AU670828B2

AU670828B2 - Safety device

Info

Publication number: AU670828B2
Application number: AU51065/93A
Authority: AU
Inventors: Janis Eglinsch-Veglinsch; Rodney Phillip Linton; Wolfgang Matuschek
Original assignee: Robert Bosch GmbH
Current assignee: Robert Bosch GmbH
Priority date: 1992-10-08
Filing date: 1993-10-08
Publication date: 1996-08-01
Anticipated expiration: 2013-10-08
Also published as: AU5106593A

Description

OPI DATE 09/05/94 AOCJP DATE 21/07/94 APPLN. ID 51065/93liiIIIII111HI111 PCT NUMBER PCT/DE93/00953 IlI 11 ii AU935 1065 (51) Internationale Paten tkl ass ifikation 5 (11) Internationale Verdffentlichungsnumnnir: WO 94/08823 25/04 Al (43) Internationales Ver~ffentlichungsdatuni: 28. April 1994 (28,04.94) (21) Internationales Aktenzeichen: PCT/DE93/00953 (81) Bestimniungsstaaten: AU, BR, JP, KR, US, europiisches Patent (AT, B E, CRH, D E, D K, ES, FR, G B, GOR, I E, IT, (22) Intcrnationales Anmeldedatum: 8. Oktober 1993 (08.10.93) LU, MC, NL, PT, SE).

Prioritatsdaten: Ver~ffentlicht 159 8. Oktober 1992 (08.10.92) AU Mit internationalem Rccherchenberichi.

Vor Ablauf derffir Anderungen der Anspriiche zugelasseuzet Frist. Plerbfjentliclung ivird wviederholt falls A4nderun- (7 1) Anmelder (fair alle Bestirnmungsslaalen ausser US): RO- gen elntreffen.

BERT BOSCH GMBH [DE/DE]; Postfach 30 02 20, D- 70442 Stuttgart (DE).

(72) Erfinder; und Ert'inder/Anmelder (nurfiir US) LINTON, Rodney, Phillip EGLINSCH-VEGLINSCH, Janis [AU/AU]; 26 The Boulevard, Ivanhoe, VIC 3079 MATU- SCHEK, Wolfgang [DE/AU]; 12 Manhatten Court, Patterson Lakes, VIC 3197 (AU).

(54) Title: SAFETY DEVICE (54) Bezeichnung: SICHERHEITSEINRICHTUNG (57) Abstract A safety device, suitable in particular for motor vehicles, has an electronic control unit (10) for controlling the functions of a device to be n safeguarded, at least two sensors (U 1 for detecting certain states of operation of the device to be safeguarded, and a circuit (42) to which the output signals of the sensors (U 1

U

2 are supplied. The circuit (42) exchanges data with the electronic control unit (10) in order to control its readiness for service. The output signals of the sensors (U 1 influence the data exchange according to the detected state of operation in such a way that the electronic control unit (10) is ready for service only in a predetern.ined state of operation of the device to be safeguarded. For that purpose, the circuit (42) includes a storage (44) in which at least one predetermined code is recorded. The electronic control unit (10) is only ready for service when it actually receives from the circuit (42) at least one predetermined code it requested from the storage (44) of the circuit (42).

(57) Zusammenfassung Vorgeschlagen wird eine Sicherheitseinrichtung, welche besonders; for Kraftfahrzeuge geeignet ist. Sie umfa~t eine elektronische Steuereinheit (10) zur Steuerung der Funktionen einer zu sichernden Vorrichtung, wenigstens zwei Sensoren (U I, U 2 zur Erfassung bestimmter Betriebszustiinde der zu sichernden Vorrichitung, sowvie einerl Schaltkreis dem die Ausgangssignale der Sensoren (U 1 zugeftlhrt sind. Der Schaltkreis (42) fifhrt mit der elektronischen Steuereinheit (10) einen Datenaustausch, um deren Betriebsbereitschaft zu steuern, wobei die Ausgangssignale der Sensoren (U 1

U

2 den Datenaustausch entsprechend demn erfa~ten Betriebszustand derart beeinflussen, clag. die elektronische Steuereinheit (10) nur in einem vorgegebenen Betriebszustand der zu sichernden Vorrichtung betriebsbereit ist. Hierzu weist der Schaltkreis (42) einen Speicher (44) auf, in welchem wenigstens emn vorbestimmter Code abgelegt. Die elektronische Steuereinheit (10) is'. nur dann betriebsbereit, wenn sie nach Anforderung wenigstens eines vorbestimmten Codes aus dem Speicher (44) des Schaltkreises (42) diesen von demn Schaltkreis (42) auch erhfilt.

