Control system for a pedal-powered vehicle

Abstract

Title: Control System for a Pedal Vehicle The invention relates to a control system for a pedal vehicle (1), the system comprising a pedal vehicle (1) including a pedal assembly (11), a wired data exchange connector integrated into the pedal vehicle (1), the pedal vehicle (1) also comprising communicating components coupled to each other via the wired data exchange connector, including an electric motor (12) for electric assistance associated with the pedal assembly (11), and an electronic device (2) comprising telecommunication means. Figure for the abstract: Fig. 1

Description

Title of the invention: Control system for a pedal-powered vehicle technical field

[0001] The field of the invention is that of the design and manufacture of equipment for pedal vehicles with electric assistance.

[0002] The invention relates more particularly to a control system for communicating electronic components of a pedal vehicle. State of the art

[0003] In the field of the invention, and more specifically of electrically assisted pedal vehicles, such as an electric bicycle, it is known of control systems implementing an electronic device permanently mounted on the pedal vehicle to collect information about the pedal vehicle, control components of the pedal vehicle, or even to offer other services, such as for example to allow the geolocation of the pedal vehicle and the emission of an audible signal in case of suspected theft of the pedal vehicle, or even the remote deactivation of the electric assistance of the pedal vehicle by the user.

[0004] These electronic devices are equipped with geolocation means, and antennas enabling the device to communicate with a computer server centralizing the data of the pedal vehicle, and hosting the account of a user to whom the pedal vehicle is associated.

[0005] A user can basically access their account using their smartphone in order to manage their pedal vehicle.

[0006] For example, a user can unlock his pedal vehicle using a command sent from his smartphone, via the server, to the electronic device when he wants to use the pedal vehicle, or lock his pedal vehicle using a command sent from his smartphone, via the server, to the electronic device, when he has just parked his pedal vehicle and is walking away from it.

[0007] Following the locking of the pedal vehicle, the latter is protected by the electronic device which makes it possible to geolocate the vehicle, or even to emit audible and software alarms if the vehicle were to be moved while still locked, or even to take actions to shut down the vehicle in the event of starting.

[0008] Experience has shown that more advanced security for the integration of electronic components in these vehicles is necessary.

[0009] Indeed, it has been observed that electric bicycles have been stolen by damaging or removing the electronic device mounted on the bicycle, and then restarting the vehicle's electronic components, without the electronic box, to allow the thief to leave with the bicycle while having electric pedal assistance. Technical problem

[0010] The invention aims in particular to overcome these drawbacks of the prior art.

[0011] More specifically, the invention aims to provide a solution that seeks to avoid or limit the possibility of stealing an electrically assisted pedal vehicle by means of removing the electronic device.

[0012] The invention also aims to provide such a solution which makes it possible to avoid the illegitimate replacement of key components of the vehicle. Summary of the invention

[0013] This objective, as well as others which will appear subsequently, are achieved thanks to the invention which relates to a control system for a pedal vehicle, the system comprising a pedal vehicle including a pedal assembly, a wired data exchange connector integrated into the pedal vehicle, the vehicle also comprising communicating components coupled to each other via the wired data exchange connector, including: - an electric motor for electric assistance associated with the pedal assembly, the electric motor having an operational state in which it is capable of producing electric assistance for pedaling, and a locked state in which the electric assistance for pedaling is inactive; - an electronic device comprising telecommunication means, the electronic device being mounted removably on the pedal vehicle, the electronic device having a locked state and an operational state in which it is configured to cause the electric motor to switch between its operational state and its locked state, characterized in that each communicating element comprises a memory programmed with the unique identifier of said communicating element, and the unique identifiers of the other communicating elements with which it is coupled via the wired data exchange connection, and in that at least the electric motor and the electronic device are each configured to: - periodically send a presence query to the other of the electric motor and the electronic device, called the interrogated component; - send a response to a presence query, the response including the unique identifier of the organ queried; - to become stuck in its locked state if no response is received that includes the unique identifier of the organ being queried following the sending of a presence query.

[0014] The control system according to the invention features an operation that improves the overall safety of the system. In fact, the control system implements a "lifeline" between at least the electronic device and the electric motor. The electronic device and the electric motor periodically check each other's presence and switch to a locked state in the event of a communication breakdown between these two communicating components.

