WO2008044093A1

WO2008044093A1 - Customer identification device, keyless access system for vehicle, vehicle sharing system including such a device and methods using such a device

Info

Publication number: WO2008044093A1
Application number: PCT/IB2006/003910
Authority: WO
Inventors: Loïc VINCENT; Guillaume Chevret
Original assignee: Renault Trucks
Priority date: 2006-10-11
Filing date: 2006-10-11
Publication date: 2008-04-17

Abstract

This customer identification device (200), for use in a keyless access control system for a vehicle, includes means (2010) to generate an identification code for access to a vehicle, on the basis of information data relating to a user to whom said device is allotted.

Description

CUSTOMER IDENTIFICATION DEVICE, KEYLESS ACCESS SYSTEM FOR

VEHICLE, VEHICLE SHARING SYSTEM INCLUDING SUCH A DEVICE AND

METHODS USING SUCH A DEVICE

TECHNICAL FIELD OF THE INVENTION

This invention concerns a customer identification device for use in a keyless access control system for a vehicle. This invention also concerns a keyless access system for a vehicle and a vehicle sharing system for a fleet of vehicles, these systems comprising, amongst others, such a customer identification device. This invention also concerns a method for identifying a user of a vehicle with a customer identification device and a method for sharing vehicles in a fleet.

BACKGROUND OF THE INVENTION Customer identification devices have been used in the past to allow a user to access a vehicle. As mentioned in US-A-2005/0225429, such a device might incorporate personal data relating to a user. These personal data are different from one or several enabling codes which are supposed to be recognised by a single personal car in order to allow access to this car. Therefore, a driver using this known device can only access one particular car after he has loaded into this device some enabling codes which are specific of that particular car. This can be useful for securising access to one car but cannot be easily applied to a fleet of vehicles where several users might need to access several vehicles.

On the other hand, it is known from US-B-6 850 153 to provide a client of a car rental company with an ID card with which he can provide information to a central system through a kiosk. Such a system implies that a kiosk must be available everywhere and every time a user needs to access a car. In practice, cars can only be accessed in specially dedicated rental stations.

SUMMARY OF THE INVENTION

This invention aims at providing a customer identification device which can be given to a user who will access different vehicles, in particular in a fleet of vehicles, on the basis of an identification code and without having to go through a kiosk in a dedicated station. To this purpose, the invention concerns a customer identification device for use in a keyless access control system for a vehicle characterised in that it includes means to generate an identification code for access to a vehicle, on the basis of information data relating to a user to whom this device is allotted. Thanks to the invention, an access code can be generated by the customer identification device, hereafter "CID", this code giving access to one or several vehicles on the basis of an authorisation which is given by the or each vehicle, depending on a match between a code generated in the CID and a code stored in the or each vehicle. In the sense of the present invention, a keyless access system to a vehicle is a system where a user has a customer identification device in the form of a remote control device which can be actuated by the user, e.g. by pressing a button, to unlock a door of the vehicle. A passive keyless access system is a system where the user has a customer identification device which can exchange information with an onboard control unit without being manually actuated by the user. This invention applies both to keyless and passive keyless access systems. It also applies to passive go systems where a customer identification device is used, without needing to be manually actuated, in order to allow a user to start the engine of a vehicle and drive it. According to further aspects of the invention, this customer identification device might incorporate one of several of the followings features:

- It includes means to store the information data relating to the corresponding user.

- It includes means to read a data storing media. These means might include a tachograph card reader. It can also include a fingerprint reader, a keyboard or connection means for interaction with an identification data storage means.

The invention also concerns a keyless access system for a vehicle which comprises a control unit installed onboard the vehicle and communication means between this unit and a CID which is as mentioned here-above. The invention also concerns a vehicle sharing system for a fleet of vehicles between several users, this system comprising a keyless access control unit installed onboard each vehicle, telecommunication means to provide the control unit with information data relating to at least one authorised driver and, for each authorised user, a customer identification device as mentioned here-above. According to an advantageous aspect of the invention, the control unit includes means to generate, on the basis of identification data relating to a user and received by a communication module connected to this unit and installed onboard the same vehicle, a first access code to the vehicle, together with means to compare the first access code to the identification code generated by the CID and to grant or not access to the vehicle on the basis of this comparison.