I

-1- Security device Prior Art The present invention relates to a security device, in particular for use in motor vehicles.

Security devices for motor vehicles usually contain both mechanical and electrical apparatuses. Mechanical apparatuses are generally based on blocking the steering wheel in that a lock which is to be actuated by means of a key prevents the said key from rotating. An electronic apparatus of this kind is known for example from the Australian application No. 68203/90 whose subject matter is included in the present application. In this application, an electrical apparatus is disclosed which permits electronic immobilization, for example by blocking the injection system.

The major part of the previously customary electronic devices for immobilizing vehicles is realized as a simple on/off type which can be bypassed 00 relatively easily, if necessary using suitable resources. This takes place in a simple way in that the ignition contact is shortcircuited.

The object of the present invention is to specify a security device which is not based on a simple switch-on/switch-off principle and which can only be bypassed with difficulty.

The invention provides a security device, preferably for motor vehicles, having an electronic control unit for controlling the functions of an apparatus to be protected, a mechanical device acting on the electronic control unit for actuating the apparatus to be protected, at least two sensors to detect ZZ" 31/5/96LP8167.PG,, laspecific local positions of the mechanical device, a circuit to which output signals of said sensors are fed, said circuit having a memory in which at least one predetermined code is stored, wherein said electronic control unit carries out an exchange of data with said circuit in order to control its operational capability to check said at least one predetermined code in said memory, and wherein it is only possible for the apparatus to be protected to be made operative by the exchange of data if the output signals of the sensors fed to said circuit correspond to a prescribed local position of the mechanical device.

Advantageously, the security device according to the invention has an electronic control unit for controlling the operation of an apparatus to be protected, a plurality of sensors for detecting specific operating parameters of o" the apparatus to be protected and a safety circuit which is connected to the sensors and is influenced by them. When starting up occurs, the electronic control unit tests the security circuit and controls the operation of the apparatus :1 to be protected as a function of the result of this test.

Advantageously, the security circuit and the 31/5/96LI'8167.1'0,l _I _1 2 electronic control unit each have a memory in which identical security codes are stored. During the testing of the security circuit; at least one code is transmitted from its memory to the electronic control unit. If one of the sensors determines that an operating parameter has assumed an unacceptable value, the transmission of the codes is scrambled or terminated.

In a preferred embodiment, the sensors monitor the axial and/or the angular position of the shaft of a motor vehicle steering lock.

An exemplary embodiment of the proposed security device is explained in greater detail below with reference to the drawing.

Drawing Figure 1 shows a view of the design of the proposed security device in use in a motor vehicle.

Figures 2 to 5 show different operating states of a security device arranged on a steering lock of a motor vehicle in each case in cross-section and in plan view, Figure 6 shows a table of the possible operating states.

In Figure 1, the reference number 10 designates an electronic control unit which in the application in a motor vehicle, as assumed here, serves for example to control an engine starter relay 18 and/or an engine control device 12 which itself monitors in particular the ignition and the gasoline supply of the engine 17.

Expediently, in order to avoid a large number of circuits which would otherwise be required it consists essentially of one microprocessor.

An electronic circuit 42 which is arranged in the base 22 of an ignition lock housing 24 is comz!acted via a data line 11 to the control unit 10. In the ignition lock housing 24 there is also a shaft 26 which is turned with the locking cylinder (not illustrated) of the ignition lock. The shaft 26 has a coupling elemei 28 which engages in a corresponding complementary coupling element on an ignition switch 32. Both coupling elements 28, 30 can be secured by a pin 34. The ignition switch 32 L I 3is located inside the base 22 and is attached by means of driver pins 36. At the shaft-side coupling element 28, a reflective vane 38 in the form of a circular disc out of which an angular segment has been cut out is arranged coaxially. Under the vane 38 there is a printed circuit board 40 on which the electronic circuit 42 is arranged.

Furthermore, on the printed circuit board 40 there are two sensors U 1 and U 2 for detecting the position of the vane 38. In the exemplary embodiment described here, the sensors U 2 are electro-optical sensors which both transmit and receive visible radiation. The sensors can however also be realized as magnetic sensors, Reed switches, ultrasonic sensors, radio frequency sensors, mechanical. switches or comparable arrangements. Each sensor U 1

U

2 has both an emitter a for transmitting light and a detector b for detecting incident light, in particular light reflected from the vane 38 and/or ambient light. The arrangement of the vane 38 and sensors Ul, U 2 is constructed such that if the vane 38 covers a sensor Ul, U 2 the radiation emitted by the emitter a of this sensor U, U 2 is reflected onto the detector b. A circuit 42 which contains a read only memory 44, expediently in the form of an electrically erasable, programable read only memory (EEPROM) is connected to the sensors U, U 2 The memory 44 can however also be a RAM, ROM, EPROM, flash memory or any other type of memory. If an EEPROM is used as memory 44, the circuit 42 only requires four external inputs or outputs since an EEPROM is a component which operates serially, the said inputs and outputs being earth, the voltage supply, chip-select counter and data input/output. The outlay on wiring with such a design is low.

