KR20210002869A - System of strengthening vehicle security for defending relay station attack and method thereof - Google Patents

Abstract

The present invention discloses a vehicle security enhancement system and method for defense of relay station attack (RSA). According to the present invention, the vehicle security enhancement system transmits a wake-up signal from a plurality of antennas in a vehicle when a trigger is input, generates, by a key fob that receives the wake-up signal, a variable value using an OTP code and coordinates of the key fob, estimates a position of the key fob by analyzing the direction of an RF signal that is a response signal to the wake-up signal transmitted from the key fob in the vehicle, calculates other variable values using the variable value transmitted from the key fob in the vehicle and the vehicle′s OTP code, and when the difference between the calculated other variable values and the estimated key fob position is within the error range, and the distance between the vehicle and the expected key fob position is within the normal operating distance of a passive entry passive start (PEPS) system, perform a vehicle control function through the corresponding key fob, thereby strengthening the defense performance against RSA.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention System of strengthening vehicle security for defending relay station attack and method thereof

The present invention relates to a vehicle security enhancement system and method for RSA defense. In particular, when a trigger is input, a wakeup signal is transmitted from a plurality of antennas in a vehicle, and a key fob receiving the wakeup signal is an OTP code and a key fob. A variable value is generated using the coordinates of, and the position of the key fob is estimated by analyzing the direction of the RF signal, which is a response signal to the wake-up signal transmitted from the key fob from the vehicle, and the variable transmitted from the key fob in the vehicle. Values and other variable values are calculated using the vehicle's OTP code, the difference between the calculated other variable values and the estimated key fob position is within the error range, and the distance between the vehicle and the expected key fob position is the normal operating distance of the PEPS system. If within, it relates to a vehicle security reinforcement system and method for RSA defense that performs a vehicle control function through a corresponding key fob.

The PEPS (Passive Entry Passive Start) system controls the lock of the door in the same way that a driver with a key fob lifts the handle of a vehicle door or presses a button located on the door instead of using a key or remote control directly. Represents a system that turns the engine on and off with the on/off button.

This PEPS system uses a signal repeater to induce the key fob to misrecognize that the key fob is far away from the vehicle but is located close to it, so that the vehicle's door can be opened and started even without the key fob. ) Are vulnerable.

Korean Patent Registration No. 10-1771376 [Title: Vehicle control system to prevent relay attack]

An object of the present invention is to transmit a wake-up signal from a plurality of antennas in a vehicle when a trigger is input, and a key fob receiving the wake-up signal generates a variable value using the OTP code and the coordinates of the key fob, and The position of the key fob is estimated by analyzing the direction of the RF signal, which is a response signal to the wake-up signal transmitted from the fob, and other variable values are calculated using the variable value transmitted from the key fob in the vehicle and the OTP code of the vehicle. And, if the difference between the calculated other variable values and the estimated key fob position is within the error range and the distance between the vehicle and the estimated key fob position is within the normal operating distance of the PEPS system, the vehicle control function is performed through the corresponding key fob. It is to provide a vehicle security enhancement system and method for RSA defense.

Another object of the present invention is to sequentially transmit an LF signal with a short delay time through two or more antennas selected from a plurality of antennas in a vehicle when the expected position of the key fob is within the normal operating range, and receive it from the key fob. By analyzing the direction of the LF signal, the angle between the antennas and the key fob is calculated, information on the calculated angle is transmitted to the vehicle, and the estimated position of the key fob in the vehicle is determined by the antenna transmitted from the key fob. It is to provide a vehicle security reinforcement system and method for RSA defense that performs a vehicle control function through the key fob when it corresponds to the angle formed by the key fob.

The vehicle security enhancement system for RSA defense according to an embodiment of the present invention includes: the vehicle transmitting an LF signal when receiving a trigger input from the vehicle; And when receiving the LF signal transmitted from the vehicle, calculating a variable value using the OTP code of the key fob and the location information of the key fob, the calculated variable value, an RF signal in response to the received LF signal, and And a key fob for transmitting identification information of the key fob to the vehicle, wherein the vehicle analyzes a direction of an RF signal transmitted from the key fob to estimate an expected position of the key fob, and transmits it from the key fob Another variable value may be calculated by using the variable value and the OTP code of the vehicle, and it may be determined whether a difference between the estimated position of the estimated key fob and the calculated value of the other variable is less than or equal to a preset threshold.

As an example related to the present invention, the trigger input may be any one of a case to open a vehicle door, to close the vehicle door, to turn on the engine, to turn off the engine, or to open the trunk. Can include.

As an example related to the present invention, the vehicle, when the difference between the estimated position of the estimated key fob and the calculated other variable value exceeds a preset threshold value, the RSA is generated by the vehicle. It is determined that it is determined that the function according to the trigger input can be terminated.

As an example related to the present invention, the vehicle includes, as a result of the determination, the current position of the vehicle and the estimated key fob when the difference between the estimated position of the estimated key fob and the calculated other variable value is less than or equal to a preset threshold value. It is checked whether the distance between the expected positions of is within a preset normal operating distance, and as a result of the check, when the distance between the current position of the vehicle and the estimated position of the estimated key fob is within a preset normal operating distance It is possible to perform a vehicle control function corresponding to the input.

In accordance with an embodiment of the present invention, a vehicle security enhancement method for RSA defense includes: transmitting, by the vehicle, an LF signal when receiving a trigger input from the vehicle; When the key fob receives the LF signal transmitted from the vehicle, calculating a variable value by using the OTP code of the key fob and the location information of the key fob; Transmitting the calculated variable value, an RF signal responsive to the received LF signal, and identification information of the key fob to the vehicle by the key fob; Estimating an expected position of the key fob by analyzing the direction of the RF signal transmitted from the key fob by the vehicle; Calculating another variable value by the vehicle using the variable value transmitted from the key fob and the OTP code of the vehicle; And determining, by the vehicle, whether a difference between the estimated position of the estimated key fob and the calculated value of another variable is less than or equal to a preset threshold.

As an example related to the present invention, when the difference between the estimated position of the estimated key fob and the calculated other variable value is less than or equal to a preset threshold value, the current position of the vehicle and the estimated Checking whether the distance between the predicted positions of the key fobs is within a preset normal operating distance; And performing a vehicle control function corresponding to the trigger input by the vehicle when the distance between the current position of the vehicle and the estimated position of the estimated key fob is within a preset normal operating distance as a result of the check. It may contain more.

As an example related to the present invention, when a difference between the estimated position of the estimated key fob and the calculated other variable value is less than or equal to a preset threshold value as a result of the determination, among a plurality of antennas included in the vehicle, Selecting two or more antennas; Sequentially transmitting an LF signal with a preset time difference by the vehicle through the two or more selected antennas; Calculating an angle between antennas included in the vehicle and the key fob by analyzing directions of LF signals sequentially transmitted from the vehicle with a time difference by the key fob; Transmitting, by the key fob, information about an angle formed between the calculated antennas and the key fob to the vehicle; Checking, by the vehicle, whether the estimated position of the estimated key fob exists within a preset range from an angle between the antennas transmitted from the key fob and the key fob; And when the estimated position of the key fob is within a preset range from the angle formed by the antennas transmitted from the key fob and the key fob as a result of the check, vehicle control corresponding to the trigger input by the vehicle. It may further include performing a function.

In accordance with an embodiment of the present invention, a vehicle security enhancement method for RSA defense includes: selecting two or more antennas from among a plurality of antennas included in the vehicle by the vehicle when receiving a trigger input from the vehicle; Sequentially transmitting an LF signal with a preset time difference by the vehicle through the two or more selected antennas; Transmitting an RF signal RF signal and identification information of the key fob to the vehicle in response to an LF signal sequentially transmitted from the vehicle with a time difference by a key fob; Generating unit vectors for each of the two or more antennas representing directions of radio waves from the key fob by analyzing the direction of the RF signal transmitted from the key fob by the vehicle; Calculating, by the vehicle, a distance between the vehicle and the key fob based on the current position of the vehicle, position information of the two or more antennas, and vector information for each antenna indicating the direction of the radio wave; Checking, by the vehicle, whether the calculated distance between the vehicle and the key fob is within a preset normal operating distance; And determining that RSA has occurred when the calculated distance between the vehicle and the key fob exceeds the preset normal operation distance as a result of the check, and terminating the function according to the trigger input.

