SAFETY SYSTEM FOR A VEHICLE

Description

[0001] The present invention relates to a security system for a vehicle. Furthermore, the invention relates to a vehicle and a method for locating and authenticating a mobile device by a vehicle.

[0002] Various methods for electronically authenticating an identification device (ID transmitter) in a vehicle are known from the prior art. Furthermore, it is known from the prior art that the authentication can be additionally secured to counter security risks such as the so-called "relay station attack".

[0003] WO 2016 / 061804 A1, for example, discloses a method for pedestrian detection and a vehicle-mounted communication system. The method comprises presenting a positional relationship between a vehicle and a pedestrian device to a user, wherein the positional relationship is calculated based on the angular distribution of the incident power of a first and a second signal, wherein the first and second signals were received by a vehicle-mounted antenna from the pedestrian device via a wireless network at a first time and a second time, respectively, and the first and second signals are different from each other.

[0004] From US 2018 / 174452 A1 a method for operating an ad-hoc network for protecting a pedestrian of a stationary vehicle from a moving vehicle is known, wherein the network comprises an electronic key for the stationary vehicle, which is carried by the pedestrian, an electronic control unit with a car access system and an on-board unit with a vehicle-to-vehicle system as components of a vehicle network of the stationary vehicle.

[0005] US 2018 / 025639 A1 concerns a vehicle access system that interacts with the vehicle's vehicle-to-vehicle (V2V) communication system.

[0006] The authentication mechanism used can, for example, involve sending a wake-up signal from the vehicle to the ID transmitter and receiving a response signal from the ID transmitter in response. Additional security can then consist of determining the distance to the ID transmitter.

[0007] A disadvantage of existing solutions is that the authentication itself and / or the security can be disrupted by various influences from the vehicle's environment. For example, interference is conceivable due to reflections of electromagnetic waves or radiation (reflection of the radio signal) caused by other vehicles in the vicinity.

[0008] It is therefore an object of the present invention to at least partially overcome the disadvantages described above. In particular, it is an object of the present invention to enable improved authentication and / or security of the electronic authentication of the identifier to a vehicle security system. Preferably, the possibilities for manipulation during the electronic authentication of the identifier to the vehicle security system (hereinafter referred to simply as "authentication") should be reduced or even eliminated.

[0009] The foregoing problem is solved by a safety system with the features of the independent system claim, a vehicle with the features of the independent device claim, and a method with the features of the independent method claim. Further features and details of the invention will become apparent from the respective dependent claims, the description, and the drawings. Features and details described in connection with the safety system according to the invention naturally also apply in connection with the vehicle and the method according to the invention, and vice versa, so that the disclosure of the individual aspects of the invention is always, or can always be, mutually referenced.

[0010] The problem is solved in particular by a safety system for a vehicle (hereinafter also referred to as the "master vehicle"). The safety system may be designed for integration into the vehicle, preferably to be permanently attached to it. In other words, once installed in the vehicle, the safety system can become an integral part of the vehicle.

[0011] The security system is designed to locate and authenticate a mobile device within the vehicle's environment.

[0012] The mobile device is, for example, an identification transmitter (ID transmitter) or a mobile device such as a smartphone or the like, which serves to activate a safety-relevant function on the vehicle. According to the invention, the following components of the security system are provided: the mobile device, at least one (in particular electronic) transceiver arrangement to provide vehicle communication of the vehicle with at least one other vehicle (hereinafter also "slave vehicle") in the environment (of the master vehicle), in particular to determine at least one piece of received information based on the vehicle communication, at least one (in particular electronic) processing arrangement to carry out the localization of the mobile device at least partially based on the vehicle communication, in particular based on the received information.

[0013] The components can optionally be configured as part of the vehicle's electronics system, preferably as part of a control unit for the vehicle. The processing arrangement comprises, for example, a microcontroller or processor or the like to perform digital processing for localization. For this purpose, the processing arrangement can, for example, receive signals, in particular data in the form of received information, from the transceiver arrangement. The signals can be specific to vehicle communication and / or device communication. The data can, for example, be distance information to another vehicle and / or to the mobile device.

[0014] The transmitting-receiving arrangement can comprise at least one of the following transmitting-receiving components for providing, in particular carrying out, the vehicle communication in the form of radio communication: at least one antenna for attachment to the vehicle, at least one transceiver for receiving and transmitting a communication signal (in the form of a radio signal), which can be in signal connection with the antenna for this purpose, further electronics, preferably with a modulation unit and / or a microcontroller and / or the like, for providing the communication technology for the vehicle communication, which can be in signal connection with the transceiver for this purpose.

[0015] The transmit-receive arrangement can have at least one or at least two or at least three transmit-receive unit(s), each with at least one of the aforementioned transmit-receive components, preferably for providing different communication technologies.

