Method, ID transmitter and system for authenticating a mobile ID transmitter - Patents.com

Abstract

To provide a method for authenticating a mobile ID transmitter, which has an ID transmitter BLE interface, at an access control unit with an access control unit BLE interface of a physical unit.SOLUTION: A method comprises a step 100 of transmitting a beacon 12 with a short beacon identifier 13; a step of checking the short beacon identifier 13; steps 200 to 500 of performing a BLE communication sequence 14; and a step of authenticating an ID transmitter 2. A system 1 is formed with: an ID transmitter 2 with an antenna 5, a microcontroller 6 and a sensor 7; and a physical unit 3 having an antenna 10 and a control apparatus 11.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a method for authenticating a mobile ID emitter.The present invention further relates to an ID emitter and to a system comprising an ID emitter and a physical unit.

[0002] In many physical units, such as vehicles, it is now established that authentication of a mobile ID transmitter takes place in the access control unit of the physical unit, which results in the enabling of access to the physical unit by the access control unit. In physical units configured as vehicles, as an example of an access control unit, the incorporation of electronic locking systems has been common for some time and is becoming increasingly common. Electronic locking systems known in practice are, for example, based on the use of a radio key that communicates with the vehicle by radio. Systems of this kind have been known for some time under various names, such as, for example, the names Passive Entry / Passive Start (PEPS) and Remote Keyless Entry (RKE). PEPS and RKE systems are in many configurations based on a combination of low-frequency and high-frequency radio communication (LF and HF frequency ranges, the latter generally in the UHF range) between, for example, an ID transmitter and a central control unit of the vehicle. An example of a possible configuration is the polling transmission of an LF wake-up signal to wake up an ID transmitter prepared for LF reception, which, in response to receiving the LF signal, initiates two-way radio communication in the HF frequency range for the exchange of authentication information.

[0003] Known systems are often based on the principle that periodically, a radio communication is performed that provides a first rough estimate of the location of the ID transmitter. For example, in a polling system of the above-mentioned type, an LF wake-up signal is continuously sent from a stationary physical unit. Here, as a result of the ID transmitter receiving the LF signal, it is implicitly guaranteed that the ID transmitter is located within at least a roughly limitable distance around the physical unit based on the limited reach of the LF signal. This ensures that the HF communication is initiated in a situation where the ID transmitter is present in the vicinity of the physical unit.

[0004] More complex variants of the location determination are also possible, which are driven in particular by efforts to achieve improved operating comfort or improved operating safety by more accurately determining the location of the ID emitter. Examples known in practice are the use of RSSI values ​​in Bluetooth communication or in UWB ranging applications, i.e. distance calculation based on UWB signal propagation times, which may each be followed by, for example, trilateration.

[0005] The communication between the ID transmitter and the access control unit in the course of the authentication process and the radio communication that is planned in advance for this, for example for determining the position of the ID transmitter, necessarily entails a corresponding demand for power. Against the background of the natural desire to extend the battery exchange intervals in the ID transmitter as long as possible and the increasing miniaturization of the ID transmitter and the corresponding need for energy sources with correspondingly small dimensions, there is a demand to enable authentication of the mobile ID transmitter in the access control unit with the lowest possible demand for power, without having to make too many sacrifices in functionality.

[0006] Against this background, the problem underlying the present invention is to provide a means for authenticating a mobile ID emitter in an access control unit of a physical unit, which is feasible with moderate power demands on the ID emitter.

[0007] The above problem is solved by a method for authenticating a mobile ID emitter having the features of claim 1. The above problem is further solved by an ID emitter having the features of claim 13 and by a system consisting of an ID emitter and a physical unit having the features of claim 14.

[0008] A method is provided for authenticating a mobile ID emitter in an access control unit of a physical unit. The access control unit is used for blocking and enabling access to the physical unit, which occurs after successful authentication and is not part of the described method. An example of a physical unit may be a vehicle, and the access control unit of the vehicle may be configured, for example, as an electronic locking system of the vehicle.

