GB2349257A

GB2349257A - Securing data communications between a data medium and a vehicle, and monitoring vehicle operation

Info

Publication number: GB2349257A
Application number: GB0009558A
Authority: GB
Inventors: Oliver Giessl
Original assignee: Siemens AG
Current assignee: Siemens AG
Priority date: 1999-04-20
Filing date: 2000-04-19
Publication date: 2000-10-25
Also published as: FR2795579A1; DE19917885C1; GB0009558D0

Abstract

A data medium 2 which e.g. is necessary for the use of a vehicle contains personal and other data which can be deposited onto the data medium in a data communications device (8) remote from the vehicle. In a data communications device (26) fixed to the vehicle, personal data can be inputted. A readout of the other data e.g. budget data or for the electronic anti-theft device which must be overridden, takes place only if the comparison in the vehicle of the inputted personal data and the personal data stored on the data medium is positive.

Description

1 2349257 METHOD FOR SECURING DATA COMMUNICATIONS BETWEEN A DATA MEDIUM

AND A VEHICLE AND A SYSTEM FOR MONITORING THE OPERATION OF A VEHICLE.

The invention concerns a method for securing data communications between a data medium, in particular a vehicle control unit having a memory, and a vehicle. The invention further concerns a system for monitoring the operation of a vehicle.

In conventional electronic anti-theft devices5 a code stored on a vehicle control unit, for example an electronic key, is compared with a code stored in an onboard computer of the vehicle. It is known from DE 41 23 666 Al to complement such a vehicle security system by providing that components of the vehicle which are necessary for operation be provided with component control units which receive a code signal from an onboard computer, modify it in a certain manner, and send it back to the onboard computer. Only if the modified code signal is recognised in the onboard computer as corresponding to a predetermined code signal stored in the onboard computer is the operation of the component released.

Also known are access control systems in which personal data is inputted or scanned and compared with data previously stored in the onboard computer, whereby entry in the vehicle or the vehicle itself is released through the comparison of the inputted data with the data stored in the onboard computer. In this process, either the entire vehicle is released with the access control systems using personal data or the access control systems functioning with personal data are used to supplement conventional electronic anti-theft devices.

2 The object of the invention is to make the operation of one or more vehicles very secure against theft and at the same time as flexibly as possible adaptable to the particular requirements through the use of modem data communications.

A first solution to the object of the invention is created with the method according to the primary claim.

According to the invention, not the vehicle itself but rather a data medium, -in particular a vehicle control unit with a data memory, is released according to the invention through a comparison of personal data.

The additional data contained on the data medium can be of the most varied nature; it can be data for overriding an anti-theft device, data which budgets the usability of a vehicle, which contains information with respect to service requirements, etc.

Claims

Claim 2 is directed to the basic construction of a system with which the

object of the invention is solved.

In the data communications device fixed in the vehicle, personal data is inputted which is compared with the stored personal data. In the event of a positive comparison, the readout of further data from the data medium is released.

Advantageously the data medium according to Claim 3 is a vehicle control unit, for example an electronic key or an electronic card. Thus the vehicle control unit becomes a data medium with data useful in many ways for the operation of the vehicle, with the data either being recorded onto the data medium outside of the vehicle and then read out in the vehicle or vice versa recorded on the data medium in the vehicle and read out externally.

3 The additional subclaims are directed toward advantageous embodiments and further developments of the system according to the invention.

The personal data which is used in the invention for securing data communications between the data medium or the vehicle control unit and the vehicle can be biometric data (eye scanning, finger-print, etc.), data inputted using a PIN number, or data which is stored on a master key or a master card. The additional data stored on the data medium can be data which is used for budgeting the use of the vehicle, for maintaining a compact log book, for diagnosis and variation functions, automatic memory functions, etc. The invention in addition creates the possibility of assigning personal data to individual vehicle devices and vehicle functions in order to make them individually usable. In addition, the personal data stored on the data medium can serve to restrict the use of a vehicle.

The invention will be explained below using schematic drawings as examples and with additional details.

The drawings show:

Figure I Basic structure of a system according to the invention, Figure 2 Block diagram of a data medium, and Figure 3 Examples of data flows which occur in the system according to the invention.

