Patent Application
20200245111
The invention relates to an access system and to an access verification method, in particular for access verification in a vehicle.
Keyless vehicle access and starting systems, such as for example the Passive Start Entry (PASE) system, are automatic systems for unlocking a vehicle without active use of an automobile key and for starting said vehicle just by actuating the start button. A transmission unit that emits signals at regular intervals is in this case arranged in the vehicle. These are for example electromagnetic signals in the LF (Low Frequency) or HF (High Frequency) band. The signals are received by a transponder unit when it is located in the vicinity of the vehicle, and are subsequently evaluated and/or processed further by the transponder unit. Following the evaluation and/or further processing in the transponder unit, corresponding response signals may be transmitted back again to the transmission unit in the vehicle. The response signals are transmitted for example in the UHF frequency band, and may be evaluated in the vehicle by an evaluation unit. If a response signal is recognized as being correct and hence the transponder unit is recognized as belonging to the vehicle, the vehicle may be unlocked or started. Other functions in the vehicle may also be controlled in this manner.
Such systems are however able to be attacked relatively easily, for example by way of what are known as relay attacks. In addition, the power consumption in the vehicle is high, since the signals have to be emitted from the vehicle at regular intervals, even if there is possibly no valid transponder unit located in the vicinity of the vehicle for a relatively long time. The power consumption of the transponder unit is also high, since the transponder unit always has to be ready to receive and evaluate signals from a vehicle.
The object of the invention is to provide an improved access system and an improved access verification method that better protect a vehicle or another object against unwanted attacks by third parties and in which power consumption is reduced both in the vehicle and in the transponder unit.
This object is achieved by an access system as claimed in claim 1, an access verification method as claimed in claim 12 and a vehicle having an access system as claimed in claim 15. Embodiments and developments of the concept of the invention are the subject matter of dependent claims.
An access system has a transmission unit arranged in an object and a transponder unit arranged in a portable device. The transmission unit is designed to emit request signals at regular intervals in an active state. The transponder unit is designed, in response to a triggering event, to store a current position of the object and to determine its own position at regular intervals. The transponder unit is furthermore designed to deactivate the transmission unit when it detects, on the basis of the determined position, that it has left a first zone, wherein the first zone is arranged around the object, and wherein the transmission unit does not emit any request signals while it is deactivated. The transponder unit is furthermore designed to activate the transmission unit when it detects, on the basis of the determined position, that it has entered an adjusted first zone, wherein the adjusted first zone is arranged around the object.
As a result, it is possible on the one hand to prevent what are known as relay attacks since no request signals are emitted by the transmission unit when the transponder unit, and thus the user, is not in the vicinity of the object. On the other hand, however, it is also possible to save energy since the transmission unit does not emit any request signals for as long as the transponder unit is not in the vicinity of the object. Request signals are usually electromagnetic signals. Generating electromagnetic signals at regular intervals requires a significant amount of energy.
The transmission unit may be designed to transmit a first signal to the transponder unit in the active state in response to the first triggering event. The transponder unit is thereby informed about the triggering event. The transponder unit may store the current position of the object and determine its own position at regular intervals when it has received the first signal from the transmission unit.
The first triggering event may include at least one of locking the object, detecting that all of the doors of the object are closed, and detecting that there are no more people in the object. These events are usually indicators that the user with the transponder unit is moving away from the object.
The transponder unit may furthermore be designed, if it is located within a reception zone, to receive request signals from the transmission unit, to process the request signals and to emit response signals to the transmission unit, wherein the reception zone is arranged around the object and is determined by the range of the request signals. The transponder unit may thereby be recognized as belonging to the object (authentication). If the transponder unit is recognized as belonging to the object, the object may for example be unlocked.
The transmission unit, when it has been reactivated, may furthermore be designed to emit a second signal to the transponder unit in response to a second triggering event. The transponder unit may furthermore be designed to stop the position determination when it receives the second signal from the transmission unit. The position determination in the transponder unit requires energy and therefore loads the battery of the transponder unit. As long as the object is unlocked, it may be assumed that the transponder unit is located within the first zone. Position determination is therefore not necessary during this time.