[0009] The mobile ID emitter has at least one ID emitter BLE interface, and the access control unit has at least one access control unit BLE interface.

[0010] BLE is an acronym for Bluetooth-Low-Energy. Bluetooth Low Energy is a communication protocol specified in the Bluetooth specification having version number 4.0 or later, which is for example, at the priority date of this application, Core Specification 4.2, which can be found at the address https: / / www.bluetooth.com / specifications / specs / core-specification-4-2 / .

[0011] The term BLE interface relates to the whole set of components suitable for BLE communication according to the Bluetooth specification, i.e. all hardware and software prerequisites required for operation according to the specification for BLE communication are fulfilled. In particular the BLE interface comprises an antenna. The BLE interface may for example be one module fulfilling all prerequisites required for BLE communication, but also a collection of individual components coupled together may be provided. The ID emitter BLE interface and / or the access control unit BLE interface may for example be configured as a commercially available Bluetooth module.

[0012] The method according to the invention comprises the following steps: A) Sending a beacon from the ID emitter BLE interface with a beacon abbreviated identifier representing the ID emitter BLE interface. This means that at the start of the method, the ID emitter BLE interface sends a beacon with a beacon abbreviated identifier, which includes an indication that can be traced back to the ID emitter BLE interface and thus to the ID emitter. The beacon abbreviated identifier is a beacon or is part of a beacon.

[0013] The transmission of a beacon with a shortened beacon identifier may be triggered, for example, by a predetermined event, but may also be set to be transmitted continuously at predetermined intervals, for example.

[0014] The term "beacon" used in this specification is understood to be an abbreviation for Bluetooth-Low-Energy beacon. Within the use of Bluetooth-Low-Energy within the scope of the Bluetooth specification from version 4.0 onwards, the term "beacon" is established. In the application field where a hardware transmitter sends out an identifier for reception by surrounding receiving devices, beacon is a fixed term known to those skilled in the art. The application field in which beacons are used is often related to localization. The use of beacons is generally based on a predefined protocol, for example the proprietary iBeacon protocol (registered trademark) of Apple Inc. or the freely implementable Eddystone protocol (registered trademark) of Google Inc. To realize the method, one of these two beacon protocols or each other available beacon protocol may be used.

[0015] Of importance for all applications of BLE beacons is the provision for the emission of data packets that have two particular characteristics: on the one hand they are relatively small (e.g. 31 bytes for the iBeacon data field and 255 bytes for the Eddystone beacons) and, on the other hand, they can be configured to include a short identifier, which can be, for example, a Universally Unique Identifier (UUID), for which, for example, the iBeacon protocol provides 16 bytes and which, in the Eddystone beacons, can be configured as a combination of a 10-byte namespace ID and a 6-byte instance ID.

[0016] A UUID is assigned to the ID emitter BLE interface to be utilized in accordance with the present invention, and this assignment may have been done, for example, by the provider of the physical unit, e.g., a vehicle OEM, prior to placing the physical unit on the market.

[0017] In a further step, namely in step B), after the access control unit BLE interface has received the beacon, the access control unit checks the beacon shortened identifier, i.e. if the ID emitter has reached close enough to the access control unit, more precisely to the access control unit BLE interface or to the antenna of the access control unit BLE interface, the access control unit BLE interface can receive a beacon with the beacon shortened identifier, which is subsequently checked by the access control unit. This can be done for example by a microcontroller of the access control unit BLE interface or by a microcontroller coupled to the access control unit BLE interface, alternatively by a separate control device.

[0018] C) After the check of the beacon shortened identifier reveals that the beacon shortened identifier represents an ID emitter BLE interface known to one of these access control units, for example based on a corresponding setting by the manufacturer, a BLE communication sequence between the access control unit BLE interface and the ID emitter BLE interface is started and executed in accordance with the invention. The execution of the BLE communication sequence starts from the access control unit BLE interface, i.e. the access control unit BLE interface starts the execution of the BLE communication sequence. This means that further BLE communication, i.e. BLE communication between the access control unit BLE interface and the ID emitter BLE interface within the BLE communication sequence, takes place only under the precondition that a beacon shortened identifier with a predefined value has been received and identified as such beforehand.

