Biometric authentication of vehicles not previously registered

Abstract

A method and apparatus for biometric authentication of an unregistered vehicle are disclosed. An example vehicle includes a biometric scanner and a body control module for generating a biometric token. When the biometric token is authorized, the body control module enables the ignition. Additionally, when the biometric token is unauthorized and an additional authorization source is received, the body control module (a) tracks vehicle usage after receiving the biometric token and (b) marks the biometric token as authorized when usage meets a threshold.

Description

Technical Field

[0001] The present disclosure relates generally to vehicle keyless entry and ignition, and more particularly to biometric authentication of vehicles that have not been previously registered. Background Art

[0002] Vehicles can be built to allow entry through different methods without a physical key. Some vehicles include a key fob or smartphone-based entry and ignition system. Alternatively, a keyless entry and ignition (FEI) system facilitates unlocking and starting the vehicle without a key, key fob, or smartphone. For example, a vehicle may have an external keypad where a person enters a key code to unlock the doors, and an internal keypad or touchscreen where a person enters a key code to activate the ignition. Summary of the Invention

[0003] The appended claims define the application. This disclosure summarizes aspects of the embodiments and should not be used to limit the claims. Other embodiments are contemplated based on the techniques described herein, as will be apparent to one of ordinary skill in the art upon studying the following drawings and detailed description, and are intended to fall within the scope of this application.

[0004] An example embodiment of biometric authentication for vehicles that have not been previously registered is disclosed. The example vehicle includes a biometric scanner and a body control module for generating a biometric token. When the biometric token is authorized, the body control module enables the ignition. Additionally, when the biometric token is not authorized and an additional authorization source is received, the body control module (a) tracks vehicle usage after receiving the biometric token and (b) marks the biometric token as authorized when usage meets a threshold.

[0005] An example method for controlling keyless entry and ignition of a vehicle includes generating a biometric token using a biometric scanner and enabling the ignition when the biometric token is authorized. The example method also includes, when the biometric token is not authorized and an additional authorization source is received, (a) tracking vehicle usage after receiving the biometric token, and (b) marking the biometric token as authorized in a cryptographically secure memory when usage meets a threshold.

[0006] According to the present invention, there is provided a vehicle comprising:

[0007] Biometric scanner, which is used to generate biometric tokens;

[0008] Body control module, used for:

[0009] When the biometric token is authorized, enabling the ignition switch; and

[0010] When the biometric token is not authorized and an additional authorization source is received:

[0011] Tracking usage of the vehicle after receiving the biometric token; and

[0012] When usage meets the threshold, the biometric token is marked as authorized.

[0013] According to one embodiment of the invention, the vehicle includes an exterior and an interior keypad, and wherein the additional authorization source is a first key code entered into one of the exterior keypad or the interior keypad.

[0014] According to one embodiment of the present invention, the body control module is configured to:

[0015] unlocking the vehicle doors and determining that an additional source of authorization has been received when a first key code is entered into the exterior keypad; and

[0016] When a second key code different from the first key code is entered into the exterior keypad, the doors of the vehicle are unlocked without confirming that an additional authorization source has been received.

[0017] According to an embodiment of the present invention, the body control module is configured to store the biometric token in an encrypted secure memory when the biometric token is not authorized but receives an additional authorization source.

[0018] According to an embodiment of the present invention, the body control module is configured to determine that an additional authorization source has been received when an authorized key fob is detected within the vehicle.

[0019] According to one embodiment of the present invention, the body control module is configured to: when the biometric token is authorized:

[0020] measuring at least one of a driver's heart rate or blood oxygen saturation level using a biometric scanner before the ignition is activated; and

[0021] The ignition is enabled when the driver's heart rate or blood oxygen saturation level indicates that the driver is energetic and not stressed.

[0022] According to an embodiment of the present invention, the body control module is configured to erase all biometric tokens from the encrypted secure memory when the driver is either lacking energy or feeling nervous.

[0023] According to an embodiment of the present invention, the vehicle body control module is configured to send an alert or message to a mobile device when the driver lacks energy or feels nervous.

[0024] According to one embodiment of the present invention, the body control module is configured to disable the biometric scanner when the driver is either lacking energy or feeling nervous until an authorized mobile device is detected in the vehicle.

[0025] According to one embodiment of the present invention, the biometric scanner is a fingerprint scanner and the biometric token is a digital representation of the fingerprint.

[0026] According to one embodiment of the present invention, wherein the usage is measured in one of a cumulative distance traveled by the vehicle after receiving the biometric token or a cumulative time the vehicle is driven after receiving the biometric token.

[0027] According to one embodiment of the present invention, the biometric scanner is a camera associated with the ultraviolet keyboard, and the biometric token is a digital representation of the user's facial features captured by the camera.