An outer boundary of the first zone may have a first distance to the object and an outer boundary of the adjusted first zone may have a second distance to the object. In this case, the first distance may be greater than the second distance or the first distance and the second distance may be the same. By choosing the adjusted first zone to be smaller than the first zone, it is for example possible to prevent the transmission unit being deactivated and activated multiple times in succession if the transponder unit is located in the boundary area of the first zone for a relatively long time.
A shape and a size of the first zone and of the adjusted first zone may be variable and depend on at least one parameter. By way of example, the shape and size of the first zone may depend on the accuracy of the position determination by the transponder unit and/or on a current position of the object. The zones are thereby able to be adjusted flexibly to different situations.
The transponder unit may have a multiplicity of components and may furthermore be designed to deactivate at least some of the components if it is detected, on the basis of the determined position, that the transponder unit has left the first zone. The transponder unit may reactivate the components if it is detected, on the basis of the determined position, that the transponder unit has entered the adjusted first zone. Energy may thereby also be saved in the transponder unit itself, and the battery of the transponder unit is able to be preserved.
The transponder unit may be designed to determine the position of the object when it receives the first signal from the transmission unit. As an alternative, however, it is also possible for the first signal to contain information about the position of the object. The position of the object is thus known to the transponder unit, such that this position is able to be correspondingly stored in the transponder unit.
An access verification method comprises: in response to a triggering event, storing a current position of an object and regularly determining the position of a transponder unit arranged in a portable device; deactivating a transmission unit arranged in the object if it has been detected, on the basis of the determined position, that the transponder unit has left a first zone, wherein the first zone is arranged around the object, and wherein the transmission unit does not emit any request signals while it is deactivated; and activating the transmission unit if it has been detected, on the basis of the determined position, that the transponder unit has entered an adjusted first zone, wherein the adjusted first zone is arranged around the object, and wherein the transmission unit emits request signals at regular intervals while it is activated.
The transmission unit may transmit a first signal to the transponder unit in response to the triggering event. The current position of the object may be stored and the position of the transponder unit may be determined regularly when the first signal has been received by the transponder unit.
The method may furthermore comprise detecting movement of the transponder unit. The transmission unit may be deactivated if it has been detected that the transponder unit has not moved for a predefined duration. The deactivation may in this case take place regardless of whether the transponder unit is detected within or outside the first zone. The transmission unit may furthermore be reactivated if it has been detected that the transponder unit has moved again. This may be expedient for example in cases in which the object is a vehicle and a user parks the vehicle in front of his front door, in front of a shop or a restaurant, etc. It may be the case here that the user, and therefore the transponder unit, is still located in the vicinity of the vehicle and thus possibly also within the first zone. In such cases, the vehicle key usually remains at rest for a relatively long period of time. It is for example hung on a key hook. Deactivating the transmission unit after a certain period of time may prevent unauthorized individuals from stealing the vehicle.
A vehicle has an access system, wherein the access system has a transmission unit arranged in the vehicle and a transponder unit arranged in a portable device. The transmission unit is designed to emit request signals at regular intervals in an active state. The transponder unit is designed, in response to a triggering event, to store a current position of the object and to determine its own position at regular intervals. The transponder unit is furthermore designed to deactivate the transmission unit when it detects, on the basis of the determined position, that it has left a first zone, wherein the first zone is arranged around the object, and wherein the transmission unit does not emit any request signals while it is deactivated. The transponder unit is furthermore designed to activate the transmission unit when it detects, on the basis of the determined position, that it has entered an adjusted first zone, wherein the adjusted first zone is arranged around the object.
The invention is explained in more detail below on the basis of the figures of the drawing, wherein identical or similar elements are provided with the same reference signs. In the figures:
In order to receive the signals transmitted by the transmission unit 20, the transponder unit 30 must be located within a particular radius around the vehicle 10, since signals in the LF and HF bands have only a limited range. This radius may be for example 5 meters or 10 meters. This is however just an example. The range may also be greater or less. The emission of a response signal from the transponder unit 30 to the transmission unit 20 or to an evaluation unit in the vehicle 10 may take place over a greater distance if the response signals are in the UHF frequency band, since these have a greater range.