[0015] This design prevents the pedal vehicle from having its electric motor switched to its operational state after the electronic device is removed while the vehicle was not in use, or from the electric motor being kept in its operational state if the electronic device is removed from the vehicle while the latter is in use.

[0016] The link established is via the wired data exchange connection, so it is unlikely or not likely that presence or response queries will be mistransmitted, as is likely to happen with radio transmissions.

[0017] According to a preferred embodiment, the vehicle includes a main electric battery mounted removable on the vehicle and coupled to the wired data exchange connector to supply electricity to the communicating devices, and the electronic device integrates a secondary electric battery, and is configured to be electrically supplied primarily by the main electric battery, and by its secondary electric battery in the event of a power outage from the main electric battery.

[0018] In this way, the electronic device remains the last electronic component to receive power in the event of a power outage from the main battery. This ensures that the electronic device remains operational, at least for a limited time, after the main battery has shut down, for example, to maintain active geolocation and alarm functions. Furthermore, if the electronic device is removed from the vehicle, the vehicle remains powered by its battery.

[0019] According to a preferred design, the main electric battery is part of the communicating components, and at least the electric motor and the electronic device, upon switching to the operational state, are each parameterized to: - send a presence query to the main electric battery; - wait for a response including the unique identifier of the main electric battery; - lock itself in its locked state if no response including the unique identifier of the main electric battery is received.

[0020] It is thus possible to verify the legitimacy of the main electric battery in order to prevent another main electric battery, for example stolen from another vehicle, from being used in the pedal vehicle.

[0021] Advantageously, the electronic device includes means for issuing an alert, and is configured to issue an alert in the event of switching to its locked state in the event of non-receipt of a response incorporating the unique identifier of an interrogated organ.

[0022] The security of the control system is then reinforced.

[0023] An unlawful modification of components of the control system thus results in the issuance of an alert allowing the legitimate user, or another recipient of the alert, to become aware of it immediately.

[0024] According to an advantageous design, each communicating element includes an algorithm for formulating a specific response, and at least the electric motor and the electronic device are each parameterized to: - attach a challenge to a presence request sent to a communicating body; - formulate a specific response to the challenge using the formulation algorithm; - attach the specific response to the response incorporating its unique identifier; - to become stuck in its locked state if no response is received that includes the unique identifier of the organ being questioned, and the specific response.

[0025] This greatly enhances the security of the control system. Indeed, in this case, the communicating devices that include the algorithm for formulating a specific response are devices that must be certified, and it is much more difficult to counterfeit these communicating devices.

[0026] According to an advantageous feature, the electric motor and the electronic device, in their operational state, are each configured to periodically send a presence query to the other electric motor and the electronic device, at a frequency of less than 1 minute, preferably less than 10 seconds.

[0027] Advantageously, the vehicle includes at least one drive wheel of the vehicle intended to be driven in rotation by the electric motor in its operational state, and, in the locked state of the electric motor, the drive wheel or wheels of the vehicle are not locked.

[0028] This prevents an accident from occurring when someone is using the pedal vehicle, and the electric motor goes into its locked state after not receiving a response from a communicating part of the vehicle.

[0029] According to a preferred embodiment, the system includes a remote server capable of exchanging data with the electronic device via the telecommunication means of the electronic device, the remote server including means for pairing and / or unpairing communicating components of the vehicle, the pairing and / or unpairing means being configured to send to the electronic device pairing and / or unpairing instructions incorporating unique identifiers to be written to or deleted from the memories of the communicating components. Brief description of the drawings

[0030] Other features and advantages of the invention will become more apparent upon reading the following description of various preferred embodiments of the invention, given by way of illustrative and non-limiting examples, and the accompanying drawings, among which: • [Fig.1] [Fig.1] is a schematic representation of a control system for a pedal vehicle according to the invention; • [Fig.2] [Fig.2] is a schematic representation of the operation of communicating components of the control system according to the invention. Detailed description

[0031] With reference to [Fig.1], a control system for a pedal vehicle 1 is shown.

