WO2020058059A1

WO2020058059A1 - Access system and access verification method

Info

Publication number: WO2020058059A1
Application number: PCT/EP2019/074203
Authority: WO
Inventors: Georg Käufl; Karen Bruhn
Original assignee: Conti Temic Microelectronic Gmbh
Priority date: 2018-09-18
Filing date: 2019-09-11
Publication date: 2020-03-26
Also published as: DE102018215835A1

Abstract

An access system comprises a control device (20) arranged in an object (10), wherein the control device (20) is designed to receive a first signal (NOT) in the event of a triggering event, which signal contains first information indicating an emergency situation, to store the first information, and to change from a normal state into an emergency state. The control device (20) is also designed to receive a second signal (Sig1, Sig2) from a wearable electronic device (30, 40). If the control device (20) is in the normal state, an authorisation of the wearable electronic device (30, 40) is checked based on the received second signal (Sig1, Sig2) and a first secret authentication key. If the control device (20) is in the emergency state, an authorisation of the wearable electronic device (30, 40) is checked based on the received second signal (Sig1, Sig2) and either a public key or a second secret authentication key. At least one door of the object (10) is unlocked if an authorisation of the wearable electronic device (30, 40) is established.

Description

description

Access system and procedure for access verification

The invention relates to an access system and a method for access verification, in particular a system for emergency entry of a vehicle.

Today vehicles are mostly unlocked using electronic keys. Either an unlock button on the key is actuated or the vehicle is unlocked without a key, i.e. without any actuation of the vehicle key, if the vehicle key carried by the user is within a certain range around the vehicle. Such keyless vehicle access systems are also referred to as keyless entry systems. Portable electronic devices such as smartphones are also increasingly taking on the function of the vehicle key.

In the event of an accident, such electronically unlocked locks (“e-locks”) can often be locked with a mechanical one

Keys must be unlocked. In order to make the design of the vehicles even more appealing to users, however, vehicles nowadays sometimes no longer have door handles and mechanical locks, so that mechanical unlocking is no longer possible in an emergency.

Other systems are known in which the door locks are automatically unlocked in the event of an accident, for example when it has been detected that the airbags have been triggered. However, this is only possible if the corresponding door control units are still on the one hand with the vehicle battery are connected and are supplied with energy by this. In addition, it is also necessary that the door control device can still receive a corresponding signal for opening the doors. If the corresponding connections in the vehicle are broken, automatic unlocking is no longer possible.

In the known systems, there is therefore the risk that rescue workers cannot open the vehicle doors in the event of an accident or only open them with difficulty, and cannot rescue people in the vehicle quickly enough if the door locks are still locked.

The publication DE 10 2016209379 A1 discloses a vehicle to which a primary authorization device and a secondary authorization device for authorizing an operation of the vehicle are assigned. The secondary Authorisierungsvor direction has a digital auxiliary key. In the method, an activation signal is provided by the primary authorization device, which is representative of an activation of the digital auxiliary key. Depending on the activation signal, the authorization to operate the vehicle is released by means of the digital auxiliary key and, if the vehicle receives an authorization request signal, the operation of the vehicle is authorized depending on the release and the digital auxiliary key.

The object of the invention is to provide an access system and a cor responding method for access verification, which enables rescue workers in the event of an accident to unlock the door locks and to rescue accident victims from the vehicle. This object is achieved by an access system according to claim 1, a method according to claim 9, or a vehicle according to claim 10.

The access system according to the invention has a control device arranged in an object, the control device being designed to receive a first signal in response to a triggering event, which contains first information that an emergency situation exists, storing the first information, and from change from a normal state to an emergency state. The control device is also designed to receive a second signal from a portable electronic device. When the control device is in the normal state, an authorization of the portable electronic device is checked on the basis of the received second signal and a first secret authentication key, by decoding the received second signal by means of the first secret authentication key. If the control device is in the emergency state, an authorization of the portable electronic device is checked on the basis of the received second signal and either a public authentication key or a second secret authentication key, by the received second signal using either the public authentication key or the second secret authentication key is decoded. At least one door of the object is unlocked when an authorization of the portable electronic device has been determined.