The transmission unit 20 generally emits signals continuously (at regular intervals). It is thereby ensured that a transponder unit 30 approaching the vehicle 10 is recognized early, such that the authentication is completed and the vehicle 10 is unlocked before a user opens one of the vehicle doors. The vehicle 10 is unlocked when the transponder unit 30 transmits a correct response signal in response to a request signal received from the transmission unit 20.
However, the vehicle battery is loaded due to the continuous emission of request signals by the transmission unit 20. Generating electromagnetic fields requires a certain amount of energy. The vehicle battery may thereby be greatly discharged, in particular in the case of long downtimes.
The battery of the transponder unit 30 is also greatly loaded, since the transponder unit 30 always has to be in an active state (what is known as listening mode) in order to be able to receive and process signals emitted by the vehicle 10 at all times.
Such systems are additionally able to be attacked relatively easily, for example by way of what are known as relay attacks. In this case, it is possible for example for two devices, one of which is located in the vicinity of the vehicle 10 and the other of which is located in the vicinity of the transponder unit 30, to be used to span a greater distance between the vehicle 10 and the transponder unit 30 by virtue of the radio link of the LF (Low Frequency) or HF (High Frequency) communication channel that is used being extended. In this manner, a vehicle 10 is able to be opened and started even though the vehicle key (transponder unit 30) is not located within the necessary range.
The first device 40 in the vicinity of the vehicle 10 receives the signals emitted by the transmission unit 20 and forwards them to the second device 50. The signal is in turn transmitted from the second device 50 to the transponder unit 30. In order to be able to transmit the signals over a distance c between the first and second devices 40, 50, which is usually significantly greater than the normal range of LF or HF signals, amplifiers and transmission stages are for example necessary in the devices 40, 50. This arrangement may therefore be used to span a distance of theoretically any size between the vehicle 10 and the key with the transponder unit 30.
In the key, the signal is received, evaluated and/or processed by the transponder unit 30. The response signal emitted thereupon by the transponder unit 30 may be transmitted back to the vehicle 10 again using the same arrangement with the first and second devices 40, 50. The evaluation electronics arranged in the vehicle 10 therefore initially do not detect that the key is not located within the range. Although the key is not within the range, the vehicle 10 may therefore still be opened.
Without extending the range by way of an arrangement described above, a vehicle 10 could for example also be opened and started without authorization if the key with the transponder unit 30 is located within range. This may be the case for example when the vehicle 10 is parked in front of a user's house and the key with the transponder unit 30 is located in the house at a location that is within the range. In such a case, however, it is often not desired to open the vehicle 10.
In order to prevent such attacks and unauthorized opening and starting of the vehicle 10 and to reduce the power consumption of both the transmission unit 20 and the transponder unit 30, there is provision according to the invention that the transmission unit 20 is able to be activated and deactivated. The trans mission unit 20 emits request signals at regular intervals only if it is activated. In the deactivated (inactive) state, the transmission unit 20 does not emit any request signals, such that the transponder unit 30 is not able to be authenticated and the vehicle 10 is not able to be opened or started. That is to say, no request signals that could be transmitted by an arrangement with two devices 40, 50 are emitted. Since the transmission unit 20 does not emit any request signals over relatively long periods of time, the power consumption of the transmission unit 20 and thus of the vehicle 10 is also reduced considerably.
The transponder unit 30 may furthermore also change to a state with reduced power consumption while the transmission unit 20 is deactivated, since no request signals are expected from the transmission unit 20. The transponder unit 30 may for example have a multiplicity of components. These are for example components for receiving signals, components for transmitting signals, components for processing signals and components for determining the position of the transponder unit 30. Various components of the transponder unit 30, for example those that are required in order to receive, process and transmit signals, may be switched off (deactivated) in the state with reduced power consumption. The power consumption in the transponder unit 30 is thereby also reduced considerably. Essentially, only the components for position determination are required, as long as the transponder unit 30 is located outside the first zone ZI. As soon as the transponder unit 30 is detected again in the first zone ZI, all of the components may be activated again.
