Method and device for providing authentication for accessing a vehicle
The method enhances vehicle access security by using multiple transceivers to measure and match signal strength and identifiers, preventing relay attacks and ensuring secure authentication.
Patent Information
- Application Number
- JP2023550179
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Priority Date
- 2021-02-22
- Filing Date
- 2022-02-10
- Publication Date
- 2026-02-25
- Estimated Expiration
- 2042-02-10
AI Technical Summary
Existing keyless entry systems for vehicles are vulnerable to relay attacks, which allow unauthorized access by intercepting and relaying authentication signals between the key fob and the vehicle, despite encryption and rolling code systems.
A method and system using multiple vehicle transceivers to measure signal strength and consistency with a portable electronic key, ensuring authentication is based on local measurements to prevent relay attacks, involving a control procedure that checks the match between ordered data sequences of signal strength indicators and transceiver identifiers.
Prevents relay attacks by ensuring authentication is only successful when local measurements match, thus preventing unauthorized access and enhancing security without additional hardware or user inconvenience.
Smart Images

Figure 0007820397000001 
Figure 0007820397000002 
Figure 0007820397000003
Abstract
Description
[Technical Field]
[0001] The present disclosure relates to the field of access control to lockable / unlockable smart devices, compartments, or spaces, and more particularly to a method for providing authentication for accessing interactive goods using a portable electronic key configured to process wireless signal exchanges. In a more specific and practical context, the present disclosure aims to provide a new solution for authenticating a person's access to a vehicle using a remote portable electronic device, such as a mobile phone. The subject matter of the present disclosure relates to a method, a portable electronic key, and an interactive goods. [Background technology]
[0002] In the automotive field, it is becoming increasingly common to use keyless entry systems to remotely lock and unlock automobiles using radio frequency (RF) signals. Such remote systems can even be used to start the automobile's engine. Two main types of systems exist. The most widespread systems relate to so-called active keyless entry systems, in which a key fob typically includes at least two buttons for remotely opening and closing the vehicle. However, in recent years, for added convenience, there has been a trend toward the implementation of so-called passive systems, which do not require any action from the user, such as pressing a button. Such systems, referred to as remote keyless systems (RKS), relate to remote central locking systems that use an electronic remote control device as a key. This device can be automatically activated when a portable electronic key (i.e., an electronic remote control device) is in the vicinity of a paired or bound vehicle.
[0003] Advantageously, this technology allows a driver to access their vehicle by automatically unlocking the vehicle when the holder of the portable electronic key is near the vehicle, typically a few meters (e.g., 1-2 meters) away, or touching the door handle. Advantageously, the driver does not need to press a button on the key fob to unlock their vehicle. Conversely, if the driver leaves their vehicle and is within a few meters (e.g., 2-3 meters) of it, the system automatically locks the car.
[0004] To achieve such locking / unlocking functions, the key fob and the vehicle each have a transceiver capable of detecting each other using RF signals. Typically, the vehicle continuously transmits encrypted messages using one or several transceivers located in several locations on the vehicle. When the key fob is within range of the vehicle-transmitted signal, the key fob responds with an encrypted response. If the encrypted messages exchanged between the vehicle and the key fob are correct, the vehicle is typically unlocked after successful mutual authentication.
[0005] RKS systems typically use so-called rolling codes instead of static unique codes to ensure that a new code is generated each time a locking / unlocking operation is required. Such a technique prevents replay attacks, in which a malicious individual discreetly steals the code using a recording device placed within signal range. If the attack is successful, such an individual would be able to replay the code to unlock the vehicle instead of the key fob.
[0006] However, rolling code systems do not simply record the code transmitted via the RF signal emitted by the key fob; they are unable to prevent so-called rolljam attacks, in which the goal is to block the RF signal transmitted by the key fob to prevent it from reaching the vehicle. Because the RF signal is blocked on the first attempt, the owner presses the key button again to unlock the vehicle on the second attempt. Each time the button is pressed, a new code is generated from a sequence automatically generated by an algorithm in the key fob. Because the same algorithm (or matching algorithm) operates in the vehicle, both the vehicle and the key fob synchronize and follow the same code sequence. Because both the first and next codes are blocked by the hacker module, the hacker module can only immediately replay the first code, which is eventually received by the vehicle without being blocked. As a result, the vehicle is unlocked in the owner's presence after the owner's second attempt. However, because the hacker module has already recorded the next sequence code at this stage, the hacker can unlock the vehicle again after it has been locked again, without the algorithm.
[0007] One of the biggest disadvantages for a hacker is that both replay and rolljam attacks require the hacker to be present at the same time the owner unlocks their car. To overcome this problem, malicious actors have developed another attack known as a relay attack.
[0008] A relay attack allows a thief to obtain the code for a passive remote keyless system, i.e., a system that can be operated remotely and does not require the owner to press a button to unlock the vehicle. For this purpose, thieves usually work in pairs, for example, at night when the vehicle is parked next to the owner's house. Such an attack is based on the assumption that the key fob is located near the front door of the house, usually hung on the wall or placed in a drawer near the entrance.
[0009] To perform a relay attack, two transceivers are required. The first transceiver is placed near the vehicle to be unlocked, and the second transceiver is placed outside the house as close as possible to the expected key fob location, i.e., near the front door. The first transceiver emits a wake-up signal to the vehicle using an RF signal conforming to the vehicle model. The vehicle detects the wake-up signal and responds by transmitting an authentication request. Alternatively, the transceiver may scan or discover advertising signals emitted by the vehicle to establish a communication channel with the vehicle before transmitting the authentication request. This request is relayed by the first transceiver to the second transceiver using a high-range signal or, more commonly, a wired or wireless connection. Using an RF signal with the appropriate frequency, the second transceiver forwards the authentication request to the key fob located inside the house. In response, the second transceiver emulates the vehicle and transmits messages received from and to the key fob. If the key fob is within a 5-15 meter range, it detects the signal containing the authentication request and responds with a message containing the identification data. This message is detected by the second transceiver and transmitted as such to the first transceiver. The first transceiver simply forwards the message to the vehicle using an RF signal that conforms to the vehicle's communication frequency. Upon receipt, the vehicle checks the identification data contained in the message and, if these data are from the correct key fob, unlocks the doors.