[0019] It may be assumed that in a storage means coupled to a microcontroller responsible for checking the beacon short identifiers, a predefined beacon short identifier or a list of predefined beacon short identifiers is stored and that the access control unit BLE interface is configured to initiate a BLE communication sequence as soon as the received beacon short identifier is included in this list, as determined by a comparison performed in the course of the check. This may for example be realized in such a way that the microcontroller is configured to drive the access control unit BLE interface to initiate a BLE communication sequence after it has determined the presence of a predefined beacon short identifier in the course of checking the beacon short identifiers.

[0020] The BLE communication sequence between the access control unit BLE interface and the ID transmitter BLE interface is processed such that authentication data is transmitted from the ID transmitter BLE interface to the access control unit BLE interface during the course of the BLE communication sequence, and the ID transmitter is authenticated by the access control unit based on this authentication data. For example, it may be assumed that the ID transmitter BLE interface transmits a certificate of the ID transmitter to the access control unit BLE interface, and a microcontroller coupled to the access control unit BLE interface checks the validity of this certificate, for example by a public certificate of the asymmetric certificate pair transmitted from the ID transmitter to the access control unit, which is a verification based on a private certificate of the asymmetric certificate pair when an asymmetric cryptography method is used.

[0021] The method according to the invention is based in particular on the fact that a first rough localization of the ID emitter in the vicinity of the physical unit is performed by the physical unit receiving a beacon with a beacon abbreviated identifier transmitted thereto. The reception of the beacon with the beacon abbreviated identifier implicitly provides the access control unit with the information that the ID emitter is located within the range of the beacon communication, within an interval around the access control unit BLE interface. This range is typically of the order of a few tens of meters and can possibly be reduced to even lower values ​​depending on the desired application scenario of the developer entrusted with the implementation of the invention.

[0022] An advantage of using beacon communications, i.e. in particular protocols based on BLE beacon transmissions, is that they involve relatively low energy conversion or power demands, given, inter alia, the relatively small size of the individual beacons, so that a relatively long lifetime of the ID transmitter can be expected before, for example, a battery replacement is required.

[0023] The execution of the BLE communication sequence of step C) may in one variant comprise, after the beacon short identifier has been identified as a beacon short identifier representing a known ID emitter BLE interface, the access control unit BLE interface sending a data provision request, for example, this data provision request may be a scan request inquiry, i.e. a scan request according to the Bluetooth protocol, for example a scan request configured according to the Bluetooth Core Specification version 5.0, 5.1 or 5.2.

[0024] Furthermore, in this variant of the method, it may be assumed that after the ID emitter BLE interface gets the data-provision request, the ID emitter BLE interface performs a BLE communication in the above-mentioned manner according to the invention, which means that the provision of authentication data from the ID emitter to the access control unit takes place in response to the data-provision request, which is for example configured as a scan request inquiry.

[0025] In an advantageous embodiment, it may be assumed that the execution of a BLE communication sequence initially comprises a step C1), in which a data provision request is transmitted from the access control unit BLE interface and, after reception by the ID emitter BLE interface, the ID emitter, prompted, for example by a microcontroller present in the ID emitter and coupled to the ID emitter BLE interface, prompts, as step C2), a sensor likewise present in the ID emitter to detect sensor data and then transmits at least a part of the sensor data or information derived from the sensor data or from a part of the sensor data as response data from the ID emitter BLE interface. The transmission of the sensor data may in this case in particular be configured as a transmission within a beacon data packet.

[0026] C3) After the access control unit BLE interface receives the response data, the response data is checked against validation criteria by the access control unit, for example by a microcontroller contained within the access control unit and coupled to the access control unit BLE interface.