The transmission unit 20 may be deactivated in response to a triggering event, for example if the transponder unit 30 is located outside a first zone (inner zone) ZI and thus within a second zone (outer zone) ZA. These zones ZI, ZA are illustrated by way of example in
The second zone ZA adjoins the first zone ZI and comprises the entire long-distance area outside the first zone ZI. The boundary between the first zone ZI and the second zone ZA thus runs at a certain distance around the vehicle 10.
When the vehicle 10 is unlocked, the transponder unit 30 is located in or in the vicinity of the vehicle 10 and thus within the first zone ZI. When the user has parked the vehicle 10, he moves away from the vehicle 10. The transponder unit 30, carried by the user, thus leaves the first zone ZI at a certain time and enters the second zone ZA. The user may either actively lock the vehicle 10 when he moves away from it by pressing a corresponding button on the vehicle key, or the vehicle 10 locks itself independently when it is detected that the transponder unit 30 is located outside a reception zone Z1.
The reception zone Z1 is likewise illustrated in
As shown in
As soon as the vehicle 10 is locked, the transmission unit 20 may for example transmit a first signal to the transponder unit 30. Locking the vehicle is however in this case just an example. The first signal may in principle be transmitted in response to any triggering event. By way of example, the first signal may be transmitted when it has been detected that the last car door has been closed and all of the doors are now closed. In this case, the first signal may be emitted for example only when all of the doors are closed and it is detected at the same time that there is no key in the ignition lock or the vehicle key is not located inside the vehicle and that there are no people located in the vehicle. Any other triggering events are possible.
The first signal may in this case be transmitted in such a way that its range is greater than the range of the request signals, such that the transponder unit 30 is able to receive the first signal even if it is no longer located within the reception zone Z1. This process is illustrated by way of example in the sequence diagram in
The transponder unit 30 may be arranged for example in a portable electronic device. The portable electronic device may be for example a mobile telephone, in particular a smartphone, a tablet, laptop or any other portable electronic device that the user may carry. In particular smartphones, but also other electronic devices, are nowadays carried by most users in addition to the vehicle key. Such portable electronic devices generally have a multiplicity of different sensors, for example motion sensors, direction sensors or pressure sensors. The electronic devices may additionally perform various functions, such as for example location determination by way of GPS (Global Positioning System) or location determination by way of wireless networks (Wi-Fi localization). In the case of Wi-Fi localization, the location of the electronic device is determined on the basis of propagation patterns of wireless networks. The current location and the current movement of such electronic devices are therefore nowadays usually easy to determine. Portable electronic devices are also increasingly replacing the vehicle keys known to date. This means that a user no longer additionally has to carry the vehicle key if for example his smartphone assumes this function.
However, it is also possible for the transponder unit 30 to be arranged in a vehicle key and for the vehicle key to have components that allow position determination (for example GPS).
After the vehicle position has been stored by the transponder unit 30, the transponder unit 30 determines its own current position at regular intervals. On the basis of the current position of the transponder unit 30, it is possible to determine whether it is located within or outside the first zone ZI. The transponder unit 30 knows the location of the vehicle and the size and shape of the first zone ZI, such that it is easily able to establish whether it is located within or outside the first zone ZI. These processes are illustrated by way of example in the sequence diagram in
As long as the transponder unit 30 is still detected within the first zone ZI after the vehicle 10 has been locked (or another triggering event), the transmission unit 20 remains active. That is to say, it emits request signals at regular intervals. This regular emission of request signals is referred to hereinafter as polling. However, if it is detected that the transponder unit 30 leaves the first zone ZI and is therefore now located in the second zone ZA, the transponder unit 30 deactivates the transmission unit 20. For this purpose, the transponder unit 30 may transmit a corresponding deactivation signal (switch off polling) to the transmission unit 20. Upon receiving a deactivation signal, the polling is deactivated, that is to say the transmission unit 20 no longer emits any request signals. At the same time, the transponder unit 30 may deactivate various components in order to reduce its own power consumption, since the transponder unit knows that no request signals are expected.