In the normal state, only authorized portable electronic devices that know the first secret authentication key can unlock the object. In an emergency, too other portable electronic devices unlock the object, which have no authorization in the normal state. As a result, rescue measures can be carried out faster in an emergency and people in the property can be saved more quickly.

The public key and the second secret authentication key can differ from the first secret authentication key.

This makes it possible to authorize different portable devices in different situations to be able to open the object.

The control device can be designed to be operated in the normal state as long as the first information has not been stored.

The object can be a vehicle, the control device being supplied with energy from a vehicle battery in the normal state, and wherein the control device has an energy storage device which is designed to supply the control device with energy when the control device is connected to the vehicle battery was separated.

The control unit can thus still unlock the doors in the event of an accident when the connection to the vehicle battery is broken.

The portable electronic device can be, for example, a mobile phone, tablet, SmartWatch, laptop or personal digital assistant. Such portable devices are now carried by most users in addition to different keys or replace the keys completely by taking over the function of one or more keys.

The signal from the portable device can be transmitted via a wireless connection between the portable device and the control device. Most portable devices already have appropriate interfaces and also many objects, e.g. Vehicles have a wide variety of interfaces. A wireless connection can therefore be established using existing components.

The wireless connection can be a connection according to a Bluetooth standard or a near field communication standard. Such connections are often used for the transmission of signals or for communication between two devices.

The object can be, for example, a bus, a truck, a building or a garage.

A method for access verification has: by means of a control device arranged in an object, in response to a triggering event, receiving a first signal which contains first information that an emergency situation is present,

Storing the first information and changing from a normal state to an emergency state; Receiving a second signal from a portable electronic device; when the control device is in the normal state, checking an authorization of the portable electronic device using the received second signal and a first secret authentication key by decoding the received second signal by means of the first secret authentication key; if the control device is in the emergency state, checking an authorization of the portable electronic device on the basis of the received second signal and either a public authentication key or a second secret authentication key, by the received second signal either using the public authentication key or using the second secret authentication identification key is decoded; and unlocking at least one door of the object when authorization of the portable electronic device has been determined.

A vehicle has an access system, the access system having a control device arranged in an object, and the control device being designed to receive a first signal in response to a triggering event, which contains first information that an emergency situation is present which to save the first information and to change from a normal state to an emergency state. The control device is also designed to receive a second signal from a portable electronic device. When the control device is in the normal state, an authorization of the portable electronic device is checked on the basis of the received second signal and a first secret authentication key, in that the received second signal is decoded by means of the first secret authentication key. If the control device is in the emergency state, authorization of the portable electronic device is based on the received second signal and either a public authentication key or a second secret authentication. ornamentation key checked by decoding the received second signal either by means of the public authentication key or by means of the second secret authentication key. At least one door of the object is unlocked when an authorization of the portable electronic device has been determined.

The invention is explained in more detail below with reference to the exemplary embodiments shown in the figures of the drawing. It shows:

FIG. 1 shows an example of a vehicle with an access system,

Figure 2 shows an example of a block diagram of an access system according to an embodiment, and

Figure 3 in a flowchart a method according to

Embodiment.

Figure 1 shows a schematic representation of the basic principle of a keyless vehicle access and start system. A control device 20 is arranged in the vehicle 10 and is designed to send out signals. These are, for example, electromagnetic signals in the LF (low frequency) or HF (high frequency) range. These signals are received by a transponder unit 30 when it is in the vicinity of the vehicle 10, and then evaluated and / or further processed. Following the evaluation and / or further processing in the transponder unit 30, corresponding response signals can be sent back to the control unit 20. The response signals are transmitted, for example, in the UHF frequency band and can be transmitted in the vehicle 10 by the Control unit 20 or an evaluation unit connected to control unit 20 can be evaluated. The transponder unit 30 can be arranged, for example, in an electronic vehicle key which the driver of the vehicle 10 carries with him. The signals sent between the vehicle 10 and the transponder unit 30 can, for example, also be signals according to a near field communication standard (NFC) or according to a Bluetooth standard, for example the Bluetooth Low Energy (BLE) standard.

NFC enables contactless data exchange between devices over a distance of a few centimeters, e.g. less than 20cm or less than 10cm. Up to 424 kbit / s can be transmitted using NFC. In near-field communication, data is exchanged via an inductive coupling between two inductors (e.g. antennas). The inductance of a communication device acts as a so-called initiator, the inductance of the other communication device as a so-called target. The electromagnetic fields radiate with a frequency of 13.56MHz from the initiator to the target.

