EP0472528B1 - Transmission and receiving system - Google Patents

Transmission and receiving system Download PDF

Info

Publication number
EP0472528B1
EP0472528B1 EP90905435A EP90905435A EP0472528B1 EP 0472528 B1 EP0472528 B1 EP 0472528B1 EP 90905435 A EP90905435 A EP 90905435A EP 90905435 A EP90905435 A EP 90905435A EP 0472528 B1 EP0472528 B1 EP 0472528B1
Authority
EP
European Patent Office
Prior art keywords
transmitter
code
receiver
original code
receiver system
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
EP90905435A
Other languages
German (de)
French (fr)
Other versions
EP0472528A1 (en
Inventor
Anton Bachhuber
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens AG
Original Assignee
Siemens AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG filed Critical Siemens AG
Publication of EP0472528A1 publication Critical patent/EP0472528A1/en
Application granted granted Critical
Publication of EP0472528B1 publication Critical patent/EP0472528B1/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/21—Individual registration on entry or exit involving the use of a pass having a variable access code
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00182—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks
    • G07C2009/00238—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the transmittted data signal containing a code which is changed
    • G07C2009/00253—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with unidirectional data transmission between data carrier and locks the transmittted data signal containing a code which is changed dynamically, e.g. variable code - rolling code
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
    • G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
    • G07C2209/06—Involving synchronization or resynchronization between transmitter and receiver; reordering of codes

Definitions

  • the transmitter-receiver system according to the invention was developed for remote control of the central locking system of a motor vehicle and thus relates to a locking system actuated electronically or optically by means of coded signals. In principle, however, it is particularly suitable for remote controls in which a control code, which is generally difficult to copy, is transmitted from a transmitter to a receiver.
  • the invention is therefore also suitable for actuating e.g. of (garage) gates and other locking and opening devices, but also e.g. for remote-controlled starting, stopping, switching, ignition, steering etc. of basically any objects.
  • the invention relates to a problem when initializing and re-initializing the transmitter-receiver system, as soon as the code that enables the operation of the device or a corresponding code quantity is to be finally determined.
  • the specified code or the specified code quantity should be sufficiently complicated and difficult to reproduce by unauthorized persons.
  • the invention namely relates to a further development of the special transmitter-receiver system, which is defined in the preamble of claim 1 and in particular by - DE-A1-32 25 754 is known.
  • the user of the system or an authorized specialist generates and stores a master code in a largely automatically controlled dialogue between the transmitter and the receiver for the initial initialization or later for a (renewed) reinitialization.
  • the transmitter contains a random number generator, which generates a random number, in order to prepare the new code that he himself will use in the future.
  • the transmitter transmits a master code in a unidirectional manner, i.e. without a dialog running automatically bidirectionally between the transmitter and the receiver, which then in turn specifies the start code, i.e. the new code, the transmitted master code being stored in the transmitter memory or in the receiver memory becomes.
  • the manufacturer can supply related sets of transmitters (e.g. keys) and receivers with correspondingly rigid preprogramming, but this requires careful storage, as well as generally. always buying a complete set, even if e.g. only one transmitter or one receiver has to be replaced due to defects.
  • transmitters e.g. keys
  • receivers with correspondingly rigid preprogramming, but this requires careful storage, as well as generally. always buying a complete set, even if e.g. only one transmitter or one receiver has to be replaced due to defects.
  • the start code represents the fixed code that is continuously used by the authorized person to operate the device.
  • the code representing the authorization is constantly updated during operation of the transmitter-receiver system an algorithm that is also stored, so that the original code then specifies in particular that start code which represents the first code that can be used by an authorized user to operate the device.
  • the following qualifying codes are sometimes called continuation codes.
  • a change code with constantly new, never repeating continuation codes offers much greater protection against misuse of the object, for example the vehicle, than a fixed code.
  • the invention is therefore also suitable for the (re) initialization of a transmitter-receiver system with a fixed code by the authorized transmitter user.
  • it is also suitable, and particularly well, for (re) initializing a transmitter-receiver system with an alternating code, and the algorithm, according to which the code is changed, can in principle be practically arbitrary.
  • the original code can even change the algorithm according to which the code is changed to further increase the protection against misuse, for example by converting one or more bits of the original code into an add instruction of the algorithm in a multiply instruction.
  • the original code can differ in principle from the start code, for example to increase the security that no unauthorized person can easily operate the device, even if he was able to record the original code by listening.
  • the transmitter therefore contains a random generator that forms the original code in one go or in stages, or that forms a code (e.g. the start code itself), or a series of code fragments, from which only by converting / encrypting the transmitting original code is formed.
  • This master code is then transmitted - as a whole or in stages - to the recipient, whereby the recipient can immediately use this master code, or a code derived from it according to a decryption algorithm, as the start code.
  • this start code thus represents the fixed code - or, in the case of an alternating code, a first authorizing code from the set of authorizing codes - which an authorized person can use to transmit the object (e.g. motor vehicle) using a transmitter (electronic key) can.
  • FIG. 2 shows, by way of example and schematically, important components of a receiver E and a transmitter S, which a user according to FIG. 1 holds for the remote control of the receiver E installed in a motor vehicle O and thus for actuating the central locking device ST of the motor vehicle 0.
  • a logic unit calculates from such data or correlating values, e.g. a program-controlled microprocessor .mu.P, each the start code to be sent to prove the authorization or - in the case of a change code - the next continuation codes SI.
  • the receiver E mounted under the motor vehicle roof contains, among other things, a receiving element EE, for example an ultrasound microphone and / or an infrared photodiode, cf. Figure 2, so that the broadcast coded signals SI can be received.
  • a receiver memory ES is used to store data - possibly also to store bits of data representing program steps - the data stored in the receiver memory and the data stored in the transmitter memory correlating so that the receiver E authorizes or not authorizes received codes SI
  • a logic circuit for example likewise a program-controlled microprocessor ⁇ P, checks the code SI received in each case by means of the data stored in the receiver memory ES, according to which this logic circuit ⁇ P is a device ST, namely here the central vehicle locking device ST and / or eg also a motor vehicle -Intrusion alarm system ST operated or not operated depending on the test result.
  • This transmitted original code UC, and / or a code formed therefrom in the receiver E by conversion e.g. a start code SC formed by conversion is therefore stored as data - usually in an identical manner - not only in the transmitter memory SS, but also in the receiver memory ES.
  • the original code UC is transmitted unidirectionally from the transmitter S to the receiver E, that is to say without a dialog running automatically bidirectionally between the transmitter S and the receiver E.
  • the transmitter S additionally contains a random generator Z for preparing the new start code / code quantity SI to be used by himself in the future and to be accepted by the receiver in the future, which generator, by actuating at least one of the transmitter control elements SB, has one each Random number generated.
  • the user of the transmitter S can therefore operate the system in a very simple manner by means of a corresponding Activate or re-initialize transmitter control elements SB, although the technical effort, in particular for the random number generator Z, is low, and although there is no automatic dialogue between the transmitter S and the receiver E and accordingly no effort for an auxiliary receiver in the transmitter S. is required for (re) initialization;
  • the technical effort in particular for the random number generator Z
  • the transmitter S thus contains a random generator Z, which at one time as a whole - or in stages - forms the original code UC to be transmitted, or forms a (new) code or fragments of the new code from which the original code to be transmitted is only converted by conversion UC is formed.
  • This code itself generated by the random number generator Z, or a code derived therefrom in the transmitter S by conversion / encryption, is transmitted as the original code UC to the receiver E, the latter, analogously to the operation in the transmitter S, directly using this original code UC, or one of these an algorithm derived code, used as start code SC.
  • the original code UC thus formed - or the start code SC formed therefrom - is therefore based on a plurality, that is to say at least two, of fragments B which are interleaved or not interleaved and / or logically / algebraically linked or not linked, each of which is generated by the random generator Z, which in turn from eg there are eight bits each.
  • the more or less long - e.g. 64 bit long - original code UC or start code SC can be formed from any number and any length of fragments B ... by means of the random generator Z contained in the transmitter S - e.g. from 8 fragments, which in turn consist of e.g. There are 8 bits each - the security against unauthorized use of the object / vehicle can advantageously be made all the greater, the more complicated, i.e. also the longer, the original code UC to be transmitted and the start code SC correlating to it, although only a small random generator Z is used for this can be used, which is only able to generate small fragments B ... from relatively few bits.
  • the original code UC is at least three - e.g. on five or eight - fragments B of several - e.g. at least eight bits - and if, in addition, the clock CL and thus the display L in the transmitter S, or a clock CL and a display EL in the receiver E, in an uneven (!) clock specifies those periods in which a fragment B by means of corresponding actuation of the relevant control element / s can be generated and / or transmitted, the security is increased that no unauthorized person (e.g.
  • the generation of the original code UC or the start code SC is preferably terminated in this case; -
  • a timer may also be used to generate each fragment for a certain duration, e.g. for 10 minutes, prevented.
  • the transmitter S can either directly store the generated various fragments B, or one or more values formed from these fragments B according to an algorithm, prophylactically for later determination of a new code / code quantity SI in its transmitter memory SS, in order to use them Fragments B or values, if necessary, to send out the original code UC formed therefrom, started by a corresponding actuation of at least one of its transmitter operating elements SB.
  • the user can gradually and gradually, even during normal actuations of the central locking ST, or any device ST, cf. Figure 2, all preparations are made to send the original code in order to be able to quickly transmit the original code to the recipient later if required.
  • the security against unauthorized eavesdropping on the transmitted or transmitted original code can also be increased in that an unauthorized third party can intercept at most parts of the original code, but not easily, the entire original code in a manner which is not very useful for him.
  • the master code UC can be broadcast in stages and each stage can be triggered by actuating the transmitter control element / s SB concerned.
  • the transmitter S can also be designed and operated in such a way that it transmits the original code UC as a whole in a single block when at least one of its transmitter operating elements SB is actuated, cf. also Figure 3.
  • This can increase security against incorrect operation of the transmitter, which also increases the likelihood that, depending on the standard used, at least all 1 bits of the original code, if not also the 0 bits, are transmitted to the receiver E with approximately the same power.
  • the display L or another, e.g. display EL mounted in receiver E - e.g. by flashing - indicate that all fragments B have been generated or sent.
  • the transmitter control element SB used for generating and the transmitter control element SB used in normal operation for sending out the start code or continuation code are identical, for example it is only one instead of the two transmitter control elements SB shown in FIG. 2 is present, so that a new fragment B is generated each time the transmitter control element SB is actuated.
  • the fragment B generated in each case is then immediately, that is, before the next actuation of the transmitter control element SB in question - as such or recoded - in the transmitter memory SS, e.g. in its RAM, temporarily stored.
  • the transmitter memory SS contains only one RAM, a new initialization is always necessary when changing the battery - the transmitter S usually requires a battery - before this System can be operated normally.
  • the transmitter S - at least in addition to a RAM - also contains a ROM, for example an EEPROM, as the transmitter memory SS, reinitialization when changing the battery can also be avoided.
  • the functional reliability of the transmitter-receiver system during the (re) initialization can be increased by adding a more or less long additional code ZC to the original code UC, which indicates the initialization or re-initialization - e.g. only six, or perhaps well over forty, certain additional bits ZC - has been added to inform the receiver that an original code UC is now being transmitted.
  • This additional code ZC can e.g. 3 are broadcast immediately before the original code UC.
  • This additional code ZC mentioned above can also be used on its own, e.g. In order to increase security against unauthorized (re) initialization and thus against theft, the relevant receiver and sender of the system as an additional code ZC which differs from system to system but is then fixed for the system in question, e.g. by the dealer.
  • This additional code ZC which is initially permanently assigned to the system, allows the system to be reinitialized later using the random generator in the manner according to the invention, with strangers no longer initializing the system illegally with their external transmitters, for lack of identity of their additional code ZC, and then also in normal operation can operate.
  • a power-saving LCD display is attached to the transmitter, for example to indicate its operational readiness, - that the clock generator CL and the display L are attached to the transmitter S, cf. FIG. 2, and that the display L specifies the cycle with which the fragments B are to be generated in stages.
  • the clock generator CL and the display EL are mounted in the receiver E and the display EL specifies the clock at which a master code fragment B is to be sent out in stages by actuating the transmitter control element / s SB concerned, this can be done Avoid weight and the effort for attaching an advertisement in the transmitter S and also an advertisement on the receiver, often attached for other reasons, for example share the display of an anti-theft alarm system.
  • the menu navigation performed by the receiver E instead of the transmitter S then enables the person who carries out the (re) initialization to make it very small that the system is inadvertently (re) initialized, e.g. the control elements SB are accidentally operated by children according to a rhythm which is specified by the display / by the lamp L of the transmitter S.
  • Unintentional (re) initialization of the system is avoided particularly reliably if the receiver E is only ready to receive the original code UC if the operator concerned also took another measure. He can e.g. to do this, also insert the ignition key in the ignition lock and have to turn it to a specific position so that the receiver E is even ready to receive the original code UC.
  • a transmitter control element SB which is used to transmit the original code UC - and / or to finally save the original code UC or start code SC in a transmitter memory SS - is to be pressed, is a mini button SB to be actuated only with a pointed object and is inserted into the transmitter housing S.
  • the transmitter S can contain a clock and / or a counter ZR in order to count the total duration and / or the number of repeated transmissions of the original code UC or its fragments B.
  • the clock and / or the counter ZR can prevent the transmissions as soon as a maximum time and / or maximum number of transmissions has been exceeded. This further increases security against unauthorized eavesdropping on the original code, because the broadcasting must be ended as soon as the original code has been broadcast completely or sufficiently often.
  • the security against unauthorized eavesdropping can be further increased if the transmitter S, after a corresponding actuation of at least one of its transmitter operating elements SB, allows the further transmission of the original code UC to be prevented.
  • the previously generated is or will be generated during the initialization or re-initialization if the predetermined clock is not adhered to and / or if the durations or transmission or transmission numbers specified by the clock or by the counter ZR are not adhered to and / or the previously transmitted fragment B, or the previously generated and / or the previously transmitted fragments B, of the original code UC is no longer used to compose an original code UC.
  • the transmitter S and the receiver E then only use the previously or previously valid original code UC or start code SC, or a continuation code SI derived therefrom, for the next codes SI to be transmitted in normal operation for actuating the device ST, insofar as such a master code UC or start code SC was previously generated in it or entered into it.
  • This further increases the security against faulty (re) initializations and, above all, enables faultless continued operation of the transmitter-receiver system even after faulty re-initializations.
  • An unauthorized third party who listens to the transmitted original code is further made more difficult to generate a code that pretends to be authorized, namely the original code, start code or (in the case of an alternating code) subsequent code, in particular to increase security against theft if the transmitter S uses a conversion unit ⁇ P contains, by means of which the transmitter S encrypts the original code UC or its fragments B - possibly together with the additional code ZC - in order to transmit the original code UC in encrypted form, and if the receiver E also contains a conversion unit ⁇ P, by means of which the receiver E forms the unencrypted original code UC or the start code SC from the received coded signal SI.
  • the transmitter S and the receiver E each contain an arithmetic unit ⁇ P which, in normal operation, calculates the next continuation code SI to be transmitted from case to case in normal operation according to one of several algorithms which are possible in principle, this calculated code SI in each case being one of the permitted code quantity SI and if the original code UC also contains not only a definition of the future start code SC to be used, but also a definition of the alternative algorithm to be used in the future, an unauthorized third party becomes the replica or the calculation or guessing of justifying continuation codes SI further complicated.
  • This unit counts rapidly from zero to a large number - for example up to the number 255 - when at least one of its control elements SB is actuated accordingly, and it repeats this counting as often and until a suitable rhythm that is appropriate for the given rhythm Actuation - for example by timely releasing - of the relevant control element (s) SB the result achieved is generated as a fragment B of the original code UC or start code SC.
  • the duration of an individual counting cycle lasting from zero to zero is at most one tenth of a second, and if the maximum duration of the relevant time period and thus the maximum duration that is permitted for generating a fragment B and thus for the corresponding actuation of at least one relevant operating element SB, is at most ten seconds, the duration of the (re) initialization process can be shortened in a particularly user-friendly manner without risking that the generated fragment B is no longer a very arbitrary random number.
  • the transmission power of the transmitter S, as well as the sensitivity of the receiver E, can be reduced with particularly little effort by placing one in the transmitter S and / or in the receiver E in series with the transmitting element SE or in series with the receiving element EE only during the ( Re-) initializing not bridged resistance - for example a lamp L indicating this operating mode - attaches. In normal operation, however, this series resistor is bridged.
  • the transmitter element SE is operated in normal operation by a power stage or power stage with relatively high power, i.e. relatively high operating current, in the transmitter S. but this transmission element SE in (re) initialization mode with the relatively low operating current of the display L attached in the transmitter, for example an LED display L is operated.
  • a transmitter-receiver system in which the transmitter S is an electronic vehicle key S, and in which the receiver E is installed in or on the vehicle O, in which the receiving element EE of the receiver E is also inside the KFZ O is attached, then it is particularly favorable to reduce the transmission power so much during the (re) initialization, that is to say for the transmission of the original code UC, or for the transfer of fragments of this original code UC, that with this power when the vehicle O (Re-) initialization from outside the locked vehicle O is no longer possible.
  • the (re) initialization is therefore only possible if the transmission element SE of the electronic key S is kept close enough to the reception element EE of the receiver E inside the vehicle O. This ensures that security against unauthorized third party eavesdropping during initialization is particularly high.
  • a transmitter S can also transmit its original code UC to several receivers E for (re) initializing these receivers E.
  • a single electronic key S / transmitter S can then be used simultaneously for several locking mechanisms.
  • the same key can then e.g. the receiver E in a car O, also another receiver E on a garage door (O), and another receiver e.g. (Re) initialize at a front door, according to which all these locking mechanisms can be operated remotely with the same key, - in principle with the same security and simplicity as if only a single receiver E were used.
  • transmitters S can also have their respective individually assigned original code UC to a single receiver E for the (re) initialization of this receiver E.
  • several different electronic keys S / transmitter S can then be used for only one receiver E - for example in a motor vehicle O - for a single locking mechanism common to all transmitters.
  • these different keys S can thus (for example) initialize the receiver E in a motor vehicle O and then each transmitter S independently controls the receiver E for itself.
  • the receiver E can also additionally store the original codes UC (or data derived therefrom) in its receiver memory ES.
  • Each transmitter S (re) initializes and then controls the receiver E independently of the other transmitters S.
  • the above-mentioned additional code ZC must then be identical for all transmitters S, so that no further transmitters S are used by unauthorized persons can (re) initialize the receiver E.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Lock And Its Accessories (AREA)
  • Selective Calling Equipment (AREA)