[0016] The security system is designed according to the invention to carry out authentication through communication between the transceiver arrangement and the mobile device. To secure the authentication, localization of the mobile device is provided. For example, distance measurement and / or position determination of the mobile device can be provided using ToF (Time-of-Flight, i.e. signal propagation time measurement) or via UWB (ultra-wideband) or BLE (Bluetooth Low Energy) or comparable communication technology, which can also be provided by the transceiver arrangement. In this way, it can be ensured that the mobile device does not exceed a maximum distance from the vehicle. However, with the aforementioned communication technologies, strong fluctuations and impairments of localization can be caused by reflections of the communication signal used for communication. Such reflections are, for example,caused by reflective structures, e.g., other vehicles in the vicinity of the vehicle.

[0017] Within the scope of the invention, an improvement over conventional solutions is advantageously achieved by the vehicle (in the sense of a "master," and therefore also referred to below as the master vehicle) networking with at least one other vehicle (in the aforementioned sense also referred to as a "slave vehicle") in the vicinity. The master vehicle (also: main vehicle) is the vehicle that has the aforementioned transceiver arrangement and with which the mobile device can, if necessary, legally authenticate itself in order to initiate a security-relevant function. The security-relevant function is, for example, the authorization of access to the master vehicle through authentication. Authorizing access can include unlocking the vehicle, optionally also opening at least one door and / or authorizing the engine start. The vicinity can be the immediate surroundings of the master vehicle, such as a parking lot or a street.In this way, the master vehicle can use a plurality, in particular an array, of receivers that are available for vehicle communication.

[0018] The slave vehicles (also called secondary vehicles) can communicate with the master vehicle via vehicle communication, e.g., by sending a response in response to a request from the master vehicle. This response includes, in particular, at least one piece of device information, i.e., information about the mobile device.

[0019] For example, the device information may include a device response from the mobile device, which is forwarded via the response from the at least one slave vehicle to the master vehicle by means of vehicle communication.

[0020] A device response within the meaning of the invention comprises, for example, data of a response signal, in particular a radio signal, which is transmitted by the mobile device in response to the receipt of a wake-up signal from the master vehicle and / or the slave vehicle. The wake-up signal is transmitted for this purpose via UWB or Bluetooth or BLE or HF (High Frequency) or LF (Low Frequency) by the master and / or slave vehicle, optionally also via device communication, in particular as a broadcast signal. The wake-up signal can then be received by the mobile device and thus cause the mobile device to transmit the response signal. In terms of content, the device response can include information that is specific to the authentication, e.g. an authentication code or the like. Furthermore, the device response can also include information that is specific to a distance and / or position of the mobile device. This information is, for example,a signal strength with which the wake-up signal was received by the mobile device or a result of a ToF analysis of the wake-up signal.

[0021] Furthermore, it may be possible for the slave vehicle itself to localize the mobile device and provide information about this localization. Therefore, the device information may also include this information about the localization determined by the slave vehicle (hereinafter also referred to as localization information). This information may be in the form of information about device communication, which the slave vehicle provides with the mobile device, for example, in order to receive the device response from the mobile device. This information may further include a result of a distance measurement and / or position determination of the mobile device by the slave vehicle. This distance measurement and / or position determination can preferably be carried out based on the device communication of the slave vehicle and / or the device response received by the slave vehicle.Distance measurement and / or position determination can also be performed, for example, by measuring signal strength or the signal propagation time (ToF) of the device response. The information about the localization can, for example, directly contain the position and / or distance to the mobile device, or also the measured values ​​(such as signal strength or signal propagation time). As with GPS positioning, the advantageous use of multiple slave vehicles (i.e., participants in the vehicle communication) can improve the accuracy of the localization, or even enable a plausibility check of the mobile device's localization.

[0022] It is particularly advantageous if at least one of the other vehicles (slave vehicles) is parked, stationary, and / or traveling at 0 km / h. This makes it very reliable for the master vehicle to determine the position of the other vehicles using inter-vehicle communication. In this case, for example, information can be determined by the slave vehicle itself, such as measured values ​​being averaged to locate the mobile device in order to increase the accuracy of the localization. This averaging can be carried out over a specific, possibly predefined or dynamically determined, period of time. The dynamic determination is carried out, for example, depending on at least one parameter that is specific to the reliability of the localization, such as a fluctuation and / or error characteristics of the measured values ​​or the like.

[0023] It is also advantageous if the vehicle (especially the vehicle as the master vehicle, and optionally at least one additional vehicle as a slave vehicle) is designed as a motor vehicle, particularly as a hybrid vehicle or an electric vehicle, preferably with a high-voltage electrical system and / or an electric motor. Furthermore, this vehicle may be designed as a fuel cell vehicle and / or passenger vehicle and / or semi-autonomous or autonomous vehicle. Advantageously, this vehicle has a security system that enables authentication, for example, through communication with a mobile device, in particular an identification transmitter (ID transmitter). Depending on the communication and / or authentication, at least one function of the vehicle can be activated.If authentication of the mobile device is necessary for this, the function can be a security-relevant function, such as unlocking the vehicle or authorizing an engine start. The security system can therefore also be designed as a passive access system, which initiates authentication and / or activation of the function upon detection of the mobile device approaching the vehicle without active manual operation of the mobile device. For this purpose, for example, a wake-up signal is repeatedly sent out by the security system, which can be received by the mobile device upon approach and then triggers the authentication. The function can also relate to the activation of vehicle lighting and / or the operation (opening and / or closing) of a flap (e.g. front, rear, or side flap or door).The vehicle lighting is automatically activated when approach is detected and / or the flap is activated when a user gesture is detected.