[0028] According to the present invention, there is provided a method for controlling keyless entry and ignition of a vehicle, comprising:

[0029] Generate a biometric token using a biometric scanner;

[0030] enabling the ignition switch using a processor when the biometric token is authorized; and

[0031] When the biometric token is not authorized and an additional authorization source is received:

[0032] tracking usage of the vehicle using the processor after receiving the biometric token; and

[0033] When usage meets a threshold, the biometric token is marked as authorized in cryptographically secure storage.

[0034] According to one embodiment of the present invention, the method includes receiving a first key code via one of an internal keypad or an external keypad as an additional authorization source.

[0035] According to one embodiment of the present invention, the method includes determining that an additional authorization source is received when an authorized key fob is detected.

[0036] According to one embodiment of the invention, the method includes measuring usage of the vehicle as at least one of (i) a cumulative time the vehicle is driven after receiving the biometric token or (ii) a cumulative distance the vehicle travels after receiving the biometric token.

[0037] According to one embodiment of the present invention, the method comprises when the biometric token is authorized:

[0038] measuring at least one of a driver's heart rate or blood oxygen saturation level using the biometric scanner before activating the ignition switch; and

[0039] The ignition is enabled when the driver's heart rate or blood oxygen saturation level indicates that the driver is energetic and not stressed.

[0040] According to one embodiment of the present invention, the method includes erasing all biometric tokens from the encrypted secure memory and disabling the ignition switch when the driver is either lacking energy or feeling nervous.

[0041] According to one embodiment of the present invention, the method includes:

[0042] When the driver is either lacking energy or feeling nervous, sending an alert or message to the mobile device memory and disabling the ignition switch; and

[0043] The ignition is enabled when a confirmation message is received from the mobile device.

[0044] According to one embodiment of the present invention, the method includes disabling the biometric scanner until an authorized mobile device is detected within the vehicle when the driver is either lacking energy or feeling nervous. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] For a better understanding of the present invention, reference may be made to the embodiments illustrated in the following drawings. The components in the drawings are not necessarily drawn to scale, and related elements may be omitted or, in some cases, may be exaggerated in proportion to emphasize and clearly illustrate the novel features described herein. Furthermore, as is known in the art, the system components may be arranged differently. Furthermore, in the drawings, like reference numerals designate corresponding components throughout the several views.

[0046] Figure 1 A vehicle operating in accordance with the teachings of the present disclosure is shown;

[0047] Figure 2 yes Figure 1 A block diagram of the vehicle's electronic components;

[0048] Figure 3 It can be done by Figure 2 A flow chart of a method for providing secondary factor authentication for a keyless entry and ignition system implemented by an electronic component. DETAILED DESCRIPTION

[0049] While the invention may be embodied in various forms, certain exemplary and non-limiting embodiments are shown in the drawings and will be described below, it being understood that this disclosure is to be considered exemplary of the invention and is not intended to limit the invention to the particular embodiments shown.

[0050] Keyless entry and ignition (FEI) systems facilitate unlocking the vehicle's doors and enabling ignition of the vehicle without a physical key, key fob, or smartphone. Vehicles with FEI systems include one or more keypads on the exterior of the vehicle (e.g., near the B-pillar) into which the user enters a key code to unlock the doors. Additionally, the vehicle includes a physical or soft (e.g., via a touchscreen) keypad on the interior of the vehicle to enable the ignition switch. To prevent unauthorized access (e.g., by the user's child who surreptitiously learns the key code, etc.), some FEI systems include biometric authentication. Traditionally, with biometric authentication, users are required to pre-register with a website or application to generate a profile that associates a biometric token with an authorized user. This registration or enrollment process can introduce sufficient "sign up" friction to discourage use of the biometric authentication feature.

[0051] As described below, a method for performing biometric authentication on an FEI system in a vehicle is provided that does not require the user to first complete a registration or enrollment process through a website or application. The vehicle includes a keypad on the exterior of the vehicle and a touchscreen on the interior of the vehicle. To unlock the vehicle doors, the user enters a key code into the exterior keypad. The key code is a series of numbers or alphanumeric characters that is associated with authorization to access the vehicle. In some examples, multiple key codes are associated with unlocking the vehicle. In some such examples, the user enters a first key code to unlock the vehicle doors without enabling biometric authentication of the ignition and enters a second key code to enable biometric authentication of the ignition. When the user is in the driver's seat, the user provides a biometric token (e.g., via a fingerprint scanner or iris scanner, etc.). When the biometric token is associated with an authorized user, the vehicle enables the ignition switch. When the biometric token is not associated with an authorized user but (a) an authorized key fob or mobile device (e.g., smart phone, smartwatch, etc.) is within the vehicle and / or (b) the user enters an authorized key code into a soft keyboard on the touchscreen, the vehicle (i) enables the ignition and (ii) saves the biometric token to determine whether the biometric token should be considered authorized after the vehicle is driven a threshold distance (e.g., 1 mile, 2 miles, etc.).

[0052] The vehicle designates a biometric token that is not considered authorized as a potentially authorized biometric token. Over time, when certain requirements are met, the potentially authorized biometric token is converted to an authorized biometric token without further intervention from the user. A potentially authorized biometric token is converted to an authorized biometric token when: (a) the potentially authorized biometric token has been used with an authorized key code or mobile device for more than a threshold frequency (e.g., twice a week, etc.), (b) the vehicle has been driven after the potentially authorized biometric token has been used with the authorized key code or mobile device for more than a threshold cumulative time period (e.g., one hour, two hours, etc.), and / or (c) the vehicle has been driven after the potentially authorized biometric token has been used with the authorized key code or mobile device for more than a threshold cumulative distance (e.g., 3 to 5 miles, etc.). In some examples, a notification is presented to the user when the biometric token is authorized to inform them that biometric-activated start is now available.

[0053] In some examples, when the biometric token is scanned, sensors within the vehicle measure the user's vital signs (e.g., heart rate and / or blood oxygen level). In some such examples, when the biometric token is a fingerprint, the fingerprint scanner includes a pulse oximeter or a light-emitting device to measure blood oxygen level by analyzing the difference between visible light and infrared light transmittance. If the blood oxygen saturation is below a threshold (e.g., 96%, etc.), the vehicle determines that the user is likely lacking energy and does not enable the ignition switch. In some examples, the pulse oximeter measures the user's heart rate. In such examples, when the user's heart rate is not within a threshold range (e.g., 50 to 100 beats per minute), the vehicle determines that the user is likely lacking energy or is in a state of stress and does not enable the ignition switch.

[0054] As described above, the vehicle maintains a database of authorized biometric tokens and potentially authorized biometric tokens in secure memory. In some examples, the vehicle erases potentially authorized biometric tokens after the biometric scanner has not detected the potentially authorized biometric token for a specific period of time (e.g., one week, one month, etc.). In some examples, the database also includes previously authorized biometric tokens that were once authorized but were designated as previously authorized after the biometric scanner had not detected the authorized biometric token for a specific period of time (e.g., one week, one month, etc.). In some such examples, upon detection of a deauthorized biometric token using a secondary authorization method (e.g., the presence of a key fob, entry of a key code, etc.), the deauthorized biometric token is designated as an authorized biometric token. In some examples, the vehicle completely erases the authorized biometric tokens and potentially authorized biometric tokens from secure memory as a security response. In some such examples, the vehicle completely erases the biometric token stored in secure memory when the vehicle is inactive or in a state of stress, (i) the vehicle determines that the user is inactive or in a state of stress, (ii) the user enters a specific key code into one of the keypads, or (iii) the biometric scanner scans an unauthorized biometric token a threshold number of times without an authorized key code or mobile device. Additionally, in some examples, the vehicle alarm system may be triggered in these events.

[0055] Figure 1 A vehicle 100 is shown operating in accordance with the teachings of the present disclosure. The vehicle 100 can be a standard gasoline-powered vehicle, a hybrid vehicle, an electric vehicle, a fuel cell vehicle, and / or any other type of vehicle that enables mobility. The vehicle 100 includes components related to mobility, such as a powertrain having an engine, a transmission, a suspension, a drive shaft, and / or wheels. The vehicle 100 can be non-autonomous, semi-autonomous (e.g., some program power functions are controlled by the vehicle 100), or autonomous (e.g., power functions are controlled by the vehicle 100 without direct driver input). In the example shown, the vehicle 100 includes an infotainment head unit (IHU) 102, a powertrain control unit (PCU) 104, one or more internal or external biometric scanners 106a to 106d, an external keypad 108, and a body control unit (BCM) 110.

[0056] The infotainment head unit 102 provides an interface between the vehicle 100 and the user. The infotainment head unit 102 includes digital and / or analog interfaces (e.g., input devices and output devices) to receive input from the user and display information. The input devices include a touch screen 112 capable of presenting a soft keyboard to the user. The input devices may also include, for example, control knobs, instrument panels, buttons, and / or touchpads. The output devices may include instrument cluster outputs (e.g., dials, lighting devices), actuators, heads-up displays, center console displays (e.g., liquid crystal displays ("LCD"), organic light emitting diode ("OLED") displays, flat panel displays, solid-state displays, etc.), and / or speakers. In some examples, the touch screen 112 is incorporated into the center console display. In the example shown, the infotainment head unit 102 includes a display for an infotainment system (e.g., Ford's and MyFord Toyota Universal The main infotainment unit 102 includes hardware (eg, a processor or controller, memory, storage device, etc.) and software (eg, an operating system, etc.). In addition, the main infotainment unit 102 displays the infotainment system on, for example, a center console display.

[0057] The powertrain control unit 104 includes hardware and firmware for controlling the ignition, fuel injection, emission system, transmission, and / or braking system of the vehicle 100. The powertrain control unit 104 also monitors sensors (e.g., fuel injection sensors, wheel speed sensors, exhaust gas sensors, etc.) and uses control algorithms to control, for example, the fuel mixture, ignition timing, variable cam timing, emission control, fuel pumps, engine cooling fans, and / or charging systems. In the example shown, the powertrain control unit 104 communicates with the vehicle via a vehicle data bus (e.g., via the following Figure 2 The vehicle data bus 204 (via the vehicle data bus 204) sends information about the distance traveled by the vehicle 100. Additionally, the powertrain control unit 104 controls the anti-theft device 114, which prevents the engine from running unless an authorization token is presented. The powertrain control unit 104 also enables and disables the keyless ignition switch, preventing the driver from starting the vehicle's engine without a key. For example, the keyless ignition switch can be a button or switch located on the dashboard near the steering wheel.

[0058] Biometric scanners 106a-106d measure characteristics inherent to the user to create a unique biometric token based on those characteristics (e.g., using a histogram algorithm, a checksum algorithm, etc.). Biometric scanners 106a-106d may include one or more of a fingerprint scanner 106a, a microphone 106b, a camera 106c, and / or an infrared camera 106d. Biometric scanners 106a-106d may be positioned so as to allow acquisition of the biometric token from outside or inside the user. In some cases, biometric scanners 106a-106d may be mounted within the vehicle cabin but pointed outward to capture biometric information of users seeking entry. For example, biometric scanners 106a-106d may be mounted on the side of the driver's seat, on the side of the overhead panel, on the side of the center mirror, or using a portion of the vehicle's cabin glass as part of the sensing element. Fingerprint scanner 106a images the user's fingerprint and converts the information obtained from the image into a substantially unique numerical value for the biometric token. In some examples, fingerprint scanner 106a is positioned on the ignition switch. In some examples, the fingerprint scanner 106a includes a display that displays an image of the fingerprint, which changes color depending on the status of the corresponding biometric token (e.g., red for an unauthorized user, yellow for a potentially authorized user, green for an authorized user, etc.). Additionally or alternatively, in some examples, the fingerprint scanner 106a includes a pulse oximeter to measure the user's heart rate and / or blood oxygen saturation level. The microphone 106b measures the user's voice to perform voice recognition (sometimes referred to as "speaker recognition") to generate the biometric token. The cameras 106c and 106d use facial and / or iris recognition to capture images for generating the biometric token. In some examples, the biometric scanners 106a to 106d (a) are communicatively connected to the body control module 110 via a dedicated data bus (e.g., a data bus that is not communicatively connected to other components of the vehicle 100) and / or (b) communicate with the body control module 110 using encryption.

[0059] The external keypad 108 is communicatively connected to the body control module 110. The external keypad 108 includes numeric or alphanumeric buttons. In some examples, the buttons are tilted buttons that indicate one value when pressure is applied to one side of the button and a different value when pressure is applied to the opposite side of the button. Alternatively, in some examples, the buttons may be capacitive touch, piezoelectric, or resistive touch-based buttons. In the example shown, the external keypad 108 is located on a door of the vehicle 100 near the B-pillar. The external keypad 108 may be located elsewhere on the vehicle 100, such as near a door handle or on the edge of the windshield.

[0060] In some examples, the external keypad 108 is an ultraviolet (UV) keypad. The UV keypad is lined or projected onto a UV absorbing or reflecting material located between two or more layers of material making up the vehicle window. When the driver places his or her finger on the keypad to enter a key code, a camera captures the light reflected from the finger so that the key pressed can be determined. Alternatively or in addition, in some examples, a camera associated with the external keypad 108 performs facial and / or iris detection to generate a biometric token to authorize the driver to enter the vehicle 100. In some such examples, when the biometric token is authorized, the biometric token is used to unlock the vehicle doors. An example of using a UV keypad as an external keypad is described in U.S. patent application serial number 15 / 683,375, entitled "Vehicle Unlocking Systems, Apparatus, and Methods," filed on August 22, 2017, which is incorporated by reference in its entirety.

[0061] The body control module 110 controls various subsystems of the vehicle 100. For example, the body control module 110 can control power windows, power locks, and / or power mirrors. The body control module 110 includes circuitry for, for example, driving relays (e.g., to control wiper fluid), driving brushed DC motors (e.g., to control power seats, power locks, power windows, wipers), driving stepper motors, and / or driving LEDs. In the example shown, the body control module 110 includes an ignition authenticator 116.

[0062] The ignition authenticator 116 (a) unlocks the vehicle doors when an authorized key code is entered into the external keypad 108, (b) manages a database of authorized and potentially authorized biometric tokens, (c) enables the immobilizer 114 and the ignition switch when an authorized biometric token is received, and (d) enables the immobilizer 114 and the ignition switch when an authorized key code is entered into the touch screen 112 of the infotainment head unit 102. When a key code is entered into the external keypad 108, the ignition authenticator 116 compares the entered key code to a key stored in a secure memory (e.g., the following Figure 2The ignition authenticator 116 compares the entered key code to a list of authorized key codes stored in the secure memory 212. When the entered key code matches one of the authorized key codes stored in the secure memory, the ignition authenticator 116 unlocks the doors of the vehicle 100. In some examples, the key codes stored in the secure memory are associated with different functions. In some such examples, some key codes are associated with standard access and some key codes are associated with biometric access. Using the key code associated with standard access, the ignition authenticator 116 unlocks the doors but prohibits enabling the ignition button using the biometric token. Using the key code associated with biometric access, the ignition authenticator 116 unlocks the doors and enables enabling the ignition button using the biometric token. In some examples, the ignition authenticator 116 is able to enable the ignition button using the biometric token when a key code not associated with biometric access is entered into the external keypad 108, when (a) a key code associated with biometric access is entered into the soft keyboard on the touch screen 112, or (b) an authorized key fob and / or mobile device is inside the vehicle 100.

[0063] When the ignition button can be activated using a biometric token, the ignition authenticator 116 activates the ignition switch upon receiving an authorized biometric token via the biometric scanners 106a to 106d. To determine whether the received biometric token is authorized, the ignition authenticator 116 compares the received biometric token with authorized biometric tokens stored in secure memory. If the biometric token is not authorized but the ignition button can be activated using the biometric token, the ignition authenticator 116 creates or updates a record stored in secure memory that associates the biometric token with the potential authorization. If the biometric token is not authorized and activation of the ignition button using the biometric token is prohibited, the ignition authenticator 116 does not activate the ignition switch.

[0064] When the ignition is started after receiving a potentially authorized biometric token, the ignition authenticator 116 tracks information about the vehicle 100 via a corresponding record. In some examples, the ignition authenticator 116 tracks the frequency with which potentially authorized biometric tokens have been received. In some examples, the ignition authenticator 116 tracks the cumulative time that the vehicle 100 has been driven after receiving the potentially authorized biometric token. For example, if on the first trip, the vehicle 100 was driven for 30 minutes after receiving the potentially authorized biometric token and on the second trip, the vehicle 100 was driven for 15 minutes after receiving the potentially authorized biometric token, the record associated with the potentially authorized biometric token may indicate that the vehicle has been driven for 45 minutes. In some such examples, the ignition authenticator 116 only tracks the time that the vehicle 100 has been driven for more than a threshold duration (e.g., one minute, etc.) and / or the time that the vehicle 100 has been driven for more than a threshold distance (e.g., one mile, etc.). In some examples, the ignition authenticator 116 tracks the cumulative distance that the vehicle 100 has been driven after receiving the potentially authorized biometric token. For example, if, on a first trip, the vehicle 100 was driven 5 miles after receiving the potentially authorized biometric token and on a second trip, the vehicle 100 was driven 20 miles after receiving the potentially authorized biometric token, the record associated with the potentially authorized biometric token may indicate that the vehicle has been driven 25 miles. In some such examples, the ignition authenticator 116 only tracks distances that the vehicle 100 was driven for greater than a threshold duration (e.g., one minute, etc.) and / or times that the vehicle 100 was driven over a threshold distance (e.g., one mile, etc.).

[0065] Sometimes, without user intervention, the ignition authenticator 116 either deletes the record associated with the potentially authorized biometric token or converts the record to associate the biometric token as authorized. The ignition authenticator 116 deletes the record when the corresponding biometric token has not been received from the biometric scanners 106a to 106d for a threshold period of time. For example, the ignition authenticator 116 may delete the record when the corresponding biometric token has not been received from the biometric scanners 106a to 106d for more than one week. In some examples, the time-based deletion of biometric tokens is suspended when the vehicle has been placed in certain operating modes (e.g., airport mode or long-term storage mode). The ignition authenticator 116 converts a potentially authorized record into an authorized record when: (a) the potentially authorized biometric token has been used in conjunction with an authorized key code or mobile device for more than a threshold frequency (e.g., twice a week, etc.), (b) the vehicle 100 has been driven after the potentially authorized biometric token has been used with the authorized key code or mobile device for more than a threshold cumulative time period (e.g., one hour, two hours, etc.), and / or (c) the vehicle 100 has been driven after the potentially authorized biometric token has been used with the authorized key code or mobile device for more than a threshold cumulative distance (e.g., 3 to 5 miles, etc.).

[0066] In some examples, while the biometric scanners 106a to 106d measure the driver's biometrics, the ignition authenticator 116 monitors heart rate and / or blood oxygen level (e.g., via a pulse oximeter in the fingerprint scanner 106a). In such an example, when the ignition authenticator 116 determines that the user is lacking energy or is in a state of stress, the ignition authenticator 116 will not enable the ignition switch and will disable the anti-theft device 114. When the blood oxygen saturation is below a threshold value (e.g., 85%, etc.), the ignition authenticator 116 determines that the user is lacking energy. When the user's heart rate is not within a threshold range (e.g., 50 to 90 beats per minute), the ignition authenticator 116 determines that the user is either lacking energy or is in a state of stress.

[0067] In some examples, the ignition authenticator 116 erases all records of biometric tokens as an emergency response to detecting an emergency event. In some such examples, an emergency event includes when (i) the user is inactive or stressed, (ii) a specific key code associated with the emergency event (sometimes referred to as a "panic code") is entered into one of the keypads (e.g., the external keypad 108 or the soft keyboard on the touchscreen 112), or (iii) an unauthorized biometric token is scanned a threshold number of times by a biometric scanner. Alternatively, in some examples, the ignition authenticator 116 disables biometric authentication in response to detecting an emergency until an authorized key fob is detected within the vehicle 100 and / or a recovery key code is entered into the interior keypad. Alternatively or additionally, in some examples, the ignition authenticator 116 will first issue a telematics request to the vehicle owner or administrator to notify them of the detected condition or threat and inquire whether the codes should be erased. Alternatively or additionally, in some examples, the ignition authenticator 116 triggers an alarm (e.g., activates a horn, etc.) in response to detecting an emergency. In some such examples, ignition authenticator 116 facilitates the driver enabling and disabling an alarm associated with biometric authentication via the center console display of infotainment head unit 102. Alternatively or additionally, in some examples, ignition authenticator 116 may suspend triggering of an alarm if the vehicle location is known to be in a city with objectionable audible alarms.

[0068] Figure 2 yes Figure 1 FIG2 is a block diagram of electronic components 200 of vehicle 100. In the example shown, electronic components 200 include infotainment head unit 102, powertrain control unit 104, biometric scanners 106 a - 106 d, external keypad 108, body control module 110, immobilizer 114, pulse oximeter 202, first vehicle data bus 204, and second vehicle data bus 206.

[0069] In the illustrated example, the body control module 110 includes a processor or controller (CPU) 208, memory 210, and secure memory 212. In the illustrated example, the body control module 110 is configured to include the ignition authenticator 116. The processor or controller 208 can be any suitable processing device or set of processing devices, such as, but not limited to, a microprocessor, a microcontroller-based platform, a suitable integrated circuit, one or more field programmable gate arrays (FPGAs), and / or one or more application-specific integrated circuits (ASICs). Memories 210 and 212 can be volatile memory (e.g., including non-volatile RAM (random access memory), magnetic RAM, ferroelectric RAM, and any other suitable form of RAM); non-volatile memory (e.g., disk storage, flash memory, EPROM (erasable programmable read-only memory), EEPROM (electrically erasable programmable read-only memory), non-volatile solid-state memory, etc.); unchangeable memory (e.g., EPROM); read-only memory; and / or high-capacity storage devices (e.g., hard disk drives, solid-state drives, etc.). In some examples, the memory 210 includes multiple types of memory, particularly volatile memory and non-volatile memory.

[0070] Secure memory 212 (sometimes referred to as "encrypted memory") includes an embedded hardware encryption engine with its own authentication key for securely storing information. The hardware encryption engine's cryptographic algorithm encrypts data stored in secure memory 212. Secure memory 212 is communicatively connected via a dedicated data bus. Processor or controller 208 isolates data it retrieves from secure memory 212 so that the data cannot be accessed by other hardware in vehicle 100. In the example shown, key codes 214 and a record 216 of authorized and potentially authorized biometric tokens are stored in secure memory 212.

[0071] Memory 210 is a computer-readable medium on which one or more sets of instructions, such as software for operating the methods of the present disclosure, may be embedded. These instructions may embody one or more methods or logic as described herein. In certain embodiments, the instructions may reside completely or at least partially within any one or more of memory 210, the computer-readable medium, and / or the processor 208 during execution of the instructions.

[0072] The terms "non-transitory computer-readable medium" and "tangible computer-readable medium" should be understood to include a single medium or multiple media, such as a centralized or distributed database, and / or associated caches and servers storing one or more sets of instructions. The terms "non-transitory computer-readable medium" and "tangible computer-readable medium" also include any tangible medium that can store, encode, or carry a set of instructions for execution by a processor or cause a system to perform any one or more of the methods or operations disclosed herein. As used herein, the term "tangible computer-readable medium" is expressly defined to include any type of computer-readable storage device and / or storage disk and to exclude propagating signals.

[0073] In the example shown, a first vehicle data bus 204 is communicatively connected to the infotainment head unit 102, the powertrain control unit 104, and the body control module 110. In some examples, the first vehicle data bus 204 is implemented according to the controller area network (CAN) bus protocol defined by the International Organization for Standardization (ISO) 11898-1. Alternatively, in some examples, the first vehicle data bus 204 can be a media-oriented systems transport (MOST) bus or a CAN-flexible data (CAN-FD) bus (ISO 11898-7). A second vehicle data bus 206 is communicatively connected to the cameras 106c and 106d and the body control module 110. The second vehicle data bus 206 can be a MOST bus, a CAN-FD bus, or an Ethernet bus. In some examples, the body control module 110 communicatively isolates the first vehicle data bus 204 and the second vehicle data bus 206 (e.g., via a firewall, a message broker, etc.).

[0074] Figure 3 is a flow chart of a method for providing secondary factor authentication for a keyless entry and ignition system, which may be performed by Figure 2 The electronic component 200 is implemented as shown in FIG. Initially, at block 302, the ignition authenticator 116 waits until ignition is enabled via the biometric token. In some examples, ignition is enabled via the biometric token when a key code associated with biometric access is entered on the external keyboard 108 or a soft keyboard on the touch screen 112. At block 304, the biometric token is received or otherwise retrieved from the biometric scanners 106a to 106d. At block 306, the ignition authenticator 116 determines whether the biometric token is authorized. If the biometric token is authorized, the method continues at block 326. Otherwise, if the biometric token is not authorized, the method continues at block 308.

[0075] At box 308, the ignition authenticator 116 determines whether an authorized key fob or mobile device is detected. When an authorized key fob or mobile device is detected, the method continues to box 310. At box 310, the ignition authenticator 116 enables the ignition switch. At box 312, the ignition authenticator 116 monitors the time and / or distance the vehicle 100 is driven. At box 314, the ignition authenticator 116 determines whether the time and / or distance meet (e.g., are greater than) corresponding thresholds. When the time and / or distance meet the corresponding thresholds, the method continues to box 316.

[0076] At box 316, the ignition authenticator 116 determines whether the biometric token is in the database stored in the secure memory 212. When the biometric token is not in the database, the method continues to box 318. Otherwise, when the biometric token is in the database, the method continues at box 320. At box 318, the ignition authenticator 116 creates a record associated with the biometric token in the database. At box 320, the ignition authenticator 116 adds usage statistics for the current driving session to the record associated with the biometric token. At box 322, the ignition authenticator 116 determines whether the usage statistics associated with the biometric token meet usage volume (e.g., driving time, driving distance, etc.) and / or usage frequency thresholds. At box 324, when the usage statistics associated with the biometric token meet the usage volume and / or usage frequency thresholds, the ignition authenticator 116 associates the biometric token with being authorized.

[0077] At block 326, the ignition authenticator 116 monitors the user's heart rate and / or blood oxygen level via the biometric scanners 106a-106d and / or other sensors in the vehicle 100. At block 328, the ignition authenticator 116 determines whether the user is energetic and not nervous. At block 330, if the driver is energetic and not nervous, the ignition authenticator 116 activates the ignition. At block 332, if the driver is lacking energy and / or nervous, the ignition authenticator 116 initiates emergency procedures. For example, the ignition authenticator 116 may erase the biometric token from a database, contact the vehicle owner / manager, and / or contact law enforcement.

[0078] Figure 3 The flowchart represents a flow chart stored in a memory (eg Figure 2 210) in the machine-readable instructions, which include one or more programs, when executed by a processor (e.g. Figure 2 The processor 208 of the embodiment of the present invention, when executed, causes the vehicle 100 to implement the example ignition authenticator 116 and / or more generally implement Figure 1 and Figure 2 Furthermore, although reference is made to the body control module 110 Figure 3The flowchart shown in describes an example procedure, but many other methods of implementing the example ignition authenticator 116 and / or more generally the body control module 110 may alternatively be used. For example, the order of execution of the blocks may be changed, and / or some of the blocks described may be changed, eliminated, or combined.

[0079] In this application, the use of antonymous conjunctions is intended to include conjunctions. The use of definite or indefinite articles is not intended to indicate cardinality. In particular, reference to "the" or "a" and "an" articles is also intended to indicate one of a possible plurality of such articles. Further, the conjunction "or" can be used to convey simultaneous features rather than mutually exclusive alternatives. In other words, the conjunction "or" should be understood to include "and / or". As used herein, the terms "module" and "unit" refer to hardware having a circuit that is typically combined with a sensor to provide communication, control and / or monitoring capabilities. "Module" and "unit" can also include firmware executed on the circuit. The terms "includes", "including" and "include" are inclusive and have the same scope as "comprises", "comprising" and "comprise", respectively.

[0080] The above embodiments, particularly any "preferred" embodiments, are possible examples of implementation and are presented only for a clear understanding of the principles of the present invention. Many changes and modifications may be made to the above embodiments without departing from the spirit and principles of the technology described herein. All modifications are intended to be included within the scope of this disclosure and protected by the following claims.

Claims

1. A vehicle comprising: a biometric scanner for generating a biometric token; Body control module, used for: When the biometric token is authorized, enabling the ignition switch; and When the biometric token is not authorized and an additional authorization source is received: tracking usage of the vehicle after receiving the biometric token; and When the usage satisfies a threshold, marking the biometric token as authorized; as well as The body control module is configured to: when the biometric token is authorized: measuring at least one of a driver's heart rate or blood oxygen saturation level with the biometric scanner before activating the ignition switch; and activating the ignition switch when the driver's heart rate or the blood oxygen saturation level indicates that the driver is energetic and not nervous; When the driver is either lacking energy or feeling nervous, the biometric scanner is disabled until an authorized mobile device is detected within the vehicle. 2 . The vehicle of claim 1 , comprising exterior and interior keypads, and wherein the additional authorization source is a first key code entered into one of the exterior keypad or the interior keypad.

3. The vehicle of claim 2, wherein the body control module is configured to: unlocking the vehicle doors and determining that the additional source of authorization has been received when the first key code is entered into the external keypad; and When a second key code different from the first key code is entered into the external keypad, the doors of the vehicle are unlocked without confirming that the additional authorization source has been received.

4. The vehicle of claim 1 or 2, wherein the body control module is configured to store the biometric token in an encrypted secure memory when the biometric token is not authorized but the additional authorization source is received.

5. The vehicle of claim 1 or 2, wherein the body control module is configured to determine that the additional authorization source has been received when an authorized key fob is detected within the vehicle.

6. The vehicle of claim 1 , wherein the body control module is configured to erase all biometric tokens from an encrypted secure memory when the driver is either lacking energy or feeling nervous.

7. The vehicle of claim 1 , wherein the biometric scanner is a fingerprint scanner and the biometric token is a digital representation of a fingerprint.

8. The vehicle of claim 1, wherein the usage is measured in one of a cumulative distance traveled by the vehicle after receiving the biometric token or a cumulative time the vehicle is driven after receiving the biometric token.

9. The vehicle of claim 1 , wherein the biometric scanner is a camera associated with an ultraviolet keyboard, and the biometric token is a digital representation of the user's facial features captured by the camera.

10. A method for controlling keyless entry and ignition of a vehicle, comprising: Generate a biometric token using a biometric scanner; enabling an ignition switch using a processor when the biometric token is authorized; and When the biometric token is not authorized and an additional authorization source is received: tracking usage of the vehicle using the processor after receiving the biometric token; and When the usage satisfies a threshold, marking the biometric token as authorized in a cryptographically secure memory; as well as When the biometric token is authorized: measuring at least one of a driver's heart rate or blood oxygen saturation level using the biometric scanner before activating the ignition switch; and activating the ignition switch when the driver's heart rate or the blood oxygen saturation level indicates that the driver is energetic and not nervous; When the driver is either lacking energy or feeling nervous, the biometric scanner is disabled until an authorized mobile device is detected within the vehicle.

11. The method of claim 10, comprising receiving a first key code as the additional authorization source via one of an internal keypad or an external keypad.

12. The method of claim 10, comprising determining receipt of the additional authorization source when an authorized key fob is detected.

13. The method of claim 10, comprising measuring the usage of the vehicle as at least one of (i) a cumulative time the vehicle is driven after receiving the biometric token or (ii) a cumulative distance the vehicle travels after receiving the biometric token.

14. The method according to claim 10, comprising: When the driver is either lacking energy or feeling nervous, all biometric tokens are erased from the encrypted secure memory and the ignition switch is disabled.

Images