In the present invention, when a trigger is input, a wake-up signal is transmitted from a plurality of antennas in a vehicle, a key fob receiving the wake-up signal generates a variable value using the OTP code and the coordinates of the key fob, and the vehicle generates a variable value from the key fob. By analyzing the direction of the RF signal, which is a response signal to the transmitted wakeup signal, the position of the key fob is estimated, and other variable values are calculated using the variable value transmitted from the key fob in the vehicle and the OTP code of the vehicle, When the difference between the calculated value of the other variable and the estimated key fob position is within the error range and the distance between the vehicle and the estimated key fob position is within the normal operating distance of the PEPS system, the vehicle control function is performed through the corresponding key fob. It has the effect of strengthening the defense ability against (Relay Station Attack).

In addition, in the present invention, when the expected position of the key fob is located within the normal operating range, the LF signal is sequentially transmitted with a short delay time through two or more antennas selected from a plurality of antennas in the vehicle, and received from the key fob. By analyzing the direction of the LF signal, the angle between the antennas and the key fob is calculated, information on the calculated angle is transmitted to the vehicle, and the estimated key fob position in the vehicle is transmitted from the key fob. When corresponding to the angle formed by the fob, by performing a vehicle control function through the key fob, there is an effect of providing a stable system operation through enhanced vehicle security.

1 is a block diagram showing the configuration of a vehicle security enhancement system for RSA defense according to an embodiment of the present invention.
2 is a block diagram showing the configuration of a vehicle according to an embodiment of the present invention.
3 to 8 are diagrams showing the relationship between position vectors according to an embodiment of the present invention.
9 is a block diagram showing the configuration of a key fob according to an embodiment of the present invention.
10 to 11 are flowcharts illustrating a vehicle security reinforcement method for RSA defense according to the first embodiment of the present invention.
12 to 13 are flowcharts illustrating a vehicle security reinforcement method for RSA defense according to a second embodiment of the present invention.
14 is a flowchart illustrating a vehicle security enhancement method for RSA defense according to a third embodiment of the present invention.
15 is a diagram showing the relationship between position vectors according to an embodiment of the present invention.

It should be noted that the technical terms used in the present invention are used only to describe specific embodiments, and are not intended to limit the present invention. In addition, the technical terms used in the present invention should be interpreted as generally understood by those of ordinary skill in the technical field to which the present invention belongs, unless otherwise defined in the present invention, and is excessively comprehensive. It should not be construed as a human meaning or an excessively reduced meaning. In addition, when a technical term used in the present invention is an incorrect technical term that does not accurately express the spirit of the present invention, it should be replaced with a technical term that can be correctly understood by those skilled in the art. In addition, general terms used in the present invention should be interpreted as defined in the dictionary or according to the context before and after, and should not be interpreted as an excessively reduced meaning.

In addition, the singular expression used in the present invention includes a plurality of expressions unless the context clearly indicates otherwise. In the present invention, terms such as “consisting of” or “comprising” should not be construed as necessarily including all of the various components or steps described in the invention, and some components or some steps may not be included. It should be construed that it may or may further include additional components or steps.

In addition, terms including ordinal numbers such as first and second used in the present invention may be used to describe the constituent elements, but the constituent elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, a second component may be referred to as a first component.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, but the same or similar components are assigned the same reference numerals regardless of the reference numerals, and redundant descriptions thereof will be omitted.

In addition, in describing the present invention, when it is determined that a detailed description of a related known technology may obscure the subject matter of the present invention, a detailed description thereof will be omitted. In addition, it should be noted that the accompanying drawings are only for easily understanding the spirit of the present invention and should not be construed as limiting the spirit of the present invention by the accompanying drawings.

1 is a block diagram showing the configuration of a vehicle security enhancement system 10 for RSA defense according to an embodiment of the present invention.

As shown in Figure 1, the vehicle security enhancement system 10 for RSA defense is composed of a vehicle 100 and a key fob 200. Not all of the components of the vehicle security enhancement system 10 shown in FIG. 1 are essential components, and the vehicle security enhancement system 10 may be implemented by more components than those shown in FIG. 1, The vehicle security enhancement system 10 may be implemented with fewer components.

As shown in FIG. 2, the vehicle 100 includes a plurality of antennas 110, a first location information collection unit 120, a first storage unit 130, and an MCU 140. Not all of the components of the vehicle 100 shown in FIG. 2 are essential components, and the vehicle 100 may be implemented by more components than the components shown in FIG. 2, or by fewer components. The vehicle 100 may be implemented.

The plurality of antennas 110 are respectively formed inside and/or outside the vehicle 100.

In addition, the antenna 110 is controlled by the MCU 140, a data transmission/reception function between a plurality of components (not shown) included in the vehicle 100, an external device (not shown) and the vehicle ( 100) data transmission/reception function, etc.

The first location information collection unit (or first GPS receiver) 120 receives a GPS signal transmitted from a satellite, calculates longitude coordinates and latitude coordinates using the received GPS signal, and based on the calculated seating rate. As a result, first location data of the vehicle 100 is generated in real time, and the generated first location data is output to a map matching unit (not shown). Here, the generated first location data is defined as the current location (or current location data) of the vehicle 100. Here, it is possible to calculate or receive location information through a Wi-Fi or Wibro signal as well as the first location information collection unit 120.

In addition, the signal received through the first location information collection unit 120 is 802.11, which is a standard standard for wireless LANs including wireless LANs and some infrared communications proposed by the Institute of Electrical and Electronics Engineers (IEEE). 802.15, a standard standard for wireless personal area networks (PANs) including Bluetooth, UWB, and ZigBee, and wireless metropolitan area networks (MANs) including fixed wireless access (FWA), broadband wireless 802.16, which is a standard standard for broadband wireless access (BWA), and 802.20, which is a standard standard for mobile Internet for wireless MAN (Mobile Broadband Wireless Access: MBWA), including Wibro and WiMAX, etc. It may be configured to provide location information of the vehicle to the vehicle 100 using a wireless communication method of.

In this way, the first location information collection unit 120 generates (or acquires/collects) location information of the vehicle 100 in real time.

The first storage unit 130 stores various user interfaces (UIs), graphic user interfaces (GUIs), and the like.

In addition, the first storage unit 130 stores data and programs necessary for the vehicle 100 to operate.

That is, the first storage unit 130 may store a plurality of application programs or applications driven by the vehicle 100, data for operation of the vehicle 100, and commands. At least some of these application programs may be downloaded from an external server through wireless communication. In addition, at least some of these application programs may exist on the vehicle 100 from the time of shipment for basic functions of the vehicle 100. Meanwhile, the application program may be stored in the first storage unit 130, installed in the vehicle 100, and driven by the MCU 140 to perform an operation (or function) of the vehicle 100.

In addition, the first storage unit 130 is a flash memory type (Flash Memory Type), a hard disk type (Hard Disk Type), a multimedia card micro type (Multimedia Card Micro Type), a card type memory (for example, SD Or XD memory), magnetic memory, magnetic disk, optical disk, RAM (Random Access Memory: RAM), SRAM (Static Random Access Memory), ROM (Read-Only Memory: ROM), EEPROM (Electrically Erasable Programmable Read-Only Memory) ) And PROM (Programmable Read-Only Memory). In addition, the vehicle 100 may operate a web storage that performs a storage function of the first storage unit 130 over the Internet, or may operate in connection with the web storage.

In addition, the first storage unit 120 stores the generated location information of the vehicle 100 under the control of the MCU 140.

The microcontroller unit (MCU) (or control unit) 140 executes an overall control function of the vehicle 100.

Further, the MCU 140 executes an overall control function of the vehicle 100 using programs and data stored in the first storage unit 130. The MCU 140 may include RAM, ROM, CPU, GPU, and bus, and RAM, ROM, CPU, GPU, etc. may be connected to each other through a bus. The CPU may access the first storage unit 130 and perform booting using the O/S stored in the first storage unit 130, and various programs stored in the first storage unit 130, Various operations can be performed using content, data, and the like.

In addition, when the vehicle 100 receives a trigger input, the MCU 140 transmits an LF signal (or a wake-up signal) through the plurality of antennas 110. At this time, the trigger input is to open the vehicle door (or open the vehicle door), close the vehicle door (or lock the vehicle door), turn on the engine (or start the engine), or turn off the engine. This includes the case (or engine stop), the case of opening the trunk, etc.

In addition, the MCU 140 transmits the variable value, the RF signal, and identification information of the key fob 200 transmitted from the key fob 200 in response to the previously transmitted LF signal. ) Through.

In addition, the MCU 140 estimates the expected position b1' of the key fob 200 by analyzing the direction of the received RF signal (or the direction of the radio wave for the RF signal).

That is, the plurality of antennas 110 receive the variable value, the RF signal, and identification information of the key fob 200 transmitted from the key fob 200, and the MCU 140 By analyzing the direction of the RF signal received through the antenna 110, the expected position b1 ′ of the key fob 200 may be estimated.

Further, the MCU 140 calculates (or calculates/generates) another variable value b1 using the received variable value c1 and the OTP code a1 of the vehicle 100. In this case, the OTP code managed by the vehicle 100 may correspond to the OTP code managed by the key fob 200 associated with the vehicle 100. Here, the other variable value b1 may be a value related to the location information of the key fob 200 (or corresponding to the location information of the key fob 200).

That is, the MCU 140 uses the received variable value (c1) and the OTP code (a1) of the vehicle 100 based on a predetermined vehicle-specific calculation equation (or calculation algorithm). Calculate (or calculate/generate) b1). Here, the vehicle-specific calculation formula may be an inverse calculation formula corresponding to the key fob-specific calculation formula.

In addition, the MCU 140 determines whether the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is equal to or less than a preset threshold (or within a preset threshold range). Judge whether or not.

That is, the MCU 140 determines whether the calculated other variable value b1 is included within a range to which a preset error range is applied to the estimated position b1' of the estimated key fob 200 (or the calculation It is determined whether the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to the other variable value (b1).

As a result of the determination, when the difference between the estimated position b1 ′ of the estimated key fob 200 and the calculated other variable value b1 exceeds the preset threshold (or out of the threshold range), The MCU 140 determines that RSA has occurred and terminates the function according to the trigger input.

That is, as a result of the determination, when the calculated other variable value (b1) is not included within the range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculation If the estimated position (b1') of the estimated key fob 200 is not included within the range to which the error range is applied to the other variable value (b1)), the MCU 140 determines that RSA has occurred and , Terminates the function according to the trigger input.

In addition, as a result of the determination, when the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is equal to or less than the preset threshold (or within the threshold range) , The MCU 140 determines whether the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is within a preset normal operating distance (for example, 5 meters). Confirm.

That is, as a result of the determination, when the calculated other variable value (b1) is included within a range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculated When the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to the other variable value (b1)), the MCU 140 determines the current position of the vehicle 100 and It is checked whether or not the estimated distance between the estimated position b1' of the key fob 200 is within a preset normal operating distance (eg, 5 meters).

As a result of the confirmation, when the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is out of the preset normal operating distance (for example, 5 meters), the MCU Step 140 determines that RSA has occurred, and ends the function according to the trigger input.

In addition, as a result of the check, if the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is within the preset normal operating distance (for example, 5 meters), The MCU 140 performs (or allows) a vehicle control function corresponding to the trigger input through the corresponding key fob 200.

In this way, the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is less than a preset threshold (or within a threshold range), and the vehicle 100 When the distance between the current position and the estimated position (b1') of the estimated key fob 200 is within a preset normal operating distance (for example, 5 meters), the MCU 140 is assigned to the corresponding key fob 200. A vehicle control function corresponding to the trigger input may be performed.

In addition, as a result of the determination, when the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is less than the preset threshold value (or within the threshold range), The MCU 140 selects (or selects) two or more antennas from among a plurality of antennas 110 included in the vehicle 100.

That is, as a result of the determination, when the calculated other variable value (b1) is included within a range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculated When the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to the other variable value (b1)), the MCU 140 is selected from among the plurality of antennas 110 Select (or select) two or more antennas.

Further, the MCU 140 sequentially transmits the LF signal with a preset time difference (or delay) through the selected (or selected) two or more antennas 110.

In addition, the MCU 140 transmits information on the angle formed by the antennas 110 and the key fob 200 transmitted from the key fob 200, identification information of the key fob 200, etc. to the antenna. Receive via 110.

At this time, when the vehicle 100 receives the direction information of the LF signal transmitted from the key fob 200, identification information of the key fob 200, etc., the MCU 140 receives the received LF signal The angle formed between the antennas and the key fob 200 may be calculated based on the direction information of.

In addition, the MCU 140 has a preset range (or a front/back range) from an angle formed between the received antennas and the key fob 200 in the estimated position b1' of the estimated key fob 200 Check whether it exists within.

As a result of the confirmation, the estimated position (b1') of the key fob 200 is not within a preset range (or before/after range) from the angle formed between the received antennas and the key fob 200. In this case, the MCU 140 determines that RSA has occurred and terminates the function according to the trigger input.

In addition, as a result of the check, the estimated position (b1') of the estimated key fob 200 is within a preset range (or before/after range) from the angle formed between the received antennas and the key fob 200. In this case, the MCU 140 performs (or allows) the vehicle control function corresponding to the trigger input through the corresponding key fob 200.

In this way, the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is less than a preset threshold (or within a threshold range), and the antenna provided in the vehicle When the angle formed by the key fob 200 and the estimated position (b1') of the key fob 200 correspond to each other, the MCU 140 responds to the trigger input through the corresponding key fob 200 It can perform a corresponding vehicle control function.

In addition, when the vehicle 100 receives a trigger input, the MCU 140 selects (or selects) two or more antennas from among the plurality of antennas 110. At this time, the trigger input is to open the vehicle door (or open the vehicle door), close the vehicle door (or lock the vehicle door), turn on the engine (or start the engine), or turn off the engine. This includes the case (or engine stop), the case of opening the trunk, etc.

Further, the MCU 140 sequentially transmits an LF signal (or a wake-up signal) with a preset time difference (or delay) through the selected (or selected) two or more antennas.

In addition, the MCU 140 receives an RF signal transmitted from the key fob 200 through two or more previously selected antennas.

In addition, the MCU 140 analyzes the direction of the RF signal received through the two or more antennas (or the direction of the radio wave for the corresponding RF signal), and the direction of the radio wave from the key fob 200 (or RF The unit vectors for each of the two or more antennas representing the direction of the signal) are generated.

In addition, the MCU 140 uses the current position of the vehicle 100 (or a preset reference position in the vehicle 100 / the center of the vehicle 100) as an origin (or reference point), and in the preset vehicle 100 The location information of the selected two or more antennas (or location information of each of the two or more antennas relative to the center of the vehicle 100), in any one of the selected two or more antennas The first vector information on the path of the received RF signal (or the path of the radio wave), the path of the RF signal received by the other antenna among the at least two or more selected antennas (or the path of the radio wave) The distance between the vehicle 100 and the key fob 200 is calculated (or estimated) based on the second vector information, etc. Here, the first vector information and the second vector information are composed of a unit vector indicating a direction and a size.

That is, when an arbitrary point in the first vector information is B (or when an arbitrary point on the expected path of an RF signal received from any one antenna is B), the MCU 140 corresponds to The position vector according to the current position of the vehicle 100 is represented by the following [Equation 1].

은 단위 벡터를 나타낸다.Here, O represents the current position (or origin/reference position) of the vehicle 100, B represents an arbitrary point in the first vector information, and A ₁ represents any _one of the two or more antennas Represents the location of the antenna (or the location of the corresponding antenna relative to the vehicle 100), and k is the size of the first vector information (or the distance/size between the key fob 200 and any one of the antennas) ) As a real number, and above

Represents the unit vector.

In addition, when an arbitrary point in the second vector information is C (or an arbitrary point on the expected path of the RF signal received from the other antenna is C), the MCU 140 The position vector according to the current position of the vehicle 100 is represented by the following [Equation 2].

은 단위 벡터를 나타낸다.Here, O represents the current position (or origin/reference position) of the vehicle 100, C represents an arbitrary point in the second vector information, and A ₂ represents the other one of the two or more antennas Represents the location of the antenna (or the location of the corresponding other antenna relative to the vehicle 100), and the l is the size of the second vector information (or the distance between the key fob 200 and the other antenna / Size) as a real number, and above

Represents the unit vector.

,

)과 상기 복수의 단위 벡터들에 포함된 계수(예를 들어 k, l) 간의 관계에 따라 상기 차량(100)과 상기 키 포브(200) 간의 거리를 산출(또는 추정)하거나 또는, RSA가 발생한 것으로 판단할 수 있다.In this case, the MCU 140 includes the plurality of unit vectors (for example,

,

) And coefficients (e.g., k, l) included in the plurality of unit vectors calculate (or estimate) the distance between the vehicle 100 and the key fob 200, or RSA It can be judged as.

이거나 또는

이고,

를 만족시키는 k값과 l값이 존재하는 경우, 상기 MCU(140)는 해당 조건을 만족시키는 k값과 l값을 각각 k₁과 l₁이라고 지정하면, 상기 [수학식 1]과 상기 [수학식 2]을 이용해서 상기

와 상기

간의 관계를 다음의 [수학식 3]으로 나타낸다.That is, firstly, as shown in FIG. 3

Or

ego,

When k and l values satisfying the exist, the MCU 140 designates k ₁ and l ₁ to satisfy the corresponding condition, respectively, the [Equation 1] and the [mathematical equation] Using Equation 2] above

And remind

The relationship between them is represented by the following [Equation 3].

)를 다음의 [수학식 4]로 나타낸다.Therefore, the MCU 140 is the position vector of the key fob (

) Is represented by the following [Equation 4].

를 만족시키는 k₁과 l₁을 각각 산출하고, 상기 산출된 k₁과 l₁을 이용해서 상기 키 포브(200)의 위치(F)를 산출(또는 예측/추정)한다.In addition, the MCU 140 is based on the [Equation 4]

Each of k ₁ and l ₁ satisfying is calculated, and the position (F) of the key fob 200 is calculated (or predicted/estimated) using the calculated k ₁ and l ₁ .

Further, the MCU 140 calculates the distance between the vehicle 100 and the key fob 200 based on the calculated position F of the key fob 200.

이고

이라 하고, 상기 안테나

과

에 수신된 전파를 통해 각각의 단위 벡터인

과

를 얻었다고 할 경우, 상기 MCU(140)는 상기 [수학식 1]과 상기 [수학식 2]를 이용해서 다음과 같은 관계식을 구할 수 있다.For example,

ego

And the antenna

and

Through the radio waves received in each unit vector,

and

When it is assumed that is obtained, the MCU 140 can obtain the following relational expression using [Equation 1] and [Equation 2].

일 때,

를 만족시킴에 따라, 상기 MCU(140)는

를 각각 산출한다.Also, in the above two relations

when,

According to satisfying, the MCU 140

Each is calculated.

을 상기 [수학식 4]에 적용하여 다음의 [수학식 5]를 얻는다.In addition, the MCU 140 is the calculated

Is applied to the above [Equation 4] to obtain the following [Equation 5].

이거나 또는

이고,

를 만족시키는 k값과 l값이 존재하지 않는 경우,

가 최소 되도록 하는 점 B와 C를 각각 점 B'과 C'이라 하고, 상기 MCU(140)는 해당 조건을 만족시키는 k값과 l값을 각각 k₂과 l₂이라고 지정하면, 이 두 점의 위치 벡터를

와

라 하면,

이고

이므로, 두 벡터 간의 수직 관계를 다음의 [수학식 6]과 [수학식 7]로 나타낸다.Second, as shown in Figure 4

Or

ego,

If k and l values satisfying are not present,

Points B and C that minimizes are referred to as points B'and C', respectively, and the MCU 140 designates k and l values that satisfy the corresponding condition as k ₂ and l ₂ , respectively. Position vector

Wow

If you say,

ego

Therefore, the vertical relationship between the two vectors is represented by the following [Equation 6] and [Equation 7].

In addition, the MCU 140 may calculate k ₂ and l ₂ using [Equation 6] and [Equation 7]. At this time, the predicted position of the key fob 200 is expected to be the midpoint of the points B'and C', and the position vector of F is represented by the following [Equation 8].

In addition, the MCU 140 calculates (or predicts/estimates) the position F of the key fob 200 using the calculated k ₂ and l ₂ .

또는 도 6에 도시된

이고,

를 만족시키는 k값과 l값이 존재하지 않은 경우, 상기 MCU(140)는 RSA가 발생했다고 판단하고 전체 기능을 종료할 수 있다.Thirdly, as shown in FIG. 5

Or as shown in FIG. 6

ego,

When the k value and the l value satisfying the do not exist, the MCU 140 may determine that RSA has occurred and terminate the entire function.

또는 도 8에 도시된

이고,

를 만족시키는 k값과 l값이 존재하는 경우, 상기 MCU(140)는 A₁와 A₃ 조합 또는 A₂와 A₃ 조합 등과 같이 제 3의 안테나(A₃)를 이용해서 위 과정을 반복하여 상기 키 포브(200)의 위치(F)를 산출(또는 예측/추정)한다.Fourth, shown in FIG. 7

Or as shown in FIG. 8

ego,

When there are k and l values satisfying the, the MCU 140 repeats the above process using a _third antenna (A ₃ ) such as a combination of A ₁ and A ₃ or a combination of A ₂ and A ₃ The position (F) of the key fob 200 is calculated (or predicted/estimated).

의 크기)는

라고 할 때, 상기 벡터 OF의 크기는

로 산출할(또는 나타낼) 수 있다.In this way, the calculated distance (

The size of the

When, the size of the vector OF is

Can be calculated (or represented) as

과

)을 통해 앞선 4가지 경우 중 어떤 경우에 속하는지 확인하고, 그에 해당하는 방식으로 상기 차량(100)과 상기 키 포브(200) 간의 위치를 산출할 수 있다.In addition, in this way, the MCU 140, according to the trigger input, the direction of the radio wave (for example,

and

), it is possible to check which case belongs to the previous four cases, and calculate the position between the vehicle 100 and the key fob 200 in a corresponding manner.

In addition, the MCU 140 determines (or confirms) whether the calculated distance between the vehicle 100 and the key fob 200 is within a preset normal operating distance (eg, 5 meters).

That is, the MCU 140 uses a signal repeater to extend the reach of the radio waves through radio amplification, etc. to prevent (or detect) the misrecognition of the key fob, so that the calculated vehicle 100 and the key It is determined whether the distance between the fobs 200 is within the preset normal operating distance.

When the determination result (or the confirmation result), the calculated distance between the vehicle 100 and the key fob 200 exceeds (or exceeds) the preset normal operating distance, the MCU 140 generates an RSA Is determined, and the function according to the trigger input is terminated.

In addition, when the determination result (or the confirmation result), when the calculated distance between the vehicle 100 and the key fob 200 is within the preset normal operating distance, the MCU 140 is the corresponding key fob 200 Executes (or allows) a vehicle control function corresponding to the trigger input through rip.

As shown in FIG. 9, the key fob (or smart key) 200 is composed of another antenna 210, a second location information collection unit 220, a second storage unit 230, and a control unit 240 do. Not all of the components of the key fob 200 shown in FIG. 9 are essential components, and the key fob 200 may be implemented by more components than the components shown in FIG. 9, or fewer components. The key fob 200 may also be implemented by.

The other antenna 210 is formed on one side of the key fob 200.

In addition, the other antenna 210 communicates with other adjacent devices (including, for example, the vehicle 100).

In addition, the other antenna 210 receives the LF signal transmitted from the vehicle 100 under the control of the controller 240.

The second location information collection unit (or second GPS receiver) 220 receives a GPS signal transmitted from a satellite, calculates longitude coordinates and latitude coordinates using the received GPS signal, and based on the calculated coordinates The location data of the key fob 200 is generated in real time, and the generated location data is output to a map matching unit (not shown). Here, the generated location data is defined as the current location (or current location data) of the key fob 200. Here, it is possible to calculate or receive location information through a Wi-Fi or Wi-Bro signal as well as the second location information collection unit 220.

In addition, the signal received through the second location information collecting unit 220 is 802.11, Bluetooth, UWB, ZigBee, etc., which are standard standards for wireless LANs including wireless LAN and some infrared communication proposed by IEEE. 802.15, a standard standard for a wireless PAN including a city broadband network (FWA), a wireless MAN including an urban broadband network (FWA), and 802.16, a standard standard for a broadband wireless access (BWA) The key fob location information may be provided to the key fob 200 by using a wireless communication method such as 802.20, which is a standard standard for mobile Internet for a wireless MAN (MBWA).

In this way, the second location information collection unit 220 generates (or acquires/collects) location information of the real-time key fob 200.

The second storage unit 230 stores various user interfaces (UI), graphic user interfaces (GUI), and the like.

In addition, the second storage unit 230 stores data and programs necessary for the key fob 200 to operate.

That is, the second storage unit 230 may store a plurality of application programs driven by the key fob 200, data for the operation of the key fob 200, and commands. At least some of these application programs may be downloaded from an external server through wireless communication. In addition, at least some of these application programs may exist on the key fob 200 from the time of shipment for basic functions of the key fob 200. Meanwhile, the application program is stored in the second storage unit 230, installed in the key fob 200, and driven by the control unit 240 to perform the operation (or function) of the key fob 200. have.

In addition, the second storage unit 230 includes a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (eg, SD or XD memory, etc.), a magnetic memory, a magnetic disk, an optical disk, a RAM ( RAM), SRAM, ROM, EEPROM, and PROM may include at least one storage medium. In addition, the key fob 200 may operate a web storage that performs a storage function of the second storage unit 230 on the Internet, or may operate in connection with the web storage.

In addition, the second storage unit 230 stores location information of the generated key fob 200 under the control of the control unit 240.

The control unit 240 executes an overall control function of the key fob 200.

In addition, the control unit 240 executes an overall control function of the key fob 200 using programs and data stored in the second storage unit 220. The control unit 240 may include RAM, ROM, CPU, GPU, and bus, and RAM, ROM, CPU, GPU, etc. may be connected to each other through a bus. The CPU may access the second storage unit 220 and perform booting using the O/S stored in the second storage unit 220, and various programs stored in the second storage unit 220, Various operations can be performed using content, data, and the like.

In addition, when receiving the LF signal transmitted from the vehicle 100 through the other antenna 210, the control unit 240 is based on the received LF signal when the key fob 200 is in the low power mode Power up. In this case, the key fob 200 may be a key fob related to the vehicle 100.

In addition, the control unit 240 uses the OTP code (a1) of the key fob 200 and the location information (or coordinate information) (b1) of the key fob 200 to be checked in real time to determine the variable value (c1). Calculate (or calculate/generate)

That is, the control unit 240 includes the OTP code (a1) of the key fob 200 and the location information of the key fob 200 checked in real time based on a preset key fob-specific calculation formula (or algorithm). The variable value c1 is calculated (or calculated/generated) using (b1).

In addition, the control unit 240 transmits the calculated variable value, an RF signal in response to the received LF signal, and identification information of the key fob 200 to the vehicle 100 through the other antenna 210. Transmit (or transmit).

In addition, when the calculated other variable value b1 is included within the range to which the preset error range is applied to the estimated position b1' of the estimated key fob 200 (or the calculated other variable value ( When the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied for b1)), the control unit 240 sequentially transmits the vehicle 100 with a time difference The resulting LF signal is sequentially received through the other antenna 210.

In addition, the control unit 240 analyzes the direction of the received LF signal and calculates (or calculates) an angle between the antennas (or two or more antennas) included in the vehicle 100 and the key fob 200. )do.

In addition, the control unit 240 transmits information on an angle between the calculated antennas and the key fob 200, identification information of the key fob 200, etc. through the other antenna 210 ) To (or transmit).

At this time, the control unit 240 instead of transmitting information on the angle formed by the calculated antennas 110 and the key fob 200 to the vehicle 100, the direction information of the received LF signal, The identification information of the key fob 200 may be transmitted to the vehicle 100 through the other antenna 210.

In addition, when receiving the LF signal transmitted from the vehicle 100 through the other antenna 210, the control unit 240 is the key fob 200 based on the received LF signal. ) In the low power mode, powers up, and transmits (or transmits) an RF signal in response to the received LF signal, identification information of the key fob 200, etc. to the vehicle 100 through the other antenna 210 )do.

In addition, when the vehicle 100 determines that the distance between the vehicle 100 and the key fob 200 is within the preset normal operating distance (or check/verify/certify), the key fob 200 Interlocks with the vehicle 100 to perform a vehicle control function according to a corresponding trigger input.

In this way, when a trigger is inputted, a wakeup signal is transmitted from a plurality of antennas in the vehicle, and the key fob receiving the wakeup signal generates a variable value using the OTP code and the coordinates of the key fob, and the vehicle generates a variable value from the key fob. By analyzing the direction of the RF signal, which is a response signal to the transmitted wakeup signal, the position of the key fob is estimated, and other variable values are calculated using the variable value transmitted from the key fob in the vehicle and the OTP code of the vehicle, If the difference between the calculated value of the other variable and the estimated key fob position is within the error range and the distance between the vehicle and the estimated key fob position is within the normal operating distance of the PEPS system, the vehicle control function can be performed through the corresponding key fob. .

In addition, as described above, when the expected position of the key fob is within the normal operating range, the LF signal is sequentially transmitted with a short delay time through two or more antennas selected from a plurality of antennas in the vehicle, and received from the key fob. By analyzing the direction of the LF signal, the angle between the antennas and the key fob is calculated, information on the calculated angle is transmitted to the vehicle, and the estimated key fob position in the vehicle is transmitted from the key fob. When corresponding to the angle formed by the fob, the vehicle control function may be performed through the corresponding key fob.

Hereinafter, a vehicle security enhancement method for RSA defense according to the present invention will be described in detail with reference to FIGS. 1 to 15.

10 to 11 are flowcharts illustrating a vehicle security reinforcement method for RSA defense according to the first embodiment of the present invention.

First, when the vehicle 100 receives a trigger input, the vehicle 100 transmits an LF signal (or a wake-up signal) through a plurality of antennas 110 provided in the vehicle 100. At this time, the trigger input is to open the vehicle door (or open the vehicle door), close the vehicle door (or lock the vehicle door), turn on the engine (or start the engine), or turn off the engine. This includes the case (or engine stop), the case of opening the trunk, etc.

For example, when a first trigger to open a door of a vehicle occurs, the vehicle 100 transmits a first LF signal through the first to third antennas 110 provided in the vehicle 100 ( S1010).

Thereafter, when the key fob 200 receives the LF signal transmitted from the vehicle 100, the key fob 200 powers when the key fob 200 is in a low power mode based on the received LF signal. Up. In this case, the key fob 200 may be a key fob related to the vehicle 100.

In addition, the key fob 200 uses the OTP code (a1) of the key fob 200 and the location information (or coordinate information) (b1) of the key fob 200 to be checked in real time to determine a variable value (c1). ) Is calculated (or calculated/generated).

That is, the key fob 200 is the OTP code (a1) of the key fob 200 and the location of the key fob 200 checked in real time based on a preset key fob-specific calculation formula (or algorithm). The variable value c1 is calculated (or calculated/generated) using the information b1.

For example, the key fob 200 adjacent to the vehicle 100 receives the first LF signal transmitted from the vehicle 100, and powers the corresponding key fob 200 based on the received first LF signal. Up (or switching from low power mode to normal mode).

In addition, the key fob 200 includes a first OTP code of the key fob 200 generated in real time and the first location information of the key fob 200 that is checked in real time in a preset key fob-specific equation. The calculation function is performed using the input value, and the first variable value c1, which is a result of performing the calculation function, is calculated (S1020).

Thereafter, the key fob 200 transmits (or transmits) the calculated variable value, an RF signal in response to the received LF signal, and identification information of the key fob 200 to the vehicle 100.

For example, the key fob 200 includes the generated first variable value c1, a first RF signal that is a response signal to the received first LF signal, and identification information of the key fob 200. It is transmitted to the vehicle 100 (S1030).

Thereafter, the vehicle 100 receives the variable value, the RF signal, and identification information of the key fob 200 transmitted from the key fob 200 in response to the previously transmitted LF signal.

In addition, the vehicle 100 estimates the expected position b1' of the key fob 200 by analyzing the direction of the received RF signal (or the direction of the radio wave with respect to the RF signal).

That is, the plurality of antennas 110 provided in the vehicle 100 receive the variable value, the RF signal, and identification information of the key fob 200 transmitted from the key fob 200, and the vehicle 100 may estimate the predicted position b1' of the key fob 200 by analyzing directions of RF signals received through the plurality of antennas 110.

As an example, the first to third antennas provided in the vehicle 100 may include a first variable value c1 transmitted from the key fob 200 and a first RF signal that is a response signal to the first LF signal. , The identification information of the key fob 200 is received.

In addition, the vehicle 100 estimates the expected position b1' of the key fob 200 by analyzing the direction of the first RF signal received through the first to third antennas (S1040).

Thereafter, the vehicle 100 calculates (or calculates/generates) another variable value b1 using the received variable value c1 and the OTP code a1 of the vehicle 100. In this case, the OTP code managed by the vehicle 100 may correspond to the OTP code managed by the key fob 200 associated with the vehicle 100. Here, the other variable value b1 may be a value related to the location information of the key fob 200 (or corresponding to the location information of the key fob 200).

That is, the vehicle 100 uses the received variable value (c1) and the OTP code (a1) of the vehicle 100 based on a predetermined vehicle-specific calculation equation (or calculation algorithm). Calculate (or calculate/generate) b1). Here, the vehicle-specific calculation formula may be an inverse calculation formula corresponding to the key fob-specific calculation formula.

As an example, the vehicle 100 performs a calculation function by using the received variable value c1 and the OTP code a1 of the vehicle 100 as input values in a predetermined vehicle-specific calculation formula, and the calculation function The second variable value b1, which is the result of the execution, is calculated (S1050).

Thereafter, the vehicle 100 determines whether the difference between the estimated position b1' of the estimated key fob 200 and the calculated other variable value b1 is less than or equal to a preset threshold (or within a preset threshold range). Judge whether or not.