[0010] It should be noted that such relay attacks are applicable to any type of message sent between the vehicle and the key fob, even if the exchanged messages are encrypted. This is because the transceiver effectively only acts as a relay device to bring the key fob closer to the vehicle. In addition, such attacks may also be applicable if a second transceiver is carried by one of the hackers who tracks the car owner after they have left their car.
[0011] To prevent relay attacks, one possible solution is to place the key fob in a metal enclosure when not in use, which acts as a Faraday cage to block any RF signals. This solution may be suitable when the key is left in a location such as the owner's home, but is less practical when the owner carries the key fob in one of their pockets, for example.
[0012] Another solution could consist of switching the key fob off when not in use, however many key fobs do not have such a feature as it would negate the benefits offered by passive remote keyless systems.
[0013] A further solution could consist of adding a relay attack detector to the key fob, however, carrying an additional electronic device is inconvenient.
[0014] Therefore, there is a need for a more efficient and convenient solution for improving security when using portable remote electronic keys to provide authentication for accessing interactive goods, such as vehicles. More specifically, such a solution should be able to at least partially overcome the problems and drawbacks mentioned above, and in particular should be efficient in preventing relay attacks. Summary of the Invention
[0015] To address this concern, the present disclosure proposes, in a first aspect, a method for providing authentication for accessing a vehicle using a portable electronic key configured to process wireless signal exchanges. The vehicle comprises at least two transceivers distributed at different locations, each of the transceivers configured at least to emit at least a first signal and to receive at least a second signal from the portable electronic key. The authentication is conditioned on successful completion of a control procedure, which includes: - determining, for each of the first signals, first information based on at least one intensity measurement of the first signal in the portable electronic key; - determining second information for said second signal based on at least one strength measurement of the second signal at each of the transceivers; - checking whether the first information matches the second information, and if so, initiating or allowing access to an unlocking procedure configured to provide said authentication.
[0016] Checking whether the first information matches the second information includes - ordering the first information to form a first ordered data sequence; - ordering the second information to form a second ordered data sequence; and checking the consistency between the first and second ordered data sequences. Thanks to this solution, the initiation of the unlocking procedure, which may be a procedure commonly used in known key fobs, depends on a positive result obtained at the end of the control procedure. If the control procedure ends unsuccessfully, the unlocking procedure does not begin. Additionally, the determination of the first information is performed by at least one measurement performed in the portable electronic key, preferably by the portable electronic key itself. This means that at least part of the control procedure is performed in or by the portable electronic key and therefore is not based on the acceptance of data transmitted by the vehicle or a third-party device. This therefore excludes, for example, the processing of measurements transmitted by a relay. Unless the determination of the first information can be performed in or by the portable electronic key, for example, due to too long a distance between the key fob and the associated vehicle, the control procedure cannot be completed, thus preventing relay attacks. The same applies to the determination of the second information performed in the vehicle.
[0017] Preferably, each transceiver is associated with a specific transceiver identifier that is assigned to the first information and second information to which it relates; A match between the first ordered data sequence and the second ordered data sequence is determined based on a transceiver identifier associated with the first information and the second information of the first ordered data sequence and the second ordered data sequence.
[0018] According to a preferred embodiment, each of the first information and the second information is (i) received signal strength indicator (RSSI); (ii) the calculated distance between the transceiver and the portable electronic key; and (iii) the distance or received signal strength indicator variation.
[0019] In one embodiment, the method further includes transmitting at least one parameter related to a transmission power of at least one of the transceiver and the portable electronic key between the vehicle and the portable electronic key.
[0020] According to one embodiment, each second information is transmitted to a portable electronic key and the control procedure is executed in the portable electronic key, and / or each first information is transmitted to a vehicle and the control procedure is executed in the vehicle.
[0021] In another embodiment, when control procedures are executed in the portable electronic key and the vehicle, initiating or allowing access to the unlocking procedure is conditioned on the successful completion of each of the control procedures.
[0022] In one embodiment, any first information and / or any second information is transmitted in an encrypted form and / or is subjected to a first authentication process.
[0023] Preferably, at least one of the first signal and the second signal is a wireless signal, preferably a Bluetooth signal, a Bluetooth low energy signal, or a Wi-Fi signal.
[0024] According to another embodiment, the vehicle is equipped with several access methods, and the authentication relates to accessing the vehicle via a route closest to a transceiver associated with at least first information and / or second information representing the closest location of the portable electronic key relative to the vehicle.
[0025] In one embodiment, the unlocking procedure includes at least one of identifying the portable electronic key by the vehicle and identifying the vehicle by the portable electronic key, at least one of which identifications preferably undergoes a second authentication process.
[0026] According to a preferred embodiment, the vehicle may be a car, a mobility device, or a micromobility device, and / or the portable electronic key is a key fob, a smartphone, a personal assistant, a netbook, a smartwatch, or a smart wearable.
[0027] According to a second aspect, the present disclosure relates to a portable electronic key configured to provide authentication for accessing a vehicle according to any of the method embodiments or any possible combination of these embodiments, said portable electronic key comprising: an electronic key transceiver configured to process a wireless signal exchange, the wireless signal exchange comprising: at least two first signals each received from a transceiver of one of said vehicles; a second signal emitted by the electronic key transceiver; a processing unit connected to the electronic key transceiver, - receiving, for each of at least two first signals, first information determined based on at least one strength measurement of said first signals in the portable electronic key; receiving associated second information determined based on second signal strength measurements at each of said transceivers; a processing unit configured to check whether each first information matches an associated second information, and if so, to initiate or allow access to an unlocking procedure configured to provide said authentication; Checking whether the first information matches the second information includes - ordering the first information to form a first ordered data sequence; - ordering the second information to form a second ordered data sequence; - checking for a match between the first ordered data sequence and the second ordered data sequence.