[0027] Here, it may be assumed that the sending of a connection request takes place after the checking of the response data with respect to predefined validation criteria outputs a positive result, the connection request may for example be configured as a scan request in the sense of the Bluetooth Core Specification.

[0028] This may then be followed by the initiation and execution of a BLE communication between the ID emitter BLE interface and the access control unit BLE interface, within the framework of which authentication data is transmitted from the ID emitter to the access control unit, which may in particular take place within the framework of a regular BLE connection.

[0029] The above-mentioned method description shows how in the process the access control unit BLE interface can prompt the ID emitter to detect sensor data, which is then transmitted to the access control unit, which contributes to the fact that, as a result of a check on validation criteria, the further communication and thus also the authentication of the ID emitter can be related to a particular use scenario. The use scenario intended to enable authentication and the suitable validation criteria for validating the sensor data should here in particular be found empirically. As long as certain validation criteria have to be fulfilled by the sensor data as an additional prerequisite for continuing the authentication process, the security of the authentication is potentially increased by the additional requirement, since if the sensor data are appropriately selected, the method can be set up in such a way that the probability of false authentication can be reduced. Which sensor data can be considered suitable here and also which validation criteria they should be subject to should for example be found empirically. A further advantage of this development of the method is that the data transmission, at least including step C3, preferably takes place within the framework of a BLE beacon, which advantageously keeps energy conversions when implementing the method relatively gentle.

[0030] The request to provide data may be a scan request inquiry, as described above.

[0031] The response data may be configured as or included in the beacon response data.

[0032] The response data may be or may include a scan response packet.

[0033] Particularly preferably, the sensor is an acceleration sensor, or the sensor is a gyro sensor, or the sensor is an acceleration and gyro sensor, and the response data obtained are, depending on the sensor, acceleration data, or gyro data, or acceleration and gyro data.

[0034] Checking the response data preferably includes comparing an RSSI value of the response data to a stored reference value and / or comparing completed movements of the sensor data during a defined period of time to a stored reference value.

[0035] For example, it may be assumed that the check of the response data is a completed movement of the gyro data of the gyro sensor during a defined period of time, and the validation criterion is that the acceleration in each of the three considered coordinates is below a predefined value. Alternatively or additionally, the validation criterion may include that the RSSI value of the response data is below a predefined threshold. With such a setting, for example, the validation will provide additional security that the operator is actually located within a predefined distance from the access control unit, with a value empirically found accordingly, and that the operator wishes to gain access. In the case where the operator for example passes by the access control unit and does not remain at the access control unit, even if the distance between the access control unit and the operator is very short, it can be identified based on the acceleration data that the operator is present but does not wish to gain access with a certain degree of probability, as long as the acceleration data is appropriately selected. The validation of the sensor data takes place before the exchange of the authentication data, and the sensor data is transmitted in a similarly small beacon packet, thereby reducing the energy conversion required to implement the method, which is of great importance in particular on the side of portable and relatively small ID emitters, in the spirit of the longest possible interval between two battery changes. The combination of information from the sensor data with information from the authentication data further increases access security.

[0036] The connection request may be, for example, a scan request inquiry.

[0037] It may be assumed that in order to start the BLE communication, a BLE advertising is sent out from the ID emitter BLE interface. This means that the ID emitter is first informed, for example by a connection request configured as a scan request, that the access control unit considers that the intention of authentication is present with a certain probability under certain criteria. The ID emitter BLE interface responds to this, for example by a BLE advertising, which initiates an orderly BLE connection between the ID emitter BLE interface and the access control unit BLE interface.

