Procedure for locking, unlocking and starting a vehicle and for carrying out the procedure using a trained motor vehicle
Patent Information
- Authority / Receiving Office
- DE · DE
- Patent Type
- Patents
- Current Assignee / Owner
- FORD GLOBAL TECH LLC
- Filing Date
- 2017-01-11
- Publication Date
- 2026-07-09
AI Technical Summary
Existing vehicle locking and starting systems using radio keys are vulnerable to relay station attacks, allowing unauthorized access and theft.
Implementing a method that disables the vehicle's passive start function when locked and requires a dedicated unlocking command from an authorized person to re-enable it, using secure rolling codes and additional authentication methods.
Enhances security against relay station attacks by ensuring the vehicle can only be started after secure unlocking, maintaining convenience while improving overall system security.
Smart Images

Figure 00000000_0000_ABST
Abstract
Description
[0001] The invention relates to a method for locking, unlocking and starting a vehicle, in particular a motor vehicle, using a radio key or electronic vehicle key, wherein it is possible to start the vehicle without actively using the key, according to the preamble of claim 1. 1 .
[0002] Keyless Go ® Keyless entry is a system that allows a vehicle to be unlocked and started without actively using a car key, simply by pressing the start button. The user only needs to carry a remote key or electronic vehicle key. If only passive unlocking is possible, it is called keyless entry.
[0003] When the user approaches the vehicle or, for example, touches the vehicle's door handle, a device installed in the vehicle is activated and sends a radio signal to the key fob with a first frequency in the range between 30 and 300 kHz, containing an encoded request signal. The key fob decodes the request signal, re-encodes it, and retransmits it as a response signal on a second frequency in the UHF range, as described in... Fig. Figure 1 illustrates this. The device installed in the vehicle knows the coding scheme of the key fob, and if the response signal matches the expected response signal, the vehicle is unlocked. The range of the radio signal using the first, lower frequency is limited to a few meters, so the vehicle's device can normally only be activated by a key fob located close to the vehicle.
[0004] A range extension or relay station attack (RSA) primarily extends the range of the lower-frequency radio signal by means of two relay stations: a first near the vehicle door and a second near the person carrying the key fob, as illustrated below. Fig. 2 is described.
[0005] An attacker carrying the first relay station wakes up the vehicle's device, for example, by touching the door handle, causing it to transmit the radio signal at the lower frequency. This signal is received by the first relay station and forwarded on a completely different frequency to the second relay station, which converts it back into the original radio signal at the lower frequency and sends it to the key fob. The key fob's response signal is usually strong enough to bridge the distance back to the vehicle and unlocks it (the so-called "small" version of the remote start assist). If the key fob's response signal is not strong enough, the relay stations can provide a return channel that extends the range of the radio signal at the higher frequency (the so-called "large" version of the remote start assist).
[0006] In current technology, passive vehicle start is triggered independently of passive vehicle unlocking when the key is detected as being inside the vehicle, e.g., through further near-field communication in the passenger compartment, and a start button on the dashboard is pressed. Therefore, this function can also be triggered by a rear-lock assist system (RSA) if a thief has gained access to the vehicle, whether through RSA or by breaking in, and the thief can drive the vehicle away.
[0007] The invention is based on the objective of providing a safer method for locking, unlocking and starting a vehicle using a radio key or electronic vehicle key.
[0008] This task is accomplished by a method with the features of the patent claim. 1 solved.
[0009] Advantageous further developments of the invention are specified in the dependent patent claims.
[0010] According to the invention, the function to start the vehicle without actively using the key is blocked when the vehicle is locked, and this function is only released again when the vehicle is unlocked in a manner that is secure against relay attacks.
[0011] Secure unlocking against relay point attacks can be achieved in various ways, which may also be available to the user as alternatives.
[0012] In a preferred embodiment, the function to start the vehicle without actively using the key is only reactivated when the vehicle is unlocked by a dedicated unlock command from an authorized person, who is normally the vehicle owner, where a dedicated unlock command is understood to mean something that can be triggered not by merely approaching the vehicle, but only by a targeted action of the authorized person.
[0013] Preferably, the dedicated unlocking command can be given by one or more of the following actions by the authorized person: activating a control element such as a switch or button on the key; operating an unlocking keypad on the vehicle, i.e., buttons attached to the vehicle and operable from the outside when the vehicle is locked, which may also be more or less concealed; or input on a device for telematics control of the vehicle, such as a smartphone configured for this purpose.
[0014] Furthermore, it may be provided that the vehicle can also be unlocked in a conventional manner using a mechanical key blade, which also enables the function to start the vehicle at least without further active use of the key.
[0015] The aforementioned unlocking methods naturally entail a certain loss of convenience compared to Keyless Go. ®However, the convenience feature of being able to start the vehicle without actively using the key remains.
[0016] A further advantage of the invention is that any additional security measures against relay attacks on the unlocking of the vehicle when the associated key is approached would automatically also benefit the passive vehicle start, i.e., it is sufficient to improve the security of the vehicle unlocking, whereby the passive vehicle start is automatically also improved in its tamper resistance by coupling with the unlocking.
[0017] For those of the above-mentioned actions that require any radio communication, this is preferably secured with rolling codes, as known from GB 2 421 107 A.
[0018] The function to start the vehicle without actively using the key is preferably locked again after a preset time period has elapsed following the unlock command, without the user having started the vehicle.
[0019] The following is a description of exemplary implementations.
[0020] In a system like the one mentioned above with reference to Fig. 1 and Fig. As described in point 2, it is usually also possible to... 1 without actively using the key 2 to start by pressing a start button on the dashboard when the key is inserted 2 as in the vehicle 1 The key's location is detected. This is achieved using very short-range, rollingly coded near-field communication to test whether the key is located. 2 obviously inside the vehicle 1 is located, and if this is the case, the start button is released.
[0021] In the exemplary embodiments described below, the release of the start button also occurs under the further condition that the vehicle has been unlocked beforehand. 1 took place in a manner that was secure against relay point attacks.
[0022] The vehicle sends this information 1 does not automatically send a request signal when someone approaches the vehicle 1 approaching or touching the door handle, but the vehicle 1 It can only be unlocked by a dedicated unlock command issued from the outside, which is encrypted with a rolling code.
[0023] In one embodiment, the vehicle user can give the dedicated unlocking command by using a control element such as a switch or button on the key. 2 activated, as is intended with the so-called RKE (Remote Keyless Entry), which is a precursor to Keyless Go. ® is.
[0024] In another embodiment, the user can also give the unlocking command by entering a code on an unlocking keypad on the vehicle. 2 Types input. Such a keyboard, known as a "keypad", is a group of keys mounted on the vehicle. 1 attached and when the vehicle is locked 1 Externally operable buttons, which may also be more or less hidden and whose activation is detected by mechanical pressure, by changes in the electrical field when a finger approaches, or by optical recognition of the finger.
[0025] In another embodiment, the user can also issue the unlocking command on a device for the vehicle's telematics control. 1 This could be, for example, a suitable app on a smartphone, or the unlocking could be remotely controlled by a service center of the vehicle manufacturer after the user has proven their authorization.
[0026] So that the function, the vehicle 1 If the vehicle is not started without active use of the key, and is not permanently released by an accidentally given unlock command, it will be locked again after a preset period of time has elapsed without the user having started the vehicle. 1 has started. QUOTES INCLUDED IN THE DESCRIPTION
[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature
[0000] GB 2421107 A
[0017]
Claims
[1] Method for locking, unlocking and starting a vehicle (1) using a radio key or electronic vehicle key (2), wherein it is possible to start the vehicle without actively using the key, characterized by , that the function to start the vehicle (1) without actively using the key (2) is blocked when the vehicle is locked, after which this function is only released again when the vehicle is unlocked in a manner secure against relay attacks. [2] Method according to claim 1, characterized by , that the function to start the vehicle (1) without actively using the key (2) will only be reactivated when the vehicle is unlocked by a dedicated unlock command from an authorized person. [3] Method according to claim 1 or 2, characterized by, that the dedicated unlocking command is given by actuating a control element on the key (2). [4] Method according to any one of the preceding claims, characterized by , that the dedicated unlocking command is given by operating an opening keypad on the vehicle (1). [5] Method according to any one of the preceding claims, characterized by , that the dedicated unlocking command is given by inputs on a telematics control device. [6] Method according to any one of the preceding claims, characterized by that the radio communication used in the procedure uses rolling codes. [7] Method according to any one of the preceding claims, characterized by , that the function to start the vehicle (1) without actively using the key (2) will be locked again after a preset time period has elapsed following the unlock command. [8] motor vehicle, characterized bythat the motor vehicle is equipped to carry out the procedure according to one of the preceding claims.