[0028] According to a third aspect, the present disclosure relates to a vehicle configured to provide authentication for accessing the vehicle through a wireless signal exchange with at least a portable electronic key, according to any of the method embodiments or in any possible combination of these embodiments. For this purpose, the vehicle as described above comprises: At least two transceivers distributed at different locations, each transceiver configured to at least emit at least a first signal and receive at least a second signal from the portable electronic key; a controller coupled to the at least one transceiver, the controller comprising: - receiving, for each first signal, first information determined based on at least one intensity measurement of said first signal in the portable electronic key; receiving, from each of said transceivers, associated second information determined based on at least one strength measurement of a second signal at each transceiver; a controller for checking whether each first information matches an associated second information, and if so, initiating or allowing access to an unlocking procedure configured to provide said authentication; Checking whether the first information matches the second information includes - ordering the first information to form a first ordered data sequence; - ordering the second information to form a second ordered data sequence; - checking for a match between the first ordered data sequence and the second ordered data sequence.
[0029] Other embodiments and advantages are disclosed in the detailed description below. [Brief explanation of the drawings]
[0030] The solutions and embodiments proposed in this disclosure should be taken as non-limiting examples and will be better understood with reference to the accompanying drawings, in which:
[0031] [Figure 1] 1 is a schematic diagram of the main entities with signals and information that may be involved in the method according to two different embodiments; [Figure 2] 1 depicts the main steps of the control procedure that, if successful, initiates or allows access to the unlocking procedure. [Figure 3] 1 is a schematic diagram of the main entities with signals and information that may be involved in the method according to two different embodiments; [Figure 4] 3 shows a schematic example of two data sequences that can be determined to check the consistency between first and second information; [Figure 5] 3 shows a schematic example of two data sequences that can be determined to check the consistency between first and second information; [Figure 6] 1 illustrates an embodiment of a method in which at least one of the first information and the second information is transmitted using at least one message. [Figure 7] 1 depicts the main steps of an unlocking procedure according to one embodiment. [Figure 8] 1 provides a schematic diagram of a control remote device that can be used as a portable electronic key. [Figure 9] 1 provides a schematic diagram of an interactive product that may be suitable for implementing the method; DETAILED DESCRIPTION OF THE INVENTION
[0032] FIG. 1 shows a first schematic diagram of two main entities, the signals and information from which are involved in the present solution. The first entity is an interactive product 10, such as a vehicle, preferably an automobile, having interactive or smart characteristics. Generally speaking, an interactive product refers to any interactive object, compartment, or space, preferably with interactive functionality or artificial intelligence, that may require authentication to access it. Access to the interactive product 10 may include the right to use it, enter it, unlock it, and / or open it. Furthermore, this right may apply to the product in its entirety or at least to a portion of it. It should also be noted that the interactive product may or may not be related to the Internet of Things (IoT).
[0033] The second main entity is the so-called portable electronic key 20, which can refer to any portable electronic device with wireless communication capabilities, particularly preferably at least two-way communication capabilities for processing or processing wireless signal exchanges with the interactive product 10. Therefore, the portable electronic key 20 cannot be considered a basic remote control device such as a TV remote control, given that it must be able to at least send and receive wireless signals and process them using somewhat complex functions. In addition, the portable electronic key 20 should also be capable of performing strength signal measurements. While it is not intended to limit the interactive product to a vehicle, this disclosure may refer to a vehicle instead of the interactive product 10 for simplicity.
[0034] The portable electronic key may be, for example, a key fob or a smart device such as, for example, a mobile phone, a personal assistant, a netbook, a smart watch, or a smart wearable. Note that although the portable electronic key 20 refers to the term "key," this entity does not need to physically contain a key to access an interactive product. Thus, the portable electronic key 20 may be considered more of a virtual key. For the same reasons as above, it is not intended that the portable electronic key 20 be limited to a key fob or a mobile phone, even though the present disclosure may refer to such devices instead of specifically referring to the expression "portable electronic key."
[0035] As shown in the foregoing figures, the interactive product 10 is a vehicle, preferably an automobile such as a private car, the owner of which has a portable electronic key 20. It should be understood that although the present disclosure refers to the owner of the vehicle or the owner of the key fob, any other person who is entitled to use the interactive product 10 or the portable electronic key 20 to access the interactive product may be considered on behalf of the owner. The interactive product 10 may also be a mobility device, in particular a micro-mobility device such as a scooter, a bike, and any other micro-vehicle.
[0036] New generation automobiles are equipped with a set of transceivers that allow the location of the key fob relative to the vehicle. In fact, thanks to these transceivers, it may be possible to detect whether the key fob is near the vehicle and whether it is located inside or outside the vehicle. Typically, automobiles have five transceivers, all of which together generate a low-frequency magnetic field that covers both the passenger compartment (i.e., the passenger compartment) and the vicinity of the automobile.
[0037] As schematically depicted in Figure 1, the solution is based on an interactive article 10 comprising at least one transceiver 11 configured to emit at least a first signal S1 and to receive at least a second signal S2. The second signal S2 is typically a signal that may come from a portable electronic key 20, in particular from a portable electronic key that is associated with the interactive article 10 and thus paired with the interactive article 10, for example during a pre-configuration phase or during an initialization process.
[0038] As shown schematically in Figure 2, authentication 1 for accessing the interactive product 10 using the portable electronic key 20 is conditional on successful completion of a control procedure CP. The control procedure CP mainly includes four steps ST1 to ST4, which, if successfully completed, may lead to initiating or allowing access to an unlocking procedure UP configured to provide authentication 1.