[0038] In a further development, it may be assumed that after the start of the BLE communication, in all cases or in cases where additional prerequisites exist, a complementary UWB ranging is performed between the control unit UWB interface and the ID emitter UWB interface provided in the ID emitter in order to validate the distance between the physical unit and the ID emitter. Since the UWB ranging has a very good accuracy in the distance calculation, in many cases, a more accurate determination of the distance between the operator carrying the ID emitter and the physical unit is possible, so that the data obtained on the basis of the BLE communication can be more accurately validated on the basis of the distance calculated by UWB ranging, for example, before the end of the authentication, a criterion is checked as to whether the operator is present within a predefined distance around the UWB interface of the physical unit calculated by UWB ranging and / or outside a predefined distance around the UWB interface of the physical unit calculated by UWB ranging, and the authentication is only terminated if this criterion, which is an additional criterion, is met.

[0039] It was mentioned at the beginning that the method is started by the transmission of a beacon abbreviated identifier. In an advantageous embodiment, it may be assumed that this transmission of the beacon abbreviated identifier is triggered only when a movement of the ID transmitter is identified by a motion sensor or an acceleration sensor or a gyro sensor or an acceleration and gyro sensor arranged in the ID transmitter. That is, in the case where the ID transmitter remains motionless for a relatively long period of time, no radio communication from the ID transmitter takes place (i.e. a sleep state exists) and only when a movement is identified by one of the above-mentioned sensors is a signal output to the microcontroller in the ID transmitter. This signal is then repeated, for example once or at regular intervals for a predefined period of time to prompt the transmission of a beacon, after which the sleep state is resumed as soon as this predefined period has elapsed. In this way, the power demand of the ID transmitter can be further reduced.

[0040] Another idea of ​​the invention relates to an ID transmitter that is authenticated in the physical unit to be controlled. For this purpose, the ID transmitter comprises at least ID transmitter BLE interface with antenna, A microcontroller coupled to an ID emitter BLE interface; Preferably coupled to a microcontroller, a) an acceleration sensor, or b) a gyro sensor, or c) Acceleration and gyro sensors a sensor configured as: Preferably additionally, a UWB interface coupled to the microcontroller. and the microcontroller is configured to execute the steps of the ID generator in the method according to any one of claims 1 to 12.

[0041] It is particularly preferred that the physical unit is a vehicle, preferably a land vehicle, particularly preferably a passenger car.

[0042] Another idea of ​​the invention is a system consisting of an ID transmitter and a physical unit. The ID transmitter is an ID transmitter of the type described above.

[0043] The physical unit comprises an access control unit, the access control unit comprising at least Access control unit with antenna BLE interface, A control device, preferably configured as a microcontroller, coupled to the access control unit BLE interface It has.

[0044] The control equipment of the access control unit is adapted to execute the steps of the access control unit of the method according to the invention or of its developments.

[0045] The ID transmitter and the access control unit are adapted to each other in such a way that the ID transmitter is prepared for authentication in the access control unit by means of authentication data stored in the storage means of the ID transmitter, the authenticity of which can be checked by the control device of the access control unit. An example of realization of this authentication of the ID transmitter in the access control unit is the configuration of the authentication data as a public key of an asymmetric key pair, the private key being stored in the storage means of the control device of the access control unit or in a storage means coupled to the control device of the access control unit for the authenticity check, the control device being prepared with the necessary cryptographic program to authenticate the key obtained from the ID transmitter. Of course, other authentication methods known to those skilled in the art may also be implemented.

[0046] Further details, features and advantages of the method according to the invention will emerge from the following description in conjunction with the drawings, which show an embodiment of the invention by way of example.

[0047] It is self-evident that the above mentioned features as well as the features to be mentioned hereinafter can be used not only in the respective combinations described, but also in other combinations or alone. [Brief description of the drawings]

[0048] [Figure 1] FIG. 1 is a schematic diagram showing a system consisting of an ID transmitter and a physical unit with an access control unit, as well as the flow of wireless communication between the ID transmitter and the access control unit of the physical unit during authentication of the ID transmitter by the access control unit.

[0049] Shown is a system 1 consisting of an ID transmitter 2 and a physical unit 3 configured as a passenger vehicle.

