Sensor device having first communication interface for connection to second wireless communication interface on movable object

Abstract

The invention relates to a sensor device having a first wireless communication interface for connection to a second wireless communication interface on a movable object, in particular a vehicle, the sensor device being designed to carry out the following steps: operating the sensor device in a first state, wherein only insensitive data can be transmitted to the second wireless communication interface; transmitting a connection signal to the second wireless communication interface when the sensor device is operated in the first state and is moved at a predetermined speed and / or a predetermined rotational rate; establishing a secure connection with the movable object according to the second wireless communication interface; transmitting sensitive data by means of the secure connection and storing the sensitive data, for example connection data, in particular connection keys and parameter data; transferring the sensor device into a second state, wherein only insensitive data can be transmitted; and changing the state of the sensor device to the first state when a predeterminable reset event occurs.

Description

Technical Field

[0001] The invention relates to a sensor device having a first wireless communication interface for connecting to a second wireless communication interface on a movable object, in particular a vehicle.

[0002] Furthermore, the invention relates to a movable object, in particular a vehicle, having a second wireless communication interface for establishing a connection to a first wireless communication interface.

[0003] Furthermore, the invention relates to a system comprising a sensor device according to any one of claims 1 to 9 and a movable object, in particular a vehicle, according to claim 10 .

[0004] Although the present invention is generally applicable to movable objects, the present invention is described with reference to a motor vehicle. Background Art

[0005] In order to check the air pressure in the tires of a vehicle, it is known to measure the air pressure by means of sensors in the tires and to transmit the measured values ​​to the vehicle by radio.

[0006] In this case, the sensor is usually designed as a transmitting unit without direct bidirectional communication capability. That is to say, the sensor can transmit data, but cannot receive data from the vehicle or requires a third device to establish the connection.

[0007] When the tire is changed or the sensor is replaced, the newly installed sensor must then be manually connected to the vehicle so that it can be connected to the vehicle again and the vehicle can receive data again. Summary of the invention

[0008] In one specific embodiment, the present invention provides a sensor device having a first wireless communication interface for connecting to a second wireless communication interface on a movable object, in particular a vehicle, wherein the sensor device is designed to perform the following steps:

[0009] - operating the sensor device in a first state, in which only insensitive data can be transmitted to the second wireless communication interface;

[0010] - sending a connection signal to the second wireless communication interface when the sensor device is operating in the first state and moves at a predetermined speed and / or a predetermined rotation rate;

[0011] - establishing a secure connection with the movable object according to the second wireless communication interface;

[0012] - transmitting sensitive data by means of a secure connection and storing sensitive data, such as connection data, in particular connection keys and parameter data;

[0013] - transferring the sensor device into a second state in which only insensitive data can be transmitted;

[0014] When a predeterminable reset event occurs, the state of the sensor device is changed to the first state and at least some of the stored sensitive data is deleted.

[0015] In one embodiment, the present invention provides a movable object, in particular a vehicle, having a second wireless communication interface for establishing a connection with a first wireless communication interface, in particular a wireless communication interface of a sensor device according to any one of claims 1 to 9, wherein the movable object is configured to perform the following steps:

[0016] - operating the movable object in a first state, in which only insensitive data can be transmitted to the first wireless communication interface;

[0017] - receiving a connection signal from the first wireless communication interface;

[0018] - establishing a secure connection with the sensor device according to the first wireless communication interface;

[0019] - transmitting sensitive data by means of a secure connection and storing sensitive data, such as connection data, in particular connection keys and parameter data;

[0020] - transferring the movable object to a second state in which only insensitive data can be transmitted;

[0021] When a predeterminable reset event occurs, the state of the movable object is changed to the first state and at least some of the stored sensitive data is deleted.

[0022] In one embodiment, the invention provides a system comprising a sensor device according to any one of claims 1 to 9 and a movable object, in particular a vehicle, according to claim 10 .

[0023] One of the advantages achieved thereby is that the sensor device can only be connected for configuration during movement with the object, for example, while the vehicle is moving. This reduces the risk that the sensor device is accidentally connected to the wrong object and thus incorrectly configured, or that an attacker can connect to the sensor device in an unnoticed manner in order to access data without authorization. Another advantage is that when the sensor is removed from the movable object, for example, when the tire is changed, a reset event automatically occurs, so that the sensor device deletes the connection data and changes to the unconfigured state, that is, the first state, and the sensor device can be connected to the vehicle again for configuration. In addition, sensitive data, such as the vehicle number, can also be exchanged between the sensor device and the movable object, because the risk of unauthorized use of the data is minimized.

[0024] Insensitive data within the meaning of the invention are, in particular, data that are not protected against external access. For example, these are diagnostic data of the tire, such as air pressure, tire type or fault messages. Sensitive data are data that are protected against external access because they allow conclusions to be drawn about the owner of the vehicle, including, for example, the serial number of the vehicle, parameter data or the like and in particular instructions for changing the technical function of the sensor, for example, for changing the measuring interval and / or the transmission interval, i.e. the number of measurements per time interval. The parameter data can be used to adjust the sensor device with reference to the object and vice versa.

[0025] In a first state of the sensor device, only insensitive data is transmitted. In particular, the first state is an unconfigured state. Therefore, the sensor device can be used as a pure sending device, because there is no need to check the identity of the device receiving the data. As soon as the sensor device detects that the sensor device moves, for example due to the movement of an object, the sensor device can establish an encrypted connection with the object. Due to the movement of the object, it is not possible to accept a connection query of the sensor device from a communication interface that is different from the communication interface of the moving object. Then, sensitive data can also be transmitted because the identity of the data receiver is known. In this way, the connection between the sensor device and the moving object can be established automatically without manual intervention. After the secure connection is established, parameter data can be transmitted via the secure connection, so that, for example, the sensor device can be configured with reference to the object. These data are stored so that the sensor device maintains the configuration until the sensor device is reset. Next, the sensor device is changed to a second state, in which insensitive data is transmitted again. In particular, the second state is a configured state of the sensor device.

[0026] As soon as a reset event occurs, for example due to removal of a tire from the vehicle, the sensor device automatically changes to a first state in which the sensor device is not configured. As soon as the sensor device is again arranged on a movable object, it automatically establishes a connection with the object again in order to be reconfigured with reference to the object. In this way, the sensor device can also be connected to any movable object and automatically reset when it is no longer arranged on a known object.

[0027] According to an advantageous extension of the present invention, the reset event that can be predetermined is a faulty and / or missing response of the second wireless communication interface to the connection signal of the first wireless communication interface, a non-appearing reception confirmation of the second wireless communication interface, an operation event of an operating element on the sensor device and / or the object, a predetermined sequence of sensor signals of the sensor device, a predetermined sequence of speed values ​​and / or rotation rate values ​​of the sensor device, a signal of the third wireless communication interface, a reset notification of the second wireless communication interface, and / or the lapse of a predetermined time since the change to the second state. There are different events that can require a reset to the first state. For example, the sensor device can inquire whether the connection still exists. If the vehicle does not answer, answers with an incorrect key or with an unknown sender address, the sensor device is no longer arranged on the correct vehicle and can be reset to the first state. If the untrustworthy sensor signal indicates that the sensor device is not arranged on the expected vehicle, the sensor device can also be reset to the first state. In addition, if, for example, the workshop has repaired the vehicle, the connection can also be manually reset to the first state, for example, by a key or a radio signal. The advantage of doing this is that the second state does not exceed the expected duration of use and remains activated.

[0028] According to an advantageous embodiment of the invention, all sensitive data are deleted when a reset event occurs. In order to establish a secure connection, keys and parameters can be exchanged between the movable object and the sensor device, which keys and parameters enable the configuration of the sensor device. These keys and parameters can be deleted when a reset event occurs in order to prevent incorrect parameters from being used for the sensor device.

[0029] According to an advantageous development of the invention, the sensor device comprises an air pressure sensor, in particular an air pressure sensor for measuring tire pressure. With the aid of the method, in particular a sensor in a vehicle tire can be connected to the vehicle. This has the advantage that the connection between the air pressure sensor in the tire and the vehicle can be established in a simple manner.

[0030] According to an advantageous extension of the invention, the sensor device comprises an acceleration sensor, a speed sensor and / or a rotation rate sensor. The sensor device sends a connection query only when the object moves. In addition, the connection query can only be sent when the sensor device is in a first state in order to save energy. In order to detect the movement of the sensor, it is advantageous that the sensor device can determine the movement via the sensor. If the sensor is arranged in the tire, the sensor can in particular be a rotation rate sensor. Therefore, the sensor device can include a plurality of sensors, wherein not all measured values ​​are transmitted to the movable object. The sensor can also be an acceleration sensor, which measures radial acceleration and / or centripetal acceleration, from which the speed of the sensor can be inferred.

[0031] According to an advantageous embodiment of the invention, the connection signal is sent only when the acceleration sensor measures a centripetal force greater than 1.6 g, preferably 6.4 g, in particular 14.4 g, only when the rotation rate sensor measures a minimum rotation rate greater than 500° / s, in particular greater than 1000° / s, preferably greater than 1500° / s, and / or only when the speed sensor measures a minimum speed greater than 10 km / h, in particular greater than 20 km / h, preferably greater than 30 km / h. This has the advantage that it can be ensured that the movable object has a sufficiently high speed that an unintentional connection with other objects is not possible.

[0032] According to an advantageous extension of the present invention, the sending of the connection signal is performed only when the minimum rotation rate and / or the minimum speed are measured for at least 30 seconds, preferably 45 seconds, and especially 90 seconds. The time can be related to the speed, for example, 90 seconds in the case of 10km / h, 45 seconds in the case of 20km / h, and 30 seconds in the case of 30km / h. It is thus ensured that the object has walked a sufficiently long section of road so that potential attackers who want to access data in an unauthorized manner are no longer within the scope of action of the sensor device. In order to improve safety, it is possible that, especially when checking other parameters in addition to speed, the inspection time period is kept significantly longer, for example 10 to 15 minutes. Here, the time can also be accumulated and calculated so that, for example, a short stop at a traffic light only suspends the process, but does not completely end the process. It is also possible that the sensor device estimates the section of road walked and proposes a connection inquiry based on this.

[0033] According to an advantageous embodiment of the invention, the first and / or second wireless communication interface comprises a Bluetooth interface, in particular a low-energy Bluetooth interface. This allows the connection between the sensor device and the object to be established in a particularly simple and energy-saving manner. Other wireless interfaces, such as WLAN or the like, are also conceivable.

[0034] According to an advantageous development of the invention, the sending of the connection signal is based on the instantaneous angular velocity, the wheel position, a certain vehicle speed or vehicle acceleration, the direction of rotation of the wheel, vehicle vibrations, signal strength, signal direction or signal polarization. Additional data can be measured by the sensor device and by the object in order to use these additional data for verification. If both the object and the sensor measure approximately similar values, the sensor device can issue a connection request. It is also conceivable to perform a plausibility check on the signal based on its strength, direction and / or polarization and thus use it for verification.

[0035] Further important features and advantages of the invention emerge from the dependent claims, the drawings and the associated description of the figures.

[0036] It goes without saying that the features mentioned above and those yet to be explained below can be used not only in the respectively stated combination but also in other combinations or alone without departing from the scope of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Preferred embodiments and implementations of the invention are shown in the drawings and are explained in more detail in the following description.

[0038] Here it is shown:

[0039] Figure 1 A sensor device according to one embodiment of the present invention is shown;

[0040] Figure 2 shows an object according to an embodiment of the present invention, and

[0041] Figure 3 A system according to one embodiment of the present invention is shown. DETAILED DESCRIPTION

[0042] Figure 1 A sensor device according to one specific embodiment of the present invention is shown.

[0043] The sensor device 1 comprises a first wireless communication interface 2, by means of which the sensor device 1 can be connected to an object (not shown). The sensor device 1 is designed to perform the following steps:

[0044] In a first step S1, the sensor device 1 is operated in a first - unconfigured - state, in which insensitive data can be transmitted to a second wireless communication interface (not shown). The sensor device 1 comprises an air pressure sensor 3, by means of which the air pressure in a tire (not shown) can be measured. As long as the sensor device 1 is not connected to a matching receiver, for example a vehicle, the sensor device 1 is operated in a first state with limited functionality. In this first state, the sensor device 1 only transmits insensitive data, such as diagnostic data, air pressure or fault information, but the sensor device is not configured. These data can also be read by a workshop, for example for maintenance.

[0045] Furthermore, the sensor device 1 comprises an acceleration sensor 4, by means of which it is possible to detect whether the sensor device 1 is moving. If a radial acceleration is measured, this can mean, for example, that the vehicle in which the sensor device 1 is arranged is moving, for example, the vehicle is driven by a user. It is also possible that the sensor device 1 does not have a sensor for detecting movement and that information about a possible movement of the vehicle and thus of the sensor device 1 is obtained by an external device.

[0046] Once the sensor device 1 detects that the sensor device 1 is moving, in a second step S2, a connection signal is sent to a second wireless communication interface (not shown) of the object. Since the connection signal is sent only when the sensor device 1 is moving and in the first state, it can be ensured that only the desired object can connect to the sensor device 1. Then, the desired object can accept the connection.

[0047] Therefore, in a third step S3, a secure connection is established with the object using the second wireless communication interface. As a result, the sensor device 1 and the object can exchange sensitive data. Due to the movement of the object, there is only a low risk of transmitting these sensitive data to third parties.

[0048] In a fourth step S4, sensitive data, such as connection data, such as connection keys and parameter data, are transmitted and stored by means of a secure connection, for example, by the sensor device 1. In addition, the sensor device can be configured according to the sensitive data, so that, for example, the transmission interval for the air pressure is set.

[0049] Since the sensor device 1 is now configured, the sensor device 1 changes to the second state, in which only insensitive data is again transmitted via the first wireless communication interface 2. Since the sensor device 1 is configured, it again transmits insensitive data, such as air pressure. By means of the configuration, the sensor device 1 can transmit data according to the requirements of the subject, for example, in terms of the transmission interval or transmission frequency for air pressure.

[0050] Both the object and the sensor device 1 have exchanged connection data for configuration and are therefore in the second state. However, the second state should not be permanently activated. For example, the sensor device 1 can be arranged in a tire on the object, so that if the tire is replaced, the second state must be interrupted again. For this purpose, the sensor device 1 can regularly send a signal by means of the first communication interface 2 and, for example, query the connection key. As long as the sensor device 1 is in the vicinity of the object, the object can send a response to the signal by means of the second communication interface. If the sensor device 1 is removed from the object, the sensor device 1 does not receive a response to the signal, or if the sensor device is arranged on another object, the sensor device does not receive the expected response. Therefore, a reset event occurs.

[0051] In this case, in a sixth step S6, the state of the sensor device 1 is changed back to the first state, so that the sensor device is operated again in the first, unconfigured state. For this purpose, sensitive data, in particular connection keys and parameters, are deleted, so that the sensor device 1 can be connected to the object again. Another possible reset event, in which the second state is reset, can be, for example, a manual triggering of a button or a radio signal. Thus, a workshop employee can force a reset of the connection after having serviced the vehicle.

[0052] Figure 2 An object according to one specific embodiment of the invention is shown.

[0053] Figure 2 A movable object 5 is shown, which is in the form of a vehicle here, and which has a second wireless communication interface 6. By means of the second wireless communication interface, the vehicle 5 can be connected to a sensor device (not shown), in particular to a first wireless communication interface of the sensor device, which sensor device is, for example, based on Figure 1 The movable object 5 is configured to carry out the following steps:

[0054] In a first step S1 ′, the movable object 5 is operated in a first—unconfigured—state, in which only insensitive data can be transmitted to a first wireless communication interface (not shown).

[0055] In a second step S2', a connection signal of the first wireless communication interface is received. In particular, when the sensor device of the first wireless communication interface is in motion, the connection signal is received from the first wireless communication interface.

[0056] In a third step S3 ′, a secure connection is established with the sensor device according to the first wireless communication interface.

[0057] In a fourth step S4 ′, sensitive data, for example connection data such as connection keys and parameter data, are transmitted by means of a secure connection and stored by the movable object.

[0058] In a fifth step S5 ′, the movable object 5 is transferred into a second state in which only insensitive data can be transmitted.

[0059] In a sixth step S6 ′, when a predeterminable reset event occurs, the state of the movable object 5 is changed to the first state and the stored sensitive data is deleted.

[0060] The above steps S1' to S6' basically correspond to the steps according to Figure 1 Steps S1 to S6 are performed, wherein the roles of the first and second communication interfaces 6 are interchanged.

[0061] Figure 3 A system according to one embodiment of the present invention is shown.

[0062] Figure 3 A system consisting of an object 5 and a sensor device 1 is shown, which is in the form of a vehicle here. The sensor device 1 and the vehicle 5 can communicate with each other by means of a first communication unit 2 and a second communication unit 6. The sensor device 1 is arranged on a wheel 7 of the vehicle 5. By means of an air pressure sensor 3, the sensor device 1 measures the air pressure of the tire 7 and transmits the air pressure to the vehicle 5. In order to establish a connection between the vehicle 5 and the sensor device 1, the vehicle 5 is put into motion. The sensor device 1 detects this via an acceleration sensor 4 and sends a connection request. Since the vehicle 5 is in motion, only the vehicle 5 will accept the connection request with a high probability. Then, parameters for configuration can be exchanged via this secure connection. This configuration of the vehicle 5 and the sensor device 1 is maintained until a reset event occurs. Therefore, in order to establish the connection, the sensor device 1 executes steps S1 to S6 and the vehicle 5 executes steps S1' to S6'. Thus, the connection is established automatically.

[0063] In summary, at least one embodiment of the present invention has at least one of the following features and / or provides at least one of the following advantages:

[0064] - Secure connection between sensors and objects

[0065] -Automated connection of sensors and objects

[0066] - Low risk of sending data to third parties

[0067] - Low risk of accidental configuration of the sensor unit by a third party

[0068] Although the invention has been described on the basis of preferred exemplary embodiments, it is not restricted thereto but can be modified in an advantageous manner.

Claims

1. A sensor device (1) comprising a first wireless communication interface (2) for connecting to a second wireless communication interface (6) on a movable object (5), in particular a vehicle, wherein: The sensor device (1) is configured to perform the following steps: - operating (S1) the sensor device (1) in a first state, in which only insensitive data can be transmitted to the second wireless communication interface (6); - when the sensor device (1) is operating in the first state and moves at a predetermined speed and / or a predetermined rotation rate, sending (S2) a connection signal to the second wireless communication interface (6); - establishing (S3) a secure connection with the movable object (5) according to the second wireless communication interface (6); - transmitting (S4) sensitive data by means of the secure connection and storing the sensitive data, for example connection data, in particular connection keys and parameter data; - transferring (S5) the sensor device (1) into a second state, in which only insensitive data can be transmitted; When a predeterminable reset event occurs, the state of the sensor device (1) is changed (S6) to the first state and at least some of the stored sensitive data is deleted.

2. The sensor device (1) according to claim 1, wherein: The pre-determinable reset events are a faulty and / or missing response of the second wireless communication interface (6) to a connection signal of the first wireless communication interface (1), a non-occurring reception confirmation of the second wireless communication interface (6), an operating event of an operating element on the sensor device (1) and / or the object (5), a predetermined sequence of sensor signals of the sensor device (1), a predetermined sequence of speed values ​​and / or rotation rate values ​​of the sensor device 1, a signal of a third wireless communication interface, a reset notification of the second wireless communication interface (6) and / or the lapse of a predetermined time since the change to the second state.

3. The sensor device (1) according to claim 2, wherein: In the event of a reset, all sensitive data is deleted.

4. The sensor device (1) according to any one of claims 1 to 3, wherein: The sensor device (1) comprises an air pressure sensor (3), in particular an air pressure sensor for measuring tire pressure.

5. The sensor device (1) according to any one of claims 1 to 4, wherein: The sensor device (1) comprises an acceleration sensor, a speed sensor and / or a rotation rate sensor.

6. The sensor device (1) according to claim 5, wherein: The sending of the connection signal is only performed when the acceleration sensor measures a centripetal force greater than 1.6g, preferably 6.4g, in particular 14.4g, only when the rotation rate sensor measures a minimum rotation rate greater than 500° / s, in particular greater than 1000° / s, preferably greater than 1500° / s, and / or only when the speed sensor measures a minimum speed greater than 10km / h, in particular greater than 20km / h, preferably greater than 30km / h.

7. The sensor device (1) according to claim 6, wherein: The sending of the connection signal is only carried out when the minimum rotational speed and / or the minimum speed has been measured for at least 30 seconds, preferably for at least 45 seconds, in particular for at least 90 seconds.

8. The sensor device (1) according to any one of claims 1 to 7, wherein: The first and / or the second wireless communication interface (2, 6) comprises a Bluetooth interface, in particular a low-energy Bluetooth interface.

9. The sensor device (1) according to any one of claims 1 to 8, wherein: The transmission of the connection signal is based on the instantaneous angular velocity, the wheel position, a determined vehicle speed or vehicle acceleration, the direction of rotation of the wheel, vehicle vibrations, signal strength, signal direction or signal polarization.

10. A movable object (5), in particular a vehicle, having a second wireless communication interface (6) for establishing a connection with a first wireless communication interface (2), in particular a wireless communication interface (2) of a sensor device (1) according to any one of claims 1 to 9, wherein: The movable object (5) is configured to perform the following steps: - operating (S1') the movable object (5) in a first state, in which only insensitive data can be transmitted to the first wireless communication interface (2); - receiving (S2') a connection signal of the first wireless communication interface (2); - establishing (S3') a secure connection with the sensor device (1) according to the first wireless communication interface (2); - transmitting (S4′) sensitive data by means of the secure connection and storing the sensitive data, for example connection data, in particular connection keys and parameter data; - transferring (S5') the movable object (5) into a second state in which only insensitive data can be transmitted; When a predeterminable reset event occurs, the state of the movable object (5) is changed (S6') to the first state and at least part of the stored sensitive data is deleted.

11. A system comprising a sensor device (1) according to any one of claims 1 to 9 and a movable object (5), in particular a vehicle, according to claim 10.

Images