[0032] The pedal vehicle 1 preferably corresponds to a bicycle as illustrated in [Fig.1].

[0033] Alternatively, the pedal vehicle 1 can correspond to a tricycle, or a rosalie.

[0034] According to the present embodiment, the system comprises a pedal vehicle 1, an electronic device 2 mounted on the pedal vehicle 1, a remote server 3, and a smartphone 4.

[0035] According to one conceivable embodiment, the system might not include a remote server 3, nor a smartphone 4.

[0036] The pedal vehicle 1 comprises: - a crankset 11; - an electric motor 12 for electric assistance associated with the crankset 11; - a main electric battery 13 supplying electricity to the electric motor 12, as well as other electrical components of the pedal vehicle 1; - a front steering wheel 14; - a rear drive wheel 15, coupled to the pedal assembly 11 and to the electric motor 12 to be driven in rotation; - a 16-inch handlebar; - a saddle 17; - a display and control interface 18, in particular fixed to the handlebar 16; - a wired data exchange connection integrated into the pedal vehicle 1.

[0037] As will subsequently appear, the pedal vehicle includes electronic components called "communicating devices" which can exchange data. These communicating devices include, but are not limited to: - the electric motor 12; - the electronic device 2; - the main electric battery 13; - the display and control interface 18.

[0038] According to other conceivable embodiments, the pedal vehicle 1 may also include, but is not limited to: headlights, an anti-lock braking system, a reversing radar, and turn signals. These aforementioned electronic components may also be part of the communicating devices.

[0039] The expression "associated with the crankset 11" means that the electric motor 12 is designed to provide electric assistance to pedaling. The electric motor 12 can be coupled directly or indirectly to the crankset 11. For example, the electric motor 12 could be mounted on the rear wheel 15.

[0040] In another conceivable embodiment, the front wheel 14 can be driven and the electric motor 12 would be mounted on this front wheel, or indirectly coupled to the front wheel 14 in order to drive it in rotation.

[0041] According to yet another conceivable embodiment, the electric motor 12 is integrated into a trailer towed by the pedal vehicle 1, and the electric pedal assistance results in a motorized drive of the wheels of the towed trailer, when the user of the pedal vehicle 1 pedals.

[0042] The electric motor 12 has an operational state, as well as a locked state.

[0043] In its operational state, the electric motor 12 can produce electric assistance to pedaling, for example by being requested by the user of the pedal vehicle 1 by means of pedaling and the detection of this pedaling by the electric motor 12, but also, for example and without limitation, by means of pressing on a switch positioned on the handlebar 16.

[0044] In its locked state, the electric pedal assist is inactive. This inactivation of the electric pedal assist can take several forms.

[0045] For example, the electric motor 12 can simply stop, leaving the pedal assembly capable of rotating the drive wheel. According to another example, the electric motor 12 can stop by disengaging the transmission between the pedal assembly and the drive wheel, the pedal assembly then spinning freely and being unable to drive the drive wheel.

[0046] As can be seen from these examples, in the locked state of the electric motor 12, the drive wheel 15 of the pedal vehicle 1 is not locked

[0047] Other forms of inactivation of the electric motor 12, involving the blocking of the drive wheel 15, are however conceivable.

[0048] The electronic device 2 is removably mounted on the pedal vehicle 1. This electronic device 2 can, for example, be integrated into the engine casing, into an internal volume of the frame, or into an accessory mounted on the pedal vehicle 1. It is conceivable that the electronic device 2 may simply be attached to the outside of the pedal vehicle 1.

[0049] The electronic device 2 comprises: - a 24-unit housing containing electronic components of electronic device 2; - a short-range two-way telecommunications antenna 21; - a memory M; - an electronic processing unit T; - a secondary electric battery 24; - means of telecommunication 25, in particular long-distance two-way telecommunication; - means of geolocation 26, including an electronic chip for geographic positioning by satellite.

[0050] The electronic device 2 also includes means for issuing an alert.

[0051] These means of emitting an alert may, for example, include a loudspeaker mounted on the electronic device 2 to broadcast a sound signal at a particularly high sound level.