[0050] The ID transmitter 2 has an ID transmitter BLE interface 4 with an antenna 5. Within the ID transmitter 2, a microcontroller 6 is provided which is coupled to the ID transmitter BLE interface 4. Furthermore, the ID transmitter 2 has an acceleration and gyro sensor 7 which is also coupled to the microcontroller 6.

[0051] The microcontroller is programmed to prompt actions on the part of the ID transmitter 2 in the process of authenticating the ID transmitter 2 in the vehicle 3 .

[0052] The physical unit 3, configured as a passenger vehicle, includes an access control unit 8. The access control unit 8 comprises at least the following components: Access control unit BLE interface 9 with antenna 10, A control device 11, preferably configured as a microcontroller, coupled to the access control unit BLE interface 9 It has.

[0053] The control device is programmed to carry out the steps of the access control unit 8 in communicating with the ID emitter 2 .

[0054] The authentication of the Mobile ID transmitter in the vehicle is shown diagrammatically in the drawing: The ID transmitter transmits BLE beacons 12 at certain intervals, for example at intervals of several tens of microseconds, and these BLE beacons have a beacon abbreviated identifier 13 that represents the ID transmitter BLE interface (step 100). B) After the access control unit BLE interface 9 receives the beacon 12, the access control unit 8, for example by means of the control device 11, checks the beacon short identifier 13 as to whether this beacon was sent from an ID emitter 2 assigned to the vehicle 3. C) After the access control unit 8 has verified that this beacon shortened identifier comes, or appears to come, from the assigned ID emitter, the access control unit 8 initiates a BLE communication sequence 14 between the access control unit BLE interface 9 and the ID emitter BLE interface 4.

[0055] First, a data provision request configured as a scan request inquiry is sent from the access control unit BLE interface 9 (step 200).

[0056] The ID emitter BLE interface 4 receives the data request, which the microcontroller 6 interprets as a request to record sensor data of the acceleration and gyro sensors 7 for a certain period of time, for example a period of a few hundred milliseconds, and to transmit this sensor data via the ID emitter BLE interface 4 (step 300).

[0057] The access control unit BLE interface 9 receives this data, which are checked by the access control unit microcontroller 11 for at least one validation criterion, for example whether the movement of the ID emitter has occurred below a certain distance within a certain time.

[0058] If checking the response data against the validation criteria outputs a positive result, a scan request is made using the access control unit BLE interface (step 400), to which the ID emitter BLE interface responds with a BLE advertising signal (step 500).

[0059] A BLE connection, i.e. a BLE connection, is established, followed by, finally, in a manner known to those skilled in the art, in bidirectional communication, authentication of the ID emitter is performed by the access control unit based on authentication data transmitted in the BLE communication sequence from the ID emitter BLE interface to the access control unit BLE interface.

[0060] By the above-mentioned method, it is achieved that prior to the authentication of the ID transmitter within the framework of BLE communication and the subsequent checking of the transmitted data, a pre-communication with transmission of relevant data and a pre-validation takes place on the basis of BLE beacon transmission. BLE beacon transmission is possible in particular due to the small data packet size and the associated moderate power demands, so that in a particularly advantageous manner a relatively long life of the battery present in the ID transmitter is obtained at the same time as the very good safety of this method based on multi-stage validation and authentication.