In order to receive the signals sent by the control unit 20, the transponder unit 30 must be within a certain radius around the vehicle 10, since signals in the LF and HF ranges as well as NFC and BLE signals have only a limited range. Depending on the selected transmission standard, this radius can be 10cm, 2m, 5m or 10m, for example. However, these are just examples. The

Depending on the signals and antennas used, the range can also be larger or smaller. The control unit 20 can continuously send signals or only in response to a specific event. Such an event can be, for example, touching or actuating a door handle or a vehicle start button. Any other suitable type of event is also possible. If the transponder unit 30 sends a correct response signal to a signal received by the control unit 20, the vehicle 10 is unlocked.

The signals sent between the control unit 20 and the transponder unit 30 can be encoded, for example, by means of a secret authentication key. According to one example, an inquiry signal coded by means of a first coding table is transmitted via at least one antenna located on the vehicle. If the vehicle key 30 belonging to the vehicle 10 is within the range of the request signals, it receives the request signal, decodes it and sends it out again using a second coding table with a new coding. The response signal is decoded in vehicle 10 using a secret authentication key. Since the vehicle 10 knows both coding tables, it can compare its own original transmission with the response signal just received. If these match, the vehicle 10 can be unlocked.

In the access system described with reference to FIG. 1, there is a risk that, in the event of an accident in the vehicle 10, the vehicle doors can no longer be unlocked. For example, many vehicles automatically lock the vehicle doors as soon as the vehicle has exceeded a certain speed. Injured and trapped people can then only be relieved with great difficulty by rescue workers. To make matters worse, many Vehicles nowadays no longer have door handles and / or mechanical door locks, so that unlocking using a mechanical key is no longer possible.

An access system according to an example is described with reference to FIG. 2 using a block diagram. By doing

Block diagram is shown schematically that in a vehicle 10 to arranged control unit 20. The control unit 20 can have a first communication unit 21, for example. The communication unit 21 can have an antenna, for example, which is designed to transmit and receive signals.

The control device 20 can be operated in two different operating modes. A first operating mode is a normal state. A second operating mode is an emergency state. If there is an emergency situation, control unit 20 can receive a signal NOT which contains information that an emergency situation is present. An emergency situation can exist, for example, when the vehicle 10 has an accident. The NOT signal can be emitted, for example, by other components or control devices arranged in the vehicle 10. For example, an airbag control unit may send a NOT signal to control unit 20 when one or more airbags have been deployed. A signal NOT can also be sent, for example, if a connection to important components to the vehicle battery has been disconnected. Any other suitable triggering events are also possible. The information that an emergency situation is present can be stored by the control device 20. For example, the control device 20 can have an internal or external memory in which the information is stored. The control unit 20 can remain in the emergency state as long as the information is stored. Authorized persons, for example a user or an authorized workshop, can delete the information, for example, when there is no longer an emergency and the control unit 20 can return to the normal state.

If the control device 20 receives a signal Sigl, Sig2 from a portable electronic device 30, 40, it uses a first secret authentication key for the authenticity of the signal Sigl, Sig2 or the device 30, 40 as long as it is in the normal state check. In the normal state, only an authorized vehicle key, ie a key belonging to the vehicle 10, can be recognized as authorized. Other electronic devices 40 do not know the secret authentication key. If the control device 20 receives a signal Sig2 from an unauthorized portable device 40 in the normal state, the vehicle 10 remains locked. The vehicle 10 is only unlocked when a portable device 30, 40 is recognized as authorized.

The control unit 20 receives a signal Sigl, Sig2 from a portable electronic device 30, 40 and is in an emergency state, it can use a different key for authentication. This can be, for example, a public key or a second secret key.

If it is a public key, the vehicle 10 can be unlocked by any suitable portable device 40. In the event of an accident, the portable electronic device 40 is generally a device 40, for example of a passer-by or rescue workers, which in the normal state is not used. the vehicle 10 is authorized to unlock. For example, the public key can be a general NFC key. The vehicle 10 can then be unlocked, for example, if any NFC signal was received by an NFC-enabled device 40. In this case, the portable device 40 only has to have a communication unit 41, which according to the necessary standard, e.g. B. NFC standard, can communicate. No further authentication takes place.