[0052] The means of transmitting an alert may also, in addition or not to the loudspeaker, take the form of a specific program integrated into the memory M of the electronic device 2 and which aims to transmit an alert signal integrating the geolocation of the electronic device 2, obtained by the geolocation means, by means of the telecommunication means 25, to the smartphone 4 and / or the remote server 3.

[0053] The wired data exchange connection corresponds to a CAN data bus allowing the electronic components of the pedal vehicle 1 which are connected to this data bus to be multiplexed.

[0054] This electronic device 2 is coupled to the electric motor 12, in particular via the wired data exchange connection.

[0055] Coupling the electronic device 2 to the electric motor 12 allows the electronic device 2 to communicate with the electric motor 12. For example, the electronic device 2 can collect technical information from the electric motor 12 and send commands to the electric motor 12.

[0056] As will be shown later, the electronic device 2 is configured to cause the electric motor 12 to switch between its operational state and its locked state, and vice versa.

[0057] The parameters of the electronic device 2 are implemented by its electronic processing unit T, and its memory M.

[0058] The electronic device 2 is also coupled to the main electric battery 13. This coupling allows the electronic device 2 to be powered by the main electric battery 13. The secondary electric battery 24 is designed to compensate for a loss of electric power from this electric battery 13, and to recharge as soon as an electric power supply is restored from this electric battery 13.

[0059] In other words, the electronic device 2 is configured to be powered primarily by the main electric battery 13, and by its secondary electric battery 24 in the event of a power outage from the main electric battery 13.

[0060] As mentioned previously, the communicating organs include: - the electric motor 12; - the electronic device 2; - the main electric battery 13; - the display and control interface 18.

[0061] As illustrated in [Fig.1], each of these communicating organs includes a memory M.

[0062] In addition, each communicating organ includes an electronic processing unit T.

[0063] The electric motor 12 includes an electronic processing unit T and a memory M.

[0064] The main electric battery 13 includes an electronic processing unit T and a memory M.

[0065] Finally, the display and control interface 18 includes an electronic processing unit T and a memory M.

[0066] In a manner similar to the electronic device 2 described above, the respective parameters of the communicating organs are implemented by their own electronic processing units, and memories M.

[0067] As illustrated in [Fig.2], each communicating organ (OC1, OC2, OC3) also includes a unique UI identifier.

[0068] This unique UI identifier can, for example, correspond to a serial number.

[0069] The memory M of each communicating organ (OC1, OC2, OC3) is thus programmed with the unique identifier UI of said communicating organ.

[0070] The memory M of each communicating organ is also programmed with the unique identifier UI of the other communicating organs with which it is connected.

[0071] For example, the communicating organ OC1 includes, in its memory M, the unique identifier UI of this communicating organ OC1, but also those of the communicating organs OC1 and OC3.

[0072] According to the present embodiment, the electric motor 12 (forming the communicating element OC1 in [Fig.2]) and the electronic device 2 (forming the communicating element OC2 in [Fig.2]) are each parameterized to: - periodically send an IP presence query to the other of the electric motor 12 and the electronic device 2, called the queried component; - send a response to an IP presence query, the response incorporating the unique UI identifier of the queried organ; - to lock itself in its locked state if no response is received that includes the unique UI identifier of the organ being queried following the sending of a presence query.

[0073] These communicating organs OC1 and OC2 establish periodic mutual communication and are thus part of a main group of communicating organs which periodically verify their respective identities.

[0074] In their operational state, the electric motor 12 (forming the communicating element OC1 on the [Fig.2]) and the electronic device 2 (forming the communicating element OC2 on the [Fig.2]) are more precisely parameterized to send the presence query to the other of the electric motor 12 and the electronic device 2, at a frequency of less than 1 minute, preferably less than 10 seconds, typically on the order of 1 second.

[0075] As for the communicating organ OC3, it is not part of the main group of communicating organs and its identity is not checked periodically, but following a predetermined event.

[0076] For example, the unique identifier UI of the main electric battery 13 (forming the communicating element OC3) is checked by the electric motor 12 and by the electronic device 2 only when they respectively switch to the operational state.

[0077] Indeed, the electric motor 12 and the electronic device 2, when they switch to the operational state, are each configured to: - send an IP presence query to the main electrical battery 13; - wait for a response incorporating the unique UI identifier of the main electric battery 13; - to lock itself in its locked state if no response is received that includes the unique identifier UI of the main electric battery 13.

