Classifications

• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B60—VEHICLES IN GENERAL
  • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
  • B60R25/00—Fittings or systems for preventing or indicating unauthorised use or theft of vehicles
  • B60R25/20—Means to switch the anti-theft system on or off
  • B60R25/24—Means to switch the anti-theft system on or off using electronic identifiers containing a code not memorised by the user
• • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
  • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
  • F02N—STARTING OF COMBUSTION ENGINES; STARTING AIDS FOR SUCH ENGINES, NOT OTHERWISE PROVIDED FOR
  • F02N11/00—Starting of engines by means of electric motors
  • F02N11/08—Circuits specially adapted for starting of engines
  • F02N11/0803—Circuits specially adapted for starting of engines characterised by means for initiating engine start or stop
  • F02N11/0807—Remote means
• • G—PHYSICS
  • G05—CONTROLLING; REGULATING
  • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
  • G05B15/00—Systems controlled by a computer
  • G05B15/02—Systems controlled by a computer electric
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B60—VEHICLES IN GENERAL
  • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
  • B60R2325/00—Indexing scheme relating to vehicle anti-theft devices
  • B60R2325/10—Communication protocols, communication systems of vehicle anti-theft devices
  • B60R2325/101—Bluetooth
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B60—VEHICLES IN GENERAL
  • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
  • B60R2325/00—Indexing scheme relating to vehicle anti-theft devices
  • B60R2325/20—Communication devices for vehicle anti-theft devices
  • B60R2325/205—Mobile phones
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
  • G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
  • G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
  • G07C2009/00793—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means by Hertzian waves
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
  • G07C2209/60—Indexing scheme relating to groups G07C9/00174 - G07C9/00944
  • G07C2209/63—Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
  • G07C2209/65—Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle using means for sensing the user's hand
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Definitions