Abstract

A transmission and receiving system (figs. 1 and 2) which checks the entitlement to use an object (O) contains a transmitter (S) with a transmission component (SE) and one or more transmitter controls (SB) which can trigger the transmission of coded signals (SI) in which the code concerns the entitlement to use the object (O). The transmitter (S) has at least one single transmission store (SS) to store data on use entitlement. The receiver (E) has a reception component (EE) which receives the coded signals transmitted to it and a reception store (ES) to store data for distinguishing between the entitlement or otherwise of codes (SI) received and a logic circuit (νP) which checks the code (SI) received using the data stored in the reception store (ES) and actuates a device (ST) or does not depending on the result of the check. For (re-)initialisation, the transmitter (S) contains a random generator (Z) to prepare the new codes(s) (SI) used by the device itself, which generates a random number (B) via the operation of at least one of the transmitter controls (SB). The transmitter (S) sends the receiver (E) an original code (UC) which accordingly establishes either a starting code (SC), i.e. a new code (SC), or the codes (SI) including the starting code (SC), i.e. including the first usable code of these codes (SI) so that this transmitted original code (UC) and/or data (SC) produced by calculation from the original code (UC) in the receiver (E) and/or in the transmitter (S) is stored in the transmission store (SS) or in the reception store (ES), whereby the original code (UC) is transmitted unidirectionally from the transmitter (S) to the receiver (E) without any dialogues taking place automatically and bidirectionally between the transmitter (S) and the receiver (E).

Description

Das erfindungsgemäße Sender-Empfänger-System wurde zwar zur Fernsteuerung der Zentralverriegelung eines KFZ entwickelt und betrifft damit ein elektronisch oder optisch mittels codierten Signalen betätigtes Schließsystem. Es eignet sich aber im Prinzip für Fernsteuerungen schlechthin, bei denen ein - im allgemeinen möglichst schwer kopierbarer - Steuercode von einem Sender zu einem Empfänger übertragen wird. Die Erfindung eignet sich also auch zur Betätigung z.B. von (Garagen-)Toren und anderen Schließ- bzw. Öffnungseinrichtungen, aber auch z.B. zum ferngesteuerten Starten, Anhalten, Schalten, Zünden, Lenken usw. von im Prinzip beliebigen Objekten.The transmitter-receiver system according to the invention was developed for remote control of the central locking system of a motor vehicle and thus relates to a locking system actuated electronically or optically by means of coded signals. In principle, however, it is particularly suitable for remote controls in which a control code, which is generally difficult to copy, is transmitted from a transmitter to a receiver. The invention is therefore also suitable for actuating e.g. of (garage) gates and other locking and opening devices, but also e.g. for remote-controlled starting, stopping, switching, ignition, steering etc. of basically any objects.

Die Erfindung betrifft dabei ein Problem beim Initialisieren und Re-Initialisieren des Sender-Empfänger-Systems, sobald nämlich endgültig der die Betätigung der Einrichtung ermöglichende Code bzw. eine entsprechende Codemenge festgelegt werden soll. Hierbei soll der festgelegte Code bzw. die festgelegte Codemenge jeweils ausreichend kompliziert und durch Unberechtigte möglichst schwer zu reproduzieren sein.The invention relates to a problem when initializing and re-initializing the transmitter-receiver system, as soon as the code that enables the operation of the device or a corresponding code quantity is to be finally determined. The specified code or the specified code quantity should be sufficiently complicated and difficult to reproduce by unauthorized persons.

Die Erfindung betrifft nämlich eine Weiterentwicklung des speziellen Sender-Empfänger-Systems, welches im Oberbegriff des Anspruches 1 definiert und für sich insbesondere durch die
- DE-A1-32 25 754
vorbekannt ist. Bei einem solchen bekannten System wird durch den Benutzer des Systems oder durch einen autorisierten Fachmann in einem weitgehend automatisch gesteuerten Dialog zwischen dem Sender und dem Empfänger ein Urcode zur erstmaligen Initialisierung bzw. auch später jeweils zu einer (erneuten) Reinitialisierung generiert und gespeichert.The invention namely relates to a further development of the special transmitter-receiver system, which is defined in the preamble of claim 1 and in particular by
- DE-A1-32 25 754
is known. In such a known system, the user of the system or an authorized specialist generates and stores a master code in a largely automatically controlled dialogue between the transmitter and the receiver for the initial initialization or later for a (renewed) reinitialization.

Die auf einem solchen Dialog basierende Initialisierung bzw. Reinitialisierung des bekannten Sender-Empfänger-Systems erfordert aber relativ umständliche konstruktive Maßnahmen und relativ komplizierte Steuerverfahren.The initialization or reinitialization of the known transmitter-receiver system based on such a dialog, however, requires relatively complicated design measures and relatively complicated control procedures.

Daneben ist durch die
- EP-A-0 292 217
ein ähnliches Sender-Empfänger-System bekannt, bei welchem nämlich der Sender zur Vorbereitung des zukünftig von ihm selbst benutzten neuen Code einen Zufallsgenerator enthält, welcher eine Zufallszahl generiert. Außerdem überträgt der Sender in unidirektionaler Weise, also ohne einen automatisch bidirektional zwischen dem Sender und dem Empfänger ablaufenden Dialog, zum Empfänger einen Urcode, der seinerseits danach den Startcode, also den neuen Code festlegt, wobei dieser ausgesendete Urcode im Senderspeicher bzw. im Empfängerspeicher gespeichert wird.Next to that is through the
- EP-A-0 292 217
a similar transmitter-receiver system is known, in which the transmitter contains a random number generator, which generates a random number, in order to prepare the new code that he himself will use in the future. In addition, the transmitter transmits a master code in a unidirectional manner, i.e. without a dialog running automatically bidirectionally between the transmitter and the receiver, which then in turn specifies the start code, i.e. the new code, the transmitted master code being stored in the transmitter memory or in the receiver memory becomes.

Davon abweichende Maßnahmen zum (Re-)Initialisieren sind ebenfalls bekannt bzw. denkbar:Different measures for (re) initializing are also known or possible:

Vom Hersteller können zusammengehörende Sets von Sendern (z.B. Schlüsseln) und Empfängern mit entsprechend starrer Vorprogrammierung geliefert werden, was aber eine sorgfältige Lagerhaltung voraussetzt, sowie i.allg. stets den Kauf eines kompletten Set, auch wenn z.B. nur ein Sender oder nur ein Empfänger wegen Defekten auszutauschen ist.The manufacturer can supply related sets of transmitters (e.g. keys) and receivers with correspondingly rigid preprogramming, but this requires careful storage, as well as generally. always buying a complete set, even if e.g. only one transmitter or one receiver has to be replaced due to defects.

Es können auch ähnliche Sets hergestellt werden, die erst später vom autorisierten Kfz-Händler durch nachträgliche Programmierung umständlich, nämlich mittels Spezialgeräten, initialisiert werden.Similar sets can also be produced, which are only later laboriously initialized by the authorized car dealer through subsequent programming, namely using special devices.

Bei einem System mit festem, nicht wechselnden Code stellt der Startcode den, vom Berechtigten zur Betätigung der Einrichtung laufend benutzten, festen Code dar. Bei einem System mit Wechselcode wird aber ständig der die Berechtigung darstellende Code im laufenden Betrieb des Sender-Empfänger-Systems nach einem mitgespeicherten Algorithmus gewechselt, so daß dann der Urcode besonders jenen Startcode festlegt, welcher den ersten, von einem berechtigten Benutzer zur Betätigung der Einrichtung benutzbaren Code darstellt. Die folgenden berechtigenden Codes werden gelegentlich Fortsetzungscodes genannt. Ein Wechselcode mit ständig neuen, sich nie wiederholenden Fortsetzungscodes bietet einen viel größeren Schutz gegen Mißbrauch des Objektes, z.B. des KFZ, als ein fester Code.In the case of a system with a fixed, non-changing code, the start code represents the fixed code that is continuously used by the authorized person to operate the device. In a system with a changing code, however, the code representing the authorization is constantly updated during operation of the transmitter-receiver system an algorithm that is also stored, so that the original code then specifies in particular that start code which represents the first code that can be used by an authorized user to operate the device. The following qualifying codes are sometimes called continuation codes. A change code with constantly new, never repeating continuation codes offers much greater protection against misuse of the object, for example the vehicle, than a fixed code.

Die Erfindung sollte einen ganzen Katalog von Vorteilen lösen. Die Aufgabe der Erfindung, nämlich

  • obwohl der technische Aufwand zur Erzeugung von Zufallszahlen, besonders der Aufwand für den Zufallsgenerator, besonders gering sein soll, einen sehr langen Urcode, oder einen vergleichsweise sehr langen, durch Umrechnen aus mehreren Zufallszahlen abgeleiteten Urcode verwenden zu können, wobei die Sicherheit gegen unbefugte Benutzung des Objektes namlich umso größer ist, je komplizierter, also auch je länger, der zu übertragende Urcode ist,
  • damit eine hohe Sicherheit gegen unbefugte Benutzung des Systemes zu ermöglichen, indem es sehr unwahrscheinlich ist, daß nach dem Initialisieren bzw. nach dem Reinitilisieren der vom Empfänger akzeptierte Code bzw. die vom Empfänger akzeptierte Codemenge durch einen Zufall von einem unberechtigten Dritten erzeugt werden kann, weil der zur Benutzung berechtigende Code bzw. die entsprechende Codemenge vorher im Rahmen der (Re-)Initialisierung genügend zufällig aus einer sehr großen Zahl von möglichen Codes festgelegt wird,
  • ferner für den Benutzer einen möglichst geringen Bedienungsaufwand zuzulassen, indem jedem beliebigen Benutzer, also nicht nur dem Hersteller des Systemes oder des Objektes und/oder einer von ihm autorisierten Person, z.B. dem Händler, sondern auch der Käufer zu gestatten, das System jederzeit auf sehr einfache Weise zu (re-)initialisieren, jedenfalls sofern er bereits den zum betreffenden System gehörenden Sender besitzt und weiß, wie er das System bedienen muß,
  • ferner zuzulassen, daß jedenfalls im Prinzip nicht nur entweder ein Wechselcode oder nur ein fester Code initialisiert werden kann, sondern daß bei Bedarf sogar ein gemischter Code (re-)initialisiert werden kann, indem dann sowohl ein fester Code als auch ein Wechselcode (re-)initialisiert werden kann, - wozu die betreffende Person dem Sender-Empfänger-System z.B. anfänglich einen individuell dem betreffenden Objekt zugeordneten Startcode und/- oder auch den später beschriebenen - dann evtl. sogar festen - Zusatzcode in den Sender und Empfänger eingeben kann, z.B. um dem Diebstahl von einzelnen Originalschlüsseln und/oder Originalempfängern aus den Verkaufsräumen des Händlers, und/oder um dem Diebstahl eines Objektes mittels eines zu einem anderen Objekt gehörenden Senders durch unbefugte (Re-)Initialisierung des Objektes vorzubeugen - wobei jedoch alle späteren Reinitialisierungen des betreffenden Objektes in erfindungsgemäßer Weise vom berechtigten Benutzer/Käufer selbst durchgeführt werden können,
  • obwohl kein automatischer Dialog zwischen Sender und Empfänger beim (Re-)Initialisieren benötigt werden soll,

wird erfindungsgemäß durch den im Patentanspruch 1 definierten Gegenstand gelöst.The invention should solve an entire catalog of advantages. The object of the invention, namely
  • although the technical effort for generating random numbers, especially the effort for the random generator, should be particularly low, to be able to use a very long original code, or a comparatively very long original code derived by converting from several random numbers, the security against unauthorized use of the Object, the larger, the more complicated, i.e. the longer, the original code to be transmitted is,
  • thus enabling a high level of security against unauthorized use of the system, since it is very unlikely that the code accepted by the recipient or the amount of code accepted by the recipient can be generated by chance by an unauthorized third party after initialization or reinitilization, because the code authorizing the use or the corresponding code quantity is previously determined sufficiently randomly from a very large number of possible codes during the (re) initialization,
  • furthermore, to allow the user as little operating effort as possible by allowing any user, not only the manufacturer of the system or the object and / or a person authorized by him, for example the dealer, but also the buyer, to operate the system at any time easy to (re) initialize, at least if he already has the transmitter belonging to the system in question and knows how to operate the system,
  • to further allow that in any case in principle not only either a change code or only a fixed code can be initialized, but that, if necessary, even a mixed code can be (re) initialized by then using both a fixed code and a change code (re ) initialized can be - for which the person concerned can enter the transmitter-receiver system, for example initially a start code individually assigned to the object in question and / or also the additional code described later - then possibly even fixed - into the transmitter and receiver, e.g. to Theft of individual original keys and / or original recipients from the retailer's salesrooms, and / or to prevent the theft of an object by means of a transmitter belonging to another object by unauthorized (re) initialization of the object - although all subsequent reinitializations of the object in question according to the invention can be carried out by the authorized user / buyer himself,
  • although no automatic dialog between sender and receiver is to be required during (re) initialization,

is achieved according to the invention by the subject defined in claim 1.

Es ist also trotz der Einfachheit der technischen Konstruktion, trotz der Einfachheit der Bedienung und trotz der erreichbaren hohen Sicherheit gegen unbefugte Benutzung bei der Erfindung nicht notwendig, im Sender zusätzlich eine Empfangsschaltung für einen Sender-Empfänger-Dialog anzubringen, sowie im Regelfall nicht nötig, zum Reinitialisieren, selbst zum erstmaligen Initialisieren, zusätzliche Spezialgeräte zu benutzen, oder den Händler zu bemühen, damit er für einen Kunden das System initialisiert. Die Erfindung ist also auch nicht starr darauf beschränkt, daß nur der spätere berechtigte Benutzer/Käufer das System für einen festen Code oder für einen Wechselcode initialisieren kann.In spite of the simplicity of the technical construction, despite the simplicity of operation and despite the achievable high level of security against unauthorized use, it is not necessary in the invention to additionally install a receiving circuit for a transmitter-receiver dialog in the transmitter, and is generally not necessary, to reinitialize, even for the first time initialization, to use additional special devices, or to make an effort for the dealer to initialize the system for a customer. The invention is also not rigidly limited to the fact that only the later authorized user / buyer can initialize the system for a fixed code or for a change code.

Die Erfindung eignet sich also auch zum (Re-)Initialisieren eines Sender-Empfänger-Systems mit festem Code durch den berechtigten Senderbenutzer. Sie eignet sich aber auch, und zwar gerade besonders gut, zum (Re-)Initialisieren eines Sender-Empfänger-Systems mit Wechselcode, und zwar kann der Algorithmus, nach welchem der Code gewechselt wird, an sich im Prinzip praktisch beliebig sein. Der Urcode kann sogar - zur weiteren Vergrößerung des Schutzes gegen Mißbrauch - den Algorithmus, nach welchem der Code gewechselt wird, auch für sich verändern, indem z.B. ein oder mehrere Bits des Urcode einen Addierbefehl des Algorithmus in einem Multiplizierbefehl umwandeln. - Der Urcode kann sich im Prinzip vom Startcode unterscheiden, z.B. um die Sicherheit zu erhöhen, daß kein Unberechtigter die Einrichtung ohne weiteres betätigen kann, selbst wenn er den Urcode durch Abhören aufzeichnen konnte.The invention is therefore also suitable for the (re) initialization of a transmitter-receiver system with a fixed code by the authorized transmitter user. However, it is also suitable, and particularly well, for (re) initializing a transmitter-receiver system with an alternating code, and the algorithm, according to which the code is changed, can in principle be practically arbitrary. The original code can even change the algorithm according to which the code is changed to further increase the protection against misuse, for example by converting one or more bits of the original code into an add instruction of the algorithm in a multiply instruction. - The original code can differ in principle from the start code, for example to increase the security that no unauthorized person can easily operate the device, even if he was able to record the original code by listening.