If the user approaches the vehicle 10 again, the transponder unit 30 leaves the second zone ZA at a particular time and enters the first zone ZI. The transponder unit 30 thus detects that it is again located in the first zone ZI and transmits an activation signal (allow polling) to the transmission unit 20. As soon as the transmission unit 20 receives an activation signal, the polling is reactivated and the transmission unit 20 emits request signals at regular intervals. At the same time, the transponder unit 30 may also reactivate all of the components such that request signals are able to be received and processed again. If the transponder unit 30 approaches the vehicle 10 even further, it ultimately also re-enters the reception zone Z1 and is able to receive the request signals, and the vehicle 10 may be unlocked. As an alternative, the user may also actuate a button on the vehicle key. If the user is located in the vicinity of the vehicle 10, the vehicle 10 may also be unlocked by this active actuation of a button.
When the vehicle 10 is unlocked, the transmission unit 20 may transmit a second signal to the transponder unit 30. Unlocking the vehicle 10 is however in this case just an example. The second signal may in principle be transmitted in response to any triggering event. A further example of a triggering event is the detection that a user is gripping the door handle. Any other triggering events are possible. The transponder unit 30 may be informed of the triggering event for example by way of the second signal. If the transponder unit 30 receives this second signal, it stops determining its own position. As long as the vehicle 10 is unlocked, the transponder unit 30 may assume that it is located within the first zone ZI.
The zones ZI, ZA have been described as fixed (unchanging) zones in the examples described above. That is to say, the zones are defined and the same at all times. By way of example, the zones may be defined by the manufacturer of the vehicle 10 or by the user. However, it is also possible for the zones ZI, ZA to be variable and to adapt dynamically to a situation. That is to say, the shape of the first zone ZI and the distance from the boundary to the vehicle 10 may depend on certain parameters and may thereby adapt to current circumstances. If the transponder unit 30 establishes for example that the position determination is inaccurate, for example poor GPS satellite reception, the first zone ZI may be expanded. That is to say, the transmission unit 20 is deactivated later, or activated earlier. By way of example, in such cases, the first zone ZI may have a radius of more than 50 meters or more than 100 meters.
According to a further example, the transponder unit 30 may establish, on the basis of the current position of the vehicle 10 at the time when the vehicle 10 is locked or at the time of the triggering event, that the user is at home. That is to say, the vehicle 10 is parked in front of the house or in the garage. In this case, the first zone ZI may for example be smaller. That is to say, it may for example have a radius of less than 20 meters, less than 15 meters or less than 10 meters. As a result, what are known as “house door relay attacks”, in which a vehicle 10 that has been parked in front of the user's house is stolen by unauthorized people, are able to be prevented more reliably. If the vehicle 10 is recognized for example as being located in a parking lot at the time of locking, the first zone ZI may comprise the entire interior of the parking lot. That is to say, in this case the transmission unit 20 would emit request signals as long as the user is located within the parking lot. If the user leaves the parking lot, and thus the first zone ZI, request signals are no longer transmitted. Many other situations in which the size and shape of the first zone may be adjusted are conceivable.
Furthermore, different zones may in each case be used in the deactivation of the transmission unit 20 and the activation of the transmission unit 20. This is illustrated by way of example in
An adjusted first zone ZI′ is not illustrated in the example illustrated in
Different (adjusted) zones ZI, ZI′ may for example be created by using different radio frequencies or communication connections. By way of example, the deactivation signal may be transmitted at a first frequency and the activation signal at a second frequency. By way of example, the communication for deactivating the transmission unit 20 (deactivation signal) may take place by way of LF signals, whereas the communication for activating the transmission unit 20 (activation signal) takes place by way of Bluetooth or Bluetooth Low Energy (BLE).