[0024] It can be advantageous if, within the scope of the invention, the transmit-receive arrangement is also configured for direct device communication between the vehicle and the mobile device, wherein preferably the processing arrangement is in signal communication, in particular a data connection, with the transmit-receive arrangement in order to directly locate the mobile device based on the device communication, in particular on the at least one piece of received information obtained through the device communication. For this purpose, the received information can, for example, be transmitted from the transmit-receive arrangement to the processing arrangement via the signal connection. The device communication enables, for example, the transmission of authentication information from the mobile device to the vehicle for authentication purposes. Furthermore, the device communication can optionally also provide direct localization, e.g., by providing information about the signal strength or the like.The authentication information and / or the localization information can be provided via at least one receiving information for the processing order in order to enable reliable electronic localization by the processing order.

[0025] It is also conceivable that the processing arrangement in the signal connection, in particular the data connection, is located with the transmit-receive arrangement in order to perform at least one of the following localization functions based on the vehicle communication, in particular on the at least one piece of received information obtained through the vehicle communication: Plausibility checks of the immediate localization, supplementing and / or correcting the immediate localization to increase localization accuracy, indirect localization of the mobile device via at least one other vehicle.

[0026] The at least one piece of received information can provide the processing arrangement with information from the directly conducted device communication (such as authentication information and / or localization information), as well as information from the vehicle communication. Like the mobile device in device communication, one of the other vehicles in vehicle communication is a direct communication participant for communication with the transceiver arrangement. The vehicle communication can be carried out at least partially simultaneously or alternately and / or staggered in time with the device communication.

[0027] Device communication can refer to the usual form of authentication and / or authentication security, where communication occurs directly between the mobile device and the vehicle. Vehicle communication, on the other hand, involves communication between the master vehicle and at least one slave vehicle to exchange information about the mobile device. This allows for improved localization of the mobile device and / or security of authentication and / or higher authentication reliability.

[0028] Furthermore, the transmit-receive arrangement may include at least one transmit-receive unit configured as a radio interface, preferably an RF, LF, NFC (Near Field Communication), UWB, WLAN (Wireless Local Area Network), or Bluetooth interface, particularly preferably a Bluetooth Low Energy (BLE) interface, to provide vehicle communication, especially networked with a plurality of other vehicles. This allows various communication technologies to be used for networking, enabling as many vehicles as possible to participate as communication participants.

[0029] Furthermore, it is optionally provided that the transmit-receive arrangement is configured to receive device information about at least one further localization of the mobile device by the at least one further vehicle via vehicle communication. Additionally, it is possible that the processing arrangement is configured to perform a vehicle localization of the at least one further vehicle in order to localize the mobile device, in order to compare the device information with the result of the vehicle localization and thus indirectly perform the localization of the mobile device itself based on the device information. In other words, the further vehicle can first perform the further localization of the mobile device, e.g., based on device communication between the further vehicle and the mobile device. A device response can also be received via this device communication of the further vehicle (as a slave vehicle).For this further localization, information about the signal strength with which the device response was received by the other vehicle can be used, for example. A ToF analysis can also be carried out for localization, for example. The information about the signal strength and / or a result of the ToF analysis can be understood as information about the localization determined by the slave vehicle. This information is specific to the position of the mobile device relative to the other vehicle. The device response and / or the information about the localization determined by the slave vehicle can then be transmitted in the form of device information by the other vehicle via vehicle communication to the master vehicle. The master vehicle can use the transmitted device information, in particular through the processing arrangement, to indirectly carry out the localization of the mobile device.Since the position is relative to the other vehicle, comparing the device information with the vehicle localization results may be necessary. Vehicle localization is performed, for example, using vehicle communication, such as by evaluating signal strength and / or performing a time-of-flight (ToF) analysis. This allows the determination of the other vehicle's position relative to the master vehicle. This position can then be used to determine the mobile device's position relative to the master vehicle.

[0030] Furthermore, within the scope of the invention, it is conceivable that the processing arrangement is designed to perform an evaluation of the vehicle communication and / or a device communication in order to localize the mobile device and / or the vehicle localization of at least one further vehicle, wherein the evaluation provides at least one of the following acquisitions: a distance measurement of a distance of the mobile device and / or the other vehicle relative to the vehicle, a direction detection of a direction of the mobile device and / or the other vehicle relative to the vehicle, The evaluation preferably involves signal analysis, preferably measuring signal propagation time and / or signal strength, and / or determining the reception angle of a communication signal received via vehicle communication and / or device communication. The communication signal serves, for example, to transmit device information. Based on distance measurement and direction detection, the relative position to the vehicle can be reliably determined. If this information is also available for other vehicles (e.g., relative to the mobile device), the position of the mobile device relative to the vehicle can be determined very accurately.