The different one used during the emergency

However, the key can also be a second secret authentication key, for example. This second secret authentication key may, for example, only be known to portable devices of certain organizations, e.g. Fire brigade, Red Cross, technical relief organization, etc. The vehicle 10 could then not be unlocked by any portable device 40, but only by portable devices 40 of organizations authorized by the emergency services. Corresponding keys could, for example, be automatically forwarded to corresponding emergency services when a vehicle 10 is purchased. The relevant keys could be stored there in a database and called up in an emergency. For example, a corresponding application could be installed on the portable device 40 of the rescue workers.

In the exemplary access system, different authentication keys are thus used in the normal state and in the emergency state. In the normal state, a first secret authentication key is used, which is generally only known to portable devices 30 belonging to vehicle 10. In an emergency, either a public key or a second secret authentication key is used, which both differ from the first secret authentication key.

The portable device 30, 40 can be, for example, a cell phone, tablet, SmartWatch, laptop or personal digital assistant (PDA). In order to be able to communicate with the control device 20, a wireless connection can be established between the portable device 30, 40 and the control device 20. The wireless connection can be a Bluetooth connection, for example. However, it is also possible for the portable device 30, 40 to communicate with the control device 20 by means of NFC (Near Field Communication) or any other suitable wireless connection.

If, for example, NFC is used for communication between the portable electronic device 30, 40 and the vehicle 10, the range of the signals, as already explained above, is restricted. In this case, it would be necessary for the portable electronic device 30, 40 with the corresponding communication unit 31, 41 to be brought into the vicinity of the communication unit 21 of the control device. For this purpose, a corresponding marking could be made on the vehicle 10 so that users and rescue workers know in which area the control unit 20 is located.

In the normal state, the control device 20 can be supplied with energy by a vehicle battery 11, for example. The control unit 20 can optionally also have its own energy storage 23, which is designed to supply the control unit 20 with energy when the connection of the control unit 20 to the vehicle battery 11 has been disconnected. The control unit 20 can optionally also have an emergency release unit 22 have. The emergency release unit 22 can have, for example, the public or secret authentication key or keys that are used in the emergency state. In the normal state, the emergency release unit 22 can be deactivated. The control unit 20 can then speak in the normal state, for example, to the control unit 20 explained in FIG. 1. In the emergency state, the emergency release unit 22 can be activated and take over the authentication. The emergency release unit 22 can, for example, be connected to the energy storage 23 and can be supplied with energy by the latter. The public key and / or the second secret key can be released in the emergency state, for example, using appropriate software.

The access system can also be used in other areas and is not limited to use in vehicles. In particular, the access system is not limited to use in passenger cars. For example, the access system can also be used to open and / or close buses, trucks, buildings or garages.

Many buildings are now unlocked using portable electronic devices instead of conventional keys. In an emergency, e.g. Fire, rescue workers could quickly get into the building with the access system described above in order to be able to carry out necessary rescue measures. A control device 20 arranged in an object could, for example, switch to the emergency state when smoke detectors have been triggered. Other suitable triggering events are also possible.

The components shown schematically in a block diagram in FIG. 2 can therefore not only in or on a vehicle, in particular a passenger car.

Rather, a control unit 20 can also be arranged, for example, in a bus or a truck or a building. Generally speaking, the control unit 20 can be installed anywhere where doors or accesses are to be unlocked or locked by means of an electronic key.

FIG. 3 shows the principle of a method for access verification using a flowchart. In the method, a control signal 20 arranged in an object 10, upon a triggering event, receives a first signal NOT, which contains a first piece of information that an emergency situation is present. The first information is stored and the control unit changes from a normal state to an emergency state. If a second signal Sigl, Sig2 is received by a portable electronic device 30, 40 (step 301), it is checked whether the control device is in the normal state or in the emergency state (step 302). If that

Control unit 20 is in the normal state, an authorization of the portable electronic device 30, 40 is checked based on the received second signal Sigl, Sig2 and a first secret authentication key (step 303). If it is an authorized device, the object is unlocked (step 306). If the device 30, 40 is not authorized, nothing happens and the object remains closed (step 305).