Of central importance for the system according to the invention, which can also be designated a telematic access control system, is a data medium 2 which advantageously is configured as a vehicle control unit in the form of an electronic vehicle key 4 or a telecard 6. In each case, the data medium contains 4 an electronic system with a data memory into which data can be read in and from which data can be read out in known manner.

The data medium can have its own battery for power supply as well as its own small display for the display of important information.

The reading in of data onto data medium 2 takes place, by way of example, through a computer unit 8 such as a workstation computer or a PC which-is equipped with a suitable interface.

If the system is used by a vehicle rental operation or for a fleet of vehicles, for example, an automatic key machine 10 with different key insertion slots 12 and an input unit 14 is provided. Personal data, for example biornetric: data, can be inputted at input unit 14. In like manner, computer unit 8 can be provided with an input unit 16 for reading in biometric data.

Automatic key machine 10 can communicate via an antenna 18 with an antenna 20 of a central station 22, for example a workshop, a vehicle manufacturer, the central station of a vehicle rental operation, of a fleet of vehicles, of a service provider, etc.

A vehicle owner, a vehicle renter, or another person authorised to drive 24 who intends to use a vehicle integrated into the system according to the invention enters into dialog with a data communications device 26 of the vehicle which can have an onboard computer 27 with a display 28, a keyboard 30, and/or rotary switches 32.

Through an interface 34, the onboard computer 27 is connected to a biometric sensor 36, a connector 38, and/or a slot 40 for insertion of a card or a key. Connection to a printer 44 is possible through an additional interface 42.

There are thus various possibilities for the input of personal data. For example, biometric data can be read in, by way of example, in the form of eye scanning 46 or of a fingerprint 48. The personal data can also be obtained through reading out of a master key 50 or a master card 52 which is assigned exclusively to an authorised person.

It is also possible to manually input a PIN 53 through connector 38 via-a mobile telephone keypad or through configuring the display 28 as a touchscreen or through the keypad 30, or through proper activation of the rotary switch 32. Naturally speech input is also possible through a microphone (not depicted).

Input unit 16 at computer unit 8 or 14 at automatic key machine 10 can permit the same input possibilities.

Among the data which can be read in through computer unit 8 or by the central station 22 for example via automatic key machine 10 into the memory of data medium 2 include the following:

Budget data such as selection of the budget, establishment of limits, specification of maximum figures, or automatic filling of a budget upon each reading in of new data.

Compact log book functions such as input of the reason for the trip (personal, service, commuting), input of the destination, automatic activation such as date, time, odometer reading, etc., printout of a driving log on printer 44 or data transfer through data medium 2 to computer unit 8.

- Diagnosis and variation functions such as enable/disable of vehicle ftinctions or devices (radio, video, etc.), description of the maintenance condition of the vehicle such as fill level of oil, fuel, and water) battery voltage, If etc., not ication of software upgrades, etc.

6 Automatic triggering of memory functions such as setting of the air conditioning system, seat, mirror, etc.

Figure 2 shows a block diagram of a data medium using the example of a telekey or electronic key 4. Electronic key 4 has a microprocessor 41 with an internal memory 42which is preferably configured as EEPROM. In the event of insufficient memory capacity of internal memory 42, an additional memo!Y 43 iSprovided, preferably also configured as EEPROM. An infrared interface 44 serves for data communication with electronic key 4. Information can be provided to the owner of key 4 by means of an audible signal generator 45 and/or a display 46. A real-time clock 47 serves as clock pulse generator and for display of date and time. A battery 48, preferably rechargeable, serves to provide power for the electronic key. Fingerprints with associated user profile and budget data as well as the required data for conventional key functions are stored in the internal memory 42. Data can be stored in external memory 43 which is required for a check list, which reproduces a vehicle diagnosis protocol, which is necessary for keeping a compact log book, and other matters. The audible signal generator 45 can signal certain function processes such as activation acknowledgement of an activation key (not depicted) of the key for inputting and/or outputting certain data or for display of certain data in display 46 such as requesting certain diagnostic data.

