WO2002024497A1

WO2002024497A1 - Vehicle anti-theft system and method

Info

Publication number: WO2002024497A1
Application number: PCT/US2001/025509
Authority: WO
Inventors: Todd Louis Price
Original assignee: Detroit Diesel Corporation
Priority date: 2000-09-22
Filing date: 2001-08-15
Publication date: 2002-03-28
Also published as: AU2001288253A1

Abstract

A vehicle anti-theft method (10) for use in a vehicle having an internal combustion engine (12), an engine controller (22), and a memory (32) is provided. The memory (32) includes a data page. The engine controller (22) is configured to operate the engine in a plurality of different modes (112,116,120 and 122) including a theft protection armed mode that limits engine output while allowing the engine to run. The method includes receiving an arm password (62), and changing the engine operation mode to the theft protection armed mode when the received arm password matches a stored password. The engine controller (22), in the theft protection armed mode, limits engine output but allows the engine to run at idle. Further, the method includes logging anti-theft audit information including the mode change to the data page.

Description

VEHICLE ANTI-THEFT SYSTEM AND METHOD

TECHNICAL FIELD

The present invention relates to a vehicle anti-theft system and method.

BACKGROUND ART

In the control of fuel injection systems, electronic control units having volatile and non- volatile memory, input and output driver circuitry, and a processor capable of executing a stored instruction set are utilized to control various functions of the engine and its associated systems. A particular electronic control unit communicates with numerous sensors, actuators, and other electronic control units necessary to control various functions, which may include, for example, various aspects of fuel delivery and transmission control.

With vehicles, and particularly with heavy-duty trucks, it is very desirable to have a vehicle anti-theft system. In an existing vehicle anti-theft system for a heavy-duty truck, the anti-theft system is only armed when the engine is shutdown. The armed anti-theft system simply does not allow the truck to start. With the heavy-duty trucking industry becoming more and more competitive, advanced engine features such as anti-theft protection are becoming significantly more important. As such, although some anti-theft protection systems have been used on vehicles in the past, it is desirable to provide a system and method that allows more advanced anti-theft protection with additional functionality.

DISCLOSURE OF INVENTION

It is therefore an object of the present invention to provide a vehicle anti-theft system and method that provide added functionality. In carrying out the above object and other objects and features of the present invention, a vehicle anti-theft method for use in a vehicle having an internal combustion engine, an engine controller, and a memory is provided. The memory includes a data page, and the engine controller is configured to operate the engine in a plurality of different modes. The different modes include a theft protection armed mode that limits engine output while allowing the engine to run. The method comprises receiving an arm password, comparing the received arm password with a stored password in the memory, and changing the engine operation mode. The engine operation mode is changed to the theft protection armed mode when the received arm password matches the stored arm password. The engine controller limits the engine output but allows the engine to run at idle while in the theft protection armed mode. The method further comprises logging anti-theft audit information including the mode change to the data page.

Preferably, the arm password is either received by manually entering the arm password, or is received by inserting a removable storage medium into a storage medium reader and subsequently reading the arm password from the removable storage medium. In a preferred embodiment, in addition to the arm password matching the stored arm password, at least one additional condition must exist to allow the engine to operate in the theft protection armed mode. As such, a preferred method further comprises checking the condition of the parking brake. The engine is operated in the theft protection armed mode when the received arm password matches the stored arm password and the parking brake is engaged. Otherwise, the engine is operated in a different mode, such as, for example, a theft protection disarmed mode.

Further, a preferred method further comprises checking the condition of the vehicle speed sensor. The engine is operated in the theft protection armed mode when the received arm password matches the stored arm password and the vehicle speed sensor indicates that the vehicle is stationary. Otherwise, the engine is operated in a different mode, such as, for example, a theft protection disarmed mode. Embodiments of the present invention may employ a variety of different engine protection modes. For example, the theft protection armed mode for the engine may be configured to permit the engine to be shutdown and then manually restarted to idle. Further, for example, the theft protection armed mode for the engine may be configured to permit the engine to operate in a speed limited mode in addition to idle operation. The speed limited mode may be defined by an engine speed limit which engine speed is not permitted to exceed when in the theft protection armed mode. Alternatively, the speed limited mode may be defined by a road speed limit which vehicle road speed is not permitted to exceed when in the theft protection armed mode.

In preferred embodiments, the plurality of different modes, in addition to including the theft protection armed mode, includes a theft protection disarmed mode, and a password is required to arm the system, as well as to disarm the system. The passwords may or may not be the same. Particularly, a preferred method further comprises receiving a disarm password, comparing the received disarm password with a stored disarm password in the memory, and changing the engine operating mode. The engine operating mode is changed to the theft protection disarmed mode when the received disarm password matches the stored disarm password. The engine controller then allows the engine to run over a normal range of operating conditions. The method further comprises logging anti-theft audit information including the mode change to the data page.

In preferred implementations, the plurality of different modes further includes a theft protection lockdown mode wherein the engine is shutdown and not permitted to restart. The method further comprises determining a plurality of theft situation conditions, and changing the engine operating mode to the theft protection lockdown mode when at least one of the theft situation conditions is met. For example, if the engine is idling in theft protection armed mode, and the parking brake is disengaged, the vehicle may be forced into the theft protection lockdown mode. Of course, it is appreciated that speed limited theft protection armed modes would allow the disengagement of the parking brake without forcing a theft protection lockdown mode. Further, anti-theft audit information including the mode change is logged to the data page.

In preferred embodiments, the anti-theft audit information that is logged to the data page includes a time counter indicating the amount of time that the vehicle spends in the theft protection armed mode. Further, the anti-theft audit information that is logged to the data page preferably includes a trmestamp indicating the time that the engine operation mode was changed.

Further, in carrying out the present invention, a vehicle anti-theft method for use in a vehicle having an internal combustion engine, an engine controller, and a memory is provided. The memory includes a data page. The engine controller is configured to operate the engine in a plurality of different modes including a theft protection armed mode that limits engine output while allowing the engine to run, and a theft protection disarmed mode that allows the engine to run over a normal range of operating conditions. The method comprises receiving a password, determining a desired operation mode, comparing the received password with a stored password in the memory, and changing the engine operation mode from a current operation mode to the desired operation mode when the received password matches the stored password. The method further comprises logging anti-theft audit information to the data page over a series of engine operation mode changes. The audit information includes the desired operation mode and a timestamp indicating the time that the engine operation mode was changed such that after the series of engine operation mode changes, the data page includes a series of desired operation modes and corresponding timestamps.

In preferred embodiments, the anti-theft audit information that is logged to the data page includes a time counter indicating the amount of time that the vehicle spends in the theft protection armed mode. The amount of time is cumulative over the series of engine operation mode changes. In some embodiments, the engine controller is configured with a theft protection calibration variable for enabling or disabling the theft protection features of the engine control module (ECM). The theft protection engine modes are available when the calibration variable status is enabled. The theft protection engine modes are unavailable when the calibration variable status is disabled. The calibration variable status is modifiable with a calibration tool having a tool identification. Preferably, the method further comprises logging anti- theft audit information to the data page including logging a modification of the theft protection calibration variable status by recording the change in the calibration variable status, the tool identification, and a timestamp indicating when the calibration variable was changed.

Still further, in carrying out the present invention, a vehicle anti-theft system for use in a vehicle having an internal combustion engine, an engine controller, and a memory including a data page is provided. The system comprises a display unit including an input device for receiving a password, and control logic. The control logic is located at the engine controller and operative to operate the engine in a plurality of different modes including a theft protection armed mode that limits engine output while allowing the engine to run, and a theft protection disarmed mode that allows the engine to run over a normal range of operating conditions. The control logic is further operative to compare the received password with the stored password in the memory and to change the engine operation mode from a current operation mode to a desired operation mode when the received password matches the stored password. The control logic is further operative to log anti-theft audit information to the data page over a series of engine operation mode changes. The audit information includes the desired operation mode and a timestamp indicating the time that the engine operation mode was changed such that after the series of engine operation mode changes, the data page includes a series of desired operation modes and corresponding timestamps.

In a preferred embodiment, the anti-theft audit information that is logged to the data page includes a time counter indicating the amount of time that the vehicle spends in the theft protection armed mode. The amount of time is cumulative over the series of engine operation mode changes. In a preferred embodiment, the engine controller is configured with a theft protection calibration variable for enabling or disabling theft protection features of the engine control module (ECM) . Preferably, control logic is further operative to log anti-theft audit information to the data page including a modification of the theft protection calibration variable status by recording the change in calibration variable status, the tool identification of the calibration tool used to make the change, and a timestamp indicating when the calibration variable was changed.

The advantages associated with embodiments of the present invention are numerous. For example, preferred embodiments of the present invention include an engine controller configured to operate the engine in a plurality of different modes including a theft protection disarmed mode (normal operation), a theft protection armed mode, and a theft protection lockdown mode, when the calibration variable status for anti-theft is enabled. The theft protection armed mode may take many forms such as an idle mode, a speed limited mode (engine or road speed), a no start mode, or a toggle idle mode. Advantageously, the mode may be selected by the vehicle operator or may be determined based on the vehicle conditions when the anti- theft system is armed. Advantageously, embodiments of the present invention log anti-theft audit information including the occurrence of a mode change (such as armed to disarmed or disarmed to armed) to a data page in the engine controller memory. The audit information may include many things such as the engine mode (armed or disarmed) that is being changed to and a timestamp, as well as a cumulative time counter that accumulates the total time spent in the armed mode. In addition, the particular armed mode may be recorded to the data page instead of only recording the fact that the system has been armed. The audit information allows a fleet manager to look at the data page, and determine to what extent the vehicle driver is utilizing the anti-theft features (by looking at the time counter). Further, the audit information includes a log of all mode changes with timestamps, allowing someone to examine the data page and determine information as to the history of the vehicle. In a suitable implementation, the data page includes the last 10 times that there has been a state change (disarmed, armed, lockdown) and also includes the last three times that the calibration variable status has been modified using a calibration tool such as a programming interface.

The input device may be, for example, a keypad for use by a vehicle operator to manually enter the arm password. Alternatively, the input device may be a storage medium reader for reading the arm password from a removable storage medium that is placed at the reader by a vehicle operator. Of course, the input device may take other forms and is not limited to those mentioned above.

The above object and other objects, features, and advantages of the present invention are readily apparent from the following detailed description of the " best mode for carrying out the invention when taken in connection with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIGURE 1 is a schematic diagram of a fuel injection system made in accordance with the present invention;

FIGURE 2 is a block diagram illustrating a method of the present invention;

FIGURE 3 is a block diagram illustrating a method of the present invention for logging anti-theft audit information when the operation mode of the engine is changed; and

FIGURE 4 is a block diagram illustrating a method of the present invention for logging anti-theft audit information when the calibration variable status has been changed.

BEST MODE FOR CARRYING OUT THE INVENTION

Referring to Figure 1, a system for controlling a heavy duty truck is shown. The system, generally indicated by reference numeral 10, includes an engine 12 having a plurality of cylinders, fed by fuel injection from fuel injectors or a common rail. In a preferred embodiment, engine 12 is a compression-ignition internal combustion engine. The fuel injectors are receiving pressurized fuel from a supply as is well known in the art. The system 10 may also include various sensors 20 for generating signals indicative of corresponding operational conditions or parameters of engine 12, the vehicle transmission (not shown), and other vehicular components. Sensors 20 are in electrical communication with a controller 22 via input ports 24. Controller 22 preferably includes a microprocessor 26 in communication with various computer readable storage media 28 via data and control bus 30. Computer readable storage media 28 may include any of a number of known devices which function as a read-only memory (ROM) 32, random access memory (RAM) 34, nonvolatile random access memory (NVRAM) 36, and the like. The computer readable storage media may be implemented by any of a number of known physical devices capable of storing data representing instructions executable via a computer such as controller 22. Known devices may include, but are not limited to, PROM, EPROM, EEPROM, flash memory, and the like in addition to magnetic, optical, and combination media capable of temporary or permanent data storage.

Computer readable storage media 28 include various program instructions, software, and control logic to effect control of various systems and subsystems of the vehicle, such as engine 12, the vehicle transmission, and the like. Controller 22 receives signals from sensors 20 via input ports 24 and generates output signals which may be provided to various actuators and/or components via output ports 38.

A data, diagnostics, and programming interface 44 may also be selectively connected to controller 22 via a plug 50 to exchange various information therebetween. Interface 44 may be used to change values within the computer readable storage media 28, such as configuration settings, control logic, a theft protection calibration variable, and a desired theft protection armed mode calibration variable when present.

In accordance with the present invention, system 10 includes a display unit 60 that is connected through an interface to controller 22 to activate and deactivate (arm and disarm) a vehicle theft- protection mode of engine operation (when the feature is enabled with the theft protection calibration variable). Of course, in accordance -with the present invention, there may be more than one theft protection armed mode, and preferably there are several theft protection armed modes that the vehicle operator may choose from, including "no start" mode, "idle" mode, "toggle idle" mode (suitably implemented as a part of OPTIMIZED IDLE which is available on engines from Detroit Diesel Corporation, Detroit, Michigan), and optionally a speed limited mode.

Display unit 60 includes a display 62 for displaying information to the vehicle operator, such as for example, a prompt to enter a password and theft protection mode status, that is, activated or deactivated (armed or disarmed). Preferably, theft protection mode is armed by entering a password, and preferably, various other conditions must be met for engine theft protection mode to be activated. Preferably, display 62 may be utilized to communicate the status of the various additional required engine conditions in the event that one of these conditions is not met when the vehicle operator wishes to enter theft protection mode. A suitable display 60 is the PRODRIVER DC Display Unit, available from Detroit Diesel Corporation, Detroit, Michigan. Of course, it is appreciated that the encryption algorithm of the display device must match that of the engine controller to send and receive encrypted passwords. As such, the PRODRIVER DC and the DDEC controller are configured accordingly. Alternatively, a conventional display device and engine controller may be arranged and configured to form embodiments of the present invention, provided that both the display device and the engine controller use the same encryption algorithm or that no encryption algorithm is used. That is, encryption is not required.

The input device for entering the password may be a variety of devices. For example, the input device may be a keypad 64 for use by a vehicle operator to manually enter the arm password. Alternatively, the input device may be a storage medium reader, shown in dashed line 66. Storage medium reader 66 reads the arm password from a removable storage medium 68 that is placed at reader 66 by the vehicle operator. As shown, removable storage medium 68 includes magnetic media 70. Of course, any type of media may be used, such as for example, optical media. One example of a suitable keypad is the PRODRIVER DC Display Unit keypad.

In a preferred embodiment, controller 22 monitors sensors and the display device interface and executes control logic in hardware and/or software, Preferably, controller 22 is the DDEC controller available from Detroit Diesel Corporation, Detroit, Michigan. Various other features of this controller are described in detail in U.S. Patent Nos. 5,477,827 and 5,445,128, the disclosures of which are hereby incorporated by reference in their entirety. Further, the toggle idle mode mentioned above is preferably implemented as a part of OPTIMIZED IDLE. The operation of suitable toggle mode implementations are described in detail U.S. Patent Nos. 5,317,998 and 5,732,676, both of which are hereby incorporated by reference in their entirety.

As will be appreciated by one of ordinary skill in the art, the control logic may be implemented or effected in hardware, software, or a combination of hardware and software. The various functions are preferably effected by a programmed microprocessor, such as the DDEC controller, but may include one or more functions implemented by dedicated electric, electronic, or integrated circuits. As will also be appreciated, the control logic may be implemented using any one of a number of known programming and processing techniques or strategies and is not limited to the order or sequence illustrated here for convenience. For example, interrupt or event driven processing is typically employed in real-time control applications, such as control of a vehicle engine or transmission. Likewise, parallel processing or multi-tasking systems and methods may be used to accomplish the objects, features, and advantages of the present invention. The present invention is independent of the particular programming language, operating system, or processor used to implement the control logic illustrated.

With reference now to Figure 2, a flow chart 90 shows a method of the present invention for vehicle anti-theft protection, of course, it is to be appreciated that the flow chart is arranged to facilitate an understanding of the present invention, and that the order of the steps illustrated in Figure 2 (and in Figures 3 and 4) is not meant to be limiting. That is, steps may be performed in a variety of orders and other equivalent control logic may be substituted therefor or used in addition to that illustrated in flow chart 90 and block diagrams 150 and 170.

In embodiments of the present invention, the engine control module executes instructions that determine an operating mode for the engine. The memory of the electronic control module includes a number of calibration variables. These calibration variables are used to, among other things, enable and disable various control features. One of these calibration variables is the theft protection calibration variable. The theft protection calibration variable has a value that determines whether or not the theft protection modes of engine operation are available. Specifically, the theft protection calibration variable may be set to enable the theft protection modes, or may be set so as to disable the theft protection modes making the theft protection modes unavailable. The theft protection calibration variable, and other calibration variables, are modified by connecting the interface 44 (Figure 1) to the controller. Further, calibration variables may be preset at the factory. The various theft protection modes of engine operation of the present invention are made available to the vehicle operator by setting the theft protection calibration variable to enable the theft protection modes. Anytime the theft protection calibration variable is modified, preferred embodiments of the present invention record the modification to the data page in memory.

The data page is a collection of data accumulated over time as the engine controller logs various events. In the present invention, certain events related to theft protection are logged to the data page. In particular, any modification to the theft protection calibration variable is logged to the data page. Preferably, a change of the calibration variable is logged (that is, the data page is written to indicate the new setting for the calibration variable). In addition, it is preferred that the tool identification for the calibration tool used to modify the calibration variable is logged together with the logging of the change in the calibration variable. Further, it is preferred that a timestamp is logged along with the tool identification and the calibration variable change. As such, when the data page is extracted from the controller memory, a fleet manager or other person may review data page and see the history of changes to the theft protection calibration variable, and specifically, see if the theft protection feature has been enabled or disabled by a modification to the calibration variable. Further, the person reviewing the data page, in preferred embodiments, is also able to tell what calibration tool was used to make the change, and may review the timestamp for each change. For example, if theft protection modes are disabled at the factory, but the feature is later enabled with the calibration tool, the reviewer of the data page would be able to view this information in the data page. And, likewise, if the theft protection modes are enabled at the factory, and later disabled with a calibration tool, the reviewer of the data page would be able to see this as well. As an added precaution, access to calibration variables within the engine controller is usually password protected. In addition to requiring an initial password to access the calibration variables, the preferred embodiment also utilized group lockout passwords. That is, a general password is required to access the calibration variables in addition to a specific password for the particular feature set that is to be accessed.

When the theft protection modes of the engine are made available by enabling the anti-theft feature with the theft protection calibration variable, the engine controller may operate the engine in several different modes. First, there is the normal operation mode or the theft protection disarmed mode. Second, there is the active mode or the theft protection armed mode. Third, there is the theft protection lockdown mode. These three modes are utilized in preferred embodiments of the present invention, however, it would be possible to implement additional modes. The active mode, also referred to as the theft protection armed mode, may take several forms. That is, the armed mode actually may include a plurality of different modes including an idle mode, a no engine start mode, a toggle idle mode, and one or more speed limited modes. In addition to logging changes to the theft protection calibration variable to the data page, embodiments of the present invention log state changes or operating mode changes of the engine when the theft protection feature is enabled. Specifically, for the example given wherein there is a disarmed mode, an armed mode, and a lockdown mode, any change in mode among three exemplary modes is logged to the data page. For example, when theft protection is changed from disarmed to armed or from armed to disarmed, the change in state or change in engine operation mode is logged to the data page. The log includes information representing the various changes in operation modes to show a history of the engine operating mode. Preferably, each time the operating mode of the engine changes, the change in modes is recorded to the log by, for example, recording the new mode. Preferably, a timestamp is included with each entry. In addition, the data page preferably includes the time counter indicating the amount of time the vehicle spends with the anti-theft in the armed or active state. As such, a fleet operator or other person may review the data page to see a history of the operating mode changes with corresponding timestamps, as well as view the value in the time counter to see the overall time spent in the armed theft protection mode. Reviewing the operating mode information as well as the calibration variable information provides an audit trail so that historical information relating to the use of the anti-theft feature may be determined by viewing the data page. This historical information may be very useful in the event that theft occurs and the truck is later recovered. Examining the information in the data page could determine whether or not the anti-theft was armed, disarmed, or in lockdown at the approximate time it is believed that the cargo was stolen. In addition, the data page could show whether the anti-theft calibration variable was changed to disable theft protection features. Optionally, when the log indicates that the anti-theft is armed, the specific armed mode could be indicated.

At start block 92, the vehicle operator has the opportunity to arm the vehicle anti-theft mode. Preferably, the system may be armed while the engine is either shutdown or in an idle state. The anti-theft protection mode may be activated (armed) and deactivated (disarmed), when the anti-theft feature is enabled in the ECM via the theft protection calibration variable. Preferably, the anti-theft feature is enabled with interface 44 (Figure 1).

Once the engine is either off or idling, the driver may select from display 60 (Figure 1) to activate anti-theft protection mode. After selecting to activate the anti-theft protection, the vehicle operator is prompted to enter a password as shown at block 94. As mentioned previously, the password may be entered in a variety of different ways, such as, for example, a keypad or a removable storage medium. With the keypad 64 (Figure 1), a driver enters the password, and the password is preferably encrypted using an algorithm prior to sending the password across the vehicle datalink to the ECM. At the ECM, the password is de-encrypted and compared with the stored password in memory, preferably in ECM EEPROM. Alternatively, a removable storage medium 68 (Figure 1) or driver card may be inserted into an appropriate slot on the display unit. The storage medium reader 66 (Figure 1) reads the password from the removable storage medium, and sends the password across the vehicle database in the same method that would occur if the vehicle operator had manually typed in the password. Preferably, the display unit only prompts the driver to input the password when the computer readable storage medium is not present so that a driver may leave the medium in place if desired. The password is checked against the stored password at decision block 96. On the medium, the password is preferably encrypted.

In preferred embodiments of the present invention, in order for the anti-theft feature to be activated, additional conditions must exist. Of course, any set of additional conditions may be employed as an alternative to the preferred set of additional conditions described herein, as is appreciated by one of ordinary skill in the art. At decision block 98, the condition of the parking brake is checked. In preferred embodiments, the parking brake has to be engaged in order for the anti- theft feature to become activated. At decision block 100, the condition of the vehicle speed sensor is checked. In preferred embodiments, the vehicle speed sensor has to show 0 miles per hour in order for the anti-theft protection feature to become activated. As described below, additional conditions are preferably checked when the desired theft protection mode is toggle idle mode (preferably implemented as OPTIMIZED IDLE). Alternatively, other conditions such as engine speed and load may be checked. In some application, such as non-highway vehicles without a parking brake or a vehicle speed sensor, engine speed and/or load are suitable conditions to check. At block 102, in preferred embodiments of the present invention, a desired theft protection mode is determined from a plurality of available theft protection armed modes. At decision blocks 104 and 106, additional conditions are checked when the desired operation mode is OPTIMIZED IDLE or any other suitable toggle idle mode allowing for automatic shutdown and restarting of the engine to maintain a desired temperature in a sleeper cab of the truck, oil temperature, or battery voltage.

When OPTIMIZED IDLE or another suitable toggle idle mode is not the desired mode, the desired mode is determined as either idle mode, speed limited mode, or no start mode. Decision boxes 114 and 118 illustrate an exemplary sequence of comparisons to determine the desired theft protection mode. Of course, it is to be appreciated that the desired theft protection mode may be determined based on engine conditions, or may be selected by a vehicle operator when the password is entered.

Again, it is preferred that various engine condition requirements are satisfied, along with the password being correct, to allow activation (arming) of theft protection mode. In preferred embodiments, the ECM will return a message indicating which condition was not met if the vehicle operator attempts to enter a theft protection mode and one of the required engine conditions for the particular desired protection armed mode is not met. For example, if the parking brake is not engaged when the vehicle operator enters the password, a message is sent from the ECM to the display device to alert the operator that the parking brake has to be engaged for theft protection to be activated. Preferably, the ECM allows for an unlimited number of attempts to enter the correct password, giving the driver an opportunity to resubmit the password to enable the anti-theft feature after attempting to meet the required condition.

As is appreciated by one of ordinary skill in the art, there are a variety of different theft-protection modes that embodiments of the present invention may employ. It is to be appreciated that in embodiments of the present invention, at least one of the theft-protection modes permits the engine to operate at idle. Of course, in addition to the idle theft-protection mode, various other theft-protection modes may be provided.

At block 116, idle mode permits the engine to operate at idle. In preferred embodiments of the present invention, (straight) idle mode is selected by activating theft-protection mode while the engine is in idle. Of course, preferably, additional conditions must be met to activate theft protection as described above. In some embodiments of the present invention, after turning off the engine, the ECM does not allow the driver to restart the engine without entering the password. Alternatively, idle mode may be configured such that the driver may, as desired, turn the engine off and restart the engine while remaining in the idle theft protection mode. That is, the engine may be manually shutdown and restarted, however, the engine must remain at idle. Appropriately, if any of the additional conditions becomes unsatisfied while in anti-theft idle mode, the engine shuts down and cannot be restarted until the correct password is entered. Preferably, all modes operate this way, meaning that if any of the additional conditions for the particular armed mode become unsatisfied while in any anti-theft mode, the engine shuts down and cannot be restarted until the correct password is entered. That is, the engine enters the theft protection lockdown mode. The lockdown mode should be distinguished from the "no engine start mode" even though both modes do not allow the engine to restart. Specifically, lockdown is entered when a theft situation condition is satisfied, such as the disengagement of the parking brake when the particular armed mode requires that the parking brake remain engaged (for example, no engine start mode and idle mode, but not speed limited mode). In contrast, no engine start mode 122, in preferred embodiments of the present invention, is selected by activating theft- protection mode while the engine is shutdown.

Further, yet another theft-protection mode is speed limit mode indicated at 120. In this mode, the ECM limits either road speed or engine speed. The limit value for road speed or engine speed is a calibrated value, and preferably is implemented so that interface 44 (Figure 1) may be utilized to change the calibration value. Speed limiting can be very advantageous. For example, this feature could allow fleets to protect their vehicles from theft while in a truck yard or maintenance garage, but allow maintenance personnel the ability to move the truck if needed (but with, for example, a 5 miles per hour road speed limit or a 1,000 rpm engine speed limit, or any other suitable scheme). It is appreciated that the parking brake may be disengaged and the vehicle speed sensor may detect that the vehicle is moving without forcing the engine to shutdown.

Yet another mode for anti-theft protection is toggled idle mode, which is preferably implemented as a part of OPTIMIZED IDLE mode. OPTIMIZED IDLE mode is similar to the straight idle mode described above, with the exceptions being that OPTIMIZED IDLE automatically shuts down and restarts the engine as necessary to maintain a desired condition such as a desired temperature in the vehicle cab, desired oil temperature, or battery voltage. Of course, it is to be appreciated that in both of the idle theft protection modes (that is, straight idle and OPTIMIZED IDLE), the engine is idled at an rpm sufficient to power the current electrical load. Therefore, the rpm for the idle protection modes may vary based on electrical loads such that prolonged use the anti-theft operating mode does not drain the battery charge. Toggle idle mode may be selected by activating the anti-theft system while at idle, with a selector switch being used to specify "straight idle" or "toggle idle" mode. Alternatively, an ECM calibration value may specify the desired mode.

In all of the different protection modes 112, 116, 120, and 122, a correct password is required to return the engine to normal (disarmed) operating mode, as indicated in block 124. Correct entry of the password causes decision box 126 to direct flow to end block 128, meaning that the engine has returned to its previous operating mode. An incorrect password, as indicated by decision block 126, results in the engine staying in whichever anti-theft mode that it was in.

Above, the various anti-theft theft protection armed modes of engine operation have been described. Specifically, embodiments of the present invention may utilize various theft protection armed modes including idle mode, toggle idle mode, no engine start mode, and speed limited mode, to name a few. It is appreciated that these various theft protection armed modes are available when the theft protection calibration variable status is enabled. In addition to the various theft protection armed modes, while the theft protection calibration variable is enabled, the engine operates in the theft protection disarmed mode when disarmed. Of course, it is appreciated that the arm and disarm passwords may be the same or different passwords. And, in addition, preferred embodiments of the present invention also have a theft protection lockdown mode. The lockdown mode is initiated by a theft situation condition. That is, each armed mode may have a plurality of theft situation conditions such that when any one of the theft situation conditions is met, the engine operation mode is changed to the lockdown mode, shutting down the engine and not allowing the engine to restart until the disarm password is entered. In the various idle theft protection armed modes, suitable theft situation conditions may be the parking brake becoming disengaged, or the vehicle speed sensor showing a non-zero value. In the speed limited armed modes, a suitable theft situation condition may be the occurrence of multiple attempts by the vehicle operator to accelerate the engine (or vehicle) beyond the speed limit.

In accordance with the present invention, engine operation mode changes (among armed mode, disarmed mode, and lockdown mode) are logged to a data page within the memory of the engine controller. Specifically, anti-theft audit information including the mode change is logged. The mode change audit information in the log may simply indicate a list of mode changes, preferably with timestamps. Alternatively, for the armed mode, the audit information may indicate the particular armed mode such as idle, etc. Preferably, the logged information, in addition to including the mode changes, includes a time counter indicating the total amount of time that the vehicle spends in the theft protection armed mode or modes. Preferably, the time counter is cumulative until reset with the interface. In addition, the data page preferably also includes a time stamp for each mode change.

As best shown in Figure 3, a preferred method for logging anti-theft audit information in accordance with the present invention is generally indicated at 150. At block 152, a password is received (such as an arm or disarm password when the vehicle operator desires to arm or disarm the theft protection system, when the system is enabled with the appropriate calibration variable in the ECM). At block 154, the desired operation mode is determined. As mentioned previously, the desired operation mode may be determined by the state of the engine at the time the operator attempts to arm the system, or may be determined by calibration variables within the ECM, or may be selected by the vehicle operator through the display unit input device. At block 156, the received password is compared to the stored password. Upon correct entry of the password, at block 158, the engine operation mode is changed to the desired operation mode. At block 160, anti-theft audit information is logged to the data page in the memory of the engine controller. Specifically, preferred embodiments of the present invention log the new engine operation mode at block 162 and log a timestamp at block 164. In addition, preferred embodiments of the present invention update a time counter as needed. The time counter is a cumulative counter that keeps track of the total time spent in armed theft protection modes. Advantageously, a fleet operator may examine the data page extracted from the ECM memory to see if the vehicle driver is utilizing the anti-theft feature.

As best shown in Figure 4, the theft protection calibration variable within the engine controller may also be changed. To change the calibration variable (to enable or disable the theft protection feature of the engine controller), a suitable tool is required. One way to access the calibration variables within the ECM is with interface 44 (Figure 1). Of course, interface 44 is just one tool that may be used to access the calibration variables within the ECM, and other tools may also be used, as appropriate. In preferred embodiments of the present invention, when a calibration variable status change request is received at block 174, the calibration variable status change is also logged to the data page at block 176. In addition to logging the change in status of the calibration variable, at block 178, the tool identification of the tool used to change the. calibration variable is also logged. And lastly, the preferred embodiments of the present invention also timestamp the entry into the data page representing the change in the calibration variable at block 180.

In accordance with the present invention, it is appreciated that anti- theft protection features of the engine controller are improved. Specifically, the present invention comprehends an anti-theft system that may be enabled or disabled with a calibration variable in the engine controller. To change the calibration variable, a suitable tool such as interface 44 is required. The status of the calibration variable (enabled or disabled) determines whether or not the theft protection modes are available to the vehicle driver. That is, enabling the calibration variable makes the theft protection engine operating modes available, while disabling the calibration variable makes the theft protection modes unavailable. Changes to the calibration variable, along with the timestamp and the identification of the tool used to make the change are logged onto the data page. In a suitable implementation, the data page contains various anti-theft audit information that has been logged to the data page over a period of time. The data page may be extracted with a suitable tool such as interface 44 so that a fleet manager or other individual may examine the data page and see to what extent the anti-theft features are being utilized, or whether or not someone has disabled or enabled the feature. Specifically, a suitable implementation logs the last three times that the ECM anti-theft calibration variable has been modified. In addition, a suitable implementation logs the last 10 times that there has been a state change among: anti-theft theft protection disarmed mode, theft protection armed mode, and theft protection lockdown mode. Preferably, a timestamp and an update of the cumulative armed time counter is also included with each logging of engine mode state change. In addition, when a change to one of the armed modes is logged, the log may include an indication of the particular armed mode.

While embodiments of the invention have been illustrated and described, it is not intended that these embodiments illustrate and describe all possible forms of the invention. Rather, the words used in the specification are words of description rather than limitation, and it is understood that various changes may be made without departing from the spirit and scope of the invention.

Claims

WHAT IS CLAIMED IS:

1. A vehicle anti-theft method for use in a vehicle having an internal combustion engine, an engine controller, and a memory including a data page, the engine controller being configured to operate the engine in a plurality of different modes including a theft protection armed mode that limits engine output while allowing the engine to run, the method comprising: receiving an arm password; comparing the received arm password with a stored arm password in the memory; changing the engine operation mode to the theft protection armed mode when the received arm password matches the stored arm password, wherein the engine controller limits engine output but allows the engine to run at idle; and logging anti-theft audit information including the mode change to the data page.

2. The method of claim 1 wherein receiving the arm password comprises: manually entering the arm password.

3. The method of claim 1 wherein receiving the arm password comprises: inserting a removable storage medium into a storage medium reader; and reading the arm password from the removable storage medium.

4. The method of claim 1 wherein the vehicle has an engagable parking brake, the method further comprising: checking a condition of the parking brake, wherein the engine is operated in the theft protection armed mode when the received arm password matches the stored arm password and the parking brake is engaged, and otherwise, the engine is operated in a different mode.

5. The method of claim 1 wherein the vehicle has a vehicle speed sensor, the method further comprising: checking a condition of the vehicle speed sensor, wherein the engine is operated in the theft protection armed mode when the received arm password matches the stored arm password and the vehicle speed sensor indicates that the vehicle is stationary, and otherwise, the engine is operated in a different mode.

6. The method of claim 1 wherein the theft protection armed mode for the engine permits the engine to shutdown and then restart to idle.

7. The method of claim 1 wherein the theft protection armed mode for the engine further permits the engine to operate in a speed limited mode in addition to idle operation.

8. The method of claim 7 wherein the speed limited mode is defined by an engine speed limit which engine speed is not permitted to exceed when in the theft protection armed mode.

9. The method of claim 7 wherein the speed limited mode is defined by a road speed limit which vehicle road speed is not permitted to exceed when in the theft protection armed mode.

10. The method of claim 1 wherein the plurality of different modes includes a theft protection disarmed mode, and wherein the method further comprises: receiving a disarm password; comparing the received disarm password with a stored disarm arm password in the memory; changing the engine operation mode to the theft protection disarmed mode when the received disarm password matches the stored disarm password, wherein the engine controller allows the engine to run over a normal range of operating conditions; and logging anti-theft audit information including the mode change to the data page.

11. The method of claim 1 wherein the plurality of different modes includes a theft protection lockdown mode wherein the engine is shutdown and not permitted to restart, and wherein the method further comprises: determining a plurality of theft situation conditions; changing the engine operation mode to the theft protection lockdown mode when at least one of the theft situation conditions is met; and logging anti-theft audit information including the mode change to the data page.

12. The method of claim 1 wherein the anti-theft audit information that is logged to the data page includes a time counter indicating the amount of time that the vehicle spends in the theft protection armed mode.

13. The method of claim 1 wherein the anti-theft audit information that is logged to the data page includes a timestamp indicating the time that the engine operation mode was changed.

14. A vehicle anti-theft method for use in a vehicle having an internal combustion engine, an engine controller, and a memory including a data page, the engine controller being configured to operate the engine in a plurality of different modes including a theft protection armed mode that limits engine output while allowing the engine to run, and a theft protection disarmed mode that allows the engine to run over a normal range of operating conditions, the method comprising: receiving a password; determining a desired operation mode; comparing the received password with a stored password in the memory; changing the engine operation mode from a current operation mode to the desired operation mode when the received password matches the stored password; and logging anti-theft audit information to the data page over a series of engine operation mode changes, the audit information including the desired operation mode and a timestamp indicating the time that the engine operation mode was changed such that after the series of engine operation mode changes, the data page _jincludes a series of desired operation modes and corresponding timestamps.

15. The method of claim 14 wherein the anti-theft audit information that is logged to the data page includes a time counter indicating the amount of time that the vehicle spends in the theft protection armed mode, the amount of time being cumulative over the series of engine operation mode changes.

16. The method of claim 14 wherein the engine controller is configured with a theft protection calibration variable wherein the theft protection engine modes are available when the calibration variable status is enabled and are unavailable when the calibration variable status is disabled, the calibration variable status being modifiable with a calibration tool having a tool identification, the method further comprising: logging anti-theft audit information to the data page including logging a modification of the theft protection calibration variable status by recording the change in calibration variable status, the tool identification, and a timestamp indicating when the calibration variable was changed.

17. A vehicle anti-theft system for use in a vehicle having an internal combustion engine, an engine controller, and a memory including a data page, the system comprising: a display unit including an input device for receiving a password; and control logic in the engine controller operative to operate the engine in a plurality of different modes including a theft protection armed mode that limits engine output while allowing the engine to run, and a theft protection disarmed mode that allows the engine to run over a normal range of operating conditions, the control logic being further operative to compare the received password with a stored password in the memory and to change the engine operation mode from a current operation mode to a desired operation mode when the received password matches the stored password, wherein the control logic is further operative to log anti-theft audit information to the data page over a series of engine operation mode changes, the audit information including the desired operation mode and a timestamp indicating the time that the engine operation mode was changed such that after the series of engine operation mode changes, the data page includes a series of desired operation modes and corresponding timestamps.

18. The system of claim 17 wherein the anti-theft audit information that is logged to the data page includes a time counter indicating the amount of time that the vehicle spends in the theft protection armed mode, the amount of time being cumulative over the series of engine operation mode changes.

19. The system of claim 17 wherein the engine controller is configured with a theft protection calibration variable wherein the theft protection engine modes are available when the calibration variable status is enabled and are unavailable when the calibration variable status is disabled, the calibration variable status being modifiable with a calibration tool having a tool identification, the control logic being further operative to: log anti-theft audit information to the data page including a modification of the theft protection calibration variable status by recording the change in calibration variable status, the tool identification, and a timestamp indicating when the calibration variable was changed.