[0039] The first step ST1 aims to determine first information I1 on the basis of at least one intensity measurement of the first signal S1 in the portable electronic key 20.
[0040] The first step ST1 is achieved by the portable electronic key itself, for example by its transceiver 21 (Figure 8), or by a dedicated module (for example a sniffer) included in or connected to the portable electronic key 20, and in the latter case placed next to the portable electronic key 20.
[0041] It should be noted that each piece of information referred to in this disclosure may result from a single measurement or from multiple measurements that may then be averaged. This also means that any step aimed at determining information inherently involves making at least one measurement, i.e., making at least one measurement of received signal strength. As will be disclosed in more detail later, the information may be an indication such as a so-called received strength signal indicator (RSSI).
[0042] The second step ST2 is similar to the first step, but is accomplished on the second signal S2 by the transceiver 11 of the interactive product 10. The second step ST2 therefore aims to determine second information I2 based on at least one intensity measurement of the second signal S2 in the transceiver 11.
[0043] The third step ST3 of the control procedure CP aims to check whether the first information I1 matches the second information I2. To check this match, several different modalities can be applied, some of which are part of the embodiments detailed later in this disclosure.
[0044] The final step ST4 aims to initiate or authorize access to an unlocking procedure UP if the third step ST3 provides a positive result, i.e. if there is for example a match between the first information I1 and the second information I2. The unlocking procedure UP is configured to provide an authentication 1, in particular the unlocking procedure UP is configured to deliver the authentication 1 if this unlocking procedure is successfully completed.
[0045] Due to the fourth step ST4, the execution of the unlocking procedure UP depends on the success of the control procedure. If the third step ST3 provides a positive result, the process may be stopped or countermeasures may be implemented. Such countermeasures may consist of performing at least one subsequent action, for example, triggering an alarm, preventing further unlocking during a predetermined time interval, or sending an alert message (RF signal, SMS, email, etc.) to the owner, so that the owner can be notified accordingly via any electronic device, for example, a smartphone, TV, personal computer, etc.
[0046] Advantageously, the above-described control procedure CP prevents any relay attack, assuming that it is based at least on measurements performed in the interactive product 10 on the one hand and the portable electronic key 20 on the other hand. In contrast, any relay device remains insufficient to perform measurements. In addition, it should be noted that measurements performed on signals can be very sensitive, as the results differ depending on where the measurements are performed. Therefore, even if a relay attack device is located within a range of approximately 2 to 15 meters from the portable electronic key 20 to determine the first information on behalf of the portable electronic key, such a distance should be long enough to cause a different measurement. Therefore, the first information determined by the third-party device should differ from the first information determined by the portable electronic key 20.
[0047] Furthermore, if the third step ST3 is performed by at least one of the two entities, the interactive product 10 and the portable electronic key 20, and the entity that performed the third step ST3 also determined at least part of the information, then this entity does not need to receive said part of the information from an external source. Any replacement data received from a third party may therefore be ignored, particularly if such data is intended to replace the information determined by the entity responsible for performing the third step ST3.
[0048] Furthermore, tampering with the information determined by the entity responsible for carrying out the third step ST3 appears to be very difficult, given that this information does not need to be transmitted to a remote device but can be processed on-site.
[0049] For all these reasons, the present method proposes an efficient solution to overcome at least the problems arising from relay attacks.
[0050] For the sake of completeness, it should be noted that the third step ST3, aimed at checking the consistency of the information, implies the transmission between the interactive product 10 and the portable electronic key 20 of at least one of the first information I1 and the second information I2, or of at least one parameter making it possible to derive the first and / or second information I1, I2.
[0051] According to a preferred embodiment, each of the first information I1 and the second information I2 is (i) Received Signal Strength Indicator (RSSI); (ii) the calculated distance between the transceiver (11) and the portable electronic key (20); and (iii) related to at least one of distance variation or RSSI variation.
[0052] The figures to which this disclosure relates are primarily based on examples in which each piece of information is a received signal strength indicator (RSSI), which is in fact information that can be easily obtained from at least one signal measurement, and more particularly from at least one strength measurement of either of the signals S1, S2.
[0053] According to one scenario, the first information I1 may be a first received signal strength indicator RSSI1 and the second information I2 may be a second received signal strength indicator RSSI2. The third step ST3 of checking whether the first information I1 matches the second information I2 may be performed by comparing the two received signal strength indicators RSSI1, RSSI2 with each other. However, such a comparison is not obvious, especially if no calibration has been performed between the transceivers 11, 21 emitting the signals S1 and S2, respectively.
[0054] To overcome this problem, it may be possible to equalize the indicators RSSI1 and RSSI2 by transmitting at least one parameter related to the transmission power of the transceivers 11 and 21 between the interactive product 10 and the portable electronic key 20. For example, a calibrated transmission power TxPw1 of the transceiver 11 of the interactive product 10 may be loaded into the portable electronic key 20, and / or a calibrated transmission power TxPw2 of the transceiver 21 of the portable electronic key 20 may be loaded into the interactive product 10. Each calibrated transmission power TxPw can be considered a reference value issued from a calibration process. Typically, it may correspond to an RSSI determined for a signal emitted by a transceiver (source) when the signal strength is measured at a specific distance. This distance, typically one meter, is commonly used as the reference distance for the calibration process. Furthermore, the calibrated transmission power TxPw is determined for a specific transmission power provided by the emitter. Therefore, if an emitter (e.g., a transceiver) can have several transmit power levels (e.g., 0 to 7), it is desirable to add a parameter that defines what the emitter's current transmit power level is. The transmit power level is usually configured by the manufacturer. A default value is set for the expected maximum radio frequency coverage area. It can be dynamically changed in special use cases, for example, if the RSSI is not satisfactory for the receiver's quality of service.
[0055] Sending at least one parameter related to the calibrated transmission power and / or transmission power level may be performed, for example, by sending at least one configuration message during an initialization phase. Alternatively, any of these parameters may be loaded into the relevant device 10, 20 using another scheme, for example, during the configuration phase of the device 10, 20 or once during the manufacturing process, so that the calibrated transmission powers TxPw1, TxPw2 may already be present during implementation of the solution (method, portable electronic key, or interactive product). Thus, each of the calibrated transmission powers TxPw1, TxPw2 can be used as a correction parameter for equalizing one of the received signal strength indicators RSSI1, RSSI2 so that they can be properly compared.
[0056] According to another scenario, either the first information I1 or the second information I2 may be a distance, in particular, a distance between the interactive product 10 and the portable electronic key 20, more specifically, a distance between the transceiver 11 of the interactive product 10 and the transceiver 21 of the portable electronic key 20. In fact, there are several formulas for determining such a distance based on the RSSI and the calibrated transmission power TxPw. For example, the distance d may be expressed as d=10 (TxPw-RSSI) / 20 It should be noted that such distances may be determined as information I1, I2 in the portable electronic key 20 and / or the transceiver 11. Alternatively, the distances may be derived from the associated parameter TxPw and from the associated RSSI (to check the consistency in step ST3). In this case, at least one of the calibrated transmit power TxPw, the transmit power level, and the RSSI may be considered as a parameter for deriving the information I1, I2.
[0057] According to a further scenario, either the first information I1 or the second information I2 may be a variation, in particular a distance variation or an RSSI variation. In such a case, two successive indications may be determined during each of the first step ST1 and the second step ST2, and the first and second information I1, I2 may each be determined by the difference between the two successive indications.
[0058] For example, first and second indications may be determined in the portable electronic key 20 at instants t1 and t2. These indications may relate to distance (such as the distance described above in connection with the former scenario) or to a received signal strength indicator such as RSSI1. The variation between these two indications may be determined, for example, by calculating the difference between the first indication at instant t1 and the second indication at instant t2. This first variation may be used as the first information I1 determined in the first step ST1. The same technique can be performed in the transceiver 11 of the interactive product to obtain a second variation (having the same properties as the first variation) that may be used as the second information I2 determined in the second step ST2. The consistency between the first information I1 and the second information I2 can be checked in a third step ST3 by comparing the first variation with the second variation. In addition to consistency, using variation as part of the information advantageously makes it possible to determine whether the portable electronic key 20 is moving towards or away from the interactive product 10, or even whether the portable electronic key 20 is stationary relative to the interactive product 10.
[0059] As schematically depicted in Figure 3, the solution may be based on an interactive product 10 comprising at least two transceivers 11, 12 distributed at different locations, preferably around the periphery of the interactive product. In the example shown in Figure 3, a first transceiver 11 is located at the rear of the vehicle, for example near the trunk, and a second transceiver 12 is located at the front of the car. Of course, other transceivers (not shown) may be added, for example near the left and right doors.
[0060] Each transceiver 11, 12 is configured, inter alia, to emit at least a first signal S1 and to receive at least a second signal S2. Since the first signal emitted by the first transceiver 11 is preferably different from the first signal emitted by the second transceiver 12, the first signal identification S1 is appended with the reference numeral 11, 12 depending on whether it comes from the first transceiver 11 or the second transceiver 12, respectively.
[0061] On the other hand, since the portable electronic key 20 preferably includes a single transceiver 21 (FIG. 8), the transceiver 21 emits at least one second signal, designated S2. This second signal S2 is received by both the first transceiver 11 and the second transceiver 12 of the interactive product 10. However, given that these two transceivers 11, 12 are not co-located on the interactive product 10, they are a priori located at different distances from the portable electronic key 20. If these distances are not the same, the strength of the second signal S2 received by the first transceiver 11 will be different from the strength of the same signal S2 received by the second transceiver 12. In fact, the strength of a signal is inversely proportional to the square of the distance between the source and the sink. As described in connection with the embodiment shown in FIG. 1, this strength can be measured by each transceiver or by a dedicated RSSI module, such as a sniffer, associated or linked to the transceiver, and can be quantified by a value designated as a "received signal strength indicator" (RSSI).
[0062] From the above, the transceiver 21 of the portable electronic key 20 receives the first signal S1 transmitted by the first and second transceivers 11 and 12 of the interactive product 10. 11 , S1 12 This also means that an intensity measurement can be performed to determine the first information I1 for each of the portable electronic key 20 and the first signal S1 11 , S1 12 The first information I1 obtained from 11 , I1 12 3 and 4, for example, is represented by a straight bar graph. On the other hand, for the second signal S2, the second information I2 determined in the first transceiver 11 and the second transceiver 12 of the interactive product 10 is 11 , I2 12 is represented by an arched bar graph.
[0063] As shown in the example of FIG. 3, information I1 originates from the first communication segment located between the first transceiver 11 and the portable electronic key 20. 11 and I2 11 is related to the RSSI and has a level of 3 bars. On the other hand, information I1, which is both attributable to the second communication segment located between the second transceiver 12 and the portable electronic key 20, 12 and I2 12 The RSSI is also related to the level of 4 bars. This level difference may be due to the fact that the second transceiver 12 is typically closer to the portable electronic key 20 than the first transceiver 11.
[0064] Based on the example provided by FIG. 3, steps ST1 to ST4 of the control procedure CP can be viewed as follows:
[0065] In a first step ST1, a first signal S1 11、 S1 12 For each of the above, the first signal S1 in the portable electronic key 20 11、 S1 12 and obtaining first information I1 based on at least one intensity measurement of11 , I1 12 Determine As a second step ST2, for the second signal S2, second information I2 is calculated based on at least one intensity measurement of the second signal S2 in each of the transceivers 11, 12. 11 , I2 12 Determine As a third step ST3, the first information I1 11 , I1 12 is the second information I2 11 , I2 12 Checks whether it matches, and if so, As a fourth step ST4, initiating or authorizing access to an unlocking procedure UP configured to provide authentication 1.
[0066] Generally speaking, it should be noted that, to the extent possible, all features that may be applied to the embodiment to which Figure 1 refers are also applicable to the embodiment to which Figure 3 refers, and vice versa (still to the extent possible).
[0067] By combining the embodiments referred to in FIG. 1 and FIG. 3 , the method of the present solution may be considered as a method for providing authentication 1 for accessing an interactive product 10 by a portable electronic key 20 configured to process wireless signal exchange, The interactive product 10 comprises at least one transceiver 11, preferably at least two transceivers 11, 12 distributed at different locations, each transceiver 11, 12 transmitting at least a first signal S1, S2 11 , S1 12 and receiving at least a second signal S2 from the portable electronic key 20; The aforementioned authentication 1 is conditional on the successful completion of a control procedure (CP), which is In a first step ST1, each of the first signals S1, S1 11、 S1 12 Regarding the first signals S1 and S1 in the portable electronic key 20, 11、S1 12 based on at least one intensity measurement of the first information I1, I1 11 , I1 12 and determining In a second step ST2, for the second signal S2, based on at least one intensity measurement of the second signal S2 in each transceiver 11, 12, associated second information I2, I2 11 , I2 12 and determining In a third step ST3, each of the first information I1, I1 11 , I1 12 However, the second piece of information I2, I2 11 , I2 12 Check whether it matches, and if so, As a fourth step ST4, it includes initiating or allowing access to an unlocking procedure UP configured to provide said authentication 1.
[0068] According to one embodiment, all transceivers 11, 12, 21, or all modules or sniffers configured to determine information such as received signal strength indications (RSSI), have the same sensitivity and preferably the same transmission power level. This feature may advantageously suppress any corrections that may be applied to the strength measurements (or derived indications) in order to balance the values (e.g. RSSI) obtained on both sides, i.e., on the interactive product side and on the portable electronic key side.
[0069] As shown in FIG. 3, the first communication segment between the first transceiver 11 and the portable electronic key 20 transmits related first information I1, which together form a first data pair P1. 11 and second information I2 11 The same is true for the second communication segment between the second transceiver 12 and the portable electronic key 20, which includes the associated first information I1, which together form a second data pair P2. 12 and second information I2 12Each communication segment therefore transmits to one of the transceivers 11, 12 second information (I2 11 or I2 12 ) and the first signal (S1 11 or S1 12 ) the first information (I1 11 or I1 12 ) and form data pairs determined by associating the data pairs P1, P2 with the data pairs P1, P2. Thus, the number of data pairs P1, P2 depends on the number of transceivers 11, 12 of the interactive product 10.
[0070] In one embodiment, the third step ST3 is performed on at least some of the data pairs P1, P2. In other words, if the interactive product 10 is equipped with, for example, five transceivers that may include five communication segments with the portable electronic key 20, then only three or four of the data pairs resulting from these communication segments may, for example, be used. Advantageously, using fewer transceivers (i.e., fewer communication segments) than the maximum number of transceivers available in the interactive product 10 can increase the execution speed of the control procedure CP while requiring fewer computing resources.
[0071] According to another embodiment shown in FIGS. 4 and 5, the third step ST3 includes: -First information I1 11 , I1 12 forming a first ordered data sequence SQ1 by ordering -Second information I2 11 , I2 12 forming a second ordered data sequence SQ2 by ordering - checking the consistency between the first ordered data sequence (SQ1) and the second ordered data sequence (SQ2).
[0072] 4, the first ordered data sequence SQ1 is obtained, for example, by ordering the first received signal strength indications (each RSSI1 is used as the first information I1) according to their strength, more specifically by ordering their strengths incrementally, i.e., from the lowest strength to the highest strength. It should be noted that different ordering or sequencing methods may also be applied, such as sorting in descending order.
[0073] The second ordered data sequence SQ2 is obtained by ordering the second received signal strength indications (each RSSI2 is used as second information I2) in the same manner as the first ordered data sequence SQ1.
[0074] Next, the consistency between the two ordered data sequences SQ1, SQ2 can be checked. This can be achieved in several ways. It may consist of checking whether the first ordered data sequence SQ1 is the same as the second ordered data sequence SQ2. For example, the consistency may be checked by verifying the level of the received signal strength indicator (RSSI). In the example of Figure 4, this is done by checking the first RSSI (i.e., I2 14 and I1 14 ) can be done by checking that both have the same number of bars in their bar graphs and by following the same method for each of the RSSIs of these data sequences. In Figure 4, it can be seen that there is a match for each of the data pairs P1 to P4. Therefore, it can be concluded that the first and second ordered data sequences SQ1, SQ2 are consistent with each other.
[0075] Instead of considering the bars of a bar graph, it may be possible to consider values obtained from measurements of the received signal strength. However, even if the data sequences SQ1, SQ2 match each other, some small differences may appear to be in the same data pair, so in that case it may be advisable to introduce certain tolerances for each of these measurements.
[0076] In any case, it should be pointed out that the information I1, I2 is not limited to referring to RSSI, but may also refer for example to distance or variance, as already mentioned in connection with the previous embodiment.
[0077] 5 shows another scheme for checking the consistency between two ordered data sequences SQ1, SQ2, more specifically, a method for checking the sequencing of related data, in particular whether the sequencing of these data is the same. In this embodiment, the consistency is checked by the transceiver identifier ID T In fact, each transceiver 11, 12 has a specific transceiver identifier ID that can be assigned to the first and second information I1, I2 with which it is involved. T In this example, the identifier ID of the first transceiver 11 T is the number 11 and the identifier ID of the second transceiver 12 T is number 12. In FIG. 5, a fourth transceiver of interactive article 10 is considered, and its identifiers are defined by numbers 11, 12, 13, and 14.
[0078] Therefore, a match between the first ordered data sequence SQ1 and the second ordered data sequence SQ2 is determined by the transceiver identifier ID associated with the first information I1 and the second information I2 of these first ordered data sequence SQ1 and second ordered data sequence SQ2. TThis is because the third step ST3 determines the transceiver identifier ID assigned to the information of the first ordered sequence SQ1. T The sequence is an identifier ID assigned to the information in the second ordered sequence. T This means that the sequence may consist of checking whether it is the same as the sequence
[0079] Referring to the example shown in FIG. 5, the first data sequence SQ1 contains four identifiers ID T These identifiers are ordered according to the information (particularly the numerical values contained in the information) assigned to the signals emitted by the transceivers identified by these identifiers. In this example, the ordered data sequence includes the data 14, 13, 11, and 12. Since the first ordered data sequence SQ1 and the second ordered data sequence SQ2 are the same, i.e., they are sequences including the numbers 14, 13, 11, and 12, this means that the two ordered data sequences SQ1, SQ2 match each other (i.e., they match).
[0080] Advantageously, the identifier ID T By providing sequencing based on
[0014] it is possible to get away from slight differences between the values contained in the information of the same data pair. It should be noted that the transceiver identifier of any signals may be modulated within those signals or provided within messages carried by those signals.
[0081] According to another embodiment, the first information I1 11 , I1 12 is the second information I2 11 , I2 12 The third step ST3, which aims to check whether the two pieces of information I1, I2 in each data pair match, is achieved by comparing them. This is an alternative method that can, for example, take into account the numerical values contained in the pieces of information in addition to considering the match of the identifiers assigned to each piece of information.
[0082] In one embodiment, each second information I2, I2 11 , I2 12 is transmitted to the portable electronic key 20 so that the control procedure CP is executed in the portable electronic key 20. Alternatively, each of the first information I1, I1 11 , I1 12 is sent to the interactive product 10 so that the control procedure CP is executed in the interactive product 10.
[0083] According to a further method, each first information I1, I1 11 , I1 12 is transmitted to the interactive product 10, and each second information I2, I2 11 , I2 12 is transmitted to the portable electronic key 20, and the control procedure CP is executed in the interactive product 10 and in the portable electronic key 20. In this case, the fourth step ST4, the purpose of which is to initiate or allow access to the unlocking procedure UP, is conditioned on the successful completion of each of the control procedures CP, i.e. the successful completion of the control procedure executed in the interactive product 10 and the successful completion of the control procedure executed in the portable electronic device 20.
[0084] Preferably, as schematically illustrated in FIG. 6, any first information I1, I1 11 , I1 12 and / or any second information I2, I2 11 , I2 12 is transmitted in encrypted form and / or undergoes a first authentication process. The transmission of any information may be protected by an encryption process using a message M I1 , M I2 Preferably, some first information I1 11 , I1 12 If there are, they are transmitted from the portable electronic key 20 to the interactive product 10 in a single message M instead of being transmitted separately in a single message. I1 The same applies to the second information I211 , I2 12 , and this information may be transmitted from the interactive product 10 to the portable electronic key 20 in a single message M I2 If any, these messages M I1 , M I2 The encryption of may be based on symmetric or asymmetric encryption schemes and may use any known efficient algorithm.
[0085] Preferably, the transmitted information is subjected to a first authentication process. Such a process may involve a challenge-response authentication between the interactive product 10 and the portable electronic key 20. The response to the challenge may be based on an algorithm or a predefined sequence of numbers known by both the interactive product 10 and the portable electronic key 20. Alternatively, the first authentication process may involve the transmission of a message M I1 , M I2 to the message M I1 , M I2 The authentication may be based on a digital signature applied to data such as the information contained in the message. The digital signature may be obtained using common schemes, for example, using a one-way function (hash function) to provide a digest of said data, and then using a cryptographic algorithm to encrypt the digest. Using a shared key or public key infrastructure (PKI), the recipient can calculate the same digest using the same scheme for decrypting the digest and comparing the decrypted digest with the calculated digest. If there is a match between these two digests, the authentication is successful, thus ensuring the integrity of the data contained in the message and implying that the sender is authentic.
[0086] In one embodiment, the first signals S1, S1 11、 S1 12and at least one of the second signal S2 is a wireless signal, preferably a Bluetooth signal, a Bluetooth low energy signal, or a Wi-Fi signal.
[0087] It should be noted that authentication 1 for accessing the interactive product 10 may relate to the interactive product as a whole or as part of the interactive product. In some cases, the interactive product 10 may include several modes for accessing it. This is particularly true when the interactive product is a vehicle, such as an automobile, and the access modes may refer to, for example, the front door, the rear door, if present, and the trunk door. Thus, authentication 1 for accessing the interactive product 10 may relate to all of the access modes (e.g., simultaneously) or only some of the access modes. For example, authentication may relate to accessing the interactive product via a route closest to the transceivers 11, 12 that are associated with at least the first and / or second information I1, I2 representing the closest location of the portable electronic key 20 relative to the interactive product 10. For example, if the owner carrying the portable electronic key 20 comes from the left side of the automobile, the transceiver closest to the left side of the automobile may measure on signal S2 the highest strength (and therefore include the highest RSSI) among all other signal strengths measured by other transceivers distributed at different locations on the automobile. Therefore, authentication 1 may in this case relate primarily to the left door of the vehicle.
[0088] Additionally, authentication 1 for accessing interactive article 10 may relate to parts other than a vehicle door. For example, it may relate to the vehicle's engine. Thus, such authentication may also provide access to the engine, typically in light of starting the engine.
[0089] Upon successful completion of the control procedure CP, the solution initiates or allows access to an unlocking procedure UP configured to provide authentication 1. Figure 7 shows, by way of example, the main steps of the unlocking procedure UP, which may include three main steps, referred to as steps ST5 to ST7.