As illustrated in Figures 2 and 3, the sensor U 2 is always covered by the vane 38 during normal operation.

If the vane 38 or the ignition switch 32 are removed, the sensor U 2 detects this by the absence of the signal reflected by the vane 38. The second sensor U 1 detects the position of the shaft 26 by reference to the position 'So Zx of the vane 38 connected to the said shaft 26. The L4

_I

-4position of the shaft 26 itself determines the position of the ignition switch 32 which, as indicated in Figure i, is in turn detected by the control 10 via inputs 60, 61 and 62. Usually, the ignition switch 32 can assume the positions "ignition off", input 62, "vehicle voltage on", input 61, "ignition on" and "start", input As indicated in Figure 3, in the position "ignition off" the vane 38 covers both sensor U, and sensor U 2 On the other hand, in the start/ignition position, the vane 38 is turned in such a way that the cut out segment of the vane 38 is located directly over the sensor and as a result the latter is not covered by the vane 38.

Light emitted by the sensor U 1 is correspondingly not reflected from the vane 38 in this position. The output of the sensor U 1 is connected to the "ORG" pin of the memory 44. By means of the latter, the sensor U determines whether the memory outputs 8-bit or 16-bit data.

The sensor U 2 is connected on the output side to the "ENABLE" or "CS" pin of the memory 44. According to its state, it activates or deactivates the memory 44. In the memory 44, there are for example eight codes stored in memory positions 1 to 8. The precise number and form of the codes depends on the respective requirements.

In the exemplary embodiment described, the code is designed in such a way that a different code is assigned to each vehicle. The probability that two vehicles are assigned the same code is in this case smaller than 1:16 million. In the memory 46 of the electronic control unit 10, codes identical to those arranged in the memory 44 are stored. As illustrated in Figure 1, the intention in the exemplary embodiment is that the positions 5 of both memories 44 and 46 each contain the identical code A.

The mode of operation of the security device is described below. If, during the operation or during the starting up of the apparatus to be protected, here a motor vehicle, the electronic control unit 10 detects, in the exemplary embodiment particularly by reference to the movement of the ignition switch 32 into the position 5 "ignition/start" that processing of security or diagnostic data is required, the said control unit initially transmits a serial data train via the data line 11 to the electronic circuit 42 which causes a specific contents of the memory 44 to be read out. For this purpose, such a data train typically contains a start bit, a code for initiating the read function and an address which designates the selected memory contents.

The circuit 42 interprets the serial data train and transmits back the contents, determined by it, out of the memory 44, for example the code A to the electronic control unit 10. The latter tests the code received from the circuit 42 for correctness, in particular by comparison with the identical code A stored in the memory 46. If the code sent back to the control unit 10 is not correct, starting up of the vehicle or of the apparatus to be protected is prevented. Since electrical faults may possibly occur in particular in a vehicle, it is appropriate to exchange in each case at least three different codes in this way between the circuit 42 and electronic control unit 10. If at least two of the codes interrogated in the circuit 42 by the electronic control unit are correct, the vehicle is enabled so that it can be started. If the ignition switch 32 is in the "off" position, as illustrated in Figure 2, the vane 38 covers both sensors U 1 and U 2 As represented in Figure 6, in this case via the ORG pin of the memory 44, the sensor U. has the effect that only 8-bit data, instead of 16-bit data can be transmitted. In the exemplary embodiment according to Figure 2, this means that an incorrect response code is transmitted to the control unit 10. The vehicle or the apparatus to be protected cannot be started up. If the shaft 26 is moved from the "off" position into the "start/ignition" position, the cut out circular segment of the vane 38 lies opposite the sensor U 1 In this case, the ORG pin of the memory 44 is activated in order to transmit 16-bit data. If at least two of three codes requested by the electronic control unit 10 have been transmitted correctly, the electronic control unit I- 6 enables the engine control device 12 which subsequently activates the injection system and closes the engine starter relay 18. The vehicle, or generally the apparatus to be protected, can then be started up.

If the shaft 26 is rotated incorrectly, as indicated in Figure 5, only the sensor U 1 but not the sensor U 2 is covered by the vane. As a result, the sensor

U

2 deactivates the memory 44 via the ENABLE pin. As illustrated in Figure 6, no data are transmitted to the electronic control unit and the vehicle cannot be started.