[0078] This parameter setting relating to an identity verification, occurring when the electronic device 2 and / or the electric motor 12 switches to the operational state, is preferably implemented for the other communicating components described above, such as the display and control interface 18, the headlights, the turn signals, ...

[0079] According to one example of implementation, the transition to the operational state of the electronic device 2 can be achieved using a command sent from the smartphone 4, and received by the electronic device 2 using its telecommunication means 25.

[0080] The system user, wishing to use his vehicle, can use his smartphone 4 to send the unlock command to the vehicle's electronic device 2.

[0081] The electronic device 2 then switches from its locked state to its operational state and can then verify the identities of the other communicating organs OC, periodically or uniquely as detailed previously.

[0082] If an unauthorized replacement or removal of one of the OC communicating elements has been carried out, the electronic device detects the modification and then locks itself in its locked state.

[0083] Assuming that all identities are consistent, the electronic device 2 sends a start-up command to the electric motor 12. The latter then switches to its operational state and also performs a verification of the identity of the other communicating organs OC.

[0084] Again, if the identities verified by the electric motor 12 are consistent, the electric motor 12 remains in its operational state and the vehicle can be used by its user.

[0085] As mentioned previously, the electronic device 2 includes, according to this embodiment, means for issuing an alert. The device 2 is also configured to issue an alert if it switches to its locked state due to the failure to receive a response incorporating the unique identifier UI of a queried device.

[0086] If the electronic control unit 2 were to be disconnected, with the electric motor 12 and the electronic control unit 2 in their operational state, then the electric motor 12 would no longer receive a response to its periodic presence queries and would therefore lock in its locked state. Furthermore, the electronic control unit 2 would still be powered by the secondary battery and, no longer receiving a response to its periodic presence queries, would also lock in its locked state.

[0087] According to the present embodiment, each communicating organ OC includes a formulation algorithm P of a specific response RI, R2.

[0088] This formulation algorithm P allows the communicating organ to formulate a specific response RI, R2 to a given challenge D1, D2.

[0089] The communicating organ OC1, OC2 which performs a presence interrogation IP must then attach a challenge Dl, D2 to its interrogation, and, knowing the challenge Dl, D2 sent and the formulation algorithm P, also knows what specific response RI, R2 the interrogated communicating organ OC1, OC2 must respond to.

[0090] According to this embodiment, all communicating devices are configured to: - attach a challenge to a presence request sent to a communicating body; - formulate a specific response to the challenge using the formulation algorithm; - attach the specific response to the response incorporating its unique identifier; - to become stuck in its locked state if no response is received that includes the unique identifier of the organ being questioned, and the specific response.

[0091] According to one conceivable embodiment, only the electric motor 12 and the electronic device 2 are configured to perform presence queries associated with challenges.

[0092] With reference to [Fig.1] and as mentioned previously, the system also includes a remote server 3.

[0093] This remote server 3 is capable of exchanging data with the electronic device 2 via the telecommunication means 25 of the electronic device 2.

[0094] This remote server 3 can be used to consult technical information relating to the vehicle, and collected by the electronic device 2.

[0095] The remote server 3 also includes means for pairing and / or unpairing communicating components of the pedal vehicle 1.

[0096] These pairing and / or unpairing means are configured to send to the electronic device 2 pairing and / or unpairing instructions incorporating unique identifiers UI to be written to or deleted from the memories M of the communicating organs OC.

[0097] For example, in the case where a communicating organ is faulty, such as the main electric battery 13, then a replacement of the main electric battery 13 with another requires an operation through the remote server 3, to authorize and legitimize this repair.

[0098] Following a request, for example issued by a certified repairer, the remote server 3 sends a dispairing instruction to remove the unique identifier UI of the defective main electric battery 13, and sends a pairing instruction which contains the unique identifier UI of the replacement main electric battery 13 which will then be dispatched to all communicating devices.

[0099] The new main electric battery 13 can then be mounted on the vehicle.