[0090] Step ST5 (i.e., the first step of the unlocking procedure UP) may include identifying the portable electronic key 20 by the interactive product 10. Such identification may include the identifier ID of the portable electronic key 20. 20 The identifier may be a personal (i.e., unique) number assigned to the portable electronic key. If the interactive product 10 recognizes the identifier transmitted by the portable electronic key 20, the interactive product 10 proceeds to the next step of the unlocking procedure UP.
[0091] In the next step ST6, the identifier ID of the interactive product 10 is transmitted to the portable electronic key 20 in order to identify the interactive product 10 by the portable electronic key 20. 10 If the mutual identification (ST5-ST6) proceeds successfully, then in the final step ST7, authorization is provided to access the interactive product 10, for example by unlocking at least one door.
[0092] Instead of proceeding with mutual identification, a single identification may be performed, such that one of steps ST5, ST6 may be optional. Preferably, at least one of these identifications undergoes authentication, i.e., a second authentication process, which may be similar to the first authentication process disclosed above. According to one embodiment, the unlocking process UP does not differ from a typical unlocking process and may be based, for example, on a static code or a rolling code; therefore, any existing unlocking process can be advantageously used and easily incorporated into the present solution for accessing interactive product 10.
[0093] According to a second aspect, the solution relates to a portable electronic key 20 configured to provide authentication 1 for accessing an interactive product 10 according to any of the method embodiments or in any possible combination of these embodiments.
[0094] 8 shows a schematic representation of a portable electronic key 20 that may initially include an electronic key transceiver 21 configured to handle wireless signal exchanges. at least one first signal S1, preferably at least two first signals S1 each received from one transceiver 11, 12 of the interactive product 10; 11 , S1 12 and, a second signal S2 to be emitted by the electronic key transceiver 21;
[0095] Therefore, the electronic key transceiver 21 can be considered as an interface for exchanging data between the portable electronic key 20 and the interactive product 10 through wireless signals transmitted therebetween.
[0096] As shown in FIG. 8, the portable electronic key 20 further includes a processing unit 25 connected to the electronic key transceiver 21. The processing unit 25 - for the first signal S1, preferably at least two first signals S1 11 , S1 12 For each of the above, the first signals S1, S1 11、 S1 12 First information I1, I1 determined based on at least one intensity measurement of 11 , I1 12 receiving the - relevant second information I2, I2 determined based on at least one intensity measurement of a second signal in said at least one transceiver 11, preferably in each of said transceivers 11, 12; 11 , I2 12 receiving the - each first piece of information I1, I1 11 , I1 12 However, the second piece of information I2, I2 11 , I2 12 and if so, initiating or allowing access to the unlocking procedure UP configured to provide authentication 1.
[0097] From the above, it can be noted that the number of first signals, first information, and second information depends on the number of transceivers included in the interactive product 10. Therefore, the portable electronic key 20 may be configured to handle the case where the interactive product 10 includes a single transceiver 11, as shown in Figure 1, or the case where the interactive product 10 includes multiple transceivers 11, 12, as depicted in Figure 3.
[0098] The portable electronic key 20 may further comprise other components, such as a cryptographic module 27 for performing any encryption / decryption or authentication tasks. The portable electronic key 20 may also comprise a memory 28 or storage means for storing any kind of data, such as an identifier, a challenge, a response, a static code, or a rolling code. Although not shown in FIG. 8 , additional components, modules, units, or interfaces may be part of the portable electronic key 20, in particular for performing other tasks disclosed in any of the embodiments proposed in connection with the method of the present solution. Alternatively, the processing unit 25 may be responsible for performing at least some of these tasks.
[0099] According to a third aspect, schematically depicted in Fig. 9, the present disclosure relates to an interactive article 10 configured to provide authentication 1 for accessing the interactive article 10 through at least wireless signal exchange with a portable electronic key 20, according to any of the method embodiments or in any possible combination of these embodiments. The interactive article 10 comprises at least one transceiver 11, preferably at least two transceivers 11, 12 distributed at different locations. Each transceiver 11, 12 transmits at least a first signal S1, S2, 11 , S1 12 and is configured to receive at least a second signal S2 from the portable electronic key 20.
[0100] The interactive product 10 further comprises a controller 15, which is each first signal S1, S1 11 , S1 12 Regarding the portable electronic key 20, the first signals S1 and S1 11 , S1 12 First information I1, I1 determined based on at least one intensity measurement of 11 , I1 12 receiving the - relevant second information I2, I2 from at least one transceiver 11, preferably from each of the transceivers 11, 12, determined on the basis of at least one intensity measurement of the second signal S2 in each transceiver 11, 12; 11 , I2 12 receiving the - each first piece of information I1, I1 11 , I1 12 However, the second piece of information I2, I2 11 , I2 12 and if there is a match, initiating or allowing access to an unlocking procedure UP configured to provide authentication 1.
[0101] Similar to that described in relation to the portable electronic key 20, the interactive product 10 is configured to comply with the scenario shown in Figure 1, in which a single transceiver 11 is used by the interactive product to perform the method of the present solution, or to comply with the scenario shown in Figure 3, in which at least two transceivers 11, 12 may be used for this purpose.
[0102] Each of the transceivers 11, 12 can be considered as an interface for exchanging data with at least one external device, in particular the portable electronic key 20. The interactive product 10 can further comprise a cryptographic unit 17 for performing any cryptographic operations or authentication processes, and a storage unit 18 which, similar to the memory 28 of the portable electronic key 20, can be used to store any kind of data.
[0103] Final considerations It should be noted that any feature or combination of features disclosed in connection with one of the aspects disclosed in this disclosure may also be part of any of the other aspects, where applicable.
[0104] Although a summary of the inventive subject matter has been described with reference to certain exemplary embodiments, various modifications and changes can be made to these embodiments without departing from the broader spirit and scope of the inventive embodiments. For example, various embