentication of and communication with wireless nodes, have also been described. Embodiment examples of a wireless node (1) for vehicle-internal communication have also been described. Embodiment examples of a computer programme product (57) comprising a computer programme for execution by the computer device, which programme makes it possible for the computer device to perform its method steps, have also been described.

The invention is nevertheless not restricted to these embodiments, which have been described with reference to the attached drawings but may be varied freely within the scope of the claims set out below.

Claims

1. A method for installing wireless nodes in motor vehicles, such that least one wireless node (1) is installed in a motor vehicle (3), which vehicle (3) is provided with an electronic control system (4) comprising at least one electronic control unit ECU (30) suited to wireless communication with the node (1), which method comprises

- registration (105) of a unique manufacturing identity, e.g a serial number, belonging to the wireless node (1), in a database (51), which manufacturing identity of the node (1) is coupled to an identity of the vehicle (3), e.g. a chassis number, in a database (51), which registration is effected by means of a computer device (5) and

- transmission (107) of the manufacturing identity of the node (1) from the computer device (5) to the vehicle (3), thereby authenticating the wireless node (1) for communication with the vehicle (3).

2. A method according to claim 1, further comprising authentication (109) of the node (1) in the motor vehicle (3), which authentication comprises storing the node's manufacturing identity in at least one ECU (30) in the vehicle (3).

3. A method according to claim 1 or 2, in which the transmission of the manufacturing identity of the node (1) takes place by remote communication.

4. A method according to claim 3, in which the transmission of the manufacturing identity of the node (1) is encrypted.

5. A method according to claim 3 or 4, in which the remote communication comprises transmission of the manufacturing identity of the node (1) via a mobile telecommunication system to a telematic unit (30A) in the vehicle (3).

6. A method according to claim 3 or 4, in which the remote communication comprises short-distance transmission of the manufacturing identity of the node (1) via a wired connection to a data communication bus (40) in the vehicle's electronic control system (4) or via a short-distance wireless transmission to the vehicle's electronic control system (4).

7. A method according to any one of claims 1-6, in which the registration comprises verification that the manufacturing identity of the node (1) is not coupled to another vehicle in the database, e.g. to another chassis number.

8. A computer device (5) for installing wireless nodes in motor vehicles, which installation comprises at least one wireless node (1) being installed in a motor vehicle (3) provided with an electronic control system (4) comprising at least one electronic control unit ECU (30), which computer device (5) comprises, or is connected communicatively to,

- a database (51) which contains identities of a plurality of motor vehicles, e.g. chassis numbers, which server (5) comprises

- a registration unit (52) configured to couple a manufacturing identity of a wireless node (1), e.g. a serial number, to an identity of the vehicle (3) in the database (51) and

- a communication unit (53, 54) configured to transmit the manufacturing identity of the node (1) to the respective vehicle (3).

9. A computer device (5) according to claim 8, in which the registration unit (52) is suited to checking whether the manufacturing identity of the node (1) is coupled to any other vehicle in the database (51).

10. A computer device (5) according to claim 8 or 9, in which the communication unit (53, 54) is suited to communicating with the vehicle (3) by telecommunication means, e.g. by mobile telecommunication or wired data communication.

11. A motor vehicle (3) provided with an electronic control system (4) comprising at least one electronic control unit ECU (30) comprising an interface (34) for wireless communication with a wireless node in that the vehicle (3) has an authentication unit (43) configured to authenticate at least one wireless node (1) for communication with the ECU (30), which authentication unit (43) registers a manufacturing identity of the node (1), e.g. a serial number.

12. A motor vehicle (3) according to claim 11 , in which the ECU (30) comprises an node control unit (45) for wireless communication with a wireless node (1) via the wireless interface (34), which control unit (45) is suited to verifying that the node (1) is authenticated.

13. A motor vehicle (3) according to claim 11 or 12, in which the electronic control system (4) also comprises a telematic unit (30A) and a data communication bus (40) which is configured to connect the telematic unit (30A) to the ECU (30), which telematic unit (30A) is configured to receive the manufacturing identity of the node (1) from a mobile telecommunication system and pass the node's manufacturing identity on to the ECU (30).

14. A motor vehicle (3) according to claim 11 or 12, in which the electronic control system (4) comprises a data communication bus (40) connected to the ECU (30), and the vehicle (3) has a connection, e.g. a connection contact (49) or a wireless communication interface for short-distance communication, which is connected to the data communication bus (40) and is arranged to enable connection of an external computer unit (PC) to the vehicle (3), which vehicle (3) is suited to receiving the manufacturing identity of the node (1) in the ECU (30) from the external computer unit (PC) via the connection and the data communication bus (40).

15. A computer programme for installing wireless nodes in motor vehicles, which installation comprises at least one wireless node (1) being installed in a motor vehicle (3), which programme is suitable for execution in a computer device (5) which has a communication interface (53, 54) for remote communication, which programme, during execution in the computer device (5), enables

- registration (105) of a unique manufacturing identity, e.g. a serial number, belonging to the node (1), in a database (51), which manufacturing identity of the node (1) is coupled to an identity of the vehicle (3), e.g. a chassis number, in the database (51), and

- transmission (105) of the manufacturing identity of the node (1) from the central server (5) to the vehicle (3), thereby authenticating the wireless node (1) for communication with the vehicle (3).

16. A computer programme product comprising a computer programme according to claim 15 and a storage medium (57), in particular a non-transitory storage medium, which programme is stored in the storage medium (57).