The structure and function of the electronic components described to this point are known as such and are therefore not described in detail. The basic sequence of functions in the use of the system according to the invention will be explained in summary using Figure 1.

Data is imported from the central station 22 to the automatic key machines 10 or the computer unit 8 which form data communication devices for data medium 2. In automatic key machine 10, the data, which is provided with 7 codes assigned to the individual data media 2, is recorded on the individual data media 2. In computer unit 8, the data can be inputted directly through the input keyboard. In addition, on the data medium of the particular authorised person, the corresponding personal data is recorded which is either inputted directly by the person or is read in as biometric data or is read out from a master card.

The person then enters into dialog with onboard computer 26 of the vehicle. A unit for reading out the data of data medium 2 and for inputting the personal data of the person can be accessible from outside of the vehicle, but more advantageously it is located only in the interior of the vehicle. After the inputting or scanning of the personal data, the onboard computer reads out the personal data of data medium 2. After a positive comparison of the personal data, the additional data which is stored on data medium 2 is read out, after which operation of the vehicle takes place in accordance with the stored data. Depending on the stored data, vehicle data can be read out onto data medium 2 which then, after person 24 has left the vehicle and positioned the data medium at the interface of computer unit 8 or one of the key insertion slots 12 of automatic key machine 10, is read out and may be exported to the central station 22.

Naturally special, menu-driven software can be used which makes the individual processes easily comprehensible and user friendly.

The telematic data transfer is explained using the double arrow of Figure 3, with the same reference characters being used as in Figure 1. A vehicle in which onboard computer 26 is located is designated with the number 54.

The data transfer between the central station 22 and computer unit 8 (or automatic key machine 10) takes place over the Internet, by PC with modem, through an operator, by e-mail, with a mobile phone with data service, etc.

8 Data types are administration data, servicing information, information on services provided, enable/disable vehicle functions, fleet management information, software upgrades or updates.

Functions which take place in computer unit 8 are, by way of example, programming in accordance with the budgeting, available logbook functions, diagnosis and variation functions, and programming of the automatic memog functions.

After an authorisation check, the data stored on data medium 2 is, as explained above, exported into vehicle 54 or data medium 2 is loaded in the vehicle with new data which is read out in computer unit 8 and may be transferred to central station 20.

The system according to the invention can be further developed and applied in diverse ways and is explained below with additional examples.

If the system is utilised by private persons, the fingerprint of the person authorised to use the vehicle is, by way of example, stored on data medium 2. Following identification of the fingerprint, the telematic data transfer can take place in the vehicle between onboard computer 26 and data medium 2. Data medium 2 can be an electric key 4 which, by way of example, must also be inserted in an ignition lock of the vehicle and turned, in which case it is possible for the data transfer to take place directly in the ignition lock. Data medium 2 can also be a telecard 6 which advantageously is read out or read in after insertion in slot 40 or with which, in the event of correspondingly costly configuration, remote data communications are possible so that the telecard 6 can remain in the pocket of the user.

9 In the event of commercial use, for example by a vehicle rental operation, the fingerpnint of a given renter is saved on data medium 2 at automatic key machine 10.

Upon the purchase of a new vehicle, the new vehicle owner can, by way of example, have his fingerprint saved at the dealership on one or all telecards as the master fingerprint. This master fingerprint then creates all rights such as the learning of additional fingerprints, deleting of subordinate fingerprints, redefinition of a different master fingerprint (upon the resale of the vehicle), definition of what data transfer can take place from and to the data medium, etc. Naturally a master fingerprint can also be saved at computer unit 8 by means of suitable software.

Onboard computer 26 can also be programmed such that certain fingerprints or other personal data remain saved in it to grant special rights to certain persons, for example the rights of a master user who has unlimited authority or the rights of a sub-user with restricted rights.

Automatic budgeting can take place in simple manner using the system according to the invention. The user of a data medium is free to determine whether he must always reset his particular budget or whether this setting takes place automatically.

In the case of a master fingerprint, for example, the nature and scope of the budget can be set by way of example upon the purchase of the vehicle. Shortly before the limit is reached, the budget is automatically replenished after positive identification of the fingerprint. For this purpose, the master user must merely have his finger scanned in occasionally; this can take place in the vehicle or at a remote data station.

The master user can decide whether automatic budgeting also takes place for a sub-user or whether the budget which is granted once for a sub-user expires unconditionally.

PIN numbers can be used in the system according to the invention in a great variety of ways. In the case of commercial use such as in a vehicle rental operation, a dispensed data medium 2 can receive an additional PIN at the automatic key machine 10 which the vehicle renter must remember. In the vehicle, the vehicle renter must input this PIN. After positive identification, the telematic data communications between vehicle and data medium are open.

In the case of private persons, a PIN can be assigned to desired function packages of the data medium, by way of example, at the home workstation which is equipped with an infrared, radio, or inductive interface for communication with the data medium and it can be saved on the data medium. Persons authon"sed to use the vehicle must input their PINs in the vehicle so that the particular function scope which has been established is available.

Upon the purchase of a new vehicle, the new vehicle owner can receive a master PIN which is stored on a master data medium. All rights which a vehicle owner can have are then associated with this PIN. By way of example, he can issue sub-PINs which are assigned to certain function scopes, can delete or block then, can define new master PIN numbers in the event of a sale of the vehicle, etc.

If the telematic function definition takes place through the distribution of PINs directly from the onboard computer onto the data medium, an additional external computer is not necessary. A disadvantage of this arrangement, however, is that the master user must always be along in the vehicle, so this solution is not suitable for vehicle rental operations.

There are also various possibilities for the data media. The data media can be designed as "disposable keys" with which only one access is possible or as reusable data media which can be recharged if needed.

Naturally the data medium, if it is configured as a master key or central key, must be kept as securely as possible since all rights can be exercised with it.

Numerous advantages are realised with the invention:

Keys (data media) lost or left in the vehicle loose their value. In combination with budgeting, the system according to the invention offers additional protection against theft and fraud. Automobile rental operations, car sharing organisations, etc., have at their disposal an easily handled, secure system. A sale of a vehicle between private individuals is possible in simple manner. In addition, subordinate authorised persons (sub-users) can be given limited uses of the vehicle. A master user can select several sub-users. Vehicle functions such as maximum speed, maximum rpms, maximum mileage, etc., and vehicle devices (audio, video, mobile radio, etc.) can be assigned to a fingerprint or a PIN number, i.e., individual functions and/or devices can be purchased, rented, orleased.

12 CLAIMS 1. Method for securing data communications between a data medium (2), in particular a vehicle control unit provided with a memory, and a vehicle, in which method personal data and other data is stored in the memory and data communications extending beyond the reading out of the personal data between the data medium and the vehicle are possible only after a positive comparison of the personal data inputted by a person at a data input device fixed to the vehicle and the personal data stored on the data medium.
2. System for monitoring the operation of a vehicle containing a data medium (2) on which personal data and other data can be written, a data communications device (8, 10) separate from the vehicle in which personal data can be written on the data medium, a data communications device (26) fixed to the vehicle for inputting personal data in an onboard computer (27), and for reading data stored on the data medium, with the additional data only being read in upon positive comparison of the stored personal data with the inputted personal data in the onboard computer.
3. System according to Claim 2 in which the data medium (2) is a vehicle control unit.
4. System according to Claim 3 in which the data medium (2) contains data for overriding an electronic anti-theft device.
5. System according to one of Claims 2 to 4 in which the data communications station separated from the vehicle and the data 13 communications station fixed to the vehicle (8, 10; 26) are configured for bidirectional data flow to and from the data medium (2).
6. System according to one of Claims 2 to 5 in which the data communications devices contain a sensor (36) for detecting biometric data of a person.
7. System according to one of Claims 2 to 6 in which a dd-ta communications device has a device (14) for the inputting of personal data and several data medium receptacles (12) for recording one data medium (2) each and each data medium receptacle contains a device at least for reading in data onto the data medium.
8. System according to one of Claims 2 to 7 in which the data medium has a display for displaying data contents.
9. System according to one of Claims 2 to 8 in which the other data contains information for budgeting of the vehicle.
10. System according to one of Claims 2 to 9 in which different levels of use authorisation are assigned to different personal data.