[0031] It is also conceivable, as an option, that the vehicle is part of the safety system and that the transceiver is mounted on the vehicle, in particular permanently attached to the vehicle, and preferably that several transceiver units of the transceiver are arranged at different positions on the vehicle in order to provide location-specific vehicle communication and / or device communication. The use of different positions has the advantage that the accuracy of the localization can be improved by comparing the communication signals of different transceiver units.

[0032] Furthermore, the processing arrangement may be configured to evaluate the vehicle communication and / or device communication of at least one transceiver unit of the transceiver arrangement as a function of the position of the respective transceiver unit, and thus in a position-specific manner, preferably by evaluating the signal strength of the communication signals from the respective transceiver unit and / or by comparing different signal strengths from different transceiver units, in particular to determine the reception angle of a communication signal from the respective vehicle and / or device communication. This allows the angle of the communication signals to be determined based on the signal strength of the received communication signals, thereby improving the accuracy of the localization.

[0033] It can further be advantageous for the transceiver arrangement to be designed to provide a network, preferably a Bluetooth network, with the vehicle (master vehicle) and the at least one other vehicle (slave vehicle), each as a participant in the network. In particular, the transceiver arrangement of the vehicle is designed as a master of the network in order to control the network communication for the other participants. This enables the localization of the mobile device in a networked manner.

[0034] According to the invention, the mobile device is part of the security system. The mobile device is designed as a mobile radio device, in particular a smartphone, or as a mobile identification transmitter specific to the vehicle, and is designed to provide authentication on the vehicle for enabling and / or triggering a security-relevant vehicle function, preferably by transmitting a device response via a communication signal of the device communication. The device response includes, for example, information for authentication, such as a code or information from a challenge-response or the like. The device response can, if necessary, be forwarded to the vehicle via the vehicle communication. In addition, if necessary.Device information about a location of the vehicle is forwarded via the vehicle communication, which was determined by the other vehicle through further localization of the mobile device.

[0035] The invention also relates to a vehicle, preferably a motor vehicle and / or passenger vehicle. The vehicle has a security system according to the invention for locating and authenticating a mobile device in the vehicle's surroundings.

[0036] The vehicle according to the invention thus brings with it the same advantages as have been described in detail with reference to a safety system according to the invention.

[0037] The invention also relates to a method for locating and authenticating a mobile device by a vehicle (master vehicle) in an environment of the vehicle.

[0038] It is intended that the following steps are carried out, whereby individual steps can also be carried out repeatedly if necessary: a) Providing vehicle communication between the vehicle and at least one other vehicle (slave vehicle) in the vicinity, b) Performing the localization of the mobile device at least partially based on the vehicle communication, c) Authenticating the mobile device (10) by means of communication between the transmit-receive device (100) and the mobile device (10) to enable and / or trigger a safety-relevant vehicle function, wherein the localization of the mobile device (10) secures the authentication.

[0039] The method according to the invention thus provides the same advantages as those described in detail with reference to a security system according to the invention. Furthermore, it is provided that the method is carried out by a security system according to the invention, with step a) being carried out by the transmitting / receiving arrangement and step b) being carried out by the processing arrangement of the security system.

[0040] The method according to the invention advantageously provides for vehicle communication to be carried out in the form of networked communication with a plurality of other vehicles. This communication can involve the forwarding (forwarding) of device information, in particular a device response and / or information about the further localization (localization information) of at least one of the other vehicles. The information about the further localization includes, in particular, information about the distance and / or direction of the mobile device relative to the other vehicle. By using this device information in the master vehicle, the localization by the master vehicle can be improved, especially if, in addition to using the device information, the master vehicle also performs its own localization of the mobile device.The range for localization and / or reception of the device response can also be increased, since localization and / or reception does not necessarily have to be performed directly by the master vehicle. Localization can be further improved, particularly if the master vehicle and / or the other vehicles are stationary (parked). In this case, averaging the acquired information over the subsequent localization is conceivable, for example.

[0041] It may be necessary to conduct a learning phase to map the vehicle's surroundings. This involves determining, for example, the position of other vehicles relative to the master vehicle, thus creating a map of the environment. Based on this environmental mapping by the master vehicle, precise positioning of the mobile device can be achieved, even in the presence of strong reflections of the communication signal (e.g., a Bluetooth Low Energy signal) from the vehicle and / or device communication in the surrounding area, or even in the event of an unauthorized relay station attack (RSA) extension.

[0042] It may be possible for the master vehicle to determine the position of the slave vehicles based on a distance measurement (e.g. by evaluating a signal strength or propagation time measurement) and angle determination (e.g. determinable by comparing the signal strengths during communication between different transceiver units of the master vehicle) during vehicle communication.