Claims

1. A method for authenticating a mobile ID emitter (2) having an ID emitter BLE interface (4) in an access control unit (8) of a physical unit (3), comprising: said access control unit (8) being able to block and enable access to said physical unit (3); The access control unit (8) has an access control unit BLE interface (9), The method comprises: A) sending a beacon (12) with a beacon abbreviated identifier (13) representing said ID transmitter BLE interface (4) from said ID transmitter BLE interface (4); B) after the access control unit BLE interface (9) receives the beacon (12), the access control unit (8) checks the beacon short identifier (13); C) executing, from the access control unit BLE interface (9), a BLE communication sequence (14) between the access control unit BLE interface (9) and the ID emitter BLE interface (4) after the checking of the beacon short identifier (13) reveals that the beacon short identifier (13) represents a known ID emitter BLE interface (4); D) authenticating the ID transmitter (2) by the access control unit (8) based on authentication data transmitted from the ID transmitter BLE interface (4) to the access control unit BLE interface (9) in the BLE communication sequence (14); Including, The execution of the BLE communication sequence (14) in step C) comprises: C1) sending a data provision request from the access control unit BLE interface (9); C2) after the ID transmitter BLE interface (4) receives the data provision request, detecting sensor data of a sensor (7) present in the ID transmitter (2) and transmitting at least a part of the sensor data or information derived from the sensor data as response data from the ID transmitter BLE interface (4); C3) after said access control unit BLE interface (9) receives said response data, checking said response data by said access control unit for at least one validation criterion; C4) sending a connection request if the checking of the response data outputs a positive result; C5) after the ID transmitter BLE interface obtains the connection request, initiating and performing BLE communication between the ID transmitter BLE interface (4) and the access control unit BLE interface (9) for transmitting authentication data from the ID transmitter to the access control unit; Including, method.

2. The method of claim 1 , wherein the request to provide data is a scan request inquiry.

3. The method of claim 1 , wherein the response data is configured as or included in beacon response data.

4. The method of claim 3 , wherein the response data is or includes a scan response packet.

5. the sensor (7) is an acceleration sensor and the response data is acceleration data; or the sensor (7) is a gyro sensor, and the response data is gyro data; or The sensor (7) is an acceleration and gyro sensor, and the response data is acceleration and gyro data. The method of claim 1.

6. The inspection of the response data includes: comparing the RSSI value of the response data with a stored reference value; and / or Comparing completed movements of said sensor data during a defined period of time to stored reference values. The method of claim 1 , comprising:

7. The method of claim 1 , wherein the connection request is a scan request inquiry.

8. The method according to claim 1 , further comprising sending a BLE advertising from the ID transmitter BLE interface (4) to initiate the BLE communication.

9. 2. The method of claim 1, further comprising: after the initiation of the BLE communication, performing complementary UWB ranging between a control unit UWB interface and an ID emitter UWB interface to validate the distance between the physical unit and the ID emitter.

10. 2. The method of claim 1, wherein the transmission of the beacon (12) with the beacon abbreviated identifier (13) is triggered by the movement of the ID transmitter (2) being identified by a motion sensor (7) or an acceleration sensor (7) or a gyro sensor (7) or an acceleration and gyro sensor (7) arranged in the ID transmitter.

11. An ID generator (2) authenticated in an access control unit (8) of a physical unit (3), said ID generator (2) comprising at least - an ID transmitter BLE interface (4) equipped with an antenna (5); a microcontroller (6) coupled to said ID emitter BLE interface (4); Preferably coupled to said microcontroller (6), a) an acceleration sensor, or b) a gyro sensor, or c) Acceleration and gyro sensors A sensor (7) configured as - a UWB interface, preferably coupled to said microcontroller; having The microcontroller (6) is configured to execute the steps of the ID generator (2) of the method according to any one of claims 1 to 10. ID transmitter (2).

12. A system (1) consisting of an ID generator (2) and a physical unit (3), The ID transmitter (2) is an ID transmitter (2) according to claim 11, The physical unit (3) comprises an access control unit (8), which comprises at least an access control unit BLE interface (9) equipped with an antenna (10), a control device (11), preferably configured as a microcontroller (11), coupled to said access control unit BLE interface (9); having The control device (11) is adapted to carry out the steps of the access control unit (8) of the method according to any one of claims 1 to 10, the ID transmitter (2) and the access control unit (8) are adapted to each other in such a way that the ID transmitter (2) is prepared for authentication in the access control unit (8) using authentication data stored in a storage means of the ID transmitter (2), the authenticity of which can be checked by the control device (11) of the access control unit (8), System (1).

13. 13. The system (1) according to claim 12, wherein the physical unit (3) is a vehicle, preferably a land vehicle, particularly preferably a passenger car.

Images