Der Sender enthält also einen Zufallsgenerator, der auf ein Mal als Ganzes oder in Etappen den Urcode bildet, oder der einen Code (z.B. den Startcode selber), oder eine Serie von Codebruchstücken, bildet, aus dem/der erst durch Umrechnen/ Verschlüsseln der zu übertragende Urcode gebildet wird. Dieser Urcode wird danach - als Ganzes auf ein Mal oder in Etappen - zum Empfänger übertragen, wobei der Empfänger unmittelbar diesen Urcode, oder einem davon nach einem Entschlüsselungsalgorithmus abgeleiteten Code, als Startcode verwenden kann. Dieser Startcode stellt also, wie oben angegeben, den festen Code - bzw. bei Wechselcode einen ersten berechtigenden Code aus der Menge der berechtigenden Codes - dar, den also ein Berechtigter zur Benutzung des Objektes (z.B. Kfz) mittels eines Senders (elektronischer Schlüssel) aussenden kann.The transmitter therefore contains a random generator that forms the original code in one go or in stages, or that forms a code (e.g. the start code itself), or a series of code fragments, from which only by converting / encrypting the transmitting original code is formed. This master code is then transmitted - as a whole or in stages - to the recipient, whereby the recipient can immediately use this master code, or a code derived from it according to a decryption algorithm, as the start code. As stated above, this start code thus represents the fixed code - or, in the case of an alternating code, a first authorizing code from the set of authorizing codes - which an authorized person can use to transmit the object (e.g. motor vehicle) using a transmitter (electronic key) can.

Die in den Unteransprüchen angegebenen zusätzlichen Maßnahmen gestatten, zusätzliche Vorteile zu erreichen. So gestatten unter anderem die Maßnahmen nach Patentanspruch

2,
eine zuverlässige Bedienerführung zu erreichen, die - besonders wenn der Takt sehr unregelmäßig ist - dagegen schützt, daß durch zufällige Betätigungen des/der Bedienungselemente/-s unbeabsichtigt vom Sender ein Urcode ausgestrahlt wird,
3,
eine hohe Sicherheit zu erreichen, daß kein berechtigter Benutzer versehentlich Bruchstücke und damit einen Urcode generiert, falls er versehentlich Bedienungselemente betätigt,
4,
die Sicherheit gegen unbefugte oder unbeabsichtigte Fehlbedienungen weiter zu erhöhen,
5,
nach und nach alle Vorbereitungen zur Aussendung des Urcode treffen zu können, um in einem günstigen Zeitpunkt, in welchem kein unbefugter Dritter in der Umgebung ist, den Urcode zum Empfänger rasch vollständig übertragen zu können,
6,
die Sicherheit gegen unbefugtes Abhören des übertragenen Urcode dadurch zu erhöhen, daß ein unbefugter Dritter in für ihn wenig nützlicher Weise höchstens Teile des Urcode, aber nicht ohne weiteres den ganzen Urcode abhören kann,
7,
die Sicherheit gegen Fehlbedienungen des Senders zu erhöhen, insbesondere die Wahrscheinlichkeit zu erhöhen, daß alle Bits des Urcode mit angenähert gleicher Leistung zum Sender übertragen werden,
8,
dem Benutzer zu erleichtern, durch eine Anzeige die Gewißheit zu gewinnen, daß die (Re-)Initialisierung einwandfrei beendet ist,
9,
den Aufwand zur Vorbereitung der Reinitialisierung für den Benutzer zu verringern, indem schon während des Normalbetriebs Zufallszahlen als später verwendbare Bruchstücke gewonnen werden können, wobei zusätzlich dann, wenn später - möglicherweise in sehr großer Eile - eine Reinitialisierung durchzuführen ist, der Zeitaufwand zum Vorbereiten der Reinitialisierung verringert und damit in solchen Eilfällen die Sicherheit gegen unberechtigte Benutzung, z.B. die Diebstahlssicherheit, erhöht ist,
10,
auf unkomplizierte Weise die Übertragung des Urcodes einzuleiten und die Funktionssicherheit des Sender-Empfänger-Systems während des (Re-)Initialisierens zu erhöhen,
11,
die Zuverlässigkeit und Einfachheit der Bedienung während des (Re-)Initialisierens zu erhöhen, unter anderem weil die Leistung, mit der die einzelnen Bits des Urcode übertragen werden, dann angenähert gleich groß ist und weil die Übertragung besonders wenig Zeitaufwand erfordert,
12,
eine ungewollte Generierung - oder gar Ausstrahlung - des Urcode mit sehr hoher Wahrscheinlichkeit zu verhindern, selbst wenn von Unbefugten am Sender herumgespielt wird, sowie dazu einen besonders kleinen Aufwand an Bauteilen zu benötigen, besonders wenn ohnehin schon aus anderen Gründen eine Anzeige, z.B. eine stromsparende LCD-Anzeige, am Sender angebracht ist, z.B. um dessen Betriebsbereitschaft anzuzeigen,
13,
durch eine solche, vom Empfänger angezeigte Menüführung eine ungewollte (Re-)Initialisierung des Systemes zu verhindern, indem nicht vom Sender veranlaßte Ausstrahlungen eines Urcode keine (re-)initialisierende Wirkungen haben, sowie das Gewicht und den Aufwand für die Anbringung einer Anzeige im Sender zu vermeiden und darüberhinaus eine, oft schon aus anderen Gründen angebrachte Anzeige am Empfänger, z.B. die Anzeige einer Diebstahlwarnanlage, mitzubenutzen,
14,
mit besonders hoher Wahrscheinlichkeit unbeabsichtigte (Re-)Initialisierungen zu verhindern,
15,
dem Bediener zu erleichtern, die Gewißheit zu gewinnen, daß die (Re-)Initialisierung einwandfrei beendet ist,
16,
dem Benutzer zu erleichtern, eine besonders große Gewißheit zu gewinnen, daß die (Re-)Initialisierung einwandfrei beendet ist, und zwar selbst dann, falls keine besondere sonstige Anzeige, z.B. ein Lämpchen, für diesen Zweck am Empfänger angebracht ist,
17,
die Sicherheit gegen fehlerhafte (Re-)Initialisierungen (weiter) zu erhöhen, vor allem auch um unbeabsichtigte (Re-)Initialisierungen zu vermeiden,
18,
die Sicherheit gegen unbeabsichtigtes (Re-)Initialisieren, auch gegen unberechtigtes Abhören des Urcode zu erhöhen, sobald der Urcode vollständig bzw. ausreichend oft übertragen wurde,
19,
die Sicherheit gegen unberechtigtes Abhören des Urcode (noch weiter) zu erhöhen,
20,
die Sicherheit gegen fehlerhafte (Re-)Initialisierungen weiter zu erhöhen und vor allem auch nach fehlerhaften Reinitialisierungen einen einwandfreien Weiterbetrieb des Sender-Empfänger-Systems auf der Basis der vorher gültigen Initialisierung durch den berechtigten Benutzer zu ermöglichen,
21,
einem unberechtigten Dritten, der den ausgestrahlten bzw. übertragenen Urcode abhört, weiter zu erschweren, einen die Berechtigung vortäuschenden Code, nämlich Urcode, Startcode oder (bei Wechselcode) einen entsprechenden späteren, an sich berechtigenden Fortsetzungscode, zu generieren, - also besonders die Sicherheit gegen Diebstahl zu erhöhen,
22,
die Nachbildung bzw. die Berechnung bzw. das Erraten von berechtigenden Startcodes oder Fortsetzungscodes weiter zu erschweren,
23,
mit relativ wenig Aufwand mehrere, jeweils sehr willkürliche Zufallszahlen zu generieren, um daraus den zum Empfänger zu übertragenden, sehr langen Urcode zu bilden,
24,
in besonders bedienerfreundlicher Weise die Dauer des (Re-)Initialisierungsvorganges zu verkürzen,
25,
eine besonders große Sicherheit gegen unbefugtes Abhören des/der ausgestrahlten bzw. übertragenen Urcode(-bruchstücke) durch unbefugte dritte Personen zu bieten,
26,
mit besonders wenig Aufwand das verbotene Mithören Fremder beim (Re-)Initialisieren zu erschweren,
27,
die Sicherheit gegen unbefugtes Abhören des/der ausgestrahlten bzw. übertragenen Urcode(-bruchstücke) durch unbefugte Dritte bei einem Sender-Empfänger-System eines KFZ stark zu erhöhen,
28,
einen einzigen Sender gleichzeitig für mehrere Empfänger, z.B. für Empfänger in einem KFZ und an einem Garagentor sowie in einer Haustüre benutzen zu können, also eine Vielzahl von Sendern für Empfänger unterschiedlicher Objekte vermeiden zu können, sowie
29,
einen einzigen Empfänger gleichzeitig für mehrere Sender, z.B. für die Vielzahl der Sender/Schlüssel von mehreren berechtigten Benutzern eines KFZ, benutzen zu können, also eine Vielzahl von Empfängern im Objekt für die verschiedenen Benutzer vermeiden zu können, - und zwar besonders dann, wenn der Empfänger durch jeden einzelnen der Sender mittels jeweils individuell nur einem betreffenden Sender zugeordneten Urcode initialisiert werden kann, indem der Empfänger die verschiedenen Urcodes der verschiedenen Sender, bzw. daraus individuell abgeleitete Codes, getrennt speichert und getrennt zur Ermittlung der Benutzungsberechtigung benutzt.
The additional measures specified in the subclaims allow additional advantages to be achieved. Among other things, allow the measures according to the patent claim
2,
to achieve reliable operator guidance, which - especially when the clock is very irregular - protects against the fact that accidental actuations of the control element (s) unintentionally emit a source code from the transmitter,
3,
to achieve a high level of security so that no authorized user accidentally generates fragments and thus a master code if he accidentally actuates operating elements,
4,
further increase security against unauthorized or unintentional incorrect operation,
5,
to be able to gradually make all the preparations for sending out the original code so that the original code can be quickly and completely transmitted to the recipient at a convenient time when there is no unauthorized third party in the area.
6,
to increase security against unauthorized eavesdropping on the transmitted original code by allowing an unauthorized third party to eavesdrop on at most parts of the original code, but not easily, of the entire original code,
7,
to increase the security against incorrect operation of the transmitter, in particular to increase the probability that all bits of the original code are transmitted to the transmitter with approximately the same power,
8th,
to make it easier for the user to gain certainty from an indication that the (re) initialization has ended properly,
9,
Reduce the effort for the user to prepare the reinitialization by being able to obtain random numbers as fragments that can be used later during normal operation, and in addition, if later - possibly in a very great hurry - a reinitialization has to be carried out, the time required to prepare the reinitialization reduced and thus the security against unauthorized use, such as theft security, is increased in such urgent cases,
10,
initiate the transmission of the original code in an uncomplicated manner and increase the functional reliability of the transmitter-receiver system during the (re) initialization,
11,
to increase the reliability and simplicity of operation during the (re) initialization, partly because the performance with which the individual bits of the original code are transmitted is then approximately the same and because the transmission requires particularly little time,
12,
to prevent an unwanted generation - or even broadcast - of the original code with a very high probability, even if unauthorized persons are playing around with the transmitter, as well as requiring a particularly small amount of components, especially if an indicator, e.g. a power-saving LCD display, is attached to the transmitter anyway, e.g. to indicate that it is ready for operation,
13,
to prevent an unwanted (re) initialization of the system by such menu guidance indicated by the receiver, since transmissions of an original code not initiated by the transmitter have no (re) initializing effects, as well as the weight and the effort for attaching an advertisement in the transmitter to avoid and also use a display on the receiver, which is often attached for other reasons, e.g. the display of an anti-theft alarm system,
14,
with a particularly high probability of preventing unintentional (re) initializations,
15,
to make it easier for the operator to be certain that the (re) initialization has ended correctly,
16,
to make it easier for the user to gain a particularly high degree of certainty that the (re) initialization has ended correctly, even if no other special indication, for example a lamp, is attached to the receiver for this purpose,
17,
further increase security against incorrect (re) initializations, especially to avoid unintentional (re) initializations,
18,
to increase security against unintentional (re) initialization, also against unauthorized listening to the original code, as soon as the original code has been transmitted completely or sufficiently often,
19,
to increase security against unauthorized eavesdropping on the original code (even further),
20,
to further increase security against faulty (re) initializations and, above all, faultless continued operation of the Enable sender-receiver system based on the previously valid initialization by the authorized user,
21,
to make it even more difficult for an unauthorized third party who is listening to the transmitted or transmitted original code to generate a code that pretends to be authorized, namely the original code, start code or (in the case of a change code) a corresponding, later, justified continuation code, especially security against Increase theft
22,
further complicate the replication or calculation or guessing of justifying start codes or continuation codes,
23,
to generate several, very arbitrary, random numbers with relatively little effort in order to form the very long original code to be transmitted to the recipient,
24,
to shorten the duration of the (re) initialization process in a particularly user-friendly manner,
25,
to offer a particularly high level of security against unauthorized interception of the broadcast or transmitted original code (fragments) by unauthorized third parties,
26,
to make it difficult for foreigners to listen to (re) initialize with little effort,
27,
to greatly increase the security against unauthorized eavesdropping on the broadcast or transmitted original code (fragments) by unauthorized third parties in a transmitter-receiver system of a motor vehicle,
28,
to be able to use a single transmitter simultaneously for several receivers, for example for receivers in a motor vehicle and on a garage door and in a front door, that is to be able to avoid a large number of transmitters for receivers of different objects, and
29,
to be able to use a single receiver at the same time for several transmitters, for example for the large number of transmitters / keys from several authorized users of a motor vehicle, that is to be able to avoid a large number of receivers in the object for the different users, in particular when the receiver can be initialized by each of the transmitters by means of the original code assigned to only one transmitter in each case, in that the receiver separately stores the different original codes of the different transmitters, or codes derived therefrom, and uses them separately to determine the user authorization.

Die Erfindung wird anhand der in den drei Figuren gezeigten Beispiele weiter erläutert. Dabei zeigen die Figur

1
einen Benutzer, welcher einen Sender betätigt, sowie ein Objekt/Kfz, in welchem ein Empfänger angebracht ist, der durch den Sender zu steuern ist, wobei das Sender-Empfänger-System zuvor zu (re-)initialisieren ist,
2
schematisch einen Sender und einen dazu gehörenden Empfänger des erfindungsgemäßen Systems, sowie
3
ein Schema für die Zeitschlitze zur Übertragung des Urcode, zusammen mit einem Beispiel für die Zeitschlitze zum Übertragen eines Zusatzcode, welcher dem Empfänger anzeigt/signalisiert, daß eine (Re-)Initialisierung vorliegt, daß also nicht eine normale Übertragung eines Startcode oder Fortsetzungscode - statt einer (Re-)Initialisierung - vorliegt.
The invention is further explained on the basis of the examples shown in the three figures. The figure shows
1
a user who operates a transmitter and an object / motor vehicle in which a receiver is mounted, which is to be controlled by the transmitter, the transmitter-receiver system having to be (re) initialized beforehand,
2nd
schematically a transmitter and an associated receiver of the system according to the invention, and
3rd
a scheme for the time slots for transmission of the original code, together with an example for the time slots for transmission of an additional code, which indicates / signals to the receiver that a (re) initialization is present, that is, not a normal transmission of a start code or continuation code - instead a (re) initialization - is present.

Die Figur 2 zeigt beispielhaft und schematisch wichtige Komponenten eines Empfängers E sowie eines Senders S, welchen ein Benutzer gemäß Figur 1, zur Fernsteuerung des in einem KFZ O angebrachten Empfängers E und damit zur Betätigung der Zentralverriegelung ST des KFZ 0, in der Hand hält.FIG. 2 shows, by way of example and schematically, important components of a receiver E and a transmitter S, which a user according to FIG. 1 holds for the remote control of the receiver E installed in a motor vehicle O and thus for actuating the central locking device ST of the motor vehicle 0.