[0043] It may be possible, particularly within the scope of a method according to the invention, for the vehicle (master vehicle) to have a monitoring arrangement to detect an access request. The monitoring arrangement can, for example, have a proximity sensor, such as a capacitive sensor. This is arranged, for example, in the area of ​​the tailgate or in the door handle to detect the approach of a user. This approach is then interpreted as an access request in order to initiate the security-relevant function. The detection of the access request can initiate authentication, advantageously by sending a wake-up signal to the mobile device. In this case, the mobile device can function as an ID transmitter by sending a response signal upon receipt of the wake-up signal. This response signal can, if necessary,The device communication is received directly by the vehicle (as a device response) and / or by at least one other vehicle (also as a device response). This device response may include authentication information, such as a code or similar. To further enhance security, the mobile device can be located based on the device response. This involves, for example, distance measurement, particularly time-of-flight measurement or signal analysis of the response, to determine the distance between the mobile device and the vehicle (master and / or slave vehicle). Additionally, the direction from which the device response was received by the vehicle (master and / or slave vehicle), or the direction in which the mobile device is located, can be determined.The distance and / or direction thus constitute localization information (information about the localization), which can be determined directly by the master vehicle via device communication, or directly by at least one other (slave) vehicle via device communication. To improve localization in the master vehicle, vehicle communication can be used to transmit the localization information of the slave vehicle(s) to the master vehicle in the form of device information. In addition, the device information can also include the device response, e.g., for control by the master vehicle.

[0044] It is also conceivable that step a) includes at least one of the following steps: Receiving at least one piece of device information about a location of the mobile device relative to the at least one further vehicle, determined by the at least one further vehicle by means of at least one further localization of the mobile device, receiving device information about a location of the mobile device relative to one of the further vehicles, determined by the one further vehicle by means of a further localization of the mobile device, and forwarded via at least one other of the further vehicles, receiving a device response with authentication information of the mobile device, which is received directly from the mobile device by the or one of the further vehicles, and optionally forwarded via at least one other of the further vehicles via a further vehicle communication, sending a wake-up signal to the mobile device,to initiate the transmission of the device response by the mobile device to at least one other vehicle, The data can be received via vehicle communication. This has the advantage that the device information can not only be determined directly at the master vehicle, but can also be determined by other vehicles and made available to the master vehicle to improve localization.

[0045] Furthermore, the invention may provide that the vehicle, in the form of a master vehicle, generates a network with the other vehicles, each as slave vehicles, in which at least one of the slave vehicles: Device information (including location information) is determined about the location of the mobile device, and / or a device response is received from the mobile device. and are then relayed to each other to transmit the device information and / or device response to the master vehicle via vehicle communication, thus increasing the master vehicle's range for locating the mobile device and / or receiving the device response. The device response can also be transmitted as part of the device information, if necessary.

[0046] It may optionally be possible for step b) to include at least one of the following steps: Direct localization of the mobile device by the vehicle to determine immediate device information about the location of the mobile device relative to the vehicle; indirect localization of the mobile device by evaluating indirect device information received through vehicle communication, wherein the indirect device information is preferably specific for the location of the mobile device relative to at least one other vehicle; comparison of the received indirect device information with the immediate device information to perform localization, preferably to increase the accuracy of the localization and / or to validate the location; performing a distance measurement of the distance of the mobile device and / or the other vehicle relative to the vehicle; performing a direction detection of the direction of the mobile device and / or the other vehicle relative to the vehicle.Evaluating a communication signal from the vehicle communication and / or the device communication for distance measurement, preferably by signal evaluation, particularly preferably measuring a signal propagation time and / or a signal strength, Evaluating a communication signal from the vehicle communication and / or the device communication for direction detection, preferably by determining the reception angle, in particular by a position-specific evaluation of different signal strengths at different transmitting / receiving units of the vehicle.

[0047] This allows the vehicle to improve its localization by using vehicle communication.

[0048] Further advantages, features, and details of the invention will become apparent from the following description, which describes embodiments of the invention in detail with reference to the drawings. The features mentioned in the claims and in the description may be essential to the invention individually or in any combination. They show: Fig. 1 shows a schematic plan view of a vehicle with a security system according to the invention with one transceiver unit. Fig. 2 shows a further schematic plan view of a vehicle with a security system according to the invention with two transceiver units. Fig. 3 shows a further schematic plan view of a vehicle with a security system according to the invention with more than two transceiver units. Fig. 4 shows a further schematic plan view of a vehicle with a security system according to the invention to illustrate a communication disruption. Figs. 5-7 show further schematic plan views of a vehicle with a security system according to the invention and other vehicles to illustrate networked communication.

[0049] In the following figures, identical reference numerals are used for the same technical features, even in different embodiments.

[0050] In the Figures 1 to 7A plan view of a vehicle 2 - the master vehicle - is shown, which has a security system 1 according to the invention. Accordingly, the security system 1 is suitable for integration into the vehicle 2 in order to carry out a localization of a mobile device 10 in an environment of the vehicle 2. For this purpose, the security system 1 comprises a transceiver arrangement 100 in order to provide a vehicle communication FK of the vehicle 2 with at least one other vehicle 2' - the slave vehicle - in the environment. This possibility for vehicle communication FK is described in the Figures 4 to 7 Furthermore, the security system 1 comprises a processing arrangement 200 for locating the mobile device 10 at least partially based on the vehicle communication FK.

[0051] As in the Figures 1 to 3As illustrated, the transmit-receive arrangement 100 can also be configured for direct device communication GK between the vehicle 2 and the mobile device 10, wherein the processing arrangement 200 is in data connection with the transmit-receive arrangement 100 in order to directly locate the mobile device 10 using the device communication GK, and optionally also to perform at least one of the following localization functions using the vehicle communication FK: Plausibility check of the immediate localization, supplementing and / or correcting the immediate localization in order to increase the accuracy of the localization, indirect localization of the mobile device 10 via the at least one further vehicle 2'.

[0052] If, as in Figure 1Since the transmit-receive arrangement 100 has only a single transmit-receive unit 110 (satellite), the localization of the mobile device 10 can be relatively inaccurate. By directly localizing the mobile device 10 based on the device communication GK, the information that the mobile device 10 is located at a certain distance from the vehicle 2 can be determined. However, since no directional information is determined, the localization yields a multitude of possible locations 301 for the mobile device 10. The determined distance is visualized by a dashed circle, which represents the possible locations 301 of the mobile device 10. The dashed line is, for example, an equipotential line, which represents a specific signal strength of the device communication GK. The signal strength of a communication signal S of the device communication GK is therefore dependent on the distance of the mobile device 10 to the transmit-receive unit 110.

[0053] The information about the distance may already be sufficient to secure authentication of the mobile device 10. However, in order to determine the exact location 300 of the mobile device 10 or to verify the plausibility of the determined distance, the vehicle communication FK can additionally be used for localization according to the invention. In this way, the security of the authentication can be further improved.

[0054] Based on Figure 2 and 3 The principle is to be further clarified as to how the use of additional transmitting-receiving units 110 (of the master vehicle 2, alternatively or additionally also of additional transmitting-receiving arrangements 100' of the slave vehicles 2', then provided by the vehicle communication FK) can improve localization. Thus, when using two transmitting-receiving units 110 according to Figure 2The possible location 301 of the mobile device 10 can already be significantly narrowed down. The use of at least three transmit / receive units 110 in Figure 3 It can even provide the exact position 300 of the mobile device 10. For this, it is necessary that the localizations by the individual transceiver units 110 (e.g., the information about the respective signal strength) are compared with each other, e.g., by the processing arrangement 200. Functionally, the exact position 300 of the mobile device 10 can also be determined, as already mentioned, by transmitting localization information about further localizations of the mobile device 10 by other vehicles 2' to the master vehicle 2 via the vehicle communication FK, and comparing the localizations by the individual transceiver units 110 with each other there.

[0055] Furthermore, it may be possible, as in the Figures 1 to 3It is shown that vehicle 2 (master vehicle) has a monitoring arrangement 210 to detect an access request. The monitoring arrangement 210 can, for example, have a proximity sensor, such as a capacitive sensor. This is arranged, for example, in the area of ​​the tailgate (e.g., in the bumper) or in the door handle to detect the approach of a user. This approach is then interpreted as an access request to initiate the security-relevant function.

[0056] In Figure 4It is shown that the detection of the access request can initiate authentication, advantageously by sending a request signal S.1, in particular a wake-up signal S.1, to the mobile device 10. In this case, the mobile device 10 can act as an ID transmitter by sending a response signal S.2 upon receiving the request signal S.1. This response signal S.2 can, in principle, be received directly by the vehicle 2 via the device communication GK (as a device response) and / or by at least one other vehicle 2' (also as a device response). This device response can include authentication information, such as a code or the like.

[0057] However, it is possible that other vehicles 2', e.g., moving and parked vehicles 2', may interfere with the device communication GK. In this case, the response signal S.2 is transmitted to vehicle 2 as a distorted signal S.3. To still perform the authentication and / or localization of the mobile device 10, one of the other vehicles 2' in the vicinity can also receive the response signal S.2. This can be forwarded to vehicle 2 via the vehicle communication FK.

[0058] This principle can be applied according to Figure 5be expanded by not only conducting the vehicle communication FK between another vehicle 2' and vehicle 2, but by conducting a networked transmission between multiple vehicles 2'. Each of the vehicles 2, 2' can capture an image of its surroundings by evaluating the vehicle communication FK with the other vehicles. Thus, each of the vehicles 2, 2' can also localize its neighboring vehicles 2, 2' via the vehicle communication FK (e.g., via signal strength or a ToF analysis). Since there is no change in position for parked vehicles 2, 2', an average of several localizations can be performed to improve accuracy. It is also possible for the angle or direction to be determined for each vehicle during localization if the vehicle has more than one transceiver unit 110.

[0059] The networked transmission can be Figure 6The transmission of the response signal S.2 includes, or alternatively or additionally, the transmission of device information about at least one further localization of the mobile device 10 by at least one further vehicle 2'. Through the transmission of the response signal S.2, vehicle 2 can also receive this response signal S.2 even if it is actually outside the communication range of the mobile device 10. Thus, the further vehicles 2' extend the signal transmission range.

[0060] In Figure 7It is shown that the networked transmission can also enable the authentication by vehicle 2 to be secured. In particular, a relay station attack can be used to attempt to transmit the response signal S.2 from the mobile device 10 to vehicle 2 using the RSA extension S.4, even over distances that are not actually intended for authentication. Localization via the vehicle communication FK can prevent this, as the distance to vehicle 2 can be determined very reliably in this way.

[0061] The above explanation of the embodiments describes the present invention exclusively by way of examples. Of course, individual features of the embodiments can be freely combined with one another, provided they are technically feasible, without departing from the scope of the present invention. List of reference symbols

[0062] 1. Security system 2. Vehicle, master vehicle 10 mobile device, identification transmitter, mobile device 2'additional vehicle, slave vehicle 100 Transceiver setup 110 Transceiver unit, Bluetooth interface 200 Processing order 210 Monitoring order 300 Location of the mobile device 301 Possible locations of the mobile device 100' additional transmit / receive arrangement FK Vehicle communication GK Device communication S Communication signal S.1 Request signal, wake-up signal S.2 Response signal S.3 Interference signal S.4 RSA extension

Claims

1. Security system (1) for a vehicle (2), for localizing and authenticating a mobile device (10) in an environment of the vehicle (2), comprising: - the mobile device (10), - a transceiver arrangement (100) for providing vehicle communication (FK) of the vehicle (2) with at least one other vehicle (2') in the environment, - a processing arrangement (200) for performing the localization of the mobile device (10) at least partially on the basis of the vehicle communication (FK), wherein the security system (1) is designed to perform the authentication by communication of the transceiver arrangement (100) with the mobile device (10), wherein the localization of the mobile device (10) secures the authentication, wherein the mobile device (10) is designed as a mobile radio device (10) or as a mobile identification transmitter (10) specific to the vehicle (2), and is designed to provide authentication on the vehicle (2) for enabling and / or triggering a safety-relevant vehicle function.

2. Security system (1) according to claim 1, characterized in that the transceiver arrangement (100) is also designed for direct device communication (GK) of the vehicle (2) with the mobile device (10), the processing arrangement (200) being in data connection with the transceiver arrangement (100) in order to localize the mobile device (10) directly on the basis of the device communication (GK), and in order to perform at least one of the following functions for localization on the basis of the vehicle communication (FK): - Plausibility check of the immediate localization, - Supplement and / or correct the immediate localization in order to increase the accuracy of the localization, - Localization of the mobile device (10) via the at least one other vehicle (2').

3. Security system (1) according to claim 1 or 2, characterized in that the transceiver arrangement (100) has at least one transceiver unit (110) which is designed as a radio interface, preferably as an HF or LF or NFC or UWB or WLAN or Bluetooth, particularly preferably as a Bluetooth low-energy interface, in order to provide the vehicle communication (FK), in particular networked with a plurality of different other vehicles (2').

4. Security system (1) according to any one of the preceding claims, characterized in that the transceiver arrangement (100) is designed to receive device information about at least one further localization of the mobile device (10) by the at least one further vehicle (2') via the vehicle communication (FK), and the processing arrangement (200) is designed to carry out a vehicle localization of the at least one further vehicle (2') in order to localize the mobile device (10), in order to compare the device information with a result of the vehicle localization, in order to carry out the localization of the mobile device (10) itself indirectly on the basis of the device information.

5. Security system (1) according to any one of the preceding claims, characterized in that the processing arrangement (200) is designed to carry out an evaluation of the vehicle communication (FK) and / or a device communication (GK) for localizing the mobile device (10) and / or for vehicle localization of the at least one further vehicle (2'), the evaluation providing at least one of the following detections: - a distance measurement of a distance of the mobile device (10) and / or the further vehicle (2') relative to the vehicle (2), - a direction detection of a direction of the mobile device (10) and / or the further vehicle (2') relative to the vehicle (2), wherein the evaluation preferably provides a signal evaluation, preferably measurement of a signal propagation time and / or a signal strength, and / or a reception angle determination of a communication signal (S) received by the vehicle communication (FK) and / or by the device communication (GK).

6. Security system (1) according to any one of the preceding claims, characterized in that the processing arrangement (200) is designed to evaluate the vehicle communication (FK) and / or a device communication (GK) of at least one transceiver unit (110) of the transceiver arrangement (100) as a function of a position of the respective transceiver unit (110) and thus in a position-specific manner, preferably by evaluating the signal strength at the respective transceiver unit (110) and / or by comparing different signal strengths at different transceiver units (110), in particular in order to perform a reception angle determination of a communication signal (S) of the respective vehicle and / or device communication (FK, GK).