• the present invention relates generally to the control of functionalities of a motor vehicle by means of a mobile terminal.
• It relates more particularly to a method for controlling access to at least one functionality of a motor vehicle, comprising:
• an authorization step in which, when the interaction is detected by the electronic control unit and the electronic control unit has verified that the user is authorized to access said functionality, the electronic unit command authorizes access to said functionality.
• the invention applies particularly advantageously in the case where the controlled functionality is the unlocking of the doors of the vehicle or the starting of the vehicle.
• the request for access to the functionalities of the motor vehicle is then initiated by a user action, for example by pressing a button on the magnetic card or by touching one of the door handles of the motor vehicle.
• the solution is to start a magnetic card detection operation, using a low frequency technology.
• the interest of this Low frequency technology is that it can detect the magnetic card only if the latter is in the immediate vicinity of the vehicle (its range is less than two meters).
• Another advantage of this technology is that it allows to locate the magnetic card holder inside or outside the vehicle.
• the present invention proposes to allow access to the functionalities of the vehicle to a person equipped with a mobile terminal devoid of low-frequency communication means, without affecting the safety of access to the vehicle.
• said verification step comprises the sending by said electronic control unit of an interrogation message on a mobile terminal carried by the user or by a person accompanying the user, and
• said authorization step is implemented only if the electronic control unit receives from the mobile terminal, in response to the interrogation message, a validation message of the access right.
• the mobile terminal does not necessarily include means for the motor vehicle to verify that the mobile terminal is in the immediate vicinity of the vehicle.
• a step of authentication of the mobile terminal by the electronic control unit during which the electronic control unit interrogates the mobile terminal to verify that the terminal mobile carrier of a virtual key access to the motor vehicle and / or to verify that the mobile terminal is registered in the electronic control unit as entitled to access the motor vehicle;
• the mobile terminal is considered at short or medium distance from the motor vehicle when the electronic control unit detects the mobile terminal via a communication means which is adapted to communicate with the mobile terminal according to a protocol of medium or short-range communication;
• the interrogation message and the validation message are exchanged between the mobile terminal and the electronic control unit via communication means adapted to communicate together according to a medium or short-range communication protocol;
• the electronic control unit detects the input of the mobile terminal in an area close to the motor vehicle in which the mobile terminal and the electronic control unit are adapted to communicate together via means communication using a medium or short-range communication protocol;
• said communication protocol is Bluetooth
• the electronic control unit detects a support exerted by the user on a part of the motor vehicle; - Upon receipt of the interrogation message, the mobile terminal emits a sound or generates a vibration perceptible by said user or said person accompanying the user;
• said authorization step comprises the transmission by said electronic control unit of a door unlocking signal or a vehicle starting signal;
• said mobile terminal being a mobile telephone equipped with a display screen
• said interrogation message is directly transmitted by the electronic control unit to the mobile telephone so that a message displays on the display screen of the mobile phone
• said validation message is directly transmitted by the mobile phone to the electronic control unit
• said mobile terminal being a mobile watch equipped with a display screen
• said interrogation message is directly transmitted by the electronic control unit to the mobile watch so that a message is displayed on the display screen of the mobile watch
• said validation message is directly transmitted by the mobile watch to the electronic control unit
• said mobile terminal being a mobile telephone adapted to communicate with a connected watch equipped with a display screen, during said verification step, said interrogation message is transmitted by the electronic control unit to said connected watch via the mobile phone such that a message is displayed on the display screen of the connected watch;
• said validation message is directly transmitted by the watch connected to the electronic control unit;
• said validation message is transmitted by the watch connected to the electronic control unit via the mobile telephone.
• FIG. 1 represents an exemplary context in which the invention may be implemented, comprising a motor vehicle and a mobile terminal;
• FIG. 2 schematically shows components useful for understanding the invention, the motor vehicle and the mobile terminal of Figure 1;
• FIG. 3 shows the main steps of a control method according to the invention.
• FIG. 1 represents an example of context in which the invention can be implemented.
• a motor vehicle 10 comprises an electronic control unit 11 (or ECU for "Electronic Control Unit") which is adapted to control the functions of the motor vehicle 10 and which can communicate via a wireless link, with a mobile terminal 20.
• ECU Electronic Control Unit
• It may be a mobile phone (or cell phone), preferably of the "smart phone” or “smartphone” type according to the commonly used English name, or it could also be a connected watch (associated with a mobile phone), a mobile watch (which can communicate with other devices independently of any mobile phone), a pair of glasses connected ...
• the electronic control unit 1 1 is adapted to communicate with this mobile terminal 20 in order to exchange data, for example with a view to controlling the functionalities of the motor vehicle 10 by means of the mobile terminal 20 (such a function that can be example the unlocking of the doors of the motor vehicle 10 or the starting of the motor vehicle engine 10), as explained below.
• the wireless link used to communicate between the electronic control unit 11 and the mobile terminal 20 operates according to a technology other than low frequency. It therefore does not allow the electronic control unit 1 1 to precisely determine the distance between the motor vehicle 10 and the mobile terminal 20.
• the wireless link used could be of any other type. It could for example use a WIFI protocol (typically a protocol governed by the standards of the IEEE 802.1 1 group) or a 3G or 4G type mobile telephony protocol. However, here and preferably, the wireless link used to communicate between the electronic control unit 11 and the mobile terminal 20 is ultra-high frequency. It is more precisely here a connection type Bluetooth.