Der Sender S ist hier ein elektronischer KFZ-Schlüssel S, welcher ein Wellen ausstrahlendes Sendeelement SE - z.B. eine UKW-Antenne, einen Ultraschallstrahler und/oder einen Infrarotstrahler - enthält. Der KFZ-Schlüssel S enthält beispielhaft zwei Tasten SB als Sender-Bedienungselemente SB, die ihrerseits das - hier im Beispiel serielle - Aussenden von codierten Signalen SI veranlassen können. Der Code dieser Signale SI zeigt die Berechtigung zur Benutzung des KFZ 0 an. Dieser Sender S enthält ferner mindestens einen einzigen ROM und/oder RAM als Senderspeicher SS

  • zur Speicherung von Daten über Benutzungsberechtigungen, also z.B. zur Speicherung unmittelbar des Startcode bzw. der Fortsetzungscodes SI, der/die im Normalbetrieb (wenn nicht (re-) initialisiert wird) zum Empfänger E auszusenden ist/sind,
  • oder - besonders wenn ein Wechselcode verwendet wird, z.B. ein mit der Uhrzeit verknüpfter Wechselcode - zur Speicherung von letztendlich zum zuletzt übertragenen Urcode und/oder Fortsetzungscode korrelierenden Werten (und evtl. zur Speicherung von Bits von Programmschritten des zugehörenden Algorithmus);
The transmitter S here is an electronic motor vehicle key S, which contains a transmission element SE that emits waves - for example an FM antenna, an ultrasound emitter and / or an infrared emitter. The car key S contains two examples SB buttons as transmitter operating elements SB, which in turn can cause the coded signals SI to be emitted, in this case serial in this example. The code of these signals SI indicates the authorization to use the vehicle 0. This transmitter S also contains at least one single ROM and / or RAM as the transmitter memory SS
  • for storing data on user authorizations, for example for storing immediately the start code or the continuation code SI, which is / are to be sent to the receiver E in normal operation (if not (re) initialized),
  • or - especially if an alternating code is used, for example an alternating code linked to the time - for storing values which ultimately correlate with the last transmitted original code and / or continuation code (and possibly for storing bits of program steps of the associated algorithm);

Aus solchen Daten bzw. korrelierenden Werten errechnet eine Logikeinheit, z.B. ein programmgesteuerter Mikroprozessor µP, jeweils den die Berechtigung nachweisenden, auszusendenden Startcode bzw. - bei Wechselcode - die nächsten Fortsetzungscodes SI.A logic unit calculates from such data or correlating values, e.g. a program-controlled microprocessor .mu.P, each the start code to be sent to prove the authorization or - in the case of a change code - the next continuation codes SI.

Der unter dem KFZ-Dach angebrachte Empfänger E enthält unter anderem ein Empfangselement EE, z.B. ein Ultraschallmikrophon und/oder eine Infrarot-Photodiode, vgl. Figur 2, um damit die ausgestrahlten codierten Signale SI empfangen zu können. Ein Empfängerspeicher ES dient hier zur Speicherung von Daten - evtl. auch zur Speicherung von Bits von Programmschritte darstellenden Daten - , wobei die im Empfängerspeicher gespeicherten Daten und die im Senderspeicher gespeicherten Daten korrelieren, damit der Empfänger E die Berechtigung bzw. Nichtberechtigung von empfangenen Codes SI ermitteln kann: Hierzu prüft eine Logikschaltung, z.B. ebenfalls ein programmgesteuerter Mikroprozessor µP, den jeweils empfangenen Code SI mittels der im Empfängerspeicher ES gespeicherten Daten, wonach diese Logikschaltung µP eine Einrichtung ST, nämlich hier die KFZ-Zentralverriegelung ST und/ oder z.B. auch eine KFZ-Einbruchswarnanlage ST, abhängig von dem Prüfergebnis betätigt oder nicht betätigt.The receiver E mounted under the motor vehicle roof contains, among other things, a receiving element EE, for example an ultrasound microphone and / or an infrared photodiode, cf. Figure 2, so that the broadcast coded signals SI can be received. A receiver memory ES is used to store data - possibly also to store bits of data representing program steps - the data stored in the receiver memory and the data stored in the transmitter memory correlating so that the receiver E authorizes or not authorizes received codes SI For this purpose, a logic circuit, for example likewise a program-controlled microprocessor μP, checks the code SI received in each case by means of the data stored in the receiver memory ES, according to which this logic circuit μP is a device ST, namely here the central vehicle locking device ST and / or eg also a motor vehicle -Intrusion alarm system ST operated or not operated depending on the test result.

Solche Sender-Empfänger-Systeme - besonders wenn sie einen Wechselcode verwenden - müssen initialisiert, später vielleicht sogar gelegentlich re-initialisiert werden können, d.h. es muß anfänglich eine Abstimmung, oder auch gelegentlich später eine Neuabstimmung, zwischen einem vom Sender S zukünftig ausgesendeten Code SI und dem zukünftig vom Empfänger E als berechtigt zu akzeptierenden Code SI durchgeführt werden.Such transceiver systems - especially if they use an alternating code - have to be initialized, maybe even re-initialized later, i.e. Initially, or occasionally later, a re-adjustment must be carried out between a code SI that will be sent by the transmitter S in the future and the code SI that will be accepted by the receiver E in the future as authorized.

Zu dieser (Re-)Initialisierung wird bei der Erfindung vom Sender S zum Empfänger E ein Urcode UC übertragen, vgl. Figur 1 und 2, der seinerseits entweder den Startcode SC, also den ersten, zukünftigen berechtigten Code SC festlegt, - oder der, wenn ein Wechselcode für die normalen Ubertragungen SI verwendet wird, die Menge von verschiedenen zukünftigen, berechtigten Fortsetzungscodes SI = die berechtigte Codemenge SI festlegt, - einschließlich des Startcode SC, also des ersten benutzbaren Code SC dieser Menge SI.For this (re) initialization, an original code UC is transmitted from the transmitter S to the receiver E in the invention, cf. FIGS. 1 and 2, which in turn either define the start code SC, that is to say the first, future authorized code SC, or, if an alternating code is used for the normal transmissions SI, the set of different future, authorized continuation codes SI = the authorized code set SI specifies - including the start code SC, ie the first usable code SC of this set SI.

Dieser übertragene Urcode UC, und/oder ein im Empfänger E daraus durch Umrechnen gebildeter Code, also z.B. ein durch Umrechnen gebildeter Startcode SC, wird also als Daten - in der Regel in identischer Art - nicht nur im Senderspeicher SS, sondern eben auch im Empfängerspeicher ES gespeichert.This transmitted original code UC, and / or a code formed therefrom in the receiver E by conversion, e.g. a start code SC formed by conversion is therefore stored as data - usually in an identical manner - not only in the transmitter memory SS, but also in the receiver memory ES.

Der Urcode UC wird bei der Erfindung unidirektional vom Sender S zum Empfänger E übertragen, also ohne automatisch bidirektional zwischen dem Sender S und dem Empfänger E ablaufendem Dialog.In the invention, the original code UC is transmitted unidirectionally from the transmitter S to the receiver E, that is to say without a dialog running automatically bidirectionally between the transmitter S and the receiver E.

Bei der Erfindung enthält der Sender S zur Vorbereitung des/der zukünftig von ihm selbst benutzten - und vom Empfänger zukünftig zu akzeptierenden - neuen Startcode/Codemenge SI zusätzlich einen Zufallsgenerator Z, welcher, durch Betätigung von zumindest einem der Sender-Bedienungselemente SB, jeweils eine Zufallsziffer generiert.In the case of the invention, the transmitter S additionally contains a random generator Z for preparing the new start code / code quantity SI to be used by himself in the future and to be accepted by the receiver in the future, which generator, by actuating at least one of the transmitter control elements SB, has one each Random number generated.

Der Benutzer des Senders S kann beim erfindungsgemäßen System also auf sehr einfache Weise das System durch entsprechendes Betätigen von Sender-Bedienungselementen SB initialisieren bzw. re-initialisieren, obwohl der technische Aufwand, insbesondere für den Zufallsgenerator Z, gering ist, und obwohl kein automatischer Dialog zwischen dem Sender S und dem Empfänger E und dementsprechend kein Aufwand für einen Hilfsempfänger im Sender S zum (Re-)Initialisieren benötigt wird; es ist außerdem trotz der Einfachheit der Bedienung und der technischen Konstruktion der Erfindung im Prinzip auch nicht in jedem Fall notwendig, zusätzliche Spezialgeräte zu benutzen, auch nicht seitens des verkaufenden KFZ-Händlers, um das Sender-Empfänger-System erstmalig, oder später erneut, vollständig zu initialisieren.In the system according to the invention, the user of the transmitter S can therefore operate the system in a very simple manner by means of a corresponding Activate or re-initialize transmitter control elements SB, although the technical effort, in particular for the random number generator Z, is low, and although there is no automatic dialogue between the transmitter S and the receiver E and accordingly no effort for an auxiliary receiver in the transmitter S. is required for (re) initialization; In addition, in spite of the simplicity of operation and the technical construction of the invention, it is in principle not always necessary to use additional special devices, not even on the part of the selling car dealer, in order to use the transmitter-receiver system for the first time, or again later, initialize completely.

Der Sender S enthält also einen Zufallsgenerator Z, der auf ein Mal als Ganzes - oder in Etappen - den zu übertragenden Urcode UC bildet, oder einen (neuen) Code bzw. Bruchstücke des neuen Code bildet, aus dem erst durch Umrechnen der zu übertragende Urcode UC gebildet wird. Dieser vom Zufallsgenerator Z generierte Code selbst, oder ein nachträglich daraus im Sender S durch Umrechnung/Verschlüsselung abgeleiteter Code, wird als Urcode UC zum Empfänger E übertragen, wobei letzterer, analog zum Betrieb im Sender S, unmittelbar diesen Urcode UC, oder einen davon durch einen Algorithmus abgeleiteten Code, als Startcode SC verwendet.The transmitter S thus contains a random generator Z, which at one time as a whole - or in stages - forms the original code UC to be transmitted, or forms a (new) code or fragments of the new code from which the original code to be transmitted is only converted by conversion UC is formed. This code itself generated by the random number generator Z, or a code derived therefrom in the transmitter S by conversion / encryption, is transmitted as the original code UC to the receiver E, the latter, analogously to the operation in the transmitter S, directly using this original code UC, or one of these an algorithm derived code, used as start code SC.

Der Aufwand für den Zufallsgenerator Z ist besonders klein, selbst wenn ein sehr langer Urcode UC ausgestrahlt wird,

  • wenn der Zufallsgenerator Z nacheinander mehrere Zufallszahlen generiert, welche jeweils Bruchstücke B... darstellen, aus denen der Urcode UC gebildet wird, vgl. das Urcode-Zeitschlitzschema-Beispiel in Figur 3 mit den Bruchstücken B1, B2,..... ,
  • wenn also der Zufallsgenerator Z, z.B. durch mehrfaches Betätigen von zumindest einem der Bedienungselemente SB und zwar bevorzugt in einem speziellen, von einem Taktgenerator CL vorgegebenen Rhythmus, etappenweise alle für die Urcodeausstrahlung benötigten Bruchstücke B.... generiert.
The effort for the random generator Z is particularly small, even if a very long original code UC is broadcast,
  • if the random generator Z successively generates several random numbers, each representing fragments B ... from which the original code UC is formed, cf. the original code time slot scheme example in Figure 3 with the fragments B1, B2, .....,
  • if the random generator Z generates all the fragments B .... required for the original code transmission in stages, for example by repeated actuation of at least one of the operating elements SB and preferably in a special rhythm specified by a clock generator CL.

Die im Sender S angebrachte Logikeinheit µP wandelt die generierten Bruchstücke B nach einem Algorithmus in den zu übertragenden Urcode UC um,

  • z.B. durch schlichte zeitliche Aneinanderreihung der generierten Bruchstücke B,
  • oder, noch besser, durch zeitliche Verschachtelung der Bruchstücke B - z.B. gemäß Figur 3 -,
  • und/oder durch eine komplizierte logisch/algebraische Verknüpfung der generierten Bits der Bruchstücke B.
The logic unit µP installed in the transmitter S converts the generated ones Fragments B according to an algorithm into the original code UC to be transmitted,
  • eg by simply lining up the generated fragments B in time,
  • or, even better, by temporally nesting the fragments B - for example according to FIG. 3 -,
  • and / or by a complicated logical / algebraic combination of the generated bits of the fragments B.

Der so gebildete Urcode UC - bzw. der daraus gebildete Startcode SC - beruht also auf mehreren, also zumindest zwei, miteinander verschachtelten oder nichtverschachtelten, und/oder logisch/algebraisch miteinander verknüpften oder nichtverknüpften, jeweils für sich mittels des Zufallsgenerators Z generierten Bruchstücken B, die ihrerseits aus z.B. je acht Bits bestehen.The original code UC thus formed - or the start code SC formed therefrom - is therefore based on a plurality, that is to say at least two, of fragments B which are interleaved or not interleaved and / or logically / algebraically linked or not linked, each of which is generated by the random generator Z, which in turn from eg there are eight bits each.

Weil bei dieser Weiterbildung der Erfindung der mehr oder weniger lange - z.B. 64 Bit lange - Urcode UC bzw. Startcode SC aus beliebig vielen und beliebig langen Bruchstücken B... mittels des im Sender S enthaltenen Zufallsgenerators Z gebildet werden kann - z.B. aus 8 Bruchstücken, die ihrerseits aus z.B. je 8 Bits bestehen - , kann man vorteilhafterweise die Sicherheit gegen unbefugte Benutzung des Objektes/KFZ umso größer machen, je komplizierter, also auch je länger, der zu übertragende Urcode UC und der dazu korrelierende Startcode SC ist, obwohl dazu nur ein kleiner Zufallsgenerator Z verwendet werden kann, der jeweils nur kleine Bruchstücke B... aus verhältnismäßig wenigen Bits zu generieren fähig ist.Because in this development of the invention the more or less long - e.g. 64 bit long - original code UC or start code SC can be formed from any number and any length of fragments B ... by means of the random generator Z contained in the transmitter S - e.g. from 8 fragments, which in turn consist of e.g. There are 8 bits each - the security against unauthorized use of the object / vehicle can advantageously be made all the greater, the more complicated, i.e. also the longer, the original code UC to be transmitted and the start code SC correlating to it, although only a small random generator Z is used for this can be used, which is only able to generate small fragments B ... from relatively few bits.

Eine zuverlässige Bedienerführung kann mit einer Weiterbildung erreicht werden, die - besonders wenn der Takt sehr unregelmäßig ist - auch dagegen schützt, daß durch zufällige Betätigungen des/der Bedienungselemente/s unbeabsichtigt vom Sender ein Urcode ausgestrahlt wird: Hierzu ist eine von einem Taktgeber CL gesteuerte Anzeige L, z.B. ein Lämpchen L oder eine stromsparende LCD-Anzeige L, angebracht, welche, zur Bedienerführung wahrend des Initialisierens bzw. Re-Initialisierens, einen Takt zur Betätigung - z.B. zum Drücken und/oder zum Loslassen - des/ der betreffenden Sender-Bedienungselemente/-s SB vorgibt, um während dieser Takte etappenweise die Bruchstücke B - und damit schließlich den Urcode UC bzw. Startcode SC - mittels des Zufallsgenerators Z und mittels der die Bruchstücke B verarbeitenden Logikschaltung µP zu generieren.Reliable operator guidance can be achieved with a further development, which - especially if the clock is very irregular - also protects against the fact that the transmitter accidentally transmits an original code due to accidental actuation of the control element (s): This is controlled by a clock generator CL Display L, for example a lamp L or a power-saving LCD display L, is attached, which, for operator guidance during initialization or re-initialization, has a cycle for actuation - for example for pressing and / or releasing - of the / of the transmitter control elements / -s SB in question, in order to generate the fragments B - and thus finally the original code UC or start code SC - in stages during these cycles by means of the random generator Z and by means of the logic circuit μP processing the fragments B.

Wenn der Urcode UC auf mindestens drei - also z.B. auf fünf oder acht - Bruchstücken B von jeweils mehreren - z.B. mindestens acht Bits - beruht, und wenn zusätzlich der Taktgeber CL und damit die Anzeige L im Sender S, oder ein Taktgeber CL und eine Anzeige EL im Empfänger E, in einem ungleichmäßigen (!) Takt jene Zeitspannen vorgibt, in welchen ein Bruchstück B mittels entsprechender Betätigung der/des betreffenden Bedienungselemente/-s generiert und/oder ausgesendet werden kann, ist die Sicherheit vergrößert, daß kein Unberechtigter (z.B. spielende Kinder!) und selbst kein berechtigter Benutzer (!) versehentlich Bruchstücke und damit einen Urcode generiert, falls er versehentlich entsprechende Sender-Bedienungselemente betätigt, wobei durch diese Maßnahme auch eine nicht zu kleine Mindestanzahl der zur (Re-)Initialisierung nötigen Betätigungen vorgegeben werden kann.If the original code UC is at least three - e.g. on five or eight - fragments B of several - e.g. at least eight bits - and if, in addition, the clock CL and thus the display L in the transmitter S, or a clock CL and a display EL in the receiver E, in an uneven (!) clock specifies those periods in which a fragment B by means of corresponding actuation of the relevant control element / s can be generated and / or transmitted, the security is increased that no unauthorized person (e.g. children playing!) and even no authorized user (!) accidentally generates fragments and thus a master code if he corresponding transmitter control elements are inadvertently actuated, this measure also being able to specify a minimum number of the actuations required for (re) initialization which is not too small.

