EP2242027A2 - Method for securing keyless entry communication for motor vehicles - Google Patents

Method for securing keyless entry communication for motor vehicles Download PDF

Info

Publication number
EP2242027A2
EP2242027A2 EP10158623A EP10158623A EP2242027A2 EP 2242027 A2 EP2242027 A2 EP 2242027A2 EP 10158623 A EP10158623 A EP 10158623A EP 10158623 A EP10158623 A EP 10158623A EP 2242027 A2 EP2242027 A2 EP 2242027A2
Authority
EP
European Patent Office
Prior art keywords
wake
transmitter
vehicle
circuit
time
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP10158623A
Other languages
German (de)
French (fr)
Other versions
EP2242027A3 (en
Inventor
Boris Ziller
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huf Huelsbeck and Fuerst GmbH and Co KG
Original Assignee
Huf Huelsbeck and Fuerst GmbH and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huf Huelsbeck and Fuerst GmbH and Co KG filed Critical Huf Huelsbeck and Fuerst GmbH and Co KG
Publication of EP2242027A2 publication Critical patent/EP2242027A2/en
Publication of EP2242027A3 publication Critical patent/EP2242027A3/en
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
    • G07C2009/00365—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks in combination with a wake-up circuit
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
    • G07C2009/00555—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks comprising means to detect or avoid relay attacks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
    • G07C2209/08—With time considerations, e.g. temporary activation, valid time window or time limitations

Definitions

  • the invention relates to a method for improving the security of access control for keyless entry systems in motor vehicles.
  • Such keyless entry devices offer users of motor vehicles the opportunity to obtain access to a motor vehicle without a mechanical closing operation of a door lock.
  • the user usually carries with it a so-called ID transmitter, which enters into radio communication with the systems of the motor vehicle. Triggering event for the reception of such radio communication is an approach of the user to the motor vehicle, for example, the approach of the hand to the door handle area.
  • an on-vehicle wake-up device Upon detection of such an event, an on-vehicle wake-up device sends out a wake-up radio signal which receives a user-carried ID transmitter.
  • the wake-up radio signal is evaluated by the ID transmitter by a circuit, in particular it is checked whether the wake-up radio signal comes from a motor vehicle, which is assigned to the ID transmitter.
  • this emits a high-frequency enable radio signal, which is received and decoded on the vehicle side.
  • a vehicle-side release of the locking device takes place, so that the user can access it.
  • Such communication is extremely fast, so that the accessing user usually does not take note of it, as long as the access authorization is successfully checked.
  • the door lock is Usually already released as soon as the user actually accesses it.
  • relay station attacks there are attacks on such communications, referred to as relay station attacks.
  • the wake-up signal from the vehicle is received by a first extension station and sent to a second station located near the ID transmitter. In this way, an unauthorized person can gain access to the vehicle when he is near the vehicle and stops the second radio station in the vicinity of the ID transmitter.
  • the object of the invention is therefore to provide an improved system for securing keyless entry systems.
  • the object is achieved by a method for controlling the access authorization for a motor vehicle with the features of claim 1.
  • a resonant circuit is controlled by the wake-up circuit for generating the wake-up radio signal under control of the power supply of the resonant circuit such that the settling time of the resonant circuit is variable.
  • the settling time is thereby varied in dependence on a randomly generated parameter, which by controlling the Power supply happens.
  • the duty cycle or duty cycle is varied.
  • the settling time of the resonant circuit can be varied between a minimum, realizable in practice value and a maximum value.
  • a time component is deliberately and specifically introduced into the sequence of radio communications, which is subject to the control of the vehicle-side circuits.
  • the system runtime ie the time from the start of the transmission of the wake-up signal to the reception of the enable signal, consists of several components.
  • the resonant circuit oscillates under control of the wake-up circuit. until the response threshold of the receiving ID transmitter has been reached, and sends its wake-up signal to the ID transmitter.
  • the ID transmitter receives this signal, checks the information content encoded therein (e.g., a so-called wake-up pattern), and sends a high-frequency response signal back to the vehicle, with a time component T2 to be considered for reception and verification.
  • the high-frequency enable signal is received, checked and sent an enable signal to the mechanical lock device of the door lock, with a time component T3 added.
  • Such an expected system runtime is initially calculated according to the invention as a function of the generated random parameter. This calculated system runtime results in a time window within which an uncorrected connection without a prolonged radio link is expected to provide feedback for the release of the door lock.
  • the actually required time duration for the transmission of the radio signal and until the receipt of the release signal ie the real system run time
  • the actually required time duration for the transmission of the radio signal and until the receipt of the release signal ie the real system run time, is measured and compared to the expected System runtime adjusted. If the time period deviates by more than a predetermined value from the expected system run time, a release of the closing device is inhibited.
  • the invention is based on the finding that, in the case of a radio link extension, the emitted wake-up signal was generated as a function of the randomly generated parameter and therefore contains a specifically influenced time component.
  • this extension component of time appears a second time, namely when extending the radio link to the ID transmitter.
  • the wake-up signal is newly generated with another resonant circuit and forwarded to the ID transmitter.
  • the time component is then included twice in the system runtime and the entire system runtime then no longer matches the expected system runtime.
  • the response signal is thus not obtained within the time window which was calculated for the receipt.
  • the core of the invention is therefore the deliberate and artificial variation of the settling time of the wake-up circuit and the comparison of the expected system runtime with the actual system runtime.
  • this concept is suitable for different frequencies of the wake-up signal, in particular for systems with a transmission frequency of 20 kHz, but also for systems with a transmission frequency of 125 kHz.
  • a time proportion known on the vehicle side is deliberately introduced into the system runtime, so that the system run time is different for each communication process for verification of the access authorization.
  • An extended radio link can not adjust to such a different time delay from case to case.
  • a delay given on the vehicle side according to another scheme can also be provided be achieved. This can prevent the delays in successive closing operations from being too similar due to chance.