[0100] The new main electric battery 13 must of course come from a manufacturer itself certified, having the right formulation algorithm P, so that it integrates them into the memories M of the main electric batteries 13 that it manufactures.

[0101] The system described above provides a solution that prevents or limits the possibility of stealing an electrically assisted pedal vehicle by removing the electronic device. Such an action results in the communicating components, including at least the electric motor, being locked.

Claims

Demands

1. Control system for a pedal vehicle (1), the system comprising a pedal vehicle (1) including a pedal assembly (11), a wired data exchange connector integrated into the pedal vehicle (1), the pedal vehicle (1) also comprising communicating components coupled to each other via the wired data exchange connector, including: - an electric motor (12) for electric assistance associated with the pedal assembly (11), the electric motor (12) having an operational state in which it is capable of producing electric assistance for pedaling, and a locked state in which the electric assistance for pedaling is inactive;- an electronic device (2) comprising telecommunication means (25), the electronic device (2) being mounted removably on the pedal vehicle (1), the electronic device (2) having a locked state and an operational state in which it is configured to cause the electric motor (12) to switch between its operational state and its locked state, characterized in that each communicating element comprises a memory (M) programmed with the unique identifier (UI) of said communicating element, and the unique identifiers (UI) of the other communicating elements with which it is coupled via the wired data exchange connection, and in that at least the electric motor (12) and the electronic device (2) are each configured to: - periodically send a presence query to the other of the electric motor (12) and the electronic device (2), said queried element;- send a response to a presence query, the response including the unique identifier (UI) of the queried organ; - lock itself in its locked state if no response including the unique identifier (UI) of the queried organ is received following the sending of a presence query.

2. A system according to the preceding claim, characterized in that the pedal vehicle (1) comprises a main electric battery (13) mounted removably on the pedal vehicle (1) and coupled to the wired data exchange connection to supply electricity to the communicating devices, and in that the electronic device (2) incorporates a secondary electric battery (24), and is configured to be supplied electrically primarily by the main electric battery (13), and by its secondary electric battery (24) in the event of a power outage from the main electric battery (13).

3. System according to the preceding claim, characterized in that the main electric battery (13) is part of the communicating elements, and in that at least the electric motor (12) and the electronic device (2), when they switch to the operational state, are each configured to: - send a presence query to the main electric battery (13); - wait for a response incorporating the unique identifier (UI) of the main electric battery (13); - lock itself in its locked state if no response incorporating the unique identifier (UI) of the main electric battery (13) is received.

4. System according to any one of claims 2 and 3, characterized in that the electronic device (2) includes means for issuing an alert, and is configured to issue an alert in the event of switching to its locked state in the event of non-receipt of a response incorporating the unique identifier (UI) of an interrogated organ.

5. A system according to any one of the preceding claims, characterized in that each communicating element comprises an algorithm for formulating a specific response, and in that at least the electric motor (12) and the electronic device (2) are each parameterized to: - attach a challenge to a presence query sent to a communicating element; - formulate a specific response to the challenge using the formulation algorithm; - attach the specific response to the response incorporating its unique identifier; - to become stuck in its locked state if no response is received that includes the unique identifier of the organ being questioned, and the specific response.

6. System according to any one of the preceding claims, characterized in that the electric motor (12) and the electronic device (2), in their operational state, are each parameterized to periodically send a presence query to the other of the electric motor (12) and the electronic device (2), at a frequency of less than 1 minute, preferably less than 10 seconds.

7. System according to any one of the preceding claims, characterized in that the pedal vehicle (1) comprises at least one drive wheel (15) of the pedal vehicle (1) intended to be driven in rotation by the electric motor (12) in its operational state, and in that, in the locked state of the electric motor (12), the drive wheel(s) (15) of the pedal vehicle (1) are not locked.

8. A system according to any one of the preceding claims, characterized in that it comprises a remote server (3) capable of exchanging data with the electronic device (2) via the telecommunication means (25) of the electronic device (2), the remote server (3) comprising means for pairing and / or unpairing communicating parts of the pedal vehicle (1), the pairing and / or unpairing means being configured to send to the electronic device (2) pairing and / or unpairing instructions incorporating unique identifiers (UI) to be written to or deleted from the memories of the communicating parts.