• FIG. 2 schematically represents components useful for understanding the invention of the motor vehicle 10 and the mobile terminal 20.
• the motor vehicle 10 includes the electronic control unit 1 1 already mentioned, an actuator 15 (designed here to allow the unlocking of the doors of the motor vehicle 10), a wireless communication module 16 and a user interface 18.
• the electronic control unit 11 comprises a processor 12 and a storage unit 14, for example a rewritable non-volatile memory or a hard disk.
• the storage unit 14 stores in particular computer programs comprising instructions whose execution by the processor 12 allows the implementation by the electronic control unit 11 of the processes described below.
• the storage unit 14 also stores data used in the context of the methods described below, in particular a root key (or master key) VK 0 and a cryptographic function, denoted by f hereinafter, used as it will be. explained in the following.
• the root key VK 0 and the cryptographic function f are for example written in the storage unit 14 during the manufacture of the electronic control unit 1 1, before mounting of this electronic control unit 1 1 in the motor vehicle 10 .
• the mobile terminal 20 here formed by a mobile phone, comprises a processor 22, a memory 24 (for example a rewritable non-volatile memory), a wireless communication module 26, a communication module 28 on the mobile telephone network and a user interface 29.
• the wireless communication module 26 of the mobile terminal 20 enables to establish a wireless link (here Bluetooth type as already indicated) with the wireless communication module 16 of the motor vehicle 10 through which the processor 12 of the electronic control unit 1 1 and the processor 22 of the mobile terminal 20 can exchange data, especially as discussed below.
• a wireless link here Bluetooth type as already indicated
• the memory 24 stores applications comprising instructions whose execution by the processor 22 allows the implementation by the mobile terminal 20 of the method described below.
• the memory 24 also stores data used in the context of the method described below.
• the user interface 29 is here formed by a touch screen on which the user can classically enter information or press buttons. It could alternatively be presented differently (for example in the form of a keyboard associated with a screen).
• FIG. 3 presents the main steps of a method of controlling access to at least one functionality of the motor vehicle 10, using the mobile terminal 20.
• the person who wishes to access the functionality of the motor vehicle is a separate person from the holder of the mobile terminal, in which case this person must be authorized by the holder of the mobile terminal to access the functionality of the motor vehicle.
• the mobile terminal 20 has been specifically prepared for the control of functionalities of the motor vehicle 10.
• the mobile terminal 20 comprises a physical security element (SIM card, eSE module 7) in which are stored the cryptographic function f and a virtual key VK access to the motor vehicle 10.
• SIM card physical security element
• eSE module a physical security element in which are stored the cryptographic function f and a virtual key VK access to the motor vehicle 10.
• the mobile terminal 20 embeds in its memory 24 of the public DP derivation parameters, as well as a user application.
• the public DP derivation parameters are those that calculate the virtual key VK from the root key VK 0 .
• the user application is in turn designed to allow the user to communicate with the electronic control unit 1 1, as will be described later in this presentation.
• the method of controlling access to the functionality of the motor vehicle comprises three main stages, including:
• these three steps are implemented according to this chronology.
• the IM, VM message exchange between the electronic control unit 1 1 and the mobile terminal 20 allows the motor vehicle 10 to make sure, when it detects an interaction with a person, that the user wishes to unlock the vehicle doors.
• the electronic control unit 1 1 sends on its mobile terminal 20 a message that it must validate so that the door unlocks.
• the electronic control unit 1 1 sends or tries to send to the mobile terminal 20 of the owner of the vehicle a message that the latter does not valid, so that the door remains locked.
• the exchange of messages can be done using various means of communication.
• the protocol used is of the Bluetooth type.
• step E2 represents the above-mentioned action step, that is to say the step during which the electronic control unit 11 detects an interaction with the user U.
• Step E1 represents the interaction caused by the user
• this interaction can take various forms.
• this interaction is constituted when the user
• U touches a part of the motor vehicle 10, for example a handle of the vehicle which is for this purpose equipped with a detector connected to the electronic control unit 1 1.
• this interaction could be provided when the user U, equipped with his mobile terminal 20, enters a zone sufficiently close to the motor vehicle 10 so that the electronic control unit 11 detects and can establish a communication with the mobile terminal 20 by Bluetooth connection (in this case, step E3 described below will not be implemented).
• step E2 the electronic control unit 11 detects this interaction.
• the electronic control unit 1 1 Before sending a message to the mobile terminal 20 of the user, the electronic control unit 1 1 here will carry out various preliminary tests, which are not mandatory in the context of the present invention, but whose implementation It is preferable to secure the access to the motor vehicle 10.
• step E3 for monitoring the presence of the mobile terminal 20 at short or medium distance from the motor vehicle 10.
• This step will prevent the sending of an IM interrogation message if the electronic control unit 1 1 does not detect the mobile terminal 20.
• the electronic control unit 1 1 tries to establish a Bluetooth connection with the mobile terminal 20.
• this type of link has a short range (less than 10 meters) or average (less than 100 meters) depending on the Bluetooth technology used.
• a known mobile terminal is a terminal whose Bluetooth profile (for example its identifier
• Bluetooth is already known and stored in the storage unit 14 of the electronic control unit 11.
• the electronic control unit 1 1 considers that the user U is close to the motor vehicle 10, so that the process continues.
• the mobile terminal 20 takes advantage of this Bluetooth link to transmit to the electronic control unit 1 1 the DP derivation parameters (it is recalled that these derivation parameters allow calculate the virtual key VK from the root key VK 0 stored in the storage unit 14 of the electronic control unit 1 1).
• An authentication operation of the mobile terminal 20 is then provided by the electronic control unit 11, during which the electronic control unit 11 will interrogate the mobile terminal 20 to verify that the latter has a right to access the mobile terminal 20. access to the motor vehicle 10.
• This authentication operation could consist of checking that the profile