According to a further aspect of the invention, it concerns a method which can be implemented with a CID as mentioned here-above, this method comprising at least a step where one generates an identification code in a CID on the basis of information data relating to a user to whom this CID is allotted.

Moreover, the invention concerns a second method which can be implemented with a CID as mentioned here-above for sharing vehicles in a fleet between several users, each provided with such a CID. This method comprises at least the following steps: a) - providing the CID of a user with information data relating to this user b) - generating, within said CID and on the basis of the provided information data, an identification code and c) - using said identification code to communicate with a keyless access control unit installed on the vehicle. According to an advantageous aspect of this method, after step c), the control unit compares the identification code to an access generated by said unit and, depending on the result of this comparison, grants or not access to this vehicle.

BRIEF DESCRIPTION OF THE DRAWINGS The invention will be better understood on the basis of the following description which is given in correspondence with the annexed figures and as an illustrative example, without restricting the object of the invention. In the annexed figures:

- figure 1 is a schematic representation of a vehicle sharing system implementing the invention.

- figure 2 is a perspective view of a customer identification device belonging to the system of figure 1 .

- figure 3 is a schematic view of a passive keyless access control subsystem used with the system of figure 1. - figure 4 is a block diagram of a first part of a method according to the invention and implemented with the system of figures 1 to 3.

- figure 5 is a block diagram of another part of the method and

- figure 6 is a block diagram of another part of the method. - figure 7 is a diagram similar to figure 4 for a second method according to the invention.

- figure 8 is a diagram similar to figure 5 for another part of the second method.

- figure 9 is a diagram similar to figure 6 for another part of the second method.

- figure 10 is a view similar to figure 2 for a customer identification device corresponding to a second embodiment of the invention and

- figure 11 is a view similar to figure 2 for a customer identification device corresponding to a third embodiment of the invention

DETAILED DESCRIPTION OF SOME EMBODIMENTS Two trucks 1 and V belong to a fleet F of trucks managed by an administrator or fleet manager A. Several drivers can be authorised or not to drive each of the trucks 1 and 1', two drivers D₁ and D₂ being shown on figure 1. Each truck 1 or 1 ' is provided with a keyless access system 100 to control access to its cabin 2 or 2' for a driver D₁ or D₂ having a customer identification device, hereafter "CID", 200. Each CID is a small dimension electronic device which is adapted to emit, when, receiving a challenge signal, a response signal comprising an alphanumerical identification sequence or code which is specific to each CID. System 100 of truck 1 is schematically shown on figure 3. System 100 includes a control unit 101 connected to an actuation switch 102A located near the handle 21 of the driver's door 22 of truck 1 , this switch being suitable to send to unit 101 a first signal Si when the handle is being touched or approached by a user.

Unit 101 is also connected to a low frequency antenna 103A located near or on the door 22. When unit 101 receives signal S₁, unit 101 computes, thanks to a microprocessor 1010, an alphanumerical sequence. Then, unit 101 sends to antenna 103A an actuation signal S₂ corresponding to this sequence. Then, antenna 103A sends a low frequency encrypted challenge signal S₃ which also corresponds to the computed sequence and which is supposed to be received by the CID 200 of a user.

When authorised driver Di is near antenna 103A with his CID 200 in hand, in a pocket or in a bag, when this CID 200 receives signal S₃, it calculates a response signal S₄ which is sent as a high frequency encrypted radio signal and received by a high frequency antenna 104 connected to unit 101. Signal S₄ received by antenna

104 is then verified by microprocessor 1010 in unit 101 and, if signal S₄ is found to be consistent with the alphanumerical sequence already computed by microprocessor

1010, that is if that CID 200 permits access to cabin 2, unit 101 sends an actuation signal S₅ to an actuator 105A which mechanically unlocks the driver's door of cabin

2.

Unit 101 is also connected to an activation switch 102B, a low frequency antenna 103B and an actuator 105B located on the passenger side of cabin 2 and which are supposed to be used when the user wants to access this cabin by the passenger's side.

According to an optional aspect of the invention, unit 101 is coupled to a passive go unit 1 11 which is capable of recognising CID 200 when this device is within cabin 2, in order to allow starting of the engine and driving of the truck, without having to use a key. According to an alternative embodiment, unit 111 might be integrated into unit 101.