  • the duty cycle of the power supply can be influenced.
  • other possibilities for changing the transient response can also be used.
  • the parameter which determines the delay of the transient response is sent to the ID transmitter.
  • a value generated from the parameter can be sent from the wake-up circuit to the ID transmitter.
  • the ID transmitter receives information about the settling time and can then make a verification of the consistency of various existing data. For example, so-called RSSI data, ie data representative of the field strength or reception quality, can be used to determine the distance dependence of the ID transmitter from the vehicle and to include it in the evaluation of the data.
  • the communication between ID transmitter and vehicle-mounted devices is performed in several sections.
  • a message is first sent from the wake-up circuit in the vehicle to the ID transmitter.
  • the ID transmitter can set its threshold for the subsequent wake-up signal. In this way, the security of the process can be further increased.
  • the wake-up circuit is designed such that it can transmit on different frequencies.
  • different channels can be provided at eg 20 kHz, 22 kHz and 24 kHz.
  • the wake-up signal can be sent on these channels.
  • the respectively The next channel used can be coded in a message and transmitted from the wake-up circuit to the ID transmitter. This can then match in the subsequent communication based on the received frequency this with the channel according to the previously transmitted message and so further increase the security of the authentication process.
  • FIG. 1 shows a schematic view of the arrangement of the components in the application of the method according to the invention according to a first embodiment.
  • FIG. 1 a vehicle 1 is shown which has a keyless access authorization control.
  • An ID transmitter 2 is carried by a user and can perform radio communication with the vehicle 1 to check the legitimacy for access to the vehicle 1.
  • a radio communication 1a, 2a initiated by the vehicle 1 with the ID transmitter 2, in the course of which the legitimacy of the accessing user is checked.
  • the identifier stored in the ID transmitter is stored in the vehicle as a license-authorized identifier.
  • the usual and uncorrupted radio communication link between vehicle 1 and ID transmitter 2 is a few meters at maximum. It should be ensured that the vehicle can not be accessed if the user is too far away from the vehicle with the legitimizing ID transmitter, in particular out of sight.
  • the relay station attack is carried out by artificially prolonging the radio link between the vehicle 1 and the ID transmitter 2 so that the radio communication between the vehicle and the ID transmitter takes place, although the distance between the vehicle 1 and ID transmitter 2 is actually so large that the radio communication due to the transmission power should not be possible.
  • an unauthorized attacker will go in the vicinity of the vehicle 1 and with a device 3, the z. B. may be hidden in a suitcase, start an attempt to access the vehicle.
  • a remote station 4 is located at another attacker in the vicinity of the authorized user with the ID transmitter 2.
  • the vehicle transmits its directed to the ID transmitter 2 communication 1b, received by the device 3 and via a further radio link 3c the device 4 is passed.
  • message 4d the latter transmits the received message again to the ID transmitter 2, which perceives it as a message from the vehicle 1 and sends its legitimization check and response.
  • the reply 2d from the ID transmitter 2 to the vehicle 1 in turn runs (4c, 3b) via the stations 4 and 3.
  • the vehicle-side communication device to a resonant circuit, which is brought to the start of the communication request to settle.
  • the settling time required by the resonant circuit to reach the ID threshold of the ID transmitter is influenced on the vehicle by specifying the duty cycle or duty cycle. In this way, the delay of the transient process can be influenced in a targeted manner. According to the invention delays between 1 and several 10 ms are possible.
  • the settling time is set as a function of a random parameter generated on the vehicle side. This random parameter may be coupled to other vehicle systems to generate a pseudorandom number from any sensory vehicle size.
  • all available data in the vehicle in question such as mileage, battery voltage, tire pressure or other sizes.
  • Such a generated pseudorandom number provides values that are not traceable or predictable by an attacker.
  • a delay is determined by which the natural settling time of the oscillatory circuit is prolonged.
  • the settling time is influenced accordingly via the duty cycle of the supply of the resonant circuit, so that after a rise time T1 the threshold of communication with the ID transmitter is reached (in the figure, the messages 1a and 1b are subject to this time factor). If the ID transmitter is in the vicinity of the vehicle (message 1a), that is, if authorized access is available, then the ID transmitter answers immediately after evaluation and checking of the message or with a slight delay T2.
  • the ID transmitter's response is transmitted in the high-frequency range to the vehicle-side communication device, so that the entire system runtime requires an acceptable time window for the settling time of the capacitor plus the time T2 for the evaluation in the ID transmitter 2 and the high-frequency response. If, for example, a deliberate delay T1 of 5 ms is set, the accepted time window for a response of the ID transmitter will be, for example, between 5 and 5.5 ms. Responses of the ID transmitter which arrive outside this time window are ignored and do not lead to a release of the vehicle 1.
  • a wake-up message 10 with 20 kHz is generated on the vehicle side.
  • the ID transmitter receives this message 10, evaluates it and sends back a high-frequency response signal 11. Since much less time is required for the high-frequency communication, the time window is correspondingly close to the predetermined settling time to arrange.
  • the device 3 receives the message 1b of the vehicle 1.
  • the device 3 transmits the received message in the high-frequency range to the device 4, for which purpose a hardly relevant time span is required on a regular basis.
  • the transmission 4d of the station 4 and the ID transmitter 2 which must take place in the lower frequency range, but now again enters the predetermined settling time T1 ', which was specified on the vehicle side in response to a random parameter, since the capacitors of the system at startup are not loaded.
  • the time-delayed message 1b is accordingly forwarded to the ID transmitter 2 with approximately twice the delay as the message 4d.
  • the vehicle deliberately introduced time delay factor is therefore present twice in the system, so that the response 2d of the ID transmitter 2 is sent to the vehicle 1 delayed. Now, the answer message of the ID transmitter 2 does not fall within the previously calculated time slot, and therefore access is denied to the vehicle.
  • time delay parameter This can be determined at random, or derived from vehicle-side parameters. It is essential that the invention can be realized with conventional, usually already existing means, since in particular the settling time of the resonant circuit via the duty cycle in the control unit can be adjusted, so that no significant structural changes are required.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Lock And Its Accessories (AREA)