• Bluetooth of the mobile terminal 20 is already known and stored in the storage unit 14 of the electronic control unit 11. This authentication operation could therefore be performed concomitantly with the previous step E3.
• this authentication operation is distinct from the previous step E3. It is then formed of a plurality of stages E5 to E14, to verify that the mobile terminal 20 is carrying a virtual key VK access to the motor vehicle 10. These steps are as follows.
• the first step E5 consists, for the electronic control unit 1 1, to generate a challenge (in English "challenge"), for example a random number RND.
• the electronic control unit 1 1 then calculates a response RESP associated with this challenge RND by application of the cryptographic function f using the virtual key VK (step E6), which can be written:
• RESP f (RND, VK).
• the electronic control unit 1 1 having in memory the root key VK 0 and having received the DP derivation parameters, it is adapted to calculate previously the virtual key VK.
• the electronic control unit 1 1 of the motor vehicle then issues the RND challenge to the mobile terminal 20, through the established Bluetooth connection (step E7).
• the mobile terminal 20 receives the RND challenge (step E8), then calculates in turn the expected answer RESP 'by application to the RND challenge received from the cryptographic function f (step E9), which can be written:
• RESP ' f (RND, VK).
• the mobile terminal 20 sends the electronic control unit 11 this expected response RESP ', thanks to the Bluetooth connection.
• the electronic control unit 1 1 of the motor vehicle 10 then receives this expected response RESP '(step E1 1) and compares it with the response RESP, verifying whether these two responses are equal (step E12).
• step E13 the electronic control unit 11 terminates the authentication process (step E13). This means that the virtual key VK used by the mobile terminal 20 differs from that used by the electronic control unit 11. An error message may then for example be displayed on the screen of the mobile terminal 20.
• the electronic control unit 1 1 validates the authentication of the mobile terminal 20 (step E14), so that the control method can continue.
• step E15 the electronic control unit 11 sends the IM interrogation message to the mobile terminal 20, so that a message can be displayed on the touch screen 29 of the mobile terminal 20 (step E16).
• This interrogation message IM will be developed in such a way that it can be interpreted by the user application stored in the memory 24 of the mobile terminal 20 so that this user application controls the display, on the touch screen 29, of a popup window (or "pop-up” in English) or a Notification (information appearing as an icon in the notification bar).
• the user application will be programmed so that this pop-up window or notification makes appear, on the one hand, a message asking the user if he wishes to unlock the doors of his vehicle, and on the other hand, two buttons allowing him to to accept or refuse.
• the "Notification” may appear buttons asking the user, the function he wants to perform (eg: unlocking doors, unlocking the trunk, activation of the alarm ).
• the user application will also control, upon receipt of the IM interrogation message, the emission of a sound or a vibration perceptible by the user, to attract the attention of the latter.
• a response message is sent by the mobile terminal 20 to the electronic control unit 1 1, again by Bluetooth link (step E18) .
• This response message will be developed in such a way that it can be interpreted by the electronic control unit 1 1 as a validation message VM if the user has validated the request, or as an invalidation message in the opposite case. .
• the electronic control unit 11 treats it as follows.
• step E20 If it is a VM validation message, it transmits to the actuator 15 a door unlock signal (step E20).
• step E21 if it is an invalidation message, the process is interrupted (step E21).
• the electronic control unit 11 If, after a predetermined duration (for example 10 seconds), the electronic control unit 11 has not received a response message from the mobile terminal 20, it also interrupts the process. As a variant, it will be possible for it to try to transmit an interrogation message to the mobile terminal 20.
• a predetermined duration for example 10 seconds
• the present invention is not limited to the embodiment described and shown.
• the user must act differently to validate the polling message received on his mobile terminal. For example, he can validate this message simply by unlocking his mobile terminal or by drawing with his finger a predetermined shape on the screen of his mobile terminal (which will prevent a person having stolen the mobile terminal can not validate the message).
• the protocol used is long-range, so that it does not allow to implement step E3 which consists in checking that the mobile terminal is in the vicinity of the motor vehicle.
• step E3 it is then necessary to use other means equipping the mobile terminal, for example its GPS chip if equipped.
• the functionality of the motor vehicle for which it is desired to control access may be the starting of the engine of the motor vehicle.
• the action step may consist, for the user, in pressing a starter button of the motor vehicle.
• the other steps will however be identical to those described above.
• This variant will be particularly advantageous in the case where it will apply to a cabriolet type vehicle (or “convertible").
• the mobile terminal was therefore a mobile phone equipped with a display screen.
• the IM interrogation message was then directly transmitted by the electronic control unit 1 1 to the mobile phone so that a message is displayed on the display screen of the mobile phone, and the validation message VM was directly transmitted by the mobile phone to the electronic control unit 1 1, via a Bluetooth link.
• the mobile terminal is a mobile watch equipped with a display screen.
• mobile watch is meant a watch which is adapted to communicate with other devices (especially with the electronic control unit 1 1), independently of a mobile phone, for example via a Bluetooth connection.
• the interrogation message IM can be directly transmitted by the electronic control unit 1 1 to the mobile watch and the validation message VM can be directly transmitted by the mobile watch to the electronic control unit 1 1.
• the mobile terminal is a mobile phone adapted to communicate with a connected watch worn by the wearer of the mobile phone.
• Connected watch means a watch which is adapted to communicate with the mobile phone and which, in order to communicate with other devices (in particular with the electronic control unit 11), must necessarily establish, at least for a moment, a gateway through on the mobile phone.
• the IM interrogation message may be transmitted by the electronic control unit 1 1 to the watch connected via the mobile phone.
• the validation message VM may, however, either be directly transmitted by the watch connected to the electronic control unit 1 1, or be transmitted to it via the mobile phone.