In the case of an attempt to short-circuit the vehicle, the ignition signal on the line 61 initially triggers a transmission of data via the electronic control unit 10. Since the shaft 26, and with it, the ignition switch 32 is however unchanged in the "off" position, the sensor U 1 remains covered by the vane 38, as a result of which, as illustrated in Figure 6, only 8bit data are transmitted from the circuit 42 to the electronic control unit 10. In the exemplary embodiment described here, an 8-bit data train corresponds to an incorrect code. Therefore, engine and starter functions are not enabled. If, on the other hand, the ignition switch 32 is removed, for example violently, so that the situation indicated in Figure 4 is present, both sensors U, and U 2 are exposed. Since sensor U 2 does not receive any reflected signals in this case, the transmission of data from the circuit 42 to the electronic control unit is blocked. The only possible way of exposing the sensor U. in the correct way consists in moving the vane 38 into the correct position, illustrated in Figure 3, by turning the shaft 26. Since the shaft 26 is in turn connected to the closing cylinder of the ignition lock, the correct key must be used in order to bring about rotation of the shaft 26. Since, in addition, the transmission of digital data only takes place within the security device, it is difficult for an unauthorized user to penetrate the line system of the security device in order to bypass it.

I 7 The security device described can be retrofitted easily to existing vehicles both with and without an engine control device. In addition, it is possible to integrate the security device into the engine management system.

Although the exemplary embodiment described above related to a motor vehicle, it is equally possible to use a similar security device in other applications also, for example to protect houses or industrial plant.

In addition, the underlying concept can be retained as the basis for a wide range of variations, in particular regarding the shape, the design and the arrangement of the components used.

/hT O~/

Claims

1. A security device, preferably for motor vehicles, having an electronic control unit for controlling the functions of an apparatus to be protected, a mechanical device acting on the electronic control unit for actuating the apparatus to be protected, at least two sensors to detect specific local positions of the mechanical device, a circuit to which output signals of said sensors are fed, said circuit having a memory in which at least one predetermined code is stored, wherein said electronic control unit carries out an •go° exchange of data with said circuit in order to control its operational capability to .4 :i check said at least one predetermined code in said memory, and wherein it is S only possible for the apparatus to be protected to be made operative by the exchange of data if the output signals of the sensors fed to said circuit S correspond to a prescribed local position of the mechanical device.

2. The security device as claimed in claim 1, wherein the electronic control unit is only operative if, on requesting said at least one predetermined code from the memory of the circuit, it also receives the said at least one predetermined code from the circuit.

3. The security device as claimed in claim 1, wherein, in the case of incorrect use of the apparatus to be protected, at least one of the sensors transmits a signal to the circuit, which signal has the effect that, after reception of a request for the transmission of a code from the electronic control unit, the said apparatus does not send back any code to said apparatus or sends back a scrambled code to the said apparatus. 31/5/96LI)8107.P1,8 9 M -9-

4. The security device as claimed in claim 1, wherein the operating states detected by the sensors are the local positions of the mechanical device for actuating the apparatus to be protected.

The security device as claimed in claim 4, wherein the mechanical device is the locking cylinder of a lock to be activated by means of a key.

6. The security device as claimed in claim 1, wherein one of the sensors is connected to an activation input of the memory in order to determine whether it is activated.

7. The security device as claimed in claim 1, wherein the sensors are electro-optical sensors.

8. The security device as claimed in claim 1, wherein the electronic control unit is only operative if, on requesting a prescribed number of predetermined codes from the memory of the circuit, it receives at least a OO 1 prescribed portion thereof.

9. A security device substantially as hereinbefore described with reference to the accompanying drawings. D A T E D this 31st day of May, 1996. ROBERT BOSCH GMBH By their Patent Attorneys: CALLINAN LAWRIE 3115/96LP8167.P'0,9 V7>j K 1

10 Abstract A security device which is particularly suitable for motor vehicles is proposed. It comprises an elec- tronic control unit (10) for controlling the functions of an apparatus to be protected, at least two sensors (U 1 U 2 for detecting specific operating states of the appa- ratus to be protected and a circuit (42) to which the output signals of the sensors (U l U 2 are fed. The circuit (42) carries out an exchange of data with the electronic control unit (10) in order to control its operational capability, the output signals of the sensors (Ul, U 2 influencing the exchange of data according to the detected operating state such that the electronic control unit (10) is only operative in a prescribed operating state of the apparatus to be protected. For this purpose, the circuit (42) has a memory (44) in which at least one predetermined code is stored. The electronic control unit is only operative if, on requesting at least one predetermined code from the memory (44) of the circuit it also receives the said code from the circuit (42)