If the control device 20 is in the emergency state, authorization of the portable electronic device 30, 40 is carried out on the basis of the received second signal Sigl, Sig2 and either a public key or a second secret authentication key (step 307). If it is an authorized device, the object is unlocked (Step 306). If the device 30, 40 is not authorized, nothing happens and the object remains closed (step 305).

Reference list

10 vehicle

11 vehicle battery

20 control unit

21 Communication unit 22 Emergency release unit 23 Energy saver

30 first portable device 31 communication unit

40 second portable device

41 Communication unit NOT first signal

Sigl, Sig2 second signal

Claims

1. Access system with a control device (20) arranged in an object (10), the control device (20) being designed to

in response to a triggering event, to receive a first signal (NOT) which contains a first piece of information that an emergency situation exists, to store the first piece of information and to change from a normal state to an emergency state; receive a second signal (Sigl, Sig2) from a portable electronic device (30, 40);

if the control device (20) is in the normal state, to check an authorization of the portable electronic device (30, 40) on the basis of the received second signal (Sigl, Sig2) and a first secret authentication key by the received second signal (Sigl, Sig2 ) is decoded using the first secret authentication key; when the control device (20) is in the emergency state, an authorization of the portable electronic device (30, 40) is checked on the basis of the received second signal (Sigl, Sig2) and either a public authentication key or a second secret authentication key by the received second signal (Sigl, Sig2) is decoded either by means of the public authentication key or by means of the second secret authentication key; and

unlock at least one door of the object (10) if authorization of the portable electronic device (30, 40) has been determined.

2. Access system according to claim 1, wherein the public key and the second secret authentication key differ from the first secret authentication key.

3. Access system according to claim 1 or 2, wherein the control device (20) is designed to be operated in the normal state as long as the first information has not been stored.

4. Access system according to one of the preceding claims, wherein the object (10) is a vehicle;

wherein the control device (20) is supplied with energy by a vehicle battery (11) in the normal state; and

The control device (20) has an energy store (23) which is designed to supply the control device (20) with energy when the connection between the control device (20) and the vehicle battery (11) has been disconnected.

5. Access system according to one of the preceding claims, wherein the portable electronic device (30, 40) is a mobile phone, tablet, SmartWatch, laptop or personal digital assistant.

6. Access system according to one of the preceding claims, wherein the second signal (Sigl, Sig2) is transmitted from the portable electronic device (30, 40) via a wireless connection between the portable electronic device (30, 40) and the control device (20) .

7. The access system according to claim 6, wherein the wireless connection is a connection according to a near field communication standard or a Bluetooth standard.

8. Access system according to one of the preceding claims, wherein the object (10) is a bus, a truck, a building or a garage.

9. A method of access verification, the method comprising:

by means of a control device (20) arranged in an object (10), upon a triggering event, receiving a first signal (NOT), which contains first information that an emergency situation is present, storing the first information, and changing one Normal state into an emergency state;

Receiving a second signal (Sigl, Sig2) from a portable electronic device (30, 40);

if the control device (20) is in the normal state, checking an authorization of the portable electronic device (30, 40) based on the received second signal (Sigl, Sig2) and a first secret authentication key by the received second signal (Sigl, Sig2 ) is decoded using the first secret authentication key; if the control device (20) is in the emergency state, checking an authorization of the portable electronic device (30, 40) based on the received second signal (Sigl, Sig2) and either a public authentication key or a second secret authentication key by the received second signal (Sigl, Sig2) is decoded either by means of the public authentication key or by means of the second secret authentication key; and

Unlocking at least one door of the object (10) when authorization of the portable electronic device (30, 40) has been determined.

10. Vehicle (10) with an access system, the access system having a control device (20) arranged in an object (10), and wherein the control device (20) is designed to

if the control device (20) is in the normal state, to check an authorization of the portable electronic device (30, 40) on the basis of the received second signal (Sigl, Sig2) and a first secret authentication key by the received second signal (Sigl, Sig2) is decoded using the first secret authentication key; if the control device (20) is in the emergency state, an authorization of the portable electronic device (30, 40) on the basis of the received second signal (Sigl, Sig2) and either a public authentication key or a second secret authentication key by checking the received second Signal (Sigl, Sig2) is decoded either by means of the public authentication key or by means of the second secret authentication key; and