Landscapes

• Engineering & Computer Science (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Mechanical Engineering (AREA)
• Computer Networks & Wireless Communication (AREA)
• General Engineering & Computer Science (AREA)
• Chemical & Material Sciences (AREA)
• Combustion & Propulsion (AREA)
• Automation & Control Theory (AREA)
• Lock And Its Accessories (AREA)
• Selective Calling Equipment (AREA)
• Telephonic Communication Services (AREA)
• Electric Propulsion And Braking For Vehicles (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=53298412

Family Applications (1)

Country Status (6)

Families Citing this family (10)

Family Cites Families (40)

• 2014
  • 2014-12-23 FR FR1402999A patent/FR3030850B1/fr active Active
• 2015
  • 2015-12-22 WO PCT/FR2015/053721 patent/WO2016102889A1/fr not_active Ceased
  • 2015-12-22 CN CN201580070011.XA patent/CN107251107A/zh active Pending
  • 2015-12-22 JP JP2017533890A patent/JP6768665B2/ja active Active
  • 2015-12-22 CN CN202211011852.1A patent/CN115439959B/zh active Active
  • 2015-12-22 EP EP15823703.2A patent/EP3266003A1/fr not_active Withdrawn
  • 2015-12-22 US US15/532,393 patent/US10479320B2/en active Active

Also Published As

Similar Documents

Legal Events