Abstract

The method involves controlling an oscillating circuit to generate an activation radio signal such that oscillation rise time (T1) is varied depending on randomly generated parameter. A power supply of the circuit is controlled depending on the parameter, and an expected system run time is determined depending on the parameter. Duration from activation of the circuit till receiving of a release signal in a control unit is measured, and the duration is compared with the expected time. A locking system is not released when the duration varies from the expected time above a preset value.

Description

Die Erfindung betrifft ein Verfahren zur Verbesserung der Sicherheit einer Zugriffskontrolle für Keyless-Entry-Systeme bei Kraftfahrzeugen.The invention relates to a method for improving the security of access control for keyless entry systems in motor vehicles.

Derartige Keyless-Entry-Einrichtungen bieten Benutzern von Kraftfahrzeugen die Möglichkeit, ohne eine mechanische Schließbetätigung eines Türschlosses, den Zugriff auf ein Kraftfahrzeug zu erhalten. Der Benutzer führt dazu üblicherweise einen sogenannten ID-Geber mit sich, welcher in eine Funkkommunikation mit den Systemen des Kraftfahrzeugs tritt. Auslösendes Ereignis für die Aufnahme einer solchen Funkkommunikation ist eine Annäherung des Benutzers an das Kraftfahrzeug, z.B. die Annäherung der Hand an den Türgriffbereich. Bei Erfassung eines solchen Ereignisses sendet eine fahrzeugseitige Weckeinrichtung bzw. Weckschaltung ein Weck-Funksignal aus, welches ein vom Benutzer mitgeführter ID-Geber empfängt. Das Weck-Funksignal wird seitens des ID-Gebers durch eine Schaltung ausgewertet, insbesondere wird überprüft, ob das Weck-Funksignal von einem Kraftfahrzeug stammt, welchem der ID-Geber zugeordnet ist. Dies kann anhand einer im Weck-Funksignal codierten Nachricht überprüft werden. Im Falle einer erfolgreichen Überprüfung im ID-Geber, sendet dieser ein hochfrequentes Freigabe-Funksignal aus, welches fahrzeugseitig empfangen und decodiert wird. In Abhängigkeit von dem Signal und ggf. nach weiteren Überprüfungen des Signals erfolgt eine fahrzeugseitige Freigabe der Schließeinrichtung, so dass ein Zugriff des Benutzers erfolgen kann. Eine derartige Kommunikation läuft äußerst rasch ab, so dass der zugreifende Benutzer üblicherweise davon keine Kenntnis nimmt, sofern die Zugriffsberechtigung erfolgreich überprüft wird. Das Türschloss ist üblicherweise bereits freigegeben, sobald der Benutzer tatsächlich darauf zugreift.Such keyless entry devices offer users of motor vehicles the opportunity to obtain access to a motor vehicle without a mechanical closing operation of a door lock. The user usually carries with it a so-called ID transmitter, which enters into radio communication with the systems of the motor vehicle. Triggering event for the reception of such radio communication is an approach of the user to the motor vehicle, for example, the approach of the hand to the door handle area. Upon detection of such an event, an on-vehicle wake-up device sends out a wake-up radio signal which receives a user-carried ID transmitter. The wake-up radio signal is evaluated by the ID transmitter by a circuit, in particular it is checked whether the wake-up radio signal comes from a motor vehicle, which is assigned to the ID transmitter. This can be checked by means of a message encoded in the wake-up radio signal. In the case of a successful check in the ID transmitter, this emits a high-frequency enable radio signal, which is received and decoded on the vehicle side. Depending on the signal and, if appropriate, after further checks of the signal, a vehicle-side release of the locking device takes place, so that the user can access it. Such communication is extremely fast, so that the accessing user usually does not take note of it, as long as the access authorization is successfully checked. The door lock is Usually already released as soon as the user actually accesses it.

Es gibt jedoch Angriffe auf derartige Kommunikationen, die als Relay-Station-Attacken bezeichnet werden. Üblicherweise soll nur Zugriff auf ein Fahrzeug gewährt werden, wenn der Träger des ID-Gebers sich in der Nähe des Fahrzeugs aufhält. Während die Funkstrecke zwischen ID-Geber und Kraftfahrzeug dazu üblicherweise auf einige Meter beschränkt ist, wird bei diesen Attacken die Funkstrecke künstlich und gezielt verlängert. Bei einer derartigen Funkstreckenverlängerung wird das Wecksignal vom Fahrzeug von einer ersten Verlängerungsstation empfangen und an eine zweite Station, die sich in der Nähe des ID-Gebers befindet gesendet. Auf diese Weise kann ein Unberechtigter Zugriff auf das Fahrzeug erlangen, wenn er sich in Fahrzeugnähe aufhält und die zweite Funkstation in der Nähe des ID-Gebers aufhält.However, there are attacks on such communications, referred to as relay station attacks. Usually, only access to a vehicle should be granted if the wearer of the ID transmitter is in the vicinity of the vehicle. While the radio link between ID transmitter and motor vehicle is usually limited to a few meters, the radio link is artificially and selectively extended in these attacks. In such a radio link extension, the wake-up signal from the vehicle is received by a first extension station and sent to a second station located near the ID transmitter. In this way, an unauthorized person can gain access to the vehicle when he is near the vehicle and stops the second radio station in the vicinity of the ID transmitter.

Aus der EP 06117688 ist ein Verfahren bekannt, welches die Sicherheit derartiger Kommunikationsprotokolle verbessern soll.From the EP 06117688 a method is known which is intended to improve the security of such communication protocols.

Es besteht jedoch weiter der Bedarf, die Keyless-Entry-Systeme in ihre Sicherheit gegen derartige Verlängerungen der Funkstrecken zu schützen.However, there remains a need to protect the keyless entry systems in their safety against such extensions of the radio links.

Aufgabe der Erfindung ist es daher, ein verbessertes System zur Sicherung von Keyless-Entry-Systemen bereitzustellen.The object of the invention is therefore to provide an improved system for securing keyless entry systems.

Die Aufgabe wird erfindungsgemäß gelöst durch ein Verfahren zur Kontrolle der Zugangsberechtigung für ein Kraftfahrzeug mit den Merkmalen des Patentanspruchs 1.The object is achieved by a method for controlling the access authorization for a motor vehicle with the features of claim 1.

Gemäß der Erfindung wird durch die Weckschaltung zur Erzeugung des Weck-Funksignals ein Schwingkreis unter Kontrolle der Stromversorgung des Schwingkreises derart angesteuert, dass die Einschwingdauer des Schwingkreises variierbar ist. Die Einschwingdauer wird dabei in Abhängigkeit von einem zufällig generierten Parameter variiert, was durch Kontrolle der Stromversorgung geschieht. Dazu wird beispielsweise der Duty-Cycle bzw. Tastgrad variiert.According to the invention, a resonant circuit is controlled by the wake-up circuit for generating the wake-up radio signal under control of the power supply of the resonant circuit such that the settling time of the resonant circuit is variable. The settling time is thereby varied in dependence on a randomly generated parameter, which by controlling the Power supply happens. For this purpose, for example, the duty cycle or duty cycle is varied.

Die Einschwingdauer des Schwingkreises kann zwischen einem minimalen, in der Praxis realisierbaren Wert und einem maximalen Wert variiert werden. Durch die Verlängerung der Einschwingdauer wird bewusst und gezielt eine Zeitkomponente in die Abfolge der Funkkommunikationen eingebracht, welche der Kontrolle der fahrzeugseitigen Schaltungen unterliegt.The settling time of the resonant circuit can be varied between a minimum, realizable in practice value and a maximum value. By extending the transient time, a time component is deliberately and specifically introduced into the sequence of radio communications, which is subject to the control of the vehicle-side circuits.

In einer nicht-korrumpierten Funkverbindung (ohne böswillige Funkstreckenverlängerung) setzt sich die Systemlaufzeit, also die Zeit vom Start der Aussendung des Wecksignals bis zum Empfang des Freigabesignals, aus mehreren Komponenten zusammen. Während einer Zeit T1 schwingt der Schwingkreis unter Ansteuerung der Weckschaltung ein. bis die Ansprechschwelle des empfangenden ID-Gebers erreicht wurde, und sendet sein Wecksignal an den ID-Geber aus. Der ID-Geber empfängt dieses Signal, überprüft den darin codierten Informationsgehalt (z.B. ein sogenanntes Wake-up-pattern) und sendet ein hochfrequentes Antwortsignal an das Fahrzeug zurück, wobei für den Empfang und die Überprüfung eine Zeitkomponente T2 zu berücksichtigen ist. Fahrzeugseitig wird das hochfrequente Freigabesignal empfangen, überprüft und ein Freigabesignal an die mechanische Sperreinrichtung des Türschlosses gesendet, wobei eine Zeitkomponente T3 hinzukommt.In a non-corrupted radio link (without malicious radio link extension), the system runtime, ie the time from the start of the transmission of the wake-up signal to the reception of the enable signal, consists of several components. During a time T1, the resonant circuit oscillates under control of the wake-up circuit. until the response threshold of the receiving ID transmitter has been reached, and sends its wake-up signal to the ID transmitter. The ID transmitter receives this signal, checks the information content encoded therein (e.g., a so-called wake-up pattern), and sends a high-frequency response signal back to the vehicle, with a time component T2 to be considered for reception and verification. On the vehicle side, the high-frequency enable signal is received, checked and sent an enable signal to the mechanical lock device of the door lock, with a time component T3 added.