Diese Sicherheit gegen unbefugte oder unbeabsichtigte Fehlbedienungen der Sender-Bedienungselemente SB kann weiter dadurch vergrößert werden, daß die vom Taktgeber CL jeweils vorgegebene Zeitspanne, in welcher das/die betreffenden Sender-Bedienungselemente SB zur Zufallszahlengenerierung bedient werden müssen, nicht (!) sofort mit dem Erscheinen der Anzeige L bzw.EL beginnt, sondern erst später beginnt: Die Sicherheit gegen jene Fehlbedienungen ist also erhöht,

  • dadurch daß die vom Taktgeber CL zur Betätigung der Bedienungselemente SB mittels der Anzeige L bzw. EL ungleichmäßig vorgegebenen Zeitspannen jeweils erst nach (!) einer vorgegebenen, dem berechtigten Benutzer bekannten Verzögerung - von z.B. einer oder zwei Sekunden - nach (!) dem Erscheinen der Anzeige L bzw. EL beginnen,
  • und/oder noch dadurch daß zusätzlich durch diesen Taktgeber CL - oder durch einen weiteren Taktgeber - diese Zeitspannen auf eine maximale Dauer - von z.B. drei Sekunden - begrenzt sind.
This security against unauthorized or unintentional incorrect operation of the transmitter control elements SB can be further increased by the fact that the time period specified by the clock generator CL in which the transmitter control element (s) in question must be operated for random number generation does not (!) Immediately with the Appearance of the display L orEL begins, but only begins later: The security against those incorrect operations is increased,
  • characterized in that the time spans unevenly predetermined by the clock generator CL for actuating the operating elements SB by means of the display L or EL only after (!) a predetermined delay known to the authorized user - for example one or two seconds - after (!) the appearance of the Start display L or EL,
  • and / or by the fact that these time periods are additionally provided by this clock generator CL - or by a further clock generator are limited to a maximum duration of three seconds, for example.

Wird/werden das/die betreffenden Sender-Bedienungselement/-e falsch bedient, wird in diesem Falle die Generierung des Urcode UC bzw. des Startcode SC bevorzugt abgebrochen; - evtl. wird zusätzlich mittels eines Zeitgliedes in diesem Fall jede Generierung eines Bruchstückes für eine gewisse Dauer, z.B. für 10 Minuten, unterbunden.If the transmitter control element (s) in question is / are operated incorrectly, the generation of the original code UC or the start code SC is preferably terminated in this case; - In this case, a timer may also be used to generate each fragment for a certain duration, e.g. for 10 minutes, prevented.

Zusätzlich kann der Sender S entweder unmittelbar die generierten verschiedenen Bruchstücke B, - oder einen oder mehrere, aus diesen Bruchstücken B gemäß einem Algorithmus gebildete Werte - prophylaktisch zur späteren Festlegung eines/einer neuen Code/Codemenge SI in seinem Senderspeicher SS speichern, um mittels dieser Bruchstücke B bzw. Werte bei Bedarf den daraus gebildeten Urcode UC, gestartet durch eine entsprechende Betätigung von zumindest einem seiner Sender-Bedienungselemente SB, auszusenden. Dadurch können vom Benutzer ganz nebenbei und nach und nach, auch während normaler Betätigungen der Zentralverriegelung ST, bzw. einer beliebigen Einrichtung ST, vgl. Figur 2, alle Vorbereitungen zur Aussendung des Urcode getroffen werden, um später bei Bedarf den Urcode zum Empfänger rasch vollständig übertragen zu können.In addition, the transmitter S can either directly store the generated various fragments B, or one or more values formed from these fragments B according to an algorithm, prophylactically for later determination of a new code / code quantity SI in its transmitter memory SS, in order to use them Fragments B or values, if necessary, to send out the original code UC formed therefrom, started by a corresponding actuation of at least one of its transmitter operating elements SB. As a result, the user can gradually and gradually, even during normal actuations of the central locking ST, or any device ST, cf. Figure 2, all preparations are made to send the original code in order to be able to quickly transmit the original code to the recipient later if required.

Die Sicherheit gegen unbefugtes Abhören des ausgestrahlten bzw. übertragenen Urcode kann auch dadurch erhöht werden, daß ein unbefugter Dritter in für ihn wenig nützlicher Weise höchstens Teile des Urcode, aber nicht ohne weiteres den ganzen Urcode abhören kann. Dazu kann der Urcode UC in Etappen ausgestrahlt und jede Etappe durch Betätigung der/des betreffenden Sender-Bedienungselemente/s SB ausgelöst werden.The security against unauthorized eavesdropping on the transmitted or transmitted original code can also be increased in that an unauthorized third party can intercept at most parts of the original code, but not easily, the entire original code in a manner which is not very useful for him. For this purpose, the master code UC can be broadcast in stages and each stage can be triggered by actuating the transmitter control element / s SB concerned.

Man kann übrigens den Sender S auch so gestalten und betreiben, daß er bei entsprechender Betätigung zumindest eines seiner Sender-Bedienungselemente SB den Urcode UC als Ganzes in einem einzigen Block aussendet, vgl. auch Figur 3. Dadurch kann die Sicherheit gegen Fehlbedienungen des Senders vergrößert werden, wobei auch die Wahrscheinlichkeit vergrößert wird, daß, je nach der verwendeten Norm, zumindest alle 1-Bits des Urcode, wenn nicht auch die 0-Bits, mit angenähert gleicher Leistung zum Empfänger E übertragen werden.Incidentally, the transmitter S can also be designed and operated in such a way that it transmits the original code UC as a whole in a single block when at least one of its transmitter operating elements SB is actuated, cf. also Figure 3. This can increase security against incorrect operation of the transmitter, which also increases the likelihood that, depending on the standard used, at least all 1 bits of the original code, if not also the 0 bits, are transmitted to the receiver E with approximately the same power.

Um dem Benutzer zu erleichtern, durch eine Rückmeldung die Gewißheit zu gewinnen, daß die (Re-)Initialisierung einwandfrei beendet ist, kann die im Sender S angebrachte Anzeige L oder eine weitere, z.B. im Empfänger E angebrachte Anzeige EL - z.B. durch Blinken - anzeigen, daß alle Bruchstücke B generiert bzw. ausgesendet sind.In order to make it easier for the user to gain the certainty that the (re) initialization has ended correctly by means of a feedback, the display L or another, e.g. display EL mounted in receiver E - e.g. by flashing - indicate that all fragments B have been generated or sent.

Bei einer Weiterbildung der Erfindung ist das zum Generieren benutzte Sender-Bedienungselement SB und das im Normalbetrieb zum Aussenden des Startcode bzw. Fortsetzungscode benutzte Sender-Bedienungselement SB identisch, - es ist also z.B. nur ein einziges statt der in Figur 2 gezeigten zwei Sender-Bedienungselemente SB vorhanden - , so daß dann bei jeder Betätigung des betreffenden Sender-Bedienungselementes SB jeweils neu ein Bruchstück B generiert wird. Außerdem wird dann das jeweils generierte Bruchstück B unmittelbar, also vor einer nächsten Betätigung des betreffenden Sender-Bedienungselementes SB, - als solches oder umcodiert - im Senderspeicher SS, z.B. in dessen RAM, auf Vorrat zwischengespeichert. Dadurch kann man den Aufwand an Bedienungselementen SB sowie den Aufwand des Benutzers zur Vorbereitung einer Re-Initialisierung verringern, indem schon während des Normalbetriebs,bei dem die Dauer und die Anzahl der Betätigungen der Sender-Bedienungselemente SB jeweils recht willkürlich sind, stark abweichende Zufallszahlen als später verwendbare Bruchstücke gewonnen werden. In diesem Fall ist vor allem auch dann, wenn später in sehr großer Eile eine Re-Initialisierung durchgeführt werden sollte, der Zeitaufwand zum Vorbereiten der Re-Initialisierung vermieden und damit selbst in solchen Eilfällen die Sicherheit gegen unberechtigtes Mithören erhöht.In a development of the invention, the transmitter control element SB used for generating and the transmitter control element SB used in normal operation for sending out the start code or continuation code are identical, for example it is only one instead of the two transmitter control elements SB shown in FIG. 2 is present, so that a new fragment B is generated each time the transmitter control element SB is actuated. In addition, the fragment B generated in each case is then immediately, that is, before the next actuation of the transmitter control element SB in question - as such or recoded - in the transmitter memory SS, e.g. in its RAM, temporarily stored. This allows you to reduce the amount of control elements SB and the effort of the user to prepare for a re-initialization, by already using very different random numbers during normal operation, in which the duration and the number of operations of the transmitter control elements SB are quite arbitrary fragments that can be used later are obtained. In this case, especially if a re-initialization should be carried out later in very great hurry, the time required to prepare the re-initialization is avoided and the security against unauthorized listening is thus increased even in such urgent cases.

Wenn der Senderspeicher SS nur einen RAM enthält, wird bei einem Batteriewechsel - der Sender S benötigt meistens eine Batterie - stets eine neue Initialisierung nötig, bevor das System wieder normal betätigt werden kann. Wenn hingegen der Sender S - zumindest zusätzlich zu einem RAM - auch noch einen ROM, z.B. einen EEPROM, als Senderspeicher SS enthält, kann eine Re-Initialisierung bei dem Batteriewechsel auch vermieden werden.If the transmitter memory SS contains only one RAM, a new initialization is always necessary when changing the battery - the transmitter S usually requires a battery - before this System can be operated normally. On the other hand, if the transmitter S - at least in addition to a RAM - also contains a ROM, for example an EEPROM, as the transmitter memory SS, reinitialization when changing the battery can also be avoided.

Die Funktionssicherheit des Sender-Empfänger-Systems während des (Re-)Initialisierens kann man dadurch erhöhen, daß zum ausgesendeten Urcode UC ein das Initialisieren bzw. Re-Initialisieren anzeigender, mehr oder weniger langer Zusatzcode ZC - z.B. nur sechs oder vielleicht auch weit über vierzig bestimmte zusätzliche Bits ZC - hinzugefügt ist, um dem Empfänger mitzuteilen, daß nun ein Urcode UC übertragen wird. Dieser Zusatzcode ZC kann z.B. gemäß Figur 3 unmittelbar vor dem Urcode UC ausgestrahlt werden.The functional reliability of the transmitter-receiver system during the (re) initialization can be increased by adding a more or less long additional code ZC to the original code UC, which indicates the initialization or re-initialization - e.g. only six, or perhaps well over forty, certain additional bits ZC - has been added to inform the receiver that an original code UC is now being transmitted. This additional code ZC can e.g. 3 are broadcast immediately before the original code UC.

Wenn ein Bruchstück B des Urcode UC bzw. der ganze Urcode UC unmittelbar zusammen mit dem Zusatzcode ZC ausgesendet wird, wird die Zuverlässigkeit und Einfachheit der Bedienung während des (Re-)Initialisierens erhöht, unter anderem weil die Leistung, mit der die einzelnen Bits bzw. 1-Bits des Urcode ausgestrahlt werden, dann angenähert gleich groß ist.If a fragment B of the original code UC or the entire original code UC is sent directly together with the additional code ZC, the reliability and simplicity of operation during the (re) initialization is increased, among other things because the performance with which the individual bits or 1 bits of the original code are broadcast, then approximately the same size.

Dieser schon oben erwähnte Zusatzcode ZC kann auch für sich, z.B. um die Sicherheit gegen unbefugte (Re-)Initialisierungen und damit gegen Diebstahl zu erhöhen, auch dem betreffenden Empfänger und Sender des Systems als von System zu System verschiedener, aber dann für das betreffende System fester Zusatzcode ZC, z.B. vom Händler, eingegeben werden. Dieser individuell dem System anfänglich fest zugeordnete Zusatzcode ZC gestattet, später das System mittels des Zufallsgenerators in erfindungsgemäßer Weise zu re-initialisieren, wobei Fremde mit ihren fremden Sendern, mangels Identität ihres Zusatzcode ZC, das System nicht mehr verbotenerweise initialisieren und dann auch gleichsam im Normalbetrieb betätigen können.This additional code ZC mentioned above can also be used on its own, e.g. In order to increase security against unauthorized (re) initialization and thus against theft, the relevant receiver and sender of the system as an additional code ZC which differs from system to system but is then fixed for the system in question, e.g. by the dealer. This additional code ZC, which is initially permanently assigned to the system, allows the system to be reinitialized later using the random generator in the manner according to the invention, with strangers no longer initializing the system illegally with their external transmitters, for lack of identity of their additional code ZC, and then also in normal operation can operate.

Den Aufwand an Bauteilen kann man auch dadurch verringern - besonders wenn ohnehin schon aus anderen Gründen eine Anzeige, z.B. eine stromsparende LCD-Anzeige am Sender angebracht ist, z.B. um dessen Betriebsbereitschaft anzuzeigen, - daß der Taktgeber CL und die Anzeige L im Sender S angebracht sind, vgl. Figur 2, und daß die Anzeige L vorgibt, mit welchem Takt etappenweise die Bruchstücke B zu generieren sind.This can also reduce the outlay on components - especially if there is already an indicator for other reasons, For example, a power-saving LCD display is attached to the transmitter, for example to indicate its operational readiness, - that the clock generator CL and the display L are attached to the transmitter S, cf. FIG. 2, and that the display L specifies the cycle with which the fragments B are to be generated in stages.

Dann, wenn der Taktgeber CL und die Anzeige EL aber im Empfänger E angebracht sind und die Anzeige EL vorgibt, mit welchem Takt etappenweise jeweils ein Urcode-Bruchstück B durch Betätigung der/des betreffenden Sender-Bedienungselemente/s SB auszusenden ist, kann man das Gewicht und den Aufwand für die Anbringung einer Anzeige im Sender S vermeiden und darüberhinaus eine, oft schon aus anderen Gründen angebrachte Anzeige am Empfänger, z.B. die Anzeige einer Diebstahlwarnanlage, mitbenutzen. Überdies gestattet dann die vom Empfänger E statt vom Sender S vollzogene Menüführung der Person, welche die (Re-)Initialisierung durchführt, daß die Wahrscheinlichkeit sehr klein wird, daß das System versehentlich (re-)initialisiert wird, indem z.B. versehentlich die Bedienungselemente SB durch Kinder nach einem Rhythmus bedient werden, der durch die Anzeige / durch das Lämpchen L des Senders S vorgegeben wird. - Besonders zuverlässig vermeidet man unbeabsichtigte (Re-)Initialisierungen des Systems, wenn der Empfänger E nur dann zum Empfang des Urcode UC bereit ist, wenn der betreffende Bediener zusätzlich eine andere Maßnahme vornahm. Er kann z.B. dazu zusätzlich den Zündschlüssel in das Zündschloß stecken und in eine bestimmte Stellung drehen müssen, damit der Empfänger E überhaupt zum Empfang des Urcode UC bereit ist.Then, when the clock generator CL and the display EL are mounted in the receiver E and the display EL specifies the clock at which a master code fragment B is to be sent out in stages by actuating the transmitter control element / s SB concerned, this can be done Avoid weight and the effort for attaching an advertisement in the transmitter S and also an advertisement on the receiver, often attached for other reasons, for example share the display of an anti-theft alarm system. In addition, the menu navigation performed by the receiver E instead of the transmitter S then enables the person who carries out the (re) initialization to make it very small that the system is inadvertently (re) initialized, e.g. the control elements SB are accidentally operated by children according to a rhythm which is specified by the display / by the lamp L of the transmitter S. - Unintentional (re) initialization of the system is avoided particularly reliably if the receiver E is only ready to receive the original code UC if the operator concerned also took another measure. He can e.g. to do this, also insert the ignition key in the ignition lock and have to turn it to a specific position so that the receiver E is even ready to receive the original code UC.

Dem Bediener kann man erleichtern, die Gewißheit zu gewinnen, daß die (Re-)Initialisierung einwandfrei beendet ist, wenn eine im Empfänger E angebrachte Anzeige EL nach dem Empfang des Bruchstückes oder des ganzen Urcode UC diesen Empfang deutlich anzeigt, also deutlich quittiert, - unabhängig davon, ob diese Anzeige EL vorher den Takt zur Generierung der Bruchstücke B vorgab, oder nicht.It can be easier for the operator to gain the certainty that the (re) initialization has ended properly when an EL display in the receiver E clearly shows this reception after receipt of the fragment or the entire original code UC, that is to say clearly acknowledges it, regardless of whether this display EL previously specified the clock for generating the fragments B or not.

Auch wenn der Empfänger E nach dem Gelingen des (Re-)Initialisierens als Quittung kurzzeitig die Einrichtung ST - also z.B. die KFZ-Zentralverriegelung ST - erkennbar betätigt, wird dem Benutzer erleichtert, die Gewißheit zu gewinnen, daß die (Re-) Initialisierung einwandfrei beendet ist, und zwar selbst dann, falls keine besondere sonstige Anzeige, wie z.B. ein Lämpchen, für diesen Zweck am Empfänger angebracht ist.Even if the recipient E after the (re) initialization is successful When the device ST is briefly actuated as a receipt, for example the central vehicle locking device ST, the user is relieved to gain the certainty that the (re) initialization has ended properly, even if no other special display such as a lamp, is attached to the receiver for this purpose.

