EP3986744A1

EP3986744A1 - Method for checking the plausibility of the performance coding of a component of a vehicle, and vehicle computer

Info

Publication number: EP3986744A1
Application number: EP20730994.9A
Authority: EP
Inventors: Steffen Gruner
Original assignee: Volkswagen AG
Current assignee: Volkswagen AG
Priority date: 2019-06-18
Filing date: 2020-05-26
Publication date: 2022-04-27
Also published as: WO2020254070A1; CN114007891A; DE102019208850A1

Abstract

The method according to the invention for checking the plausibility of the performance coding of a component of a vehicle comprises the following method steps: In one step, a performance coding stored in the component is read in. The performance coding can be stored in the component in any electronic form, for example in a read-only memory. In another method step, characters of a vehicle-specific identification number that contain information regarding the vehicle performance are read out. In another method step, a comparison between the relevant characters of the vehicle-specific identification number that contain information regarding the vehicle performance and the performance coding stored in the component is carried out. On the basis of the result of the comparison, the component is enabled if there is agreement between the performance coding stored in the component and the performance information that has been read out. Enabling the component allows the vehicle to be started, for example. In the absence of agreement, a substitute response occurs, for example the component and/or the vehicle is disabled.

Description

description

Method for the plausibility check of the power coding of a component of a vehicle and a vehicle computer

The invention relates to a method for the plausibility check of the power coding of a component of a vehicle and to a vehicle computer.

In modern vehicles, important components such as a drive control unit are secured by the immobilizer. When the vehicle is started, the immobilizer sends a release code to the drive control unit. After a plausibility check of the transmitted release code, the start of the vehicle is released.

High development costs mean that identical hardware components are installed in different vehicles. The specific parameters to be used for the vehicle are often only stored in the component on the software side. This opens up the possibility of influencing the vehicle properties, for example the performance of the vehicle, by replacing a component, for example an engine control unit. This problem can also be countered by securing it with the immobilizer, since the release code no longer matches after the component has been replaced.

This aspect is of particular importance in the case of electric vehicles. Often vehicles with identical hardware with different performance and

Equipment variants offered. In the case of these vehicles, the vehicle performance that the driver can experience is therefore exclusively defined in the vehicle software. Through a

Without a plausibility check of the power coding stored in the component via the immobilizer, replacement of the drive control unit would be a manipulation of the

Vehicle performance possible in a simple way.

In newer generations, the release codes of the immobilizers are encrypted and transmitted via the vehicle's bus system, for example a CAN bus system. In simple cases, the release code is stored on an RFID chip, for example in the ignition key, and is read out and transmitted for release. In newer systems, the release code consists of a digital key that is verified using an algorithm. A disadvantage is a plausibility check of the power coding of components of a vehicle via the immobilizer very expensive, since the immobilizer must meet very high security standards as theft protection and communication with the immobilizer must accordingly be secured accordingly.

The invention is based on the object of providing a method for checking the plausibility of the

To propose power coding of a component of a vehicle that prevents manipulation of the component and is inexpensive and easy to implement.

The method according to the invention for checking the plausibility of the power coding of a component of a vehicle comprises the following method steps:

In one step, a performance coding stored in the component is read in. The power coding can be in the component in any electronic form,

for example, a read-only memory.

In a further process step, a vehicle-specific

Identification number read out which contain information about the vehicle performance. The vehicle-specific identification number is a preferred number

tamper-proof is stored in the vehicle and contains basic vehicle data. The basic vehicle data also includes data that clearly identifies the vehicle's performance.

In a further process step, the relevant points of the

Vehicle-specific identification number containing information on the vehicle performance with the performance coding stored in the component.

Depending on the results of the comparison, a further method step takes place in the event of a positive comparison result, that is, in the event of a match between the power coding stored in the component and the performance information read out, the component is released. The release of the component enables the vehicle to be started, for example. In the event of a mismatch, i.e. if the one stored in the component

If the power coding and the read-out power information do not match, a substitute reaction takes place, which in most cases prevents the vehicle from starting. This can be a blocking of the component or the vehicle, for example. The power coding can advantageously be checked for plausibility in a simple manner by means of the method according to the invention. A vehicle-specific identification number, which also contains information about the vehicle performance, is in most modern

Vehicles in electronic form and can be easily read out. A

Manipulation of the vehicle performance can thus be effectively prevented.