Eine derartige erwartete Systemlaufzeit wird erfindungsgemäß in Abhängigkeit von dem generierten Zufallsparameter zunächst berechnet. Aus dieser berechneten Systemlaufzeit ergibt sich ein Zeitfenster, innerhalb dessen bei einer unkorrumpierten Verbindung ohne verlängerte Funkstrecke eine Rückmeldung zur Freigabe des Türschlosses erwartet wird.Such an expected system runtime is initially calculated according to the invention as a function of the generated random parameter. This calculated system runtime results in a time window within which an uncorrected connection without a prolonged radio link is expected to provide feedback for the release of the door lock.

Die tatsächlich benötigte Zeitdauer für die Aussendung des Funksignals und bis zum Erhalt des Freigabesignals, also die reale Systemlaufzeit, wird gemessen und gegenüber der erwarteten Systemlaufzeit abgeglichen. Falls die Zeitdauer um mehr als einen vorgegebenen Wert von der erwarteten Systemlaufzeit abweicht, wird eine Freigabe der Schließeinrichtung unterbunden.The actually required time duration for the transmission of the radio signal and until the receipt of the release signal, ie the real system run time, is measured and compared to the expected System runtime adjusted. If the time period deviates by more than a predetermined value from the expected system run time, a release of the closing device is inhibited.

Der Erfindung liegt die Erkenntnis zugrunde, dass im Falle einer Funkstreckenverlängerung das ausgesendete Wecksignal in Abhängigkeit von dem zufällig erzeugten Parameter erzeugt wurde und daher eine gezielt beeinflusste Zeitkomponente enthält. Bei Verlängerung der Funkstrecke taucht diese Verlängerungskomponente der Zeit jedoch ein zweites Mal auf, nämlich bei der Verlängerung der Funkstrecke zum ID-Geber. Dort wird das Wecksignal mit einem weiteren Schwingkreis neu erzeugt und an den ID-Geber weitergeleitet. Die Zeitkomponente ist dann zweimal in der Systemlaufzeit enthalten und die gesamte Systemlaufzeit stimmt dann nicht mehr mit der erwarteten Systemlaufzeit überein. Das Antwortsignal wird also nicht innerhalb des Zeitfensters erhalten, welches für den Erhalt berechnet wurde. Kern der Erfindung ist daher die bewusste und künstliche Variation der Einschwingdauer der Weckschaltung und der Abgleich der erwarteten Systemlaufzeit mit der tatsächlichen Systemlaufzeit.The invention is based on the finding that, in the case of a radio link extension, the emitted wake-up signal was generated as a function of the randomly generated parameter and therefore contains a specifically influenced time component. When extending the radio link, however, this extension component of time appears a second time, namely when extending the radio link to the ID transmitter. There, the wake-up signal is newly generated with another resonant circuit and forwarded to the ID transmitter. The time component is then included twice in the system runtime and the entire system runtime then no longer matches the expected system runtime. The response signal is thus not obtained within the time window which was calculated for the receipt. The core of the invention is therefore the deliberate and artificial variation of the settling time of the wake-up circuit and the comparison of the expected system runtime with the actual system runtime.

Grundsätzlich ist dieses Konzept für verschiedene Frequenzen des Wecksignals geeignet, insbesondere für Systeme mit einer Sendefrequenz von 20 kHz, aber auch für Systeme mit einer Sendefrequenz von 125 kHz.Basically, this concept is suitable for different frequencies of the wake-up signal, in particular for systems with a transmission frequency of 20 kHz, but also for systems with a transmission frequency of 125 kHz.

Wesentlich ist, dass ein fahrzeugseitig bekannter Zeitanteil in die Systemlaufzeit bewusst eingebracht wird, so dass die Systemlaufzeit bei jedem Kommunikationsvorgang zur Verifikation der Zugriffsberechtigung ein anderer ist. Eine verlängerte Funkstrecke kann sich auf eine derartige verschiedene Zeitverzögerung von Fall zu Fall nicht einstellen. Grundsätzlich kann statt eines zufällig generierten Parameters auch eine fahrzeugseitig nach anderem Schema vorgegebene Verzögerung erzielt werden. Dadurch kann verhindert werden, dass aufgrund eines Zufalls die Verzögerungen in aufeinanderfolgenden Schließvorgängen zu ähnlich sind.It is essential that a time proportion known on the vehicle side is deliberately introduced into the system runtime, so that the system run time is different for each communication process for verification of the access authorization. An extended radio link can not adjust to such a different time delay from case to case. In principle, instead of a randomly generated parameter, a delay given on the vehicle side according to another scheme can also be provided be achieved. This can prevent the delays in successive closing operations from being too similar due to chance.

Um die Einschwingzeit des Schwingkreises zu beeinflussen, kann der Tastgrad der Stromversorgung beeinflusst werden. Es sind jedoch auch andere Möglichkeiten zur Veränderung des Einschwingverhaltens einsetzbar.To influence the settling time of the resonant circuit, the duty cycle of the power supply can be influenced. However, other possibilities for changing the transient response can also be used.

In einer Weiterbildung der Erfindung wird der Parameter, der die Verzögerung des Einschwingverhaltens bestimmt, an den ID-Geber gesendet. Alternativ kann auch ein aus dem Parameter erzeugter Wert von der Weckschaltung an den ID-Geber gesendet werden. Der ID-Geber erhält dann Informationen über die Einschwingdauer und kann seinerzeit eine Verifikation der Konsistenz verschiedener vorliegender Daten vornehmen. Beispielsweise können sogenannte RSSI-Daten, also für die Feldstärke bzw. Empfangsqualität repräsentative Daten verwendet werden, um die Entfernungsabhängigkeit des ID-Gebers von dem Fahrzeug zu bestimmen und mit in die Auswertung der Daten einzubeziehen.In a development of the invention, the parameter which determines the delay of the transient response is sent to the ID transmitter. Alternatively, a value generated from the parameter can be sent from the wake-up circuit to the ID transmitter. The ID transmitter then receives information about the settling time and can then make a verification of the consistency of various existing data. For example, so-called RSSI data, ie data representative of the field strength or reception quality, can be used to determine the distance dependence of the ID transmitter from the vehicle and to include it in the evaluation of the data.

In einer weiteren Ausführungsform der Erfindung wird die Kommunikation zwischen ID-Geber und fahrzeugseitigen Einrichtungen in mehreren Abschnitten durchgeführt.In a further embodiment of the invention, the communication between ID transmitter and vehicle-mounted devices is performed in several sections.

Gemäß dieser Ausführungsform der Erfindung wird zunächst eine Nachricht von der Weckschaltung im Fahrzeug an den ID-Geber gesendet. In Abhängigkeit von der gesendeten Nachricht kann der ID-Geber seine Ansprechschwelle für das nachfolgende Wecksignal einstellen. Auf diese Weise kann die Sicherheit des Verfahrens weiter erhöht werden.According to this embodiment of the invention, a message is first sent from the wake-up circuit in the vehicle to the ID transmitter. Depending on the message sent, the ID transmitter can set its threshold for the subsequent wake-up signal. In this way, the security of the process can be further increased.

In einer weiteren Ausführungsform ist die Weck-Schaltung derart ausgelegt, dass diese auf verschiedenen Frequenzen sendet kann. Dazu können beispielsweise verschiedene Kanäle bei z.B. bei 20 kHz, 22 kHz und 24 kHz vorgesehen werden. Auf diesen Kanälen kann das Wecksignal gesendet werden. Der jeweils nächste verwendete Kanal kann in einer Nachricht codiert werden, und von der Weck-Schaltung an den ID-Geber übermittelt werden. Dieser kann dann bei der nachfolgenden Kommunikation anhand der empfangenen Frequenz diese mit dem Kanal laut zuvor übermittelter Nachricht abgleichen und so die Sicherheit des Authentifizierungsverfahrens weiter erhöhen.In a further embodiment, the wake-up circuit is designed such that it can transmit on different frequencies. For this example, different channels can be provided at eg 20 kHz, 22 kHz and 24 kHz. The wake-up signal can be sent on these channels. The respectively The next channel used can be coded in a message and transmitted from the wake-up circuit to the ID transmitter. This can then match in the subsequent communication based on the received frequency this with the channel according to the previously transmitted message and so further increase the security of the authentication process.

Die Erfindung wird nun anhand eines Ausführungsbeispiels näher erläutert.The invention will now be explained in more detail with reference to an embodiment.

Figur 1 zeigt in schematischer Ansicht die Anordnung der Komponenten bei der Anwendung des erfindungsgemäßen Verfahrens gemäß einem ersten Ausführungsbeispiel. FIG. 1 shows a schematic view of the arrangement of the components in the application of the method according to the invention according to a first embodiment.

In Figur 1 ist ein Fahrzeug 1 gezeigt, welches über eine schlüssellose Zugangsberechtigungskontrolle verfügt. Ein ID-Geber 2 wird von einem Benutzer mitgeführt und kann eine Funkkommunikation mit dem Fahrzeug 1 ausführen, um die Legitimation für einen Zugriff auf das Fahrzeug 1 zu überprüfen. Bei Annäherung eines Benutzers an das Fahrzeug 1, insbesondere bei Annäherung eines Körperteils des Benutzers an einen Fahrzeuggriff, wird eine Funkkommunikation 1a, 2a von dem Fahrzeug 1 mit dem ID-Geber 2 initiiert, in deren Verlauf die Legitimation des zugreifenden Benutzers überprüft wird. Insbesondere wird überprüft, ob die im ID-Geber gespeicherte Kennung im Fahrzeug als zugriffsberechtigte Kennung hinterlegt ist.In FIG. 1 a vehicle 1 is shown which has a keyless access authorization control. An ID transmitter 2 is carried by a user and can perform radio communication with the vehicle 1 to check the legitimacy for access to the vehicle 1. When approaching a user to the vehicle 1, in particular when approaching a body part of the user to a vehicle grip, a radio communication 1a, 2a initiated by the vehicle 1 with the ID transmitter 2, in the course of which the legitimacy of the accessing user is checked. In particular, it is checked whether the identifier stored in the ID transmitter is stored in the vehicle as a license-authorized identifier.

Die übliche und unkorrumpierte Funkkommunikationsstrecke zwischen Fahrzeug 1 und ID-Geber 2 beträgt im Maximalfall einige Meter. Es soll sichergestellt werden, dass auf das Fahrzeug nicht zugegriffen werden kann, wenn sich der Benutzer mit dem legitimierenden ID-Geber übermäßig weit vom Fahrzeug entfernt aufhält, insbesondere außer Sichtweite.The usual and uncorrupted radio communication link between vehicle 1 and ID transmitter 2 is a few meters at maximum. It should be ensured that the vehicle can not be accessed if the user is too far away from the vehicle with the legitimizing ID transmitter, in particular out of sight.

Die Relay-Station-Attacke wird ausgeführt, indem die Funkstrecke zwischen Fahrzeug 1 und ID-Geber 2 künstlich verlängert wird, so dass die Funkkommunikation zwischen Fahrzeug und ID-Geber stattfindet, obwohl der Abstand zwischen Fahrzeug 1 und ID-Geber 2 eigentlich so groß ist, dass die Funkkommunikation aufgrund der Sendeleistung nicht möglich sein sollte. Dazu wird ein unberechtigter Angreifer sich in die Nähe des Fahrzeugs 1 begeben und mit einer Einrichtung 3, die z. B. in einem Koffer verborgen sein kann, einen Zugriffsversuch auf das Fahrzeug starten. Eine Gegenstation 4 befindet sich bei einem weiteren Angreifer in der Nähe des berechtigten Benutzers mit dem ID-Geber 2. Das Fahrzeug sendet seine an die ID-Geber 2 gerichtete Kommunikation 1b aus, die von der Einrichtung 3 empfangen und über eine weitere Funkstrecke 3c an die Einrichtung 4 geleitet wird. Diese übermittelt in Nachricht 4d die empfangene Nachricht wiederum an den ID-Geber 2, welcher sie als Nachricht von dem Fahrzeug 1 auffasst und seine Legitimationsprüfung und -antwort absendet. Die Rückantwort 2d vom ID-Geber 2 an das Fahrzeug 1 läuft wiederum (4c, 3b) über die Stationen 4 und 3.The relay station attack is carried out by artificially prolonging the radio link between the vehicle 1 and the ID transmitter 2 so that the radio communication between the vehicle and the ID transmitter takes place, although the distance between the vehicle 1 and ID transmitter 2 is actually so large that the radio communication due to the transmission power should not be possible. For this purpose, an unauthorized attacker will go in the vicinity of the vehicle 1 and with a device 3, the z. B. may be hidden in a suitcase, start an attempt to access the vehicle. A remote station 4 is located at another attacker in the vicinity of the authorized user with the ID transmitter 2. The vehicle transmits its directed to the ID transmitter 2 communication 1b, received by the device 3 and via a further radio link 3c the device 4 is passed. In message 4d, the latter transmits the received message again to the ID transmitter 2, which perceives it as a message from the vehicle 1 and sends its legitimization check and response. The reply 2d from the ID transmitter 2 to the vehicle 1 in turn runs (4c, 3b) via the stations 4 and 3.

Erfindungsgemäß weist die fahrzeugseitige Kommunikationseinrichtung einen Schwingkreis auf, welcher beim Beginnen der Kommunikationsanfrage zum Einschwingen gebracht wird. Die Einschwingzeit, die der Schwingkreis zum Erreichen der Ansprechschwelle des ID-Gebers benötigt, wird fahrzeugseitig beeinflusst, indem der Duty-Cycle bzw. Tastgrad vorgegeben wird. Auf diese Weise kann die Verzögerung des Einschwingvorgangs gezielt beeinflusst werden. Gemäß der Erfindung sind Verzögerungen zwischen 1 und mehreren 10 ms möglich. Die Einschwingzeit wird in Abhängigkeit von einem fahrzeugseitig generierten Zufallsparameter eingestellt. Dieser Zufallsparameter kann mit anderen Fahrzeugsystemen gekoppelt sein, um aus irgendeiner sensorisch bestimmten Fahrzeuggröße eine Pseudozufallszahl generieren zu können. Dazu kommen alle im Fahrzeug vorliegenden Daten in Frage, z.B. Kilometerstand, Batteriespannung, Reifendruck oder sonstige Größen.According to the invention, the vehicle-side communication device to a resonant circuit, which is brought to the start of the communication request to settle. The settling time required by the resonant circuit to reach the ID threshold of the ID transmitter is influenced on the vehicle by specifying the duty cycle or duty cycle. In this way, the delay of the transient process can be influenced in a targeted manner. According to the invention delays between 1 and several 10 ms are possible. The settling time is set as a function of a random parameter generated on the vehicle side. This random parameter may be coupled to other vehicle systems to generate a pseudorandom number from any sensory vehicle size. In addition, all available data in the vehicle in question, such as mileage, battery voltage, tire pressure or other sizes.

Eine derartig generierte Pseudozufallszahl liefert Werte, die von einem Angreifer nicht nachvollziehbar oder vorhersehbar sind.Such a generated pseudorandom number provides values that are not traceable or predictable by an attacker.

Wird das erfindungsgemäße Verfahren gestartet, so wird fahrzeugseitig eine Verzögerung bestimmt, um die die natürliche Einschwingzeit des Schwingkreises verlängert wird. Über den Tastgrad der Versorgung des Schwingkreises wird die Einschwingzeit dementsprechend beeinflusst, so dass nach einer Anstiegszeit T1 die Ansprechschwelle der Kommunikation mit dem ID-Geber erreicht ist (in der Figur sind die Nachrichten 1a und 1b mit diesem Zeitfaktor behaftet). Befindet sich der ID-Geber in der Nähe des Fahrzeugs (Nachricht 1a), liegt also ein berechtigter Zugriff vor, so erfolgt die Antwort des ID-Gebers nach Auswertung und Überprüfung der Nachricht unmittelbar bzw. mit geringer Verzögerung T2. Die Antwort des ID-Gebers wird im Hochfrequenzbereich an die fahrzeugseitige Kommunikationseinrichtung übermittelt, so dass die gesamte Systemlaufzeit einem akzeptablen Zeitfenster um die Einschwingzeit des Kondensators plus die Zeit T2 für die Auswertung im ID-Geber 2 und die hochfrequente Rückantwort benötigt. Ist beispielsweise eine bewusste Verzögerung T1 von 5 ms eingestellt, so wird das akzeptierte Zeitfenster für eine Antwort des ID-Gebers beispielsweise zwischen 5 und 5,5 ms betragen. Außerhalb dieses Zeitfensters eingehende Antworten des ID-Gebers werden ignoriert und führen nicht zu einer Freigabe des Fahrzeugs 1.If the method according to the invention is started, then on the vehicle side a delay is determined by which the natural settling time of the oscillatory circuit is prolonged. The settling time is influenced accordingly via the duty cycle of the supply of the resonant circuit, so that after a rise time T1 the threshold of communication with the ID transmitter is reached (in the figure, the messages 1a and 1b are subject to this time factor). If the ID transmitter is in the vicinity of the vehicle (message 1a), that is, if authorized access is available, then the ID transmitter answers immediately after evaluation and checking of the message or with a slight delay T2. The ID transmitter's response is transmitted in the high-frequency range to the vehicle-side communication device, so that the entire system runtime requires an acceptable time window for the settling time of the capacitor plus the time T2 for the evaluation in the ID transmitter 2 and the high-frequency response. If, for example, a deliberate delay T1 of 5 ms is set, the accepted time window for a response of the ID transmitter will be, for example, between 5 and 5.5 ms. Responses of the ID transmitter which arrive outside this time window are ignored and do not lead to a release of the vehicle 1.

Für die Kommunikation mit dem ID-Geber wird fahrzeugseitig eine Wecknachricht 10 mit 20 kHz generiert. Der ID-Geber empfängt diese Nachricht 10, wertet sie aus und sendet ein hochfrequentes Antwortsignal 11 zurück. Da für die Hochfrequenzkommunikation wesentlich weniger Zeit benötigt wird, ist das Zeitfenster entsprechend eng um die vorgegebene Einschwingzeit anzuordnen.For the communication with the ID transmitter, a wake-up message 10 with 20 kHz is generated on the vehicle side. The ID transmitter receives this message 10, evaluates it and sends back a high-frequency response signal 11. Since much less time is required for the high-frequency communication, the time window is correspondingly close to the predetermined settling time to arrange.

Bei einem unberechtigten Zugriffsversuch empfängt die Einrichtung 3 die Nachricht 1b des Fahrzeugs 1. Die Einrichtung 3 übermittelt die empfangene Nachricht im Hochfrequenzbereich an die Einrichtung 4, hierzu wird regelmässig eine kaum relevante Zeitspanne benötigt. Bei der Übertragung 4d von der Station 4 and den ID-Geber 2, welche im niedrigeren Frequenzbereich stattfinden muss, tritt nun allerdings wiederum die vorgegebene Einschwingzeit T1' auf, die fahrzeugseitig in Abhängigkeit von einem Zufallsparameter vorgegeben wurde, da die Kondensatoren des Systems beim Aufstarten nicht geladen sind. Die zeitverzögerte Nachricht 1b wird dementsprechend mit etwa verdoppelter Verzögerung als Nachricht 4d an den ID-Geber 2 weitergeleitet.In the case of an unauthorized access attempt, the device 3 receives the message 1b of the vehicle 1. The device 3 transmits the received message in the high-frequency range to the device 4, for which purpose a hardly relevant time span is required on a regular basis. In the transmission 4d of the station 4 and the ID transmitter 2, which must take place in the lower frequency range, but now again enters the predetermined settling time T1 ', which was specified on the vehicle side in response to a random parameter, since the capacitors of the system at startup are not loaded. The time-delayed message 1b is accordingly forwarded to the ID transmitter 2 with approximately twice the delay as the message 4d.

Der fahrzeugseitig bewusst eingebrachte Zeitverzögerungsfaktor liegt demnach zweimal im System vor, so dass die Antwort 2d des ID-Gebers 2 an das Fahrzeug 1 verzögert gesendet wird. Nun fällt die Antwortnachricht des ID-Gebers 2 nicht in das zuvor kalkulierte Zeitfenster, und daher wird der Zugriff das Fahrzeug verwehrt.The vehicle deliberately introduced time delay factor is therefore present twice in the system, so that the response 2d of the ID transmitter 2 is sent to the vehicle 1 delayed. Now, the answer message of the ID transmitter 2 does not fall within the previously calculated time slot, and therefore access is denied to the vehicle.

Im Rahmen der Erfindung sind verschiedene Abwandlungen möglich. Insbesondere sind vielfältige Arten möglich, den Zeitverzögerungsparameter zu bestimmen. Dieser kann zufällig bestimmt werden, oder aus fahrzeugseitigen Parametern abgeleitet werden. Es ist wesentlich, dass die Erfindung mit üblichen, meist schon ohnehin vorhandenen Mitteln realisiert werden kann, da insbesondere die Einschwingzeit des Schwingkreises über den Duty-Cycle im Steuergerät eingestellt werden kann, so dass keine wesentlichen baulichen Veränderungen erforderlich sind.Various modifications are possible within the scope of the invention. In particular, various ways are possible to determine the time delay parameter. This can be determined at random, or derived from vehicle-side parameters. It is essential that the invention can be realized with conventional, usually already existing means, since in particular the settling time of the resonant circuit via the duty cycle in the control unit can be adjusted, so that no significant structural changes are required.

Claims (3)

Verfahren zur Kontrolle der Zugangsberechtigung für ein Kraftfahrzeug,
wobei mittels einer fahrzeugseitigen Weckschaltung ein Weck-Funksignal ausgesendet wird,
wobei ein von einem Benutzer des Kraftfahrzeugs mitgeführter ID-Geber das Weck-Funksignal empfängt und mittels einer Auswerteschaltung überprüft,
wobei im Falle einer erfolgreichen Überprüfung von dem ID-Geber ein hochfrequentes Freigabe-Funksignal ausgesendet wird,
wobei eine Fahrzeugseitige Steuereinrichtung das Freigabe-Funksignal empfang und in Abhängigkeit von dem Signal eine Freigabe einer fahrzeugseitigen Schließeinrichtung bewirkt,
dadurch gekennzeichnet, dass
durch die Weckschaltung zur Erzeugung des Weck-Funksignals ein Schwingkreis derart angesteuert wird, dass die Einschwingdauer des Schwingkreises in Abhängigkeit von einem zufällig generierten Parameter variiert wird, wobei die Stromversorgung des Schwingkreises in Abhängigkeit von dem Parameter kontrolliert wird,
eine erwartete Systemlaufzeit in Abhängigkeit von dem generierten Parameter bestimmt wird, und
die Zeitdauer von der Ansteuerung des Schwingkreises bis zum Empfang des Freigabe-Signals in der Steuereinrichtung gemessen und mit der erwarteten Systemlaufzeit verglichen wird,
wobei
dann, wenn die Zeitdauer um mehr als einen vorgegebenen Wert von der erwarteten Systemlaufzeit abweicht, eine Freigabe der Schließeinrichtung unterbunden wird.Method for controlling the access authorization for a motor vehicle,
wherein a wake-up radio signal is transmitted by means of a vehicle-side wake-up circuit,
wherein an ID transmitter carried by a user of the motor vehicle receives the wake-up radio signal and checks it by means of an evaluation circuit,
wherein in the case of a successful check by the ID transmitter, a high frequency enabling radio signal is transmitted,
wherein a vehicle-side control device receives the release radio signal and in response to the signal causes a release of a vehicle-side locking device,
characterized in that
a resonant circuit is controlled by the wake-up circuit for generating the wake-up radio signal such that the settling time of the oscillating circuit is varied in dependence on a randomly generated parameter, the power supply of the oscillating circuit being controlled as a function of the parameter,
an expected system run time is determined as a function of the generated parameter, and
the time period from the activation of the oscillatory circuit to the receipt of the enable signal in the control device is measured and compared with the expected system transit time,
in which
then, if the time period deviates by more than a predetermined value from the expected system run time, a release of the locking device is inhibited. Verfahren nach Anspruch 1, dadurch gekennzeichnet, dass der Parameter oder ein aus dem Parameter erzeugter Wert von der Weckschaltung an den ID-Geber gesendet wird.A method according to claim 1, characterized in that the parameter or a value generated from the parameter is sent from the wake-up circuit to the ID transmitter. Verfahren nach einem der vorangehenden Ansprüche, dadurch gekennzeichnet, dass vor der Übermittlung des Wecksignals eine Nachricht von der Weckschaltung an den ID-Geber gesendet wird, wobei der ID-Geber in Abhängigkeit von der Nachricht seine Ansprechschwelle für das Wecksignal einstellt.Method according to one of the preceding claims, characterized in that prior to the transmission of the wake-up signal, a message is sent from the wake-up circuit to the ID transmitter, wherein the ID transmitter sets in response to the message its threshold for the wake-up signal.
EP10158623A 2009-04-16 2010-03-31 Method for securing keyless entry communication for motor vehicles Withdrawn EP2242027A3 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE102009002448A DE102009002448A1 (en) 2009-04-16 2009-04-16 Method for securing keyless entry communication for motor vehicles

Publications (2)

Publication Number Publication Date
EP2242027A2 true EP2242027A2 (en) 2010-10-20
EP2242027A3 EP2242027A3 (en) 2011-12-21

Family

ID=42263940

Family Applications (1)

Application Number Title Priority Date Filing Date
EP10158623A Withdrawn EP2242027A3 (en) 2009-04-16 2010-03-31 Method for securing keyless entry communication for motor vehicles

Country Status (4)

Country Link
US (1) US20100265035A1 (en)
EP (1) EP2242027A3 (en)
CN (1) CN101866537A (en)
DE (1) DE102009002448A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR3007875A1 (en) * 2013-06-28 2015-01-02 Continental Automotive France METHOD FOR PROTECTING A FREE ACCESS AND / OR START SYSTEM OF A VEHICLE BY MODIFYING THE SIGNAL RECEPTION SPEED
DE102017200668A1 (en) 2017-01-17 2018-07-19 Bayerische Motoren Werke Aktiengesellschaft Procedure for securing access

Families Citing this family (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5685073B2 (en) 2010-12-17 2015-03-18 株式会社東海理化電機製作所 Electronic key system
DE102012003015A1 (en) 2012-02-15 2013-08-22 Audi Ag Starting system for a motor vehicle, motor vehicle with a starting system and method for operating a starting system for a motor vehicle
CN102795172B (en) * 2012-08-17 2015-08-05 马瑞利汽车电子(广州)有限公司 A kind of automobile intelligent enters the Door Handle induction installation of system
US8930045B2 (en) 2013-05-01 2015-01-06 Delphi Technologies, Inc. Relay attack prevention for passive entry passive start (PEPS) vehicle security systems
US9114720B2 (en) 2013-07-11 2015-08-25 Delphi Technologies, Inc. Vehicle positioning system for wireless charging stations
US9802574B2 (en) * 2014-09-16 2017-10-31 Qualcomm Incorporated Relay attack inhibiting
DE102015203661A1 (en) 2015-03-02 2016-09-08 Volkswagen Aktiengesellschaft Function shutdown for a vehicle access system
WO2017144345A1 (en) * 2016-02-26 2017-08-31 Huf Hülsbeck & Fürst Gmbh & Co. Kg Method for activating at least one safety function of a vehicle safety system
EP3306576B1 (en) * 2016-10-05 2023-03-15 The Swatch Group Research and Development Ltd Method and system for secure access to a determined space by means of a portable object
EP3335942B1 (en) * 2016-12-14 2019-11-20 Nxp B.V. Secure vehicle access system, key, vehicle and method therefor
EP3425420B1 (en) * 2017-07-03 2021-11-17 Nxp B.V. Ranging apparatus and method
EP4148694A1 (en) * 2021-09-14 2023-03-15 Nagravision Sàrl Accessing an asset with user device

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19802526B4 (en) * 1998-01-26 2006-02-09 Robert Bosch Gmbh Device for controlling the access authorization
DE10040480B4 (en) * 2000-08-18 2020-07-02 Marquardt Gmbh Locking system, in particular for a motor vehicle
DE10114876A1 (en) * 2001-03-26 2002-10-17 Siemens Ag Identification system for proving authorization to access or use an object, in particular a motor vehicle
JP3909226B2 (en) * 2001-06-29 2007-04-25 アルプス電気株式会社 Passive entry with anti-theft function
EP1288841A1 (en) * 2001-08-30 2003-03-05 Motorola, Inc. Passive response communication system
FR2841393B1 (en) * 2002-06-24 2006-05-05 Johnson Contr Automotive Elect LOW FREQUENCY RADIO EMISSION DEVICE FOR A HANDS-FREE ACCESS SYSTEM FOR A MOTOR VEHICLE
DE10255880A1 (en) * 2002-11-29 2004-06-09 Philips Intellectual Property & Standards Gmbh Electronic communication system and method for detecting a relay attack on the same
JP2007527961A (en) * 2003-06-25 2007-10-04 コーニンクレッカ フィリップス エレクトロニクス エヌ ヴィ Method and arrangement for improving the security of a transponder system, particularly for accessing a car
DE10350081B4 (en) * 2003-10-27 2007-02-15 Sciknowtec Gmbh Measurement of the distance between stations in wireless access systems to ward off bypass attacks
JP4052277B2 (en) * 2004-04-19 2008-02-27 アイシン精機株式会社 Vehicle door handle device
DE102004022839A1 (en) * 2004-05-08 2005-12-01 Conti Temic Microelectronic Gmbh Transmitting circuit for a transponder system for transmitting a digital signal via a transmitting antenna
US7791457B2 (en) * 2006-12-15 2010-09-07 Lear Corporation Method and apparatus for an anti-theft system against radio relay attack in passive keyless entry/start systems

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR3007875A1 (en) * 2013-06-28 2015-01-02 Continental Automotive France METHOD FOR PROTECTING A FREE ACCESS AND / OR START SYSTEM OF A VEHICLE BY MODIFYING THE SIGNAL RECEPTION SPEED
US9430889B2 (en) 2013-06-28 2016-08-30 Continental Automotive France Method for protecting a hands-free access and/or starting system of a vehicle by modifying the speed of signal reception
DE102017200668A1 (en) 2017-01-17 2018-07-19 Bayerische Motoren Werke Aktiengesellschaft Procedure for securing access
DE102017200668B4 (en) * 2017-01-17 2019-01-17 Bayerische Motoren Werke Aktiengesellschaft Procedure for securing access

Also Published As

Publication number Publication date
DE102009002448A1 (en) 2010-10-21
US20100265035A1 (en) 2010-10-21
EP2242027A3 (en) 2011-12-21
CN101866537A (en) 2010-10-20

Similar Documents

Publication Publication Date Title
EP2242027A2 (en) Method for securing keyless entry communication for motor vehicles
EP0980800B1 (en) Anti-theft protection device for a motor vehicle and method of using such a device
DE60226097T2 (en) Passive access system with anti-theft function
DE102011075886B3 (en) Method for verifying access and/or start of passenger car, involves changing time points of electromagnetic signals of antennas and specific characteristics and/or temporal position of sending blocks correspond to cryptographic process
EP3418133B1 (en) Method for operating a passive radio-based closing device and passive radio-based closing device
WO2018197116A1 (en) Method for operating authentication system and authentication system
EP3472809B1 (en) Method for controlling vehicle access
EP2197714B1 (en) Flexible key detection for passive access and driver authorization systems
DE10032936A1 (en) Car security system has two antennas improves code unit location and security
EP2817181A1 (en) Passive access system for a motor vehicle and corresponding method
EP1155207A1 (en) Keyless access control system for motor vehicles as well as method for carrying out a keyless access authorisation control in motor vehicles
DE102005039562B4 (en) A method for preventing unauthorized access to a passive conditional access system of a motor vehicle
EP1041224A2 (en) Device and method for releasing a secure system, especially a motor vehicle access system
DE102004047187B4 (en) Method for avoiding unauthorized access to a passive access authorization system of a motor vehicle
DE202013103554U1 (en) Device for dual-range detection in a vehicle
DE102015217413A1 (en) Method and device for locating a portable radio unit
DE102015203661A1 (en) Function shutdown for a vehicle access system
DE102009044526A1 (en) Method for checking access authorization to a function of a motor vehicle
EP1246137A1 (en) Identification system for proving access right to an object or to use the object, especially a motor vehicle
EP3294594A1 (en) Access and driving authorization system with improved security against relay attacks directed to the transponder interface
DE10112573C2 (en) Method for initializing an anti-theft system for a motor vehicle
EP1747955B1 (en) Verification method for a vehicle access legitimation
EP1254042B1 (en) Method for operating an anti-theft device for a motor vehicle, and anti-theft system
DE19941350A1 (en) Device and method for releasing a safety device, in particular a access device for a motor vehicle
DE102008007842B3 (en) Synchronization of the communication between the identification transmitter and the vehicle station of an access device

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

AX Request for extension of the european patent

Extension state: AL BA ME RS

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

AX Request for extension of the european patent

Extension state: AL BA ME RS

RIC1 Information provided on ipc code assigned before grant

Ipc: G07C 9/00 20060101AFI20111118BHEP

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20120622