Die Sicherheit gegen fehlerhafte (Re-)Initialisierungen kann man erhöhen, vor allem auch unbeabsichtigte (Re-)Initialisierungen vermeiden, wenn ein Sender-Bedienungselement SB, welches zum Aussenden des Urcode UC - und/oder zum endgültigen Speichern des Urcode UC bzw. Startcode SC in einem Senderspeicher SS - zu betätigen ist, eine nur mit einem spitzen Gegenstand zu betätigende, in das Sendergehäuse S eingelassene Minitaste SB ist.The security against incorrect (re) initializations can be increased, and above all, unintentional (re) initializations can be avoided if a transmitter control element SB, which is used to transmit the original code UC - and / or to finally save the original code UC or start code SC in a transmitter memory SS - is to be pressed, is a mini button SB to be actuated only with a pointed object and is inserted into the transmitter housing S.

Der Sender S kann eine Uhr und/oder einen Zähler ZR enthalten, um die Gesamtdauer und/oder die Anzahl von wiederholten Aussendungen des Urcode UC bzw. seiner Bruchstücke B zu zählen. Hierbei kann die Uhr und/oder der Zähler ZR die Aussendungen verhindern, sobald eine Maximalzeit und/oder Maximalanzahl der Ausstrahlungen überschritten wurde. Dadurch kann man die Sicherheit gegen unberechtigtes Abhören des Urcode weiter erhöhen, weil die Ausstrahlung zwingend beendet wird, sobald der Urcode vollständig bzw. ausreichend oft ausgestrahlt wurde.The transmitter S can contain a clock and / or a counter ZR in order to count the total duration and / or the number of repeated transmissions of the original code UC or its fragments B. The clock and / or the counter ZR can prevent the transmissions as soon as a maximum time and / or maximum number of transmissions has been exceeded. This further increases security against unauthorized eavesdropping on the original code, because the broadcasting must be ended as soon as the original code has been broadcast completely or sufficiently often.

Die Sicherheit gegen unberechtigtes Abhören kann man noch weiter erhöhen, wenn der Sender S nach einer entsprechenden Betätigung zumindest eines seiner Sender-Bedienungselemente SB das weitere Aussenden des Urcode UC zu unterbinden gestattet.The security against unauthorized eavesdropping can be further increased if the transmitter S, after a corresponding actuation of at least one of its transmitter operating elements SB, allows the further transmission of the original code UC to be prevented.

Bei einer Weiterbildung der Erfindung wird bzw. werden während des Initialisierens bzw. Re-Initialisierens bei Nichteinhaltung des vorgegebenen Taktes, und/oder bei Nichteinhaltung der durch die Uhr oder durch den Zähler ZR vorgegebenen Dauern bzw. Ausstrahlungs- bzw. Übertragungsanzahlen, das bisher generierte und/oder das bisher ausgesendete Bruchstück B, bzw. die bisher generierten und/oder die bisher ausgesendeten Bruchstücke B, des Urcode UC nicht mehr zur Zusammensetzung eines Urcode UC benutzt. Stattdessen wird vom Sender S und vom Empfänger E dann nur der vorher bzw. früher gültige Urcode UC bzw. Startcode SC, bzw. ein davon inzwischen abgeleiteter Fortsetzungscode SI, für die nächsten im Normalbetrieb auszusendenden Codes SI zur Betätigung der Einrichtung ST weiterhin benutzt, soweit ein solcher Urcode UC bzw. Startcode SC vorher überhaupt in ihm erzeugt oder in ihn eingegeben war. Dadurch wird die Sicherheit gegen fehlerhafte (Re-)Initialisierungen weiter erhöht und vor allem auch nach fehlerhaften Re-Initialisierungen ein einwandfreier Weiterbetrieb des Sender-Empfänger-Systems ermöglicht.In a further development of the invention, the previously generated is or will be generated during the initialization or re-initialization if the predetermined clock is not adhered to and / or if the durations or transmission or transmission numbers specified by the clock or by the counter ZR are not adhered to and / or the previously transmitted fragment B, or the previously generated and / or the previously transmitted fragments B, of the original code UC is no longer used to compose an original code UC. Instead, the transmitter S and the receiver E then only use the previously or previously valid original code UC or start code SC, or a continuation code SI derived therefrom, for the next codes SI to be transmitted in normal operation for actuating the device ST, insofar as such a master code UC or start code SC was previously generated in it or entered into it. This further increases the security against faulty (re) initializations and, above all, enables faultless continued operation of the transmitter-receiver system even after faulty re-initializations.

Einem unberechtigten Dritten, der den ausgestrahlten Urcode abhört, wird weiter erschwert, einen die Berechtigung vortäuschenden Code, nämlich Urcode, Startcode oder (bei Wechselcode) späteren Fortsetzungscode, zu generieren, also besonders die Sicherheit gegen Diebstahl zu erhöhen, wenn der Sender S eine Umrechnungseinheit µP enthält, mittels welcher der Sender S den Urcode UC bzw. seine Bruchstücke B - evtl. zusammen mit dem Zusatzcode ZC - verschlüsselt, um den Urcode UC verschlüsselt auszusenden, und wenn auch der Empfänger E eine Umrechnungseinheit µP enthält, mittels welcher der Empfänger E aus dem empfangenen codierten Signal SI den unverschlüsselten Urcode UC oder den Startcode SC bildet.An unauthorized third party who listens to the transmitted original code is further made more difficult to generate a code that pretends to be authorized, namely the original code, start code or (in the case of an alternating code) subsequent code, in particular to increase security against theft if the transmitter S uses a conversion unit µP contains, by means of which the transmitter S encrypts the original code UC or its fragments B - possibly together with the additional code ZC - in order to transmit the original code UC in encrypted form, and if the receiver E also contains a conversion unit µP, by means of which the receiver E forms the unencrypted original code UC or the start code SC from the received coded signal SI.

Wenn der Sender S und der Empfänger E je eine Recheneinheit µP enthält, welche im Normalbetrieb nach einem von mehreren, im Prinzip möglichen Algorithmen von Fall zu Fall den zu übertragenden nächsten Fortsetzungscode SI berechnet, wobei dieser berechnete Code SI jeweils einer aus der zulässigen Codemenge SI ist, und wenn zusätzlich der Urcode UC nicht nur eine Festlegung des zukünftig zu benutzenden Startcode SC, sondern auch eine Festlegung der zukünftig zu benutzenden Alternative des Algorithmus enthält, wird einem unberechtigten Dritten die Nachbildung bzw. die Berechnung bzw. das Erraten von berechtigenden Fortsetzungscodes SI weiter erschwert.If the transmitter S and the receiver E each contain an arithmetic unit µP which, in normal operation, calculates the next continuation code SI to be transmitted from case to case in normal operation according to one of several algorithms which are possible in principle, this calculated code SI in each case being one of the permitted code quantity SI and if the original code UC also contains not only a definition of the future start code SC to be used, but also a definition of the alternative algorithm to be used in the future, an unauthorized third party becomes the replica or the calculation or guessing of justifying continuation codes SI further complicated.

Mit relativ wenig Aufwand kann man mehrere, jeweils sehr willkürliche Zufallszahlen generieren, um daraus den zum Empfänger zu übertragenden, sehr langen Urcode zu bilden, wenn der im Sender S enthaltene Zufallsgenerator Z eine Zählereinheit oder eine als Zähler arbeitende Einheit eines Rechners µP ist. Diese Einheit zählt bei entsprechendem Betätigen von zumindest einem seiner Bedienungselemente SB rasch immer wieder von Null bis zu einer hohen Zahl - also z.B. bis zur Zahl 255, wobei sie diese Zählung solange und so oft wiederholt, bis durch eine entsprechende, dem vorgegebenen unrhythmischen Takt gerechte Betätigung - z.B. durch rechtzeitiges Loslassen - des/der betreffenden Bedienungselemente/-s SB das dann erreichte Zählergebnis als Bruchstück B des Urcode UC bzw. Startcode SC generiert ist.With relatively little effort, you can do several, each very arbitrary Generate random numbers in order to form the very long original code to be transmitted to the receiver if the random generator Z contained in the transmitter S is a counter unit or a unit of a computer μP operating as a counter. This unit counts rapidly from zero to a large number - for example up to the number 255 - when at least one of its control elements SB is actuated accordingly, and it repeats this counting as often and until a suitable rhythm that is appropriate for the given rhythm Actuation - for example by timely releasing - of the relevant control element (s) SB the result achieved is generated as a fragment B of the original code UC or start code SC.

Wenn die Dauer eines von Null bis Null dauernden einzelnen Zählzyklusses höchstens ein zehntel Sekunde beträgt, und wenn dabei die Maximaldauer der betreffenden Zeitspanne und damit die Maximaldauer, die zur Generierung eines Bruchstückes B und damit zur entsprechenden Betätigung von zumindest einem betreffenden Bedienungselement SB zugelassen ist, höchstens zehn Sekunden beträgt, kann man in besonders bedienerfreundlicher Weise die Dauer des (Re-)Initialisierungsvorganges verkürzen, ohne stark zu riskieren, daß das generierte Bruchstück B keine sehr willkürliche Zufallszahl mehr ist.If the duration of an individual counting cycle lasting from zero to zero is at most one tenth of a second, and if the maximum duration of the relevant time period and thus the maximum duration that is permitted for generating a fragment B and thus for the corresponding actuation of at least one relevant operating element SB, is at most ten seconds, the duration of the (re) initialization process can be shortened in a particularly user-friendly manner without risking that the generated fragment B is no longer a very arbitrary random number.

In der
- DE-OS(A) 29 09 134
ist bei einem ähnlich wie die Erfindung aufgebauten Sender-Empfänger-System bereits bekannt, unterschiedliche Leistungspegel für die Ubertragungen beim Schließen und beim Entriegeln der Türen eines KFZ zu verwenden. Dort ist angestrebt, die Türe noch zuverlässig zu betätigen, selbst wenn beim Schließen und Entriegeln, also im Normalbetrieb, z.B. wegen Alterung der Batterie, die Funtionstüchtigkeit des Systems nachläßt.In the
- DE-OS (A) 29 09 134
is already known in a transmitter-receiver system constructed similarly to the invention to use different power levels for the transmissions when closing and unlocking the doors of a motor vehicle. The aim there is to still operate the door reliably, even if the functionality of the system deteriorates when closing and unlocking, ie in normal operation, for example due to aging of the battery.

Eine Weiterbildung der Erfindung verwendet ebenfalls zwei verschiedene Leistungspegel zum Übertragen der Codes, aber in anderen Betriebsfällen: Zum Übertragen des Urcode UC, oder von Bruchstücken des Urcode UC, wird beim unidirektionalem (Re-)-Initialisieren (!) ein sehr viel niedriger Leistungspegel verwendet, als während des Normalbetriebes. Im Normalbetrieb, also zum Übertragen des Code SI, z.B. um das Türschloß des KFZ zu betätigen - z.B. also beim Übertragen eines Fortsetzungscode SI, wenn man einen Wechselcode verwendet - wird also bei der erfindungsgemäßen Weiterbildung eine relativ hohe Leistung zum Übertragen des Codes SI benutzt. Man kann dadurch z.B.,

  • wenn das Objekt O ein KFZ ist und
  • wenn das Sender-Empfänger-System ein System mit einem elektronischen Schlüssel S und mit einem im oder am KFZ O angebrachten Empfänger E ist,

im Normalbetrieb, also z.B. zum Öffnen und Schließen der KFZ-Türen, die Codes SI mit so hoher Leistung übertragen, daß diese Betätigungen der Türschlösser auch aus größerer Entfernung, abseits vom Auto, möglich sind. Wenn hingegen das System (re-)-initialisiert werden soll, dann werden der Urcode UC, oder zumindest Teile/Bruchstücke dieses Urcode UC, nur mit relativ kleiner Leistung übertragen, nämlich mit so kleiner Leistung, daß ein unbefugter Dritter aus größerer Entfernung nicht mehr diese schwachen Codesignale abhören kann.A further development of the invention also uses two different power levels for transmitting the codes, but in other operating cases: To transmit the original code UC, or fragments of the original code UC, unidirectional (re) initialization is used (!) uses a much lower power level than during normal operation. In normal operation, that is to say to transmit the code SI, for example in order to actuate the door lock of the motor vehicle - for example when transmitting a continuation code SI when an alternating code is used - a relatively high power is thus used in the further development according to the invention for transmitting the code SI. You can, for example,
  • if the object O is a motor vehicle and
  • if the transmitter-receiver system is a system with an electronic key S and with a receiver E mounted in or on the vehicle O,

In normal operation, for example for opening and closing the vehicle doors, the codes SI are transmitted with such high power that these actuations of the door locks are possible even from a greater distance away from the car. If, on the other hand, the system is to be (re -) initialized, then the original code UC, or at least parts / fragments of this original code UC, are only transmitted with relatively little power, namely with so little power that an unauthorized third party can no longer do so from a greater distance can listen to these weak code signals.

Statt der Sendeleistungsverminderung beim (Re-)Initialisieren - oder zusätzlich zu dieser Verminderung - kann man auch die Empfangsempfindlichkeit des Empfängers E beim (Re-)Initialisieren (also z.B. nach dem Empfangen des des Zusatzcode ZC) so stark vermindern, daß der Empfänger E in der Regel nur noch von einem Sender S (re-)initialisiert werden kann, der dann sehr nahe an den Empfänger E (also z.B. im Innern des KFZ O dicht an den Empfänger E) gehalten wird.Instead of the transmission power reduction during (re) initialization - or in addition to this reduction - one can also reduce the reception sensitivity of the receiver E during (re) initialization (e.g. after receiving the additional code ZC) so much that the receiver E in usually can only be (re) initialized by a transmitter S, which is then held very close to the receiver E (for example, inside the vehicle O close to the receiver E).

Die Sendeleistung des Senders S, ebenso die Empfindlichkeit des Empfängers E, kann man mit besonders wenig Aufwand dadurch herabsetzen, indem man im Sender S und/oder im Empfänger E in Reihe zum Sendeelement SE bzw. in Reihe zum Empfangselement EE einen nur während des (Re-)Initialisierens nicht überbrückten Widerstand - z.B. ein diese Betriebsart anzeigendes Lämpchen L - anbringt. Im Normalbetrieb ist dieser in Reihe angebrachte Widerstand hingegen überbrückt.The transmission power of the transmitter S, as well as the sensitivity of the receiver E, can be reduced with particularly little effort by placing one in the transmitter S and / or in the receiver E in series with the transmitting element SE or in series with the receiving element EE only during the ( Re-) initializing not bridged resistance - for example a lamp L indicating this operating mode - attaches. In normal operation, however, this series resistor is bridged.

Man kann aber dazu die Sendeleistung während des (Re-)Initialisierens (zusätzlich oder für sich auch alleine) dadurch herabsetzen, daß im Sender S das Sendeelement SE im Normalbetrieb von einer Leistungsstufe oder Leistungsendstufe mit relativ hoher Leistung also relativ hohem Betriebsstrom betrieben wird, daß aber dieses Sendeelement SE im (Re-)Initialisierungsbetrieb mit dem relativ niedrigen Betriebsstrom der im Sender angebrachten Anzeige L, z.B. einer LED-Anzeige L, betrieben wird.However, one can reduce the transmission power during (re) initialization (additionally or by itself) in that the transmitter element SE is operated in normal operation by a power stage or power stage with relatively high power, i.e. relatively high operating current, in the transmitter S. but this transmission element SE in (re) initialization mode with the relatively low operating current of the display L attached in the transmitter, for example an LED display L is operated.

Falls ein Sender-Empfänger-System benutzt wird, bei welchem der Sender S ein elektronischer KFZ-Schlüssel S ist, und bei welchem der Empfänger E in oder an dem KFZ O installiert ist, bei dem zusätzlich das Empfangselement EE des Empfängers E im Inneren des KFZ O angebracht ist, dann ist es besonders günstig, während des (Re-)Initialisierens, also zum Ubertragen des Urcode UC, oder zum Übertragen von Bruchstücken dieses Urcodes UC, die Übertragungsleistung so stark zu vermindern, daß mit dieser Leistung bei verschlossenem KFZ O kein (Re-)Initialisieren von außerhalb des verschlossenen KFZ O mehr möglich ist. Das (Re-) Initialisieren ist also nur noch möglich, wenn man im Inneren des KFZ O das Sendeelement SE des elektronischen Schlüssels S nahe genug an das Empfangselement EE des Empfängers E hält. Dadurch ist die Sicherheit gegen unbefugtes Mithören von Dritten während des Initialisierens besonders hoch.If a transmitter-receiver system is used, in which the transmitter S is an electronic vehicle key S, and in which the receiver E is installed in or on the vehicle O, in which the receiving element EE of the receiver E is also inside the KFZ O is attached, then it is particularly favorable to reduce the transmission power so much during the (re) initialization, that is to say for the transmission of the original code UC, or for the transfer of fragments of this original code UC, that with this power when the vehicle O (Re-) initialization from outside the locked vehicle O is no longer possible. The (re) initialization is therefore only possible if the transmission element SE of the electronic key S is kept close enough to the reception element EE of the receiver E inside the vehicle O. This ensures that security against unauthorized third party eavesdropping during initialization is particularly high.