Therefore, as explained here-above, once it is recognised by unit 101 , a CID

200 gives access to a truck without necessity for driver Di to register or declare himself as a user in a kiosk or any equivalent data entering station. In this sense, system 100 and CID 200 form together a passive keyless access system to truck 1. if unit 111 is provided, they form a passive keyless access and go system.

Each truck of the fleet is provided with a similar system 100.

In order to allow a dynamic and efficient driver's allocation to the trucks of fleet F, each unit 101 is also provided with a communication module 107 which is adapted to receive data from a satellite 300 which also communicates with a central server 400. Administrator A has a workstation 500 which gives him/her access to server 400. Server 400 includes a database 401 where one stores identification data relating to all registered and potential users D₁, D₂, etc. of trucks 1 , 1 ' etc. These data might include, for each driver Di, D₂, his name, his first-name, his driver's licence number, his address, the list of countries where he is authorised to drive, etc. For each . driver, one notes di a subset of the data relating to this driver. This subset is unique for each driver and is intended to be used in a telecommunication process, as explained here-after.

When administrator A considers that driver D₁ should have access to truck 1 , he retrieves subset di of the identification data relating to driver D_{1 ,} from database, 401 and sends it, via server 400 and as a part of a telecommunication signal S₆, to satellite 300. Satellite 300 resends signal S₆ as a redirected signal S'β which reaches module 107 wherever truck 1 is provided that truck 1 is in the zone covered by satellite 108 which can be as large as a substantial part of a continent. Alternatively, signal S₆ can be sent to module 107 via a set of fixed antennas, one antenna being shown on figure 1 with reference 300'. Signal S₆ may then be redirected several times, as a signal S'e, before reaching module 107.

Communication between server 400 and module 107 occurs through know techniques, e.g. mobile phone technology, as GSM, GPRS or UMTS, wireless network access technology, as WIFI or WIMAX, satellite phones or broadcasting technology. Since some trucks are already equipped with that kind of technology, the invention does not substantially increase their cost.

As shown on figure 4, administrator A allocates driver Di to truck 1 in a first step 1001 and the corresponding information is sent as signal S6 and S^J6 to module 107 of truck 1 in another step 1002.

Subset di corresponds to the information data relating to driver D₁ sent from server 400 to module 107 by administrator A.

When it receives signal S'₆ in a further step 1003, module 107 forwards it to unit 101 , as an electrical signal S₇ representative of data di.Then microprocessor 1010 computes a first access code Ci with a function fi using information data di as a variable.

As an alternative, a microprocessor different from the one used to verify signal S₄ as mentioned here-above can be used to compute code C-i. However, it is more economical to use the same microprocessor 1010 for both operations. Computation of code C-i takes place in a step 1004 which is followed by a step 1005 where code C₁ is stored in a memory 1011 belonging to unit 101.

On the other hand, when a new driver is given access to at least one truck of fleet F, one allots him a CID which will be considered as personal, in so far as it is loaded with identification data d'-i relating to this driver only, as shown with step 2001 on figure 5.

The information data d'-i relating to driver Di and loaded in his CID 200 might be similar or different from data d-i. In the present example, one considers that d'i is the same as d-i.

When data is loaded on CID 200, it is stored in a memory 201 1 belonging to this device.

As shown on figure 2, an easy way of loading information data d'i relating to driver D-i into his CID 200 is to use his tachograph card 600, that is a card which a driver must always have with him when driving a truck and which is provided with a microchip 601 and electronic data storage means. The outer shell 202 of CID 200 is provided with a slot 2021 which constitutes an entry zone of a not further represented card reader. When data has been stored in memory 201 1 at the end of step 2001 , tachograph card 600 can be pulled out of slot 2021 for further use. As an alternative, as shown on figure 10, where only the outside parts of a

CID 200 are represented, a CID 200 might be provided with a fingerprint reader cell

203 which allows identification of driver Di by applying one or several of his finger tips on this cell. In such a case, information data di sent by administrator A to unit

101 for a driver corresponds to the fingerprints of this driver. As shown on figure 11 , where only the external parts of a CID 200 are represented, a CID might incorporate two electric connectors 204 which allow this

CID to be connected to an identification data storage means like a computer.