7. Security system (1) according to any one of the preceding claims, characterized in that the transceiver arrangement (100) is designed to provide a network, preferably a Bluetooth network, with the vehicle (2) and the at least one further vehicle (2') in each case as subscribers (2, 2') of the network, in which the transceiver arrangement (100) of the vehicle (2) is designed as a master (2) of the network in order to control the communication of the network for the further subscribers (2').

8. Security system (1) according to any one of the preceding claims, characterized in that the mobile device (10), which is part of the security system (1) and is designed as a mobile radio device (10), in particular a smartphone, or as a mobile identification transmitter (10) specific to the vehicle (2), is designed to provide authentication on the vehicle (2) for enabling and / or triggering a security-relevant vehicle function by transmitting a device response via a communication signal (S) of the device communication (GK).

9. Vehicle (2), comprising a security system (1) according to one of the preceding claims, for localizing and authenticating a mobile device (10) in an environment of the vehicle (2).

10. Vehicle according to claim 9, characterized in that the transceiver arrangement (100) is arranged on the vehicle (2), in particular is permanently connected to the vehicle (2), and preferably a plurality of transceiver units (110) of the transceiver arrangement (100) are arranged at different positions on the vehicle (2) in order to provide the vehicle communication (FK) and / or a device communication (GK) in a position-specific manner in each case.

11. Method for localization and authentication of a mobile device (10) by a vehicle (2) in an environment of the vehicle (2), wherein the following steps are carried out: a) Provision of vehicle communication (FK) of the vehicle (2) with at least one other vehicle (2') in the environment, b) Performing the localization of the mobile device (10) at least partially based on the vehicle communication (FK), c) Authenticating the mobile device (10) by means of communication between the transceiver arrangement (100) and the mobile device (10) for enabling and / or triggering a safety-relevant vehicle function, with the localization of the mobile device (10) safeguarding the authentication, wherein the method is performed by a security system (1) according to any one of claims 1 to 8, wherein step a) is performed by the transceiver arrangement (100) and step b) is performed by the processing arrangement (200) of the security system (1).

12. Method according to any one of the preceding claims, characterized in that step a) comprises at least one of the following steps: - Receiving at least one piece of device information about a location (300) of the mobile device (10) relative to the at least one further vehicle (2'), determined by the at least one further vehicle (2') by means of at least one further localization of the mobile device (10), - Receiving device information about a location (300) of the mobile device (10) relative to one of the further vehicles (2'), determined by the one further vehicle (2') by means of a further localization of the mobile device (10), and further transmitted via at least one other of the further vehicles (2), - Receiving a device response with authentication information of the mobile device (10), which is received directly by the or one of the further vehicles (2') from the mobile device (10), and is optionally further transmitted via at least one other of the further vehicles (2') via a further vehicle communication, - Transmission of a wake-up signal to the mobile device (10) in order to initiate transmission of the device response by the mobile device (10) to the at least one further vehicle (2'), whereby the reception takes place via the vehicle communication (FK).

13. Method according to any one of the preceding claims, characterized in that the vehicle (2) in the form of a master vehicle (2) generates a network with the other vehicles (2') each as slave vehicles (2'), in which by at least one of the slave vehicles (2'): - device information about a location (300) of the mobile device (10) is determined, and / or - a device response from the mobile device (10) is received, and is forwarded to each other in order to transmit the device information and / or device response to the master vehicle (2) via the vehicle communication (FK) in order to increase the range of the master vehicle (2) for localizing the mobile device (10) and / or receiving the device response.

14. Method according to any one of the preceding claims, characterized in that step b) comprises at least one of the following steps: - Immediate localization of the mobile device (10) by the vehicle (2) to determine immediate device information about a location (300) of the mobile device (10) relative to the vehicle (2), - Indirect localization of the mobile device (10) by evaluating indirect device information received by the vehicle communication (FK), wherein preferably the indirect device information is specific to the location (300) of the mobile device (10) relative to the at least one further vehicle (2'), - Comparing the received indirect device information with the direct device information to perform the localization, preferably to increase the accuracy of the localization and / or to check the plausibility of the location (300), - Performing a distance measurement of a distance of the mobile device (10) and / or the further vehicle (2') relative to the vehicle (2), - Performing a directional detection of a direction of the mobile device (10) and / or the further vehicle (2') relative to the vehicle (2), - Evaluation of a communication signal (S) of the vehicle communication (FK) and / or the device communication (GK) for distance measurement, preferably by signal evaluation, preferably measurement of a signal propagation time and / or a signal strength, - Evaluation of a communication signal (S) of the vehicle communication (FK) and / or the device communication (GK) for direction detection, preferably by determining the reception angle, in particular by a position-specific evaluation of different signal strengths at different transceiver units (110) of the vehicle (2).