In a preferred embodiment of the method, the performance information is read from the vehicle-specific identification number from more than one storage location. In this way, the reliability of the plausibility check can advantageously be increased.

In a preferred embodiment of the invention, it is vehicle-specific

Identification number is the vehicle identification number (VI N). The vehicle identification number (VIN) is an internationally standardized, 17-digit serial number with which a motor vehicle can be clearly identified. It consists of a manufacturer identification (World Manufacturer Identifier), a manufacturer-specific key and a consecutive number that is mostly dependent on the year of manufacture. The manufacturer-specific

The key is specified in positions 4 to 9 of the vehicle identification number. The performance of the vehicle can be derived from digits 4 - "Series" and 5 - "Engine type in general", so digits 4 and 5 of the are preferred

Vehicle identification number (VIN) read out. If necessary, other digits of the vehicle identification number can also be used, for example the model year (digit 10) or the manufacturer identification (digits 1-3). That is advantageous

Vehicle identification number (VIN) a standardized number which contains all the information necessary for a clear determination of the vehicle performance, whereby the method according to the invention can also be standardized for this number.

The storage location of the vehicle-specific identification number is irrelevant for the method. This can be done in a control unit, for example the control unit of the

Instrument cluster or the immobilizer. According to the invention, the number is read out by the vehicle computer carrying out the method via the bus system of the vehicle. Often this is a CAN-BUS system.

The method is carried out using a vehicle computer, for example a control unit. The method is preferably carried out via the control device whose power coding is to be checked for plausibility. Systems are known which ensure that the correct, unmanipulated vehicle identification number (VI N) is stored in a vehicle computer, in particular the engine control, the transmission control or a central computer. For example, a first means sends the vehicle identification number (VIN) to the vehicle computer, which stores the vehicle identification number (VIN) if it has not yet been verified

Vehicle identification number (VIN) is stored. The vehicle computer then sends the stored vehicle identification number (VIN) to a second device which carries out a plausibility check of the vehicle identification number (VIN). If the second agent verifies the vehicle identification number (VIN), it sends a

Blocking request to the vehicle computer, which checks whether a verified vehicle identification number (VIN) is already available. If this is the case, the blocking request is rejected, otherwise the previously stored vehicle identification number (VIN) is verified and blocked. The first means can be a manual input of the vehicle identification number (VIN) etched into the chassis, for example, into the vehicle computer, for example after the vehicle computer has been replaced. Such a system is known, for example, from EP 1 615 179 A1.

In a further preferred embodiment of the invention, the substitute reaction includes an entry in the fault memory of the vehicle. By simply reading out the fault memory, it can advantageously be recognized why the vehicle does not start.

In a further preferred embodiment of the invention, the substitute reaction includes a block of the component and / or a block of the vehicle. This advantageously prevents a vehicle with incorrect power coding from being moved.

In a particularly preferred embodiment of the method, the component is a

Drive control unit. A plausibility check of the drive control device is particularly important in the case of electric vehicles, since different vehicle performance in otherwise identical vehicles is only defined by the programming of the drive control device. In other words, the drive control unit is the only component that defines the vehicle performance, since the electric motor-battery configuration of a series is often identical.

In a further preferred embodiment of the invention, the component is a

Transmission control unit. Advantageously, the method according to the invention can be used to perform a simple and inexpensive, but very tamper-proof, plausibility check of the power coding stored in the component. The vehicle computer according to the invention is set up to carry out the method according to the invention. The vehicle computer is particularly preferably set up in such a way that the method is carried out each time the vehicle is started. In this way, it is advantageously possible to effectively prevent a vehicle with incorrect power coding from being moved.

Further preferred embodiments of the invention result from the other features mentioned in the subclaims.

The various embodiments of the invention mentioned in this application can be advantageously combined with one another, unless stated otherwise in the individual case.

The invention is described below in exemplary embodiments using the associated

Drawings explained. Show it:

Figure 1 a vehicle having a vehicle computer for the plausibility check

Power coding,

Figure 2 shows the structure of a vehicle identification number (VI N), and

FIG. 3 shows a flow chart of the method for plausibility checking of the

Power coding.

Figure 1 shows a schematic structure of a vehicle 1. This has a

Drive control unit 11 in which a power coding LC is stored. The

Power coding LC is characteristic of characteristic fields KF stored in the drive control device 11 for engine control and should be checked each time the vehicle 1 is started. The vehicle 1 has a control unit of the instrument cluster 12 in which the

Vehicle identification number VI N is stored tamper-proof in a read-only memory. The communication between the components of the vehicle 1 takes place via a CAN bus system 3. The drive control device 11 is connected to a motor 13 and the control device of the instrument cluster 12 via this CAN bus system 3.