Bluetooth is an internationally standardized data interface. Bluetooth may be used to interchange data or files between two devices or to transmit music and voice, for example. Bluetooth devices in this case transmit at a frequency of 2.4 GHz and allow data transmission at a short range of normally less than 50 m. At present, various Bluetooth standards are known, for example Bluetooth 1.0 and 1.0B 1999, Bluetooth 2.0+EDR 2004 or Blue-tooth 4.0 2009. The standard according to which the transponder unit 30 and the transmission unit 20 communicate with one another is in this case not important in the present invention. In order to allow communication, however, it is generally a requirement for two Bluetooth-compatible devices between which a connection is to be set up to communicate using the same standard. Some of the standards are however also compatible with one another.
Bluetooth devices generally consume a relatively large amount of power. The power consumption is however usually critical especially in vehicles or the associated transponder units (vehicle keys), as described above. Therefore, what are known as Bluetooth Low Energy (BLE) devices are found increasingly frequently in vehicles and external devices and transponder units. Bluetooth Low Energy is often also referred to as Bluetooth Smart. BLE is based on conventional Bluetooth technology, but has significantly lower power consumption and is generally less expensive. When using BLE devices in a transponder unit 30, the battery of the transponder unit 30 (or of the vehicle key or portable electronic device) is thus loaded less than with conventional Bluetooth devices.
LF signals and Bluetooth or Bluetooth Low Energy are however just examples. Various other communication connections and corresponding frequencies may be used to implement the (adjusted) zones ZI, ZI′. Further examples of communication connections are RF signals (also referred to as radiofrequency, HF), Internet connections, connections via a cloud, or the like.
It has been assumed in the examples described above that in each case only one transponder unit 30 is located in the vicinity of the vehicle 10. In principle, however, a vehicle 10 usually has several valid vehicle keys and thus transponder units 30. By way of example, a married couple may have joint use of the vehicle 10. Each of the two spouses may in this case carry a vehicle key (transponder unit 30). If both drive together with the vehicle 10, the transmission unit 20 may for example be deactivated only when both transponder units 30 have left the first zone ZI. Since both transponder units 30 each transmit corresponding deactivation signals and activation signals when they leave or enter the first zone ZI, the transmission unit 20 always knows how many transponder units 30 are currently located within the first zone ZI. The transmission unit 20 is in this case activated as soon as a transponder unit 30 is located within the first zone ZI and has emitted an activation signal to the transmission unit 20. If further transponder units 30 enter the first zone ZI, nothing happens. Although these each likewise emit an activation signal, they are ignored by the transmission unit 20 since it is already activated.
The transmission unit may in principle also be deactivated (transmit the deactivation signal) in response to any triggering event. The triggering event may in this case be that the transponder unit 30 leaves the first zone ZI (and the adjusted first zone ZI′). The deactivation signal could furthermore also be emitted for example when the transponder unit 30 is located outside the reception zone Z1 but within the first zone ZI, and it is detected at the same time that the transponder unit 30 is no longer moving. A duration may for example be defined. If the transponder unit 30 has not moved for at least this duration, the transmission unit 20 may be deactivated. The transmission unit 20 may be reactivated when movement of the transponder unit 30 has been detected again. This may for example be detected by way of appropriate sensors, for example motion sensors. A further possibility is to deactivate the transmission unit 20 if the transponder unit 30 is still located within the reception zone Z1 but the connection to the vehicle 10 breaks off, for example if there is a wall between the vehicle 10 and the transponder unit 30. Any combination of said triggering events is likewise possible. Any other triggering events and combinations of events that are not described are additionally also possible.
In a preceding step, a first signal may optionally be emitted from the transmission unit 20 to the transponder unit 30 (step 701). The current position of the object 10 may be stored and the position of the transponder unit 30 may be determined at regular intervals when the first signal has been received by the transponder unit 30 and said transponder unit has thus been informed about the triggering event.
The invention has been described using the example of a vehicle 10. The invention may however be used not only in vehicles 10 but in any kind of object (for example front doors, garage doors, etc.) that are able to be locked or unlocked by way of a transponder unit 30. A vehicle 10 may for example be a passenger vehicle. A vehicle 10 may however also for example be a truck, bus, tractor, aircraft, boat or the like.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10 2017 217 978.3 | Oct 2017 | DE | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/EP2018/077566 | 10/10/2018 | WO | 00 |