Moreover, CID 200 might be provided with a keyboard 205 which allows manual data entry. Of course, for the sake of flexibility, a CID might incorporate several of the identification data loading means mentioned with reference to figures 2, 7 and 8 and other such means.

When information data d'i has been loaded in CID 200, a microprocessor

2010 belonging to this CID computes in a further step 2002 an identification or second code C₂ as a function of data dV To compute second code C₂, one uses a second function f₂ which has data d'-i as a variable.

In this embodiment, functions fi and f₂ are the same, so that codes C-i and C₂ are identical since data di and d'i are the same as considered here-above. However functions ft and f₂ may also be different. Once code C₂ has been computed, it is stored in memory 2011 in a further step 2003 and remains accessible for future use by CID 200.

As shown on figure 6, when driver D₁ wants to enter truck 1 on the driver's side, he touches or approaches switch 102A in a first step 3001 , as explained here- above. After generation of the challenge sequence in step 3002, challenge signal S₃ is sent by antenna 103A in step 3003. The left column of figure 6 shows method steps which take place onboard truck 1 , thanks to unit 101 and the annexed equipments. The right column shows the method steps performed by CID 200.

When it receives signal S₃ in a further step 4004, CID 200 gets code C₂ from memory 2011 and generates a response signal S₄ on the basis of code C₂. Then, it sends signal S₄ in a further step 4005. In fact, code C2 is sent as a part of signal S₄.

Signal S₄ is received by antenna 104 in a further step 3006 and then forwarded to unit 101 where, in a further step 3007, first code Ci and second code C₂, transferred within signal S_4i are compared to each other. If these two codes match, either because they are the same or because they are linked by a predetermined relationship, microprocessor 1010 considers that CID 200 belongs to an authorised user and sends, in step 3008, a signal S5 to actuator 105A to open the door 22. If such is not the case, door 22 remains closed.

The vehicle sharing system of the invention comprises as many systems 100 as needed, as many CID 200 as needed, one or several satellites 300 or fixed antennas 300', a server 400 and a user interface like the workstation 500.

According to a further embodiment of the invention, computation of the second code C₂ in each CID 200 might be done from data d'1 stored in memory 2011 every time that this CID receives a challenge signal S₃ from the access system 100 of a truck, this code C₂ being then immediately forwarded to antenna 104 as signal

S₄ or a part of this signal.

For the sake of safety, communication between server 400 and each module 107 is encrypted.

Thanks to the invention, it is possible to remotely grant access to truck 1 for driver Di without needing driver D₁ to meet administrator A or to come to the headquarter of the truck company once his CID 200 has been located with his personal data. For some specific users, like fleet manager A or a person in charge of maintenance, access can be given to all the trucks of fleet F. Thanks to the invention, it is no more necessary to pair a vehicle with the or each corresponding access card at the end of the manufacturing process of the vehicle or during a maintenance operation, as this was the case for prior art systems. For most drivers, and according to the habits of the profession, access can be given to one truck at a time, which allows the administrator or fleet manager A to follow precisely the matching between one driver and one truck, with a high security level.

It is particularly useful to take into account the fact that a driver Di might be sick or unable to drive a truck on a predetermined date. In such a case, a second driver D₂ can drive the truck in place of the sick driver Di without having to even meet the first driver, in so far as the identification data of driver D₂ has been sent to truck 1 by server 400.

One can also consider the case where a fleet manager grants access to a single truck for different drivers at a time. This allows the fleet manager to remotely anticipate and handle trucks and driver changes. In this case, when someone wants to enter the cabin, first codes Ci are sequentially generated by unit 101 for all authorised drivers and, for each code Ci sent, unit 101 compares the secondary code C₂ received from this person's CID (if any) to the corresponding first code stored in its memory 1011. As soon as one comparison is positive, the corresponding door of the truck is open. If not, one goes to the end of the set of first codes and the comparison is found to be unsuccessful so that the door of the truck remains closed.

With the invention, it is even possible for the fleet manager A to grant access to several trucks for a group of several drivers. Then the drivers of a group can organise their work between themselves. A second method according to the invention is represented on figures 7 to 9.