The vehicle 1 is a purely electric vehicle and has an output of 93 kW. The

Communication between the components of the vehicle 1, such as drive control unit 11, control unit instrument cluster 12 and engine 13, takes place via a CAN bus system 3 of the

Vehicle 1. Another equipment line of the vehicle 1 is offered with an experience of 110 kW. The two equipment lines with 93 kW and 110 kW are identical in terms of hardware, in particular with regard to the battery and driving electric motor. The different

The performance of the vehicles is only achieved through different engine control maps stored in the drive control unit. The performance coding LC is characteristic of the stored characteristic fields for the engine control and thus for the performance of the vehicle that the customer can experience.

Without a plausibility check of the power coding LC, it would be possible, by exchanging the drive control device 11, to apply other characteristics maps to the engine control and thus to change the power of the vehicle. For example, by installing a drive control device 11 from a vehicle with 110 kW in a vehicle with 93 kW, its output could be increased. This brings with it a number of problems, including bypassing the manufacturer's pricing policy. Often, higher-powered vehicles also have differently dimensioned tires or brakes, which means that manipulation also represents a safety risk.

Figure 2 shows the structure of a vehicle identification number VIN. The first three digits of the vehicle identification number VI N is the manufacturer identifier S1. The manufacturer of the vehicle 1 is clearly identified via these three positions. The series S2 is defined in the following fourth digit of the vehicle identification number VIN. Based on the information on the S2 series and the engine type S3, a clear assignment of the performance of vehicle 1 is possible.

According to the method according to the invention shown schematically in FIG. 3, the vehicle identification number VIN from a control unit of the vehicle identification number VIN when the vehicle 1 is attempted to start by the drive control unit 11 series S2 and the engine type S3

Instrument cluster 12 read out.

In a next step, the comparison is made between the power coding stored in the drive control device 11 and the power information taken from the control device of the instrument cluster 13 from the vehicle identification number VIN read out. If the comparison result is positive, that is, if there is a match between the power coding LC from the drive control device 11 and the information from the

Vehicle identification number VI N enables the start of vehicle 1.

If the comparison result is negative, i.e. if the

Vehicle identification number VI N read out performance information does not match the performance coding of the drive control device 11, the vehicle 1 and the drive control device 11 are blocked. Furthermore, an error is entered in the error memory of vehicle 1.

List of reference symbols

I vehicle

I I drive control unit

12 Control unit of the instrument cluster

13 motor M

3 CAN bus system

KF engine map

LC power coding

VI N vehicle identification number

Claims

1. Method for the plausibility check of the power coding (LC) of a component of a

Vehicle (1) comprising the following process steps:

Reading in a power code (LC) stored in the component;

Reading in stored performance information from a vehicle-specific identification number from at least one storage location;

Comparison of the stored performance information with the performance coding (LC) stored in the component,

Release of the component if the stored performance information matches the performance coding (LC) stored in the component or a substitute reaction is triggered if there is no match.

2. The method according to claim 1, characterized in that the stored

Performance information is the vehicle identification number (VIN).

3. The method according to claim 2, characterized in that the relevant points

stored performance information positions 4 and 5 of the

Vehicle identification number (VIN) is.

4. The method according to claim 1, characterized in that the stored

Performance information is read from the immobilizer.

5. The method according to claim 1, characterized in that the substitute reaction comprises an entry in the error memory.

6. The method according to any one of the preceding claims, characterized in that the substitute reaction comprises a lock of the component.

7. The method according to any one of the preceding claims, characterized in that the substitute reaction comprises a lock of the vehicle (1).

8. The method according to any one of the preceding claims, characterized in that the component is a drive control device (11).

9. The method according to any one of the preceding claims, characterized in that the component is a transmission control unit.

10. The method according to claim 2 or 3, characterized in that the stored performance information is read from a control unit of the instrument cluster (12).

11. Vehicle computer set up to carry out the method according to one of the preceding claims.

12. Vehicle computer according to claim 11, characterized in that the vehicle computer is configured so that the method is run through each time the vehicle is started.

13. Motor vehicle having a vehicle computer according to one of claims 11 or