Ein Sender S kann seinen Urcode UC auch zu mehreren Empfängern E zur (Re-)Initialisierung dieser Empfänger E übertragen. Z.B. kann dann ein einziger elektronischer Schlüssel S / Sender S gleichzeitig für mehrere Schließmechanismen verwendet werden. So kann dann derselbe Schlüssel z.B. den Empfänger E in einem KFZ O, ferner einen anderen Empfänger E an einem Garagentor (O), sowie einen weiteren Empfänger z.B. an einer Haustüre (re-)initialisieren, wonach mit demselben Schlüssel alle diese Schließ- mechanismen von der Ferne betätigt werden können, - im Prinzip mit derselben Sicherheit und Unkompliziertheit, als wenn nur ein einziger Empfänger E benutzt würde.A transmitter S can also transmit its original code UC to several receivers E for (re) initializing these receivers E. E.g. a single electronic key S / transmitter S can then be used simultaneously for several locking mechanisms. The same key can then e.g. the receiver E in a car O, also another receiver E on a garage door (O), and another receiver e.g. (Re) initialize at a front door, according to which all these locking mechanisms can be operated remotely with the same key, - in principle with the same security and simplicity as if only a single receiver E were used.

Es können aber auch mehrere verschiedene Sender S ihren jeweiligen, individuell ihnen zugeordneten Urcode UC zu einem einzigen Empfänger E zur (Re-)Initialisierung dieses Empfängers E übertragen. Z.B. können dann mehrere verschiedene elektronische Schlüssel S / Sender S für nur einen Empfänger E - z.B. in einem KFZ O - , also für einen einzigen, allen Sendern gemeinsamen Schließmechanismus verwendet werden. So können dann diese verschiedenen Schlüssel S also z.B. den Empfänger E in einem KFZ O (re-)initialisieren und anschließend jeder Sender S für sich den Empfänger E von der Ferne steuern. Der Empfänger E kann nämlich statt eines einzigen Urcode UC bzw. statt nur der aus diesem einzigen Urcode UC abgeleiteten Daten auch noch zusätzlich die Urcodes UC (bzw. daraus jeweils abgeleitete Daten) in seinem Empfängerspeicher ES speichern. Jeder Sender S (re-)initialisiert und steuert also dann den Empfänger E unabhängig von den anderen Sendern S. Man kann auch vorsehen, daß dann der oben erwähnte Zusatzcode ZC für alle Sender S identisch sein muß, damit keine weiteren Sender S von unberechtigten Personen den Empfänger E (re-)initialisieren können.However, several different transmitters S can also have their respective individually assigned original code UC to a single receiver E for the (re) initialization of this receiver E. For example, several different electronic keys S / transmitter S can then be used for only one receiver E - for example in a motor vehicle O - for a single locking mechanism common to all transmitters. Thus these different keys S can thus (for example) initialize the receiver E in a motor vehicle O and then each transmitter S independently controls the receiver E for itself. Instead of a single original code UC or instead of only the data derived from this single original code UC, the receiver E can also additionally store the original codes UC (or data derived therefrom) in its receiver memory ES. Each transmitter S (re) initializes and then controls the receiver E independently of the other transmitters S. It can also be provided that the above-mentioned additional code ZC must then be identical for all transmitters S, so that no further transmitters S are used by unauthorized persons can (re) initialize the receiver E.

Claims (29)

  1. Transmitter-receiver system (Figures 1 and 2) which checks the authorization to use an object (O) - for example to actuate the central locking system of a motor vehicle (O) - with
    - a transmitter (S) - for example an electronic motor vehicle key -
    . which has a transmitting element (SE) - for example a VHF antenna, ultrasonic radiator and/or infrared radiator - as well as one or more transmitter operator control elements (SB), which for their part can trigger the transmitting of coded signals (SI), the code concerning the authorization to use the object (O), and
    . which has at least a single transmitter memory (SS) for the storage of data on use authorizations,
    - a receiver (E) - for example fitted underneath the motor vehicle roof -
    . which has a receiving element (EE) - for example an ultrasonic microphone and/or infrared photo-diode - which receives the coded signals transmitted to it,
    . which has a receiver memory (ES) for the storage of data for determining the authorization or non-authorization of codes (SI) received, and
    . which has a logic unit (µP), which checks the respectively received code (SI) by means of the data stored in the receiver memory (ES) and, depending on the result of the check, actuates or does not actuate a mechanism (ST) - for example a motor vehicle central locking system (ST) and/or a motor vehicle break-in alarm system (ST),
    in which system
    - for (re-)initialization, that is to say for initialization and/or for re-initialization,
       . i.e. for matching and/or rematching between a new code (SI) transmitted in future by the transmitter (S) and the code (SI) accepted in future as authorized by the receiver (E),
    the transmitter (S) contains for preparation of the new code/set of codes (SI) used in future by itself a random generator (Z), which in each case generates a random number (B1, B2...) by actuation of at least one of the transmitter operator control elements (SB), and
    - the transmitter (S) transmits to the receiver (E) an original code (UC), which for its part accordingly
    . either establishes the starting code (SC), that is to say new code (SC)
    . or, in the case of a changing code (SI), the set of various new codes (SI) (= set of codes) including the starting code (SC), that is to say including the first usable code of this set (SI)
    by this transmitted original code (UC) - and/or data (SC) formed in the receiver (E) and/or in the transmitter (S) from the original code (UC) by converting, for example a starting code (SC) formed by converting - being stored in the transmitter memory (SS) or in the receiver memory (ES),
    characterized in that
    - the random generator (Z) in each case generates only a fragment (B1, B2...), formed by the random number, of a code (UC, SC) by it (Z) generating in stages, by further actuations of at least one of the operator control elements (SB), also the remaining fragments (B1, B2...),
    - a logic unit (µP) fitted in the transmitter (S) converts the generated fragments (B1, B2...) into the original code (UC) to be transmitted,
    - that is to say the original code (UC) or starting code (SC) is derived from at least three - that is to say for example five or eight - fragments (B1, B2...) - of, for example, eight bits each interleaved or not interleaved with one another, in each case generated in themselves by means of the random generator (Z), and
    - this original code (UC) is transmitted unidirectionally from the transmitter (S) to the receiver (E), that is to say without any dialogue taking place automatically and bidirectionally between the transmitter (S) and the receiver (E).
  2. Transmitter-receiver system according to Patent Claim 1,
    characterized in that
       - a display (L, EL) - for example a small lamp (L, EL) - controlled by a clock generator (CL), which display stipulates for operator prompting during (re-)initializing a clock for actuation - for example for pressing and/or releasing - the transmitter operator control element(s) (SB), in order during these clocks to generate by stages the original code (UC) or starting code (SC) by means of the random generator (Z).
  3. Transmitter-receiver system according to Patent Claim 2,
    characterized in that
       - the clock generator (CL) and consequently the display (L, EL) stipulates in an uneven clock time periods in which a fragment (B1, B2...) can be generated and/or transmitted by means of appropriate actuation of the operator control element(s) concerned.
  4. Transmitter-receiver system according to Patent Claim 3,
    characterized in that
    - the time periods do not begin until after a stipulated delay - of for example one second - after the display (L, EL), and
    - the time periods are limited to a stipulated maximum duration - of for example three seconds.
  5. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - the transmitter (S) stores either these various fragments (B1, B2...) directly, or fragmental values indirectly, formed from these fragments (B1, B2...) according to an algorithm, for establishing the new code/set of codes (SI) in its transmitter memory (SS), in order to put together these fragments (B1, B2...) or values to form the original code (UC) and/or starting code (SC) and transmit the original code (UC) only after an appropriate actuation of at least one of its transmitter operator control elements (SB).
  6. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - the original code (UC) is transmitted in stages, and
    - each stage is triggered by actuation of the transmitter operator element(s) (SB) concerned.
  7. Transmitter-receiver system according to one of Patent Claims 1 to 5,
    characterized in that
       - with appropriate actuation of at least one of its transmitter operator control elements (SB), the transmitter (S) transmits the original code (UC) as a complete code in a block (Fig. 3).
  8. Transmitter-receiver system according to Patent Claim 2 and one other of the preceding patent claims,
    characterized in that
       - the display (L) fitted in the transmitter (S) and a display (EL) fitted in the receiver indicates that all the fragments (B1, B2...) have been generated and transmitted.
  9. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - the transmitter operator control element (SB) used for generating and the transmitter operator control element (SB) used in normal operation for transmitting the respective code are identical, so that with each actuation of the transmitter operator control element (SB) concerned a fragment (B1, B2...) is in each case newly generated, and
    - the respectively generated fragment (B1, B2...) is buffer-stored in reserve - as such or code-converted - in the transmitter memory (SS/RAM) directly, that is to say before a next actuation of the transmitter operator control element (SB) concerned.
  10. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - an additional code (ZC) - for example six particular additional bits - indicating initializing or reinitializing, is added to the original code (UC) transmitted, in order to inform the receiver that then an original code (UC) is being transmitted.
  11. Transmitter-receiver system according to Patent Claim 10,
    characterized in that
       - a fragment (B1, B2...) of the original code (UC) or the entire original code (UC) is transmitted directly together with the additional code (ZC).
  12. Transmitter-receiver system according to Patent Claim 2 and one other of the preceding patent claims,
    characterized in that
    - the clock generator (CL) and the display (L) are fitted in the transmitter (S) and
    - the display (L) stipulates with which clock the fragments (B1, B2...) are to be generated by stages.
  13. Transmitter-receiver system according to Patent Claim 2 and one other of the preceding patent claims,
    characterized in that
    - the clock generator (CL) is fitted in the transmitter (S) and/or in the receiver (E), and the display (EL) is fitted in the receiver (E) and
    - the display (EL) stipulates with which clock an original code fragment (B1, B2...) is in each case to be transmitted in stages by actuation of the transmitter operator control element(s) (SB) concerned.
  14. Transmitter-receiver system according to Patent Claim 13,
    characterized in that
       - the receiver (E) only carries out the (re)initialization effectively if the authorized person additionally carries out and/or has carried out an additional measure, for example the additional measure of "inserting the ignition key into the ignition lock and turning the ignition key to a certain position".
  15. Transmitter-receiver system according to Patent Claim 2 and one other of the preceding patent claims,
    characterized in that
       - after receiving the fragment or the entire original code (UC), a display (EL) fitted in the receiver (E) indicates the completeness of the reception.
  16. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - after succeeding in the (re-)initializing, the receiver (E) briefly actuates the mechanism (ST) - that is to say for example the motor vehicle central locking system (ST) - in a perceptible way as acknowledgement.
  17. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - a transmitter operator control element (SB) which has to be actuated for transmitting the original code (UC) - and/or for final storing of the original code (UC) or starting code (SC) in the transmitter memory (SS) - is a mini-button (SB) recessed into the transmitter housing (S) and is only able to be actuated with a pointed implement.
  18. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - the transmitter (S) contains a clock and/or a counter (ZR), in order to count the overall duration and/or the number of repeated transmissions of the original code (UC) or its fragments (B1, B2...), and
    - the clock and/or the counter (ZR) prevents the transmissions. as soon as a maximum time and/or maximum number of transmissions has been exceeded.
  19. Transmitter-receiver system according to Patent Claim 18,
    characterized in that
       - after appropriate actuation, the transmitter (S) allows at least one of its transmitter operator control elements (SB) to prevent the further transmitting of the original code (UC).
  20. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - during (re-)initializing, non-conformity with the stipulated clock, and/or non-conformity with the durations stipulated by the clock or the numbers of transmissions stipulated by the counter (ZR), have the effect that the previously generated and/or previously transmitted fragment (B1, B2...), or the previously generated and/or previously transmitted fragments (B1, B2...), of the original code (UC) is or are no longer used for making up an original code (UC), instead
    - then only the previous original code (UC) or starting code (SC), or else a continuation code derived therefrom in the meantime, continues to be used by the transmitter (S) and by the receiver (E) for the next codes (SI) to be transmitted in normal operation for actuation of the mechanism (ST), provided that such an original code (UC) or starting code (SC) has been generated in it or entered into it beforehand in the first place.
  21. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - the transmitter (S) contains a conversion unit (µP), by means of which the transmitter (S) enciphers the original code (UC) or its fragments (B1, B2...), in order to transmit the original code (UC) in enciphered form, and
    - the receiver (E) contains a conversion unit (µP), by means of which the receiver (E) forms from the coded signal (SI) received the undeciphered original code (UC) or the starting code (SC).
  22. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - the transmitter (S) and the receiver (E) each contain a logic unit (µP) which in normal operation calculates from case to case the next code (SI) to be transmitted on the basis of one of a plurality of algorithms, the calculated code (SI) in each case being one from the set of codes allowed, and
    - the original code (UC) includes not only a specification of the starting code (SC) to be used in future, but also a specification of the alternative of the algorithm to be used in future.
  23. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - the random generator (Z) contained in the transmitter (S) is a counter unit or a unit of a computer (µP) operating as a counter,
    . which unit, upon appropriate actuating of at least one of its operator control elements (SB), quickly counts repeatedly from zero to a high number - thus, for example, up to the number 255 - and
    . which repeats this counting for as long as and as often as it takes until, by an appropriate actuation of the operator control element(s) (SB) concerned, in keeping with the stipulated unrhythmical clock - for example by releasing at the right time - the counting result then reached is generated as fragment (B1, B2...) of the original code (UC) or starting code (SC).
  24. Transmitter-receiver system according to Patent Claim 23,
    characterized in that
    - the duration of a single counting cycle from zero to zero amounts to one tenth of a second at most, and
    - the maximum duration of the time period concerned, and consequently the maximum duration which is allowed for the generation of a fragment (B1, B2...) and consequently for the corresponding actuation of at least one operator control element (SB) concerned, amounts to ten seconds at most.
  25. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
    - in normal operation, when transmitting its respective code (SI) for use of the object (O), the transmitter has a relatively high transmitting power, but
    - when (re-)initializing the original code or codes (UC) transmitted, or at least parts thereof (UC, B1, B2...), the transmitter (S) transmits with comparatively such greatly reduced transmitting power that, during this (re-)initializing, the transmitter (S) must be at a very much smaller distance from the receiver (E) than during normal operation.
  26. Transmitter-receiver system according to Patent Claims 2 and 25,
    characterized in that
       - in the transmitter (S), the transmitting element (SE)
    . is operated in normal operation from a power (output) stage with relatively high power, and consequently with relatively high operating current, but
    . in (re-)initialization operation it is operated with the relatively low operating current of the display (L).
  27. Transmitter-receiver system according to Patent Claim 25 or 26,
    characterized in that
    - the transmitter (S) is an electronic motor vehicle key (S),
    - the receiver (E) is installed in or on a motor vehicle (O),
    - the receiving element (EE) of the receiver (E) is fitted in the interior of the motor vehicle (O), and
    - the reduced power used for (re-)initializing is too low to be able with the motor vehicle (O) locked to (re-)initialize the receiver (E) from outside the motor vehicle (O).
  28. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - the transmitter (S) transmits an original code (UC) to a plurality of receivers (E) for (re)initialization of the receivers (E) concerned.
  29. Transmitter-receiver system according to one of the preceding patent claims,
    characterized in that
       - the receiver (E) receives a different original code (UC) in each case from different transmitters (S).
EP90905435A 1989-05-18 1990-04-06 Transmission and receiving system Expired - Lifetime EP0472528B1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE3916175 1989-05-18
DE3916175 1989-05-18

Publications (2)

Publication Number Publication Date
EP0472528A1 EP0472528A1 (en) 1992-03-04
EP0472528B1 true EP0472528B1 (en) 1994-02-09

Family

ID=6380878

Family Applications (1)

Application Number Title Priority Date Filing Date
EP90905435A Expired - Lifetime EP0472528B1 (en) 1989-05-18 1990-04-06 Transmission and receiving system

Country Status (6)

Country Link
US (1) US5365225A (en)
EP (1) EP0472528B1 (en)
JP (1) JP2875019B2 (en)
AU (1) AU5358190A (en)
DE (1) DE59004565D1 (en)
WO (1) WO1990014484A1 (en)