In this method, steps 1001 to 1003 of figure 7 are identical to the same steps in the first method. In step 1004, code Ci is computed by a function fi having di as a variable. Code Ci takes the form of two elementary codes Ei and Fi. These two codes are stored in a memory in step 1005. On the other hand, as shown on figure 8, after identification data d'i, which, in this embodiment, is the same as data d-i, has been loaded in a CID 200 in a first step 2001 , a second code C₂ is computed in a second step 2002. This second code takes the form of two elementary codes E₂ and F₂. This second code is computed on the basis of data d'i by a function f₂ which, in this example is the same as function f-\. Therefore, in this case where data di and d'i are the same, elementary codes Ei and E₂ are the same, and elementary codes Fi and F₂ are the same.

As shown on figure 9, when driver Di wants to enter truck 1 , he activates switch 102A in a first step 3001 as in the first method. In step 3002, a modified first code C'i is computed in unit 101 by a function gi having elementary code Ei and a random number N as variables.

In step 3003, modified code d is embedded into challenge signal S₃ which is sent by antenna 103A, in encrypted format, towards CID 200.

When it receives signal S₃, CID 200 accesses its memory where elementary codes E₂ and F₂ have been stored and, by a proper computation, CID 200 retrieves number N from code C₁. Since, as mentioned here-above, elementary codes Ei and

E₂ are identical, number N can be retrieved by CID 200 from code C'i by

"subtracting" or otherwise reverse-calculating elementary code E₂ from code C-).

When number N is known, CID 200 computes a second modified code C₂ on the basis of a function g'₂ having elementary code F₂ and number N as variables. This takes place in a first step 4004 which is followed by a step 4005 where signal S₄ is sent to unit 1001 in encrypted format. C₂ is transferred to unit 101 via signal S₄ into which it is embodied. After it has been received in unit 101 in a first step 3006, signal

S₄ is analysed and, since microprocessor 1010 knows number N, it is able to retrieve elementary code F₂ from modified second code C₂ transferred with signal S₄. It is then possible for microprocessor 1010 to compare elementary codes E₂ and F₂.

If these codes are different, microprocessor 1010 considers that the answer of CID 200 is not valid and no access is given to truck 1. If elementary codes E₂ and F₂ are identical, access is given to truck 1 in a further step 3008. In step 4004, modified code C₂ is generated on the basis of code, C₂ so that the comparison which takes place in step 3007 is a comparison between parts of codes Ci and C₂ which allows to actually compare codes Ci and C₂.

Functions f-i and f₂ might be different so that codes Ei and E₂, on the one hand, Fi and F₂, on the other hand, might be different. In such a case, comparison step 3007 is adapted.

Of course, in step 3007, it would be equivalent that the unit 101 extracts from C₂ a number N', on the basis of F-i which is expected and checks that this number N' is the same as the number N which it has used to generate C'i in step 3002. This second method is safer than the first method in so far as challenge signal S₃ is specific of each driver and includes a random number N, which means that signal S3 is different each time it is sent. Signal S₄ is also different each time since it includes number N. When the fleet manager grants access to a single truck for different drivers at a time, steps 3002, 3003, 4004, 4005, 3006 and 3007 are performed successively for each driver. In other words, a first signal S3 is emitted on the basis of a random number and a first elementary code, specific of the first driver and computed by unit 101. If the answer received from CID 200 is consistent, then access is given to the truck. If not, another attempt is made to generate another challenge signal on the basis of information data corresponding to another driver. This proceeding goes on for all drivers.

The advantages listed here-above for the first method are also valid for the second and third methods. The invention has been described here-above with respect to a passive keyless access system. However, it may also be used with an "active" keyless access system where the user actuates his CID by pressing on a button, his CID being then usually called a "remote controller".

The invention has been described here-above with respect to a passive keyless access system. However, it may also be used with a passive go system that is a system where a CID is used to allow a driver to start the engine of a vehicle and drive this vehicle after he has accessed to driver's seat.

LIST OF REFERENCES

1 Truck r Truck

2 Cabin

21 handle

22 driver's door

2' Cabin

100 system onboard a truck 101 control unit 1010 microprocessor

1011 memory 102A actuation switch 102B actuation switch 103A low frequency antenna

103B low frequency antenna 104 high frequency antenna 105A actuator

107 communication module 11 1 passive go unit

200 customer identification device or CID

2010 microprocessor

2011 memory 202 shell

2021 slot

203 fingerprint reader cell

204 connectors

205 keyboard 300 satellite

300' fixed antenna 400 server

401 database 500 workstation 600 tachograph card

601 microchip

1001 driver allocation step

1002 signal emission step

1003 signal reception step 1004 code generation step

1005 code storage step

2001 data loading step in CID 200

2002 code generation step in CID 200

2003 data storing step in CID 200 3001 actuation step of system 100

3002 challenge sequence generation step

3003 signal emission step

3006 signal reception step

3007 signal comparison step

3008 signal emission step

4004 response signal generation step in CID 200

4005 signal emission step by CID 200

A administrator / fleet manager

Ci first code

C'i modified first code

C₂ second code

C₂ modified second code

Di driver di information data d'i information data

D₂ driver

Ei elementary code

E₂ elementary code

Fi elementary code

F₂ elementary code

U function h function

F fleet

91 function

92 function

N random number

Si actuation signal

S₂ actuation signal

S₃ challenge signal

S₄ response signal

S₅ actuation signal

S₆ telecommunication signal S'₆ redirected signal S₇ electric signal

Claims

1. A customer identification device (200) for use in a keyless access and/or start control system (100, 200) for a vehicle (1), characterized in that it includes means (2010) to generate an identification code (C₂) for access to said vehicle on the basis of information data (d'-i) relating to a user (D-O to whom said device (200) is allotted.

2. Customer identification device according to claim 1 , characterized in that it includes means (2011 ) to store the information data (d'i) relating to the user.

3. Customer identification device according to claims 1 or 2, characterized in that it includes means to read a data storing media (601).

4. Customer identification device according to claim 3, characterized in that said means include a tachograph card (600) reader.

5. Customer identification device according to claims 1 or 2, characterized in that it includes a fingerprint reader (203).

6. Customer identification device according to claims 1 or 2, characterized in that it includes a keyboard (205) to input said identification data.

7. Customer identification device according to claims 1 or 2, characterized in that it includes connection means (204) for interaction with identification data storage means.

8. A keyless access system for a vehicle (1) comprising a control unit (101) installed onboard said vehicle and communication means (103, 104) between said unit and a customer identification device (200), characterized in that said customer identification device (200) is according to one of the previous claims.

9. A vehicle sharing system for a fleet (F) of vehicles (1 , 1') between several users, said system comprising a keyless access control unit (101 ) installed onboard each vehicle (1 ,1') telecommunication means (107, 300, 300', 400) to provide said control unit with information data (Cl₁) relating to at least one authorised user (D₁) and a customer identification device (200) according to one of claims 1 to 8 for each authorised user (D-i, D₂).

10. System according to claim 10, characterized in that:

- said control unit (101) includes means (1010) to generate, on the basis of identification data (d-i) relating to a user (D₁) and received by a communication module (107) connected to this unit and installed onboard the same vehicle, a first access code (C-i) to said vehicle and

- said control unit (101) also includes means (1010) to compare said first access code (Ci) to the identification code (C₂) generated by a customer identification device (200) and to grant or not access to said vehicle on the basis of this comparison.

11. A method for identifying a user of a vehicle with a customer identification device (200) allotted to this user, characterized in that it comprises at least a step (2002) of generating an identification code (C₂) in said customer identification device on the basis of information data (d'₁) relating to said user.

12. A method for sharing vehicles in a fleet between several users each provided with a customer identification device, characterized in that it comprises at least the followings steps: a) - providing the customer identification device (200) of a user (D₁) with information data (d'O relating to this user b) - generating (2002), within said customer identification device and on the basis of the provided information data, an identification code (C₂) and c) - using said identification code to communicate (4005) with a keyless access control unit (101) installed on a vehicle (1).

13. Method according to claim 13, characterized in that after step c), said control unit (101) compares (3007) said identification code (C₂) to an access code (C₁) generated by said unit and, depending on the result of this comparison, grants (3008) or not access to said vehicle.