That is, whether the vehicle 100 includes the calculated other variable value b1 within a range to which a preset error range is applied to the estimated position b1' of the estimated key fob 200 (or the calculation It is determined whether the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to the other variable value (b1).

For example, the vehicle 100 generates a first range by applying the preset error range (eg, ±10%) to the estimated position b1' of the key fob 200, and the generation It is determined whether the calculated second variable value b1 is included in the first range (S1060).

As a result of the determination, when the difference between the estimated position b1 ′ of the estimated key fob 200 and the calculated other variable value b1 exceeds the preset threshold (or out of the threshold range), The vehicle 100 determines that RSA has occurred, and terminates the function according to the trigger input.

That is, as a result of the determination, when the calculated other variable value (b1) is not included within the range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculation If the estimated position (b1') of the estimated key fob 200 is not included within the range to which the error range is applied to the other variable value (b1)), the vehicle 100 determines that RSA has occurred, and , Terminates the function according to the trigger input.

For example, as a result of the determination, when the calculated second variable value b1 is not included within the generated first range, the vehicle 100 determines that RSA has occurred, and the function according to the first trigger Ends (S1070).

In addition, as a result of the determination, when the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is equal to or less than the preset threshold (or within the threshold range) , The vehicle 100 determines whether the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is within a preset normal operating distance (for example, 5 meters). Confirm.

That is, as a result of the determination, when the calculated other variable value (b1) is included within a range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculated If the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to another variable value (b1)), the vehicle 100 is the current position of the vehicle 100 It is checked whether the distance between the and the estimated position b1' of the key fob 200 is within a preset normal operating distance (eg, 5 meters).

For example, as a result of the determination, when the calculated second variable value b1 is included within the generated first range, the vehicle 100 may determine the current position of the vehicle 100 and the estimated key fob 200. It is checked whether the distance between the predicted positions b1' of) is within a preset normal operating distance (eg, 5 meters) (S1080).

As a result of the confirmation, the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is outside (or exceeds) the preset normal operating distance (for example, 5 meters). ), the vehicle 100 determines that RSA has occurred, and terminates the function according to the trigger input.

As an example, as a result of the confirmation, the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is out of the preset normal operating distance (eg, 5 meters). In this case, the vehicle 100 determines that the RSA has occurred, and ends the function according to the first trigger (S1090).

In addition, as a result of the check, if the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is within the preset normal operating distance (for example, 5 meters), The vehicle 100 performs (or allows) a vehicle control function corresponding to the trigger input through the corresponding key fob 200.

In this way, the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is less than a preset threshold (or within a threshold range), and the vehicle 100 When the distance between the current position and the estimated position b1' of the estimated key fob 200 is within a preset normal operating distance (eg, 5 meters), the vehicle 100 is A vehicle control function corresponding to the trigger input may be performed.

For example, as a result of the confirmation, when the distance between the current position of the vehicle 100 and the estimated position b1' of the estimated key fob 200 is within the preset normal operating distance (eg, 5 meters) , The vehicle 100 opens the door of the vehicle 100 in response to the first trigger through the key fob 200 (S1100).

12 to 13 are flowcharts illustrating a vehicle security enhancement method for RSA defense according to a second embodiment of the present invention.

First, when the vehicle 100 receives a trigger input, the vehicle 100 transmits an LF signal (or a wake-up signal) through a plurality of antennas 110 provided in the vehicle 100. At this time, the trigger input is to open the vehicle door (or open the vehicle door), close the vehicle door (or lock the vehicle door), turn on the engine (or start the engine), or turn off the engine. This includes the case (or engine stop), the case of opening the trunk, etc.

For example, when a second trigger to start the vehicle occurs, the vehicle 100 transmits the 11th LF signal through the first to third antennas 110 provided in the vehicle 100 ( S1210).

Thereafter, when the key fob 200 receives the LF signal transmitted from the vehicle 100, the key fob 200 powers when the key fob 200 is in a low power mode based on the received LF signal. Up. In this case, the key fob 200 may be a key fob related to the vehicle 100.

In addition, the key fob 200 uses the OTP code (a1) of the key fob 200 and the location information (or coordinate information) (b1) of the key fob 200 to be checked in real time to determine a variable value (c1). ) Is calculated (or calculated/generated).

That is, the key fob 200 is the OTP code (a1) of the key fob 200 and the location of the key fob 200 checked in real time based on a preset key fob-specific calculation formula (or algorithm). The variable value c1 is calculated (or calculated/generated) using the information b1.

For example, the key fob 200 adjacent to the vehicle 100 receives the 11th LF signal transmitted from the vehicle 100, and powers the corresponding key fob 200 based on the received 11th LF signal. Up (or switching from low power mode to normal mode).

In addition, the key fob 200 includes the eleventh OTP code of the key fob 200 generated in real time and the eleventh position information of the key fob 200 that is checked in real time in a preset key fob-specific calculation equation. The calculation function is performed using the input value, and the eleventh variable value c1, which is a result of performing the calculation function, is calculated (S1220).

Thereafter, the key fob 200 transmits (or transmits) the calculated variable value, an RF signal in response to the received LF signal, and identification information of the key fob 200 to the vehicle 100.

For example, the key fob 200 includes the calculated 11th variable value c1, an 11th RF signal that is a response signal to the received 11th LF signal, identification information of the key fob 200, etc. It is transmitted to the vehicle 100 (S1230).

Thereafter, the vehicle 100 receives the variable value, the RF signal, and identification information of the key fob 200 transmitted from the key fob 200 in response to the previously transmitted LF signal.

In addition, the vehicle 100 estimates the expected position b1' of the key fob 200 by analyzing the direction of the received RF signal (or the direction of the radio wave with respect to the RF signal).

That is, the plurality of antennas 110 provided in the vehicle 100 receive the variable value, the RF signal, and identification information of the key fob 200 transmitted from the key fob 200, and the vehicle 100 may estimate the predicted position b1' of the key fob 200 by analyzing directions of RF signals received through the plurality of antennas 110.

For example, the first to third antennas provided in the vehicle 100 are the 11th variable value c1 transmitted from the key fob 200, and the 11th RF signal which is a response signal to the 11th LF signal , The identification information of the key fob 200 is received.

In addition, the vehicle 100 estimates the expected position b1' of the key fob 200 by analyzing the directions of the eleventh RF signals received through the first to third antennas (S1240).

Thereafter, the vehicle 100 calculates (or calculates/generates) another variable value b1 using the received variable value c1 and the OTP code a1 of the vehicle 100. In this case, the OTP code managed by the vehicle 100 may correspond to the OTP code managed by the key fob 200 associated with the vehicle 100. Here, the other variable value b1 may be a value related to the location information of the key fob 200 (or corresponding to the location information of the key fob 200).

That is, the vehicle 100 uses the received variable value (c1) and the OTP code (a1) of the vehicle 100 based on a predetermined vehicle-specific calculation equation (or calculation algorithm). Calculate (or calculate/generate) b1). Here, the vehicle-specific calculation formula may be an inverse calculation formula corresponding to the key fob-specific calculation formula.

As an example, the vehicle 100 performs a calculation function by using the received variable value c1 and the OTP code a1 of the vehicle 100 as input values in a predetermined vehicle-specific calculation formula, and the calculation function The twelfth variable value b1, which is the result of the execution, is calculated (S1250).

Thereafter, the vehicle 100 determines whether the difference between the estimated position b1' of the estimated key fob 200 and the calculated other variable value b1 is less than or equal to a preset threshold (or within a preset threshold range). Judge whether or not.

That is, whether the vehicle 100 includes the calculated other variable value b1 within a range to which a preset error range is applied to the estimated position b1' of the estimated key fob 200 (or the calculation It is determined whether the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to the other variable value (b1).

For example, the vehicle 100 generates an eleventh range to which the preset error range (eg, ±10%) is applied to the estimated position b1' of the key fob 200, and the generation It is determined whether the calculated twelfth variable value b1 is included in the eleventh range (S1260).

As a result of the determination, when the difference between the estimated position b1 ′ of the estimated key fob 200 and the calculated other variable value b1 exceeds the preset threshold (or out of the threshold range), The vehicle 100 determines that RSA has occurred, and terminates the function according to the trigger input.

That is, as a result of the determination, when the calculated other variable value (b1) is not included within the range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculation If the estimated position (b1') of the estimated key fob 200 is not included within the range to which the error range is applied to the other variable value (b1)), the vehicle 100 determines that RSA has occurred, and , Terminates the function according to the trigger input.

For example, as a result of the determination, when the calculated twelfth variable value b1 is not included within the generated eleventh range, the vehicle 100 determines that RSA has occurred, and the function according to the second trigger Ends (S1270).

In addition, as a result of the determination, when the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is less than the preset threshold value (or within the threshold range), The vehicle 100 selects (or selects) two or more antennas from among a plurality of antennas included in the vehicle 100.

That is, as a result of the determination, when the calculated other variable value (b1) is included within a range to which the preset error range is applied to the estimated position (b1') of the estimated key fob 200 (or the calculated When the estimated position (b1') of the estimated key fob 200 is included within the range to which the error range is applied to another variable value (b1)), the vehicle 100 is included in the vehicle 100 Two or more antennas are selected (or selected) from among a plurality of antennas.

In addition, the vehicle 100 sequentially transmits the LF signal with a preset time difference (or delay) through the selected (or selected) two or more antennas.

For example, as a result of the determination, when the calculated twelfth variable value b1 is included within the generated eleventh range, the vehicle 100 may be configured with a second antenna and a third antenna among the first to third antennas. Select

In addition, the vehicle 100 sequentially transmits the twelfth LF signal with a preset time difference through the selected second antenna and the third antenna (S1280).

Thereafter, the key fob 200 sequentially receives the LF signal transmitted from the vehicle 100 with a time difference.

In addition, the key fob 200 analyzes the direction of the received LF signal and calculates an angle between the antennas (or two or more antennas) included in the vehicle 100 and the key fob 200 (or Calculation).

In addition, the key fob 200 transmits (or transmits) information on the angle formed between the calculated antennas and the key fob 200, identification information of the key fob 200, and the like to the vehicle 100 do.

At this time, the key fob 200 instead of transmitting information on the angle formed by the calculated antennas and the key fob 200 to the vehicle 100, the direction information of the received LF signal, the key Identification information of the fob 200 may be transmitted to the vehicle 100.

For example, the key fob 200 sequentially receives the twelfth LF signal transmitted through the second antenna and the third antenna of the vehicle 100 with the time difference.

In addition, the key fob 200 analyzes the direction of the received twelfth LF signal to calculate an eleventh angle formed by the two antennas included in the vehicle 100 and the key fob 200.

In addition, the key fob 200 transmits the calculated eleventh angle and identification information of the key fob 200 to the vehicle 100 (S1290).

Thereafter, the vehicle 100 receives information on an angle between the antennas transmitted from the key fob 200 and the key fob 200, and identification information of the key fob 200.

At this time, when the vehicle 100 receives the direction information of the LF signal transmitted from the key fob 200, the identification information of the key fob 200, etc., the vehicle 100 receives the received LF signal The angle formed between the antennas and the key fob 200 may be calculated based on the direction information of.

In addition, the vehicle 100 has a predetermined range (or a front/rear range) from an angle between the received antennas and the key fob 200 in the estimated position b1' of the key fob 200 Check whether it exists within.

For example, the vehicle 100 receives the eleventh angle transmitted from the key fob 200 and identification information of the key fob 200.

In addition, the vehicle 100 generates a 21st range in which the preset range (for example, ±10%) is applied to the received 11th angle, and the estimated key fob 200 is applied to the generated 21st range. It is checked whether the expected position (b1') of) is included (S1300).

As a result of the confirmation, the estimated position (b1') of the key fob 200 is not within a preset range (or before/after range) from the angle formed between the received antennas and the key fob 200. In this case, the vehicle 100 determines that RSA has occurred, and terminates the function according to the trigger input.

For example, as a result of the confirmation, when the estimated position b1' of the estimated key fob 200 is not included in the 21st range, the vehicle 100 determines that RSA has occurred, and the second trigger The function according to is terminated (S1310).

In addition, as a result of the check, the estimated position (b1') of the estimated key fob 200 is within a preset range (or before/after range) from the angle formed between the received antennas and the key fob 200. In this case, the vehicle 100 performs (or allows) a vehicle control function corresponding to the trigger input through the key fob 200.

In this way, the difference between the estimated position (b1') of the estimated key fob 200 and the calculated other variable value (b1) is less than a preset threshold (or within a threshold range), and the antenna provided in the vehicle When the angle formed by the key fob 200 and the estimated position b1' of the estimated key fob 200 correspond, the vehicle 100 responds to the trigger input through the corresponding key fob 200 It can perform a corresponding vehicle control function.

For example, as a result of the confirmation, when the estimated position b1' of the estimated key fob 200 is included in the 21st range, the vehicle 100 responds to the second trigger through the key fob 200. In response, the vehicle 100 is turned on (S1320).

14 is a flowchart illustrating a vehicle security enhancement method for RSA defense according to a third embodiment of the present invention.

First, when the vehicle 100 receives a trigger input, the vehicle 100 selects (or selects) two or more antennas from among a plurality of antennas included in the vehicle 100. At this time, the trigger input is to open the vehicle door (or open the vehicle door), close the vehicle door (or lock the vehicle door), turn on the engine (or start the engine), or turn off the engine. This includes the case (or engine stop), the case of opening the trunk, etc.

In addition, the vehicle 100 sequentially transmits an LF signal (or wake-up signal) with a preset time difference (or delay) through the selected (or selected) two or more antennas.

For example, when a third trigger for opening (or attempting to open) the trunk of the vehicle occurs, the vehicle 100 selects the 11th antenna and the twelfth antenna from among the 11th to 15th antennas included in the vehicle. .

Further, the vehicle 100 sequentially transmits the 13th LF signal through the selected 11th antenna and the 12th antenna with a preset time difference (S1410).

Thereafter, when the key fob 200 receives the LF signal transmitted from the vehicle 100, the key fob 200 powers when the key fob 200 is in a low power mode based on the received LF signal. Up. In this case, the key fob 200 may be a key fob related to the vehicle 100. Here, the key fob 200 may sequentially receive LF signals sequentially transmitted from the vehicle 100 with a time difference.

In addition, the key fob 200 transmits (or transmits) an RF signal in response to the received LF signal and identification information of the key fob 200 to the vehicle 100.

For example, the key fob 200 sequentially receives the 13th LF signal transmitted sequentially with the time difference through the 11th antenna and the 12th antenna of the vehicle 100, and the received 13th LF Based on the signal, the key fob 200 is powered up (or switched from a low power mode to a normal mode).

In addition, the key fob 200 transmits a 13th RF signal, which is a response signal to the received 13th LF signal, and identification information of the key fob 200 to the vehicle 100 (S1420).

Thereafter, the vehicle 100 receives the RF signal transmitted from the key fob 200 through two or more previously selected antennas.

In addition, the vehicle 100 analyzes the direction of the RF signal received through the two or more antennas (or the direction of the radio wave for the RF signal), and the direction of the radio wave from the key fob 200 (or RF The unit vectors for each of the two or more antennas representing the direction of the signal) are generated.

)를 생성한다.As an example, as shown in FIG. 15, the vehicle 100 is transmitted from the key fob 200 (F) in response to the 13th LF signal transmitted through the eleventh antenna (A ₁ ). A first unit vector (eg,

).

)를 생성한다(S1430).In addition, as shown in FIG. 15, the vehicle 100 is transmitted from the key fob 200 (F) in response to the 13th LF signal transmitted through the twelfth antenna (A ₂ ). A second unit vector (eg

) Is generated (S1430).

Thereafter, the vehicle 100 uses the current position of the vehicle 100 (or a preset reference position within the vehicle 100 / the center of the vehicle 100) as an origin (or reference point), and in the preset vehicle 100 The location information of the selected two or more antennas (or location information of each of the two or more antennas relative to the center of the vehicle 100), in any one of the selected two or more antennas The first vector information on the path of the received RF signal (or the path of the radio wave), the path of the RF signal received by the other antenna among the at least two or more selected antennas (or the path of the radio wave) The distance between the vehicle 100 and the key fob 200 is calculated (or estimated) based on the second vector information, etc. Here, the first vector information and the second vector information are composed of a unit vector indicating a direction and a size.

), 상기 키 포브(200)와 상기 제 12 안테나(A₂) 간의 제 2 벡터 정보(예를 들어

) 등을 근거로 상기 [수학식 3] 내지 상기 [수학식 4]를 이용하여, 상기 차량(100)과 상기 키 포브(200) 간의 벡터(

)를 산출한다.As an example, as shown in FIG. 15, the vehicle 100 has the current position (or the center position of the vehicle 100) O of the vehicle 100 as an origin, and the vehicle 100 The relative position information of the eleventh antenna A ₁ and the twelfth antenna A ₂ configured in the vehicle 100 with respect to the current position O of the key fob 200 and the eleventh antenna A ₁ ) between the first vector information (for example

), second vector information between the key fob 200 and the twelfth antenna (A ₂ ) (for example,

) Based on the [Equation 3] to [Equation 4], the vector between the vehicle 100 and the key fob 200 (

) Is calculated.

)를 근거로 상기 차량(100)과 상기 키 포브(200) 간의 거리를 산출한다(S1440).In addition, the vehicle 100 is the vector between the calculated vehicle 100 and the key fob 200 (

A distance between the vehicle 100 and the key fob 200 is calculated based on) (S1440).

Thereafter, the vehicle 100 determines (or confirms) whether the calculated distance between the vehicle 100 and the key fob 200 is within a preset normal operating distance (eg, 5 meters).

That is, the vehicle 100 uses a signal repeater to extend the reach of the radio waves through radio amplification, etc. to prevent (or detect) misrecognition of the key fob, the calculated vehicle 100 and the key It is determined whether the distance between the fobs 200 is within the preset normal operating distance.

For example, the vehicle 100 determines whether the calculated distance between the vehicle 100 and the key fob 200 is within the preset normal operating distance (eg, 5 meters) (S1450).

When the determination result (or the confirmation result), when the calculated distance between the vehicle 100 and the key fob 200 is outside (or exceeds) the preset normal operating distance, the vehicle 100 has an RSA Is determined, and the function according to the trigger input is terminated.

For example, as a result of the determination, when the calculated distance (eg 7 meters) between the vehicle 100 and the key fob 200 exceeds the preset normal operating distance (eg 5 meters), the vehicle (100) determines that the RSA has occurred, and ends the function according to the third trigger (S1460).

In addition, when the determination result (or the confirmation result), the calculated distance between the vehicle 100 and the key fob 200 is within the preset normal operating distance, the vehicle 100 is the corresponding key fob 200 Executes (or allows) a vehicle control function corresponding to the trigger input through rip.

For example, as a result of the determination, when the calculated distance (eg 3.5 meters) between the vehicle 100 and the key fob 200 is within the preset normal operating distance (eg 5 meters), the vehicle ( 100) opens the trunk of the vehicle 100 in response to the third trigger through the key fob 200 (S1470).

In the embodiment of the present invention, as described above, when a trigger is input, a wakeup signal is transmitted from a plurality of antennas in the vehicle, and the key fob receiving the wakeup signal uses the OTP code and the coordinates of the key fob to determine the variable value. And, by analyzing the direction of the RF signal, which is a response signal to the wake-up signal transmitted from the key fob in the vehicle, the position of the key fob is estimated, and the variable value transmitted from the key fob in the vehicle and the OTP code of the vehicle are calculated. If the difference between the calculated value of the other variable and the estimated key fob position is within the error range and the distance between the vehicle and the estimated key fob position is within the normal operating distance of the PEPS system, the key fob is By performing the vehicle control function through, it is possible to strengthen the defense capability against RSA.

In addition, as described above, the embodiment of the present invention sequentially transmits the LF signal with a short delay time through two or more antennas selected from a plurality of antennas in the vehicle when the expected position of the key fob is located within the normal operating range. And the direction of the LF signal received from the key fob is analyzed to calculate the angle between the antennas and the key fob, and information about the calculated angle is transmitted to the vehicle, and the estimated key fob position in the vehicle is When corresponding to the angle formed by the key fob and the antenna transmitted from the key fob, a vehicle control function is performed through the key fob to provide a stable system operation through enhanced vehicle security.

The above contents may be modified and modified without departing from the essential characteristics of the present invention by those of ordinary skill in the technical field to which the present invention belongs. Accordingly, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention, but to explain the technical idea, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be interpreted as being included in the scope of the present invention.

10: vehicle security enhancement system 100: vehicle
200: key fob 110: multiple antennas
120: first location information collection unit 130: first storage unit
140: MCU 210: other antenna
220: second location information collection unit 230: second storage unit
240: control unit

Claims (8)

The vehicle transmitting an LF signal when the vehicle receives a trigger input; And
When receiving the LF signal transmitted from the vehicle, a variable value is calculated using the OTP code of the key fob and the location information of the key fob, the calculated variable value, the RF signal in response to the received LF signal, and the A key fob for transmitting identification information of the key fob to the vehicle,
The vehicle,
By analyzing the direction of the RF signal transmitted from the key fob, the predicted position of the key fob is estimated, and other variable values are calculated using the variable value transmitted from the key fob and the OTP code of the vehicle, and the estimated A vehicle security reinforcement system for RSA defense, characterized in that it is determined whether a difference between the predicted position of the key fob and the calculated value of the other variable is less than or equal to a preset threshold. The method of claim 1,
The trigger input,
Vehicle security for RSA defense comprising any one of a case to open a door of a vehicle, to close a door of a vehicle, to turn on a ignition, to turn off an engine, and to open a trunk Strengthening system. The method of claim 1,
The vehicle,
As a result of the determination, when the difference between the estimated position of the estimated key fob and the calculated other variable value exceeds a preset threshold value, it is determined that RSA has occurred by the vehicle, and a function according to the trigger input is performed. Vehicle security enhancement system for RSA defense, characterized in that the termination. The method of claim 1,
The vehicle,
As a result of the determination, when the difference between the estimated position of the estimated key fob and the calculated other variable value is less than or equal to a preset threshold, the distance between the current position of the vehicle and the estimated position of the estimated key fob is a preset normal operating distance It is confirmed whether or not, and as a result of the check, when the distance between the current position of the vehicle and the estimated position of the estimated key fob is within a preset normal operating distance, performing a vehicle control function corresponding to the trigger input Vehicle security enhancement system for RSA defense characterized by. When the vehicle receives a trigger input, transmitting, by the vehicle, an LF signal;
When the key fob receives the LF signal transmitted from the vehicle, calculating a variable value by using the OTP code of the key fob and the location information of the key fob;
Transmitting the calculated variable value, an RF signal responsive to the received LF signal, and identification information of the key fob to the vehicle by the key fob;
Estimating an expected position of the key fob by analyzing the direction of the RF signal transmitted from the key fob by the vehicle;
Calculating another variable value by the vehicle using the variable value transmitted from the key fob and the OTP code of the vehicle; And
And determining, by the vehicle, whether a difference between the estimated position of the estimated key fob and the calculated value of another variable is less than or equal to a preset threshold. The method of claim 5,
As a result of the determination, when the difference between the estimated position of the estimated key fob and the calculated other variable value is less than or equal to a preset threshold, the distance between the current position of the vehicle and the estimated position of the estimated key fob by the vehicle Checking whether is within a preset normal operating distance; And
As a result of the check, when the distance between the current position of the vehicle and the estimated position of the estimated key fob is within a preset normal operating distance, performing a vehicle control function corresponding to the trigger input by the vehicle is further performed. Vehicle security enhancement method for RSA defense comprising a. The method of claim 5,
As a result of the determination, when the difference between the estimated position of the estimated key fob and the calculated value of the other variable is less than or equal to a preset threshold, selecting two or more antennas from among a plurality of antennas included in the vehicle by the vehicle step;
Sequentially transmitting an LF signal with a preset time difference by the vehicle through the two or more selected antennas;
Calculating an angle between antennas included in the vehicle and the key fob by analyzing directions of LF signals sequentially transmitted from the vehicle with a time difference by the key fob;
Transmitting, by the key fob, information about an angle formed between the calculated antennas and the key fob to the vehicle;
Checking, by the vehicle, whether the estimated position of the estimated key fob exists within a preset range from an angle between the antennas transmitted from the key fob and the key fob; And
As a result of the confirmation, when the estimated position of the key fob is within a preset range from an angle formed between the antennas transmitted from the key fob and the key fob, the vehicle control function corresponding to the trigger input by the vehicle Vehicle security enhancement method for RSA defense, further comprising the step of performing. Selecting two or more antennas from among a plurality of antennas included in the vehicle, by the vehicle when receiving a trigger input from the vehicle;
Sequentially transmitting an LF signal with a preset time difference by the vehicle through the two or more selected antennas;
Transmitting an RF signal RF signal and identification information of the key fob to the vehicle in response to an LF signal sequentially transmitted from the vehicle with a time difference by a key fob;
Generating unit vectors for each of the two or more antennas representing directions of radio waves from the key fob by analyzing the direction of the RF signal transmitted from the key fob by the vehicle;
Calculating, by the vehicle, a distance between the vehicle and the key fob based on the current position of the vehicle, position information of the two or more antennas, and vector information for each antenna indicating the direction of the radio wave;
Checking, by the vehicle, whether the calculated distance between the vehicle and the key fob is within a preset normal operating distance; And
As a result of the check, when the calculated distance between the vehicle and the key fob exceeds the preset normal operating distance, determining that RSA has occurred, and terminating the function according to the trigger input. How to strengthen security.

Images