Families Citing this family (91)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0523137B1 (en) * 1990-04-06 1994-09-21 Siemens Aktiengesellschaft Process for operating remote controlled central locking installation of motor vehicles
US6175312B1 (en) * 1990-05-29 2001-01-16 Microchip Technology Incorporated Encoder and decoder microchips and remote control devices for secure unidirectional communication
US5442341A (en) * 1992-04-10 1995-08-15 Trw Inc. Remote control security system
US5600324A (en) * 1992-05-11 1997-02-04 Rockwell International Corporation Keyless entry system using a rolling code
DE4223258C3 (en) * 1992-07-15 2001-03-15 Telefunken Microelectron Method for verifiable transmission of data
AU650410B3 (en) * 1992-10-05 1994-06-16 Pyk Pty. Ltd. A lock system
DE4301436C2 (en) * 1993-01-20 1996-06-13 Kaiser Hans Christian Security system
ATE176972T1 (en) * 1993-06-30 1999-03-15 Siemens Ag METHOD FOR DATA BACKUP IN A B-ISDN TELECOMMUNICATIONS SYSTEM
US5377270A (en) * 1993-06-30 1994-12-27 United Technologies Automotive, Inc. Cryptographic authentication of transmitted messages using pseudorandom numbers
US5363448A (en) * 1993-06-30 1994-11-08 United Technologies Automotive, Inc. Pseudorandom number generation and cryptographic authentication
US5680131A (en) * 1993-10-29 1997-10-21 National Semiconductor Corporation Security system having randomized synchronization code after power up
DE4344120C1 (en) * 1993-12-23 1994-12-08 Grundig Emv Method for increasing the interference immunity of a radio alarm installation
KR0162932B1 (en) * 1993-12-27 1998-12-15 쯔지 요시후미 Anti-theft device for a vehicle
DE4411449C1 (en) * 1994-04-01 1995-03-16 Daimler Benz Ag Vehicle security device with electronic use-authorisation coding
DE4411451C1 (en) * 1994-04-01 1995-05-04 Daimler Benz Ag Vehicle security device with electronic use authorisation encoding
DE4411450C1 (en) * 1994-04-01 1995-03-30 Daimler Benz Ag Vehicle security device with electronic use authorisation encoding
US6046680A (en) * 1994-06-15 2000-04-04 Texas Instruments Incorporated Method of preventing unauthorized reproduction of a transmission code
JP3099642B2 (en) * 1994-07-14 2000-10-16 トヨタ自動車株式会社 Vehicle anti-theft device
US5774060A (en) * 1994-08-16 1998-06-30 Kiekert Ag Motor-vehicle central lock system with transponder in key
DE4428947C1 (en) * 1994-08-16 1996-04-04 Kiekert Ag Coded remote operation of vehicle central locking system
JP3401940B2 (en) * 1994-09-30 2003-04-28 ソニー株式会社 Remote control system
US5606322A (en) * 1994-10-24 1997-02-25 Motorola, Inc. Divergent code generator and method
DE4441415C2 (en) * 1994-11-22 2003-06-18 Audi Ag Procedures for handling replacement keys
US5686887A (en) * 1994-12-07 1997-11-11 Schoeferisch Aeusserung Anstalt Electronic locating device
JP3017413B2 (en) * 1995-02-08 2000-03-06 本田技研工業株式会社 Vehicle data communication method and device
US5619574A (en) * 1995-02-13 1997-04-08 Eta Technologies Corporation Personal access management system
US5694472A (en) * 1995-02-13 1997-12-02 Eta Technologies Corporation Personal access management system
US5610980A (en) * 1995-02-13 1997-03-11 Eta Technologies Corporation Method and apparatus for re-initializing a processing device and a storage device
US5689564A (en) * 1995-02-13 1997-11-18 Eta Technologies Corporation Personal access management system
US5696825A (en) * 1995-02-13 1997-12-09 Eta Technologies Corporation Personal access management system
US5682428A (en) * 1995-02-13 1997-10-28 Eta Technologies Corporation Personal access management system
US5692049A (en) * 1995-02-13 1997-11-25 Eta Technologies Corporation Personal access management system
US5778068A (en) * 1995-02-13 1998-07-07 Eta Technologies Corporation Personal access management system
US5654688A (en) 1995-04-14 1997-08-05 Omega Research And Development, Inc. Vehicle security system having enhanced remote transmitter security
US6140938A (en) * 1995-04-14 2000-10-31 Flick; Kenneth E. Remote control system suitable for a vehicle and having remote transmitter verification
US6037859A (en) * 1998-03-05 2000-03-14 Flick; Kenneth E. Vehicle security system including control switch mounted to window antenna unit and associated methods
US6480117B1 (en) 1995-04-14 2002-11-12 Omega Patents, L.L.C. Vehicle control system including token verification and code reset features for electrically connected token
US7737820B2 (en) * 1995-04-14 2010-06-15 Omega Patents, L.L.C. Remote control system for an access door having remote transmitter verification
US6480095B1 (en) 1995-04-14 2002-11-12 Omega Patents, L.L.C. Vehicle control system including multi-digit control switch and associated methods
EP0750269A1 (en) * 1995-06-20 1996-12-27 EM Microelectronic-Marin SA System for identifying objects
DE69601588T2 (en) * 1995-04-18 1999-10-07 Em Microelectronic Marin Sa Item identification system
US6690796B1 (en) 1995-05-17 2004-02-10 The Chamberlain Group, Inc. Rolling code security system
CA2193846C (en) 1995-05-17 2004-02-17 Bradford L. Farris Rolling code security system
JPH10505933A (en) * 1995-07-18 1998-06-09 フィリップス エレクトロニクス ネムローゼ フェンノートシャップ Data transmission system between at least one write / read station and a plurality of data carriers
US6191701B1 (en) * 1995-08-25 2001-02-20 Microchip Technology Incorporated Secure self learning system
DE19533732A1 (en) * 1995-09-12 1997-03-13 Koerling Franz Josef Electronic protection system for preventing unauthorised access to locked door or cover
US5761306A (en) * 1996-02-22 1998-06-02 Visa International Service Association Key replacement in a public key cryptosystem
US5986571A (en) * 1996-03-25 1999-11-16 Flick; Kenneth E. Building security system having remote transmitter code verification and code reset features
US6049289A (en) * 1996-09-06 2000-04-11 Overhead Door Corporation Remote controlled garage door opening system
US5978483A (en) * 1997-04-07 1999-11-02 Inkel Corporation Securely encrypted remote keyless entry system
DE29718319U1 (en) * 1997-10-16 1998-01-22 Feig Electronic Gmbh Wear-free programmable electronic locking device
US6801119B1 (en) 1998-03-04 2004-10-05 Omega Patents, L.L.C. Programmer for vehicle security systems and related methods
US6150926A (en) * 1998-03-05 2000-11-21 Flick; Kenneth E. Vehicle security system including indicator mounted to window antenna unit and related methods
DE19962915A1 (en) 1999-12-23 2001-09-06 Intelligent Implants Gmbh Device for the protected operation of neuroprostheses and method therefor
DE10004615C2 (en) * 2000-02-03 2003-08-07 Siemens Ag Authorization control system, in particular for a motor vehicle
US6590981B2 (en) * 2000-02-22 2003-07-08 Zyfer, Inc. System and method for secure cryptographic communications
US6774764B2 (en) 2000-02-25 2004-08-10 Delphi Technologies, Inc. Securing system for motor vehicle
EP1209635A1 (en) * 2000-11-24 2002-05-29 eSecurium SA Secured remote control device
DE10058678C2 (en) * 2000-11-25 2002-11-14 Integrated Electronic Systems Sys Consulting Gmbh Method for operating a radio remote control system
EP1354300B1 (en) * 2000-12-19 2007-08-01 Azoteq (PTY) Limited Method of and apparatus for transferring data
JP3862074B2 (en) * 2002-06-20 2006-12-27 ソニー株式会社 Data communication system, information processing apparatus and method, and program
DE10230098A1 (en) * 2002-07-04 2004-02-19 Siemens Ag Method for authenticating a first object to at least one further object, in particular a vehicle to at least one key
DE10233504A1 (en) * 2002-07-24 2004-02-05 Marquardt Gmbh Power tool locking device e.g. for drill, to prevent unauthorized use, comprises transceivers within the tool and a tool operating element, such that the tool can only be used when the correct authorizing signal is received by the tool
US6989762B2 (en) * 2002-10-23 2006-01-24 Acco Brands, Inc. Proximity-based automatic ID code reconfiguration of wireless input/output systems
KR100555381B1 (en) 2002-12-19 2006-02-24 멜코 인코포레이티드 Encryption key setup system, access point, encryption key setup method, and authentication code setup system
JP4168857B2 (en) 2003-07-31 2008-10-22 トヨタ自動車株式会社 Identification information inspection method and information acquisition apparatus
US8527755B2 (en) * 2004-03-04 2013-09-03 Sony Corporation Methods and systems for effecting transmitter and receiver synchronization between a transmitter and a receiver of a transmitter/receiver network
US8422667B2 (en) 2005-01-27 2013-04-16 The Chamberlain Group, Inc. Method and apparatus to facilitate transmission of an encrypted rolling code
US9148409B2 (en) 2005-06-30 2015-09-29 The Chamberlain Group, Inc. Method and apparatus to facilitate message transmission and reception using different transmission characteristics
JP4734089B2 (en) * 2005-10-27 2011-07-27 日立オートモティブシステムズ株式会社 Car terminal
US7761591B2 (en) 2005-12-16 2010-07-20 Jean A. Graham Central work-product management system for coordinated collaboration with remote users
US8044796B1 (en) * 2006-02-02 2011-10-25 Carr Sr Syd K Electrical lock-out and locating apparatus with GPS technology
US8176340B2 (en) 2007-02-06 2012-05-08 Freescale Semiconductor, Inc. Method and system for initializing an interface between two circuits of a communication device while a processor of the first circuit is inactive and waking up the processor thereafter
JP4617326B2 (en) * 2007-03-13 2011-01-26 本田技研工業株式会社 Vehicle anti-theft system
CN103112324B (en) 2007-07-03 2016-01-27 欧陆汽车***美国有限公司 universal tire pressure monitoring sensor
US20110153121A1 (en) * 2007-11-06 2011-06-23 Minas Minassian Secured area access system, apparatus, and method
FR2935728B1 (en) * 2008-09-09 2012-11-16 Peugeot Citroen Automobiles Sa SYSTEM AND METHOD FOR INITIALIZING CENTRAL LOCKING DEVICE OF MOTOR VEHICLE
FR2959048B1 (en) * 2010-04-20 2012-05-11 Continental Automotive France METHODS OF TRANSMITTING AND RECEIVING A RADIO FREQUENCY FRAME IN A REMOTE CONTROL SYSTEM OF A MOTOR VEHICLE
US8751092B2 (en) 2011-01-13 2014-06-10 Continental Automotive Systems, Inc. Protocol protection
RU2570245C2 (en) 2011-08-09 2015-12-10 Континенталь Отомоутив Системз, Инк. Device and method to control tyre pressure
RU2572990C2 (en) 2011-08-09 2016-01-20 Континенталь Отомоутив Системз, Инк. Localization process activation device and method for tire pressure monitoring unit
US8502655B2 (en) 2011-08-09 2013-08-06 Continental Automotive Systems, Inc. Protocol misinterpretation avoidance apparatus and method for a tire pressure monitoring system
EP2741929B1 (en) * 2011-08-09 2015-11-18 Continental Automotive Systems, Inc. Protocol arrangement in a tire pressure monitoring system
US9676238B2 (en) 2011-08-09 2017-06-13 Continental Automotive Systems, Inc. Tire pressure monitor system apparatus and method
US9446636B2 (en) 2014-02-26 2016-09-20 Continental Automotive Systems, Inc. Pressure check tool and method of operating the same
US9517664B2 (en) 2015-02-20 2016-12-13 Continental Automotive Systems, Inc. RF transmission method and apparatus in a tire pressure monitoring system
DE102016213290A1 (en) 2015-08-03 2017-02-09 Continental Automotive Systems, Inc. Apparatus, system and method for configuring a tire information sensor with a transmission protocol based on vehicle trigger characteristics
US10652743B2 (en) 2017-12-21 2020-05-12 The Chamberlain Group, Inc. Security system for a moveable barrier operator
US11074773B1 (en) 2018-06-27 2021-07-27 The Chamberlain Group, Inc. Network-based control of movable barrier operators for autonomous vehicles
WO2020028502A1 (en) 2018-08-01 2020-02-06 The Chamberlain Group, Inc. Movable barrier operator and transmitter pairing over a network
US10997810B2 (en) 2019-05-16 2021-05-04 The Chamberlain Group, Inc. In-vehicle transmitter training

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3225754A1 (en) * 1982-07-09 1984-01-12 Hülsbeck & Fürst GmbH & Co KG, 5620 Velbert METHOD FOR THE LOCKING EFFECTIVE INTERACTION OF A KEY-LIKE PART WITH A LOCK-LIKE PART
DE3244049C2 (en) * 1982-11-27 1986-06-26 Kiekert GmbH & Co KG, 5628 Heiligenhaus Central locking system for a motor vehicle
US4686529A (en) * 1984-01-06 1987-08-11 Kiekert Gmbh & Co. Kommanditgesellschaft Remote-control lock system
US4928098A (en) * 1984-03-30 1990-05-22 Siemens Aktiengesellschaft Method for code protection using an electronic key
IT1183797B (en) * 1985-04-04 1987-10-22 Mario Turatti CONTROL DEVICE FOR ACTUATOR VEHICLES MOUNTED ON A VEHICLE
DE3529882A1 (en) * 1985-08-21 1987-02-26 Vdo Schindling SYSTEM FOR LOCKING AND / OR UNLOCKING A SECURITY DEVICE
DE3532156A1 (en) * 1985-09-10 1987-03-26 Huelsbeck & Fuerst Electronic locking device for motor vehicles
EP0215291B1 (en) * 1985-09-10 1991-02-27 Hülsbeck & Fürst GmbH. & Co. KG Electronic locking device for motor vehicles
DE3636822C2 (en) * 1986-10-29 1993-12-23 Ruf Kg Wilhelm Electronic remote control device, in particular for central locking systems of motor vehicles
JPH0791913B2 (en) * 1987-05-21 1995-10-09 テイー アール ダブリユー インコーポレーテツド Remote control device, receiver used for the device, transmitter for transmitting control signal to the receiver
IT1227401B (en) * 1988-12-06 1991-04-08 Delta Elettronica Spa DEVICES FOR REMOTE TRANSMISSION OF SAFE CONTROLS
US5144667A (en) * 1990-12-20 1992-09-01 Delco Electronics Corporation Method of secure remote access

Also Published As

Publication number Publication date
JPH04505193A (en) 1992-09-10
JP2875019B2 (en) 1999-03-24
AU5358190A (en) 1990-12-18
EP0472528A1 (en) 1992-03-04
US5365225A (en) 1994-11-15
DE59004565D1 (en) 1994-03-24
WO1990014484A1 (en) 1990-11-29

Similar Documents

Publication Publication Date Title
EP0472528B1 (en) Transmission and receiving system
DE4428947C1 (en) Coded remote operation of vehicle central locking system
EP0690190B1 (en) Method for operating a locking system for lockable objects
EP0212046B1 (en) System for locking and/or unlocking a security device
DE102005059061B4 (en) Method and device for opening a vehicle
DE4403655A1 (en) Locking and engine start system for a motor-driven vehicle
DE3900494A1 (en) SAFETY DEVICE FOR MOTOR VEHICLES
WO1995009746A1 (en) Locking system, in particular for motor vehicles
EP0098437A2 (en) Electronic locking device with key and lock parts interacting by means of electric pulses
WO1998034818A1 (en) Code signal transmitter, especially for an anti-theft system in a motor vehicle
DE4329697A1 (en) Remote controllable access control device
EP2656323A2 (en) Method for activating a motor vehicle lock system using a mobile communication device
DE10109869A1 (en) System and method for automatic function confirmation with controlled distance communication with vehicle-based frequency selection
EP0103791A2 (en) Coding method for an electronic key
DE19711901C1 (en) Theft protection system for motor vehicle
DE102016005342A1 (en) Locking system and device with a locking system
WO1994018036A1 (en) Remote-controlled protection system for a motor vehicle
EP0659963A1 (en) Electronic immobilizing device for a motor vehicle
DE19501004C2 (en) Method for verifiable data transmission between a transponder and a reading device
EP0574473B1 (en) System with optical or radio remote control for closing motor vehicles
EP0103790A2 (en) Coding method for an electronic key
EP1006248B1 (en) Remote-controlled access control device, in particular for a motor vehicle and portable transponder therefor
DE4234822A1 (en) Remote control for motor vehicle central locking - transmits code by electronic key formed by mixing selected code with fixed code sequence
DE10112573C2 (en) Method for initializing an anti-theft system for a motor vehicle
DE19802526A1 (en) Device for control of access activation for road vehicles

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 19911023

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): DE FR GB

17Q First examination report despatched

Effective date: 19930730

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): DE FR GB

REF Corresponds to:

Ref document number: 59004565

Country of ref document: DE

Date of ref document: 19940324

GBT Gb: translation of ep patent filed (gb section 77(6)(a)/1977)

Effective date: 19940415

ET Fr: translation filed
PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed
PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20010409

Year of fee payment: 12

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20010420

Year of fee payment: 12

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20010620

Year of fee payment: 12

REG Reference to a national code

Ref country code: GB

Ref legal event code: IF02

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20020406

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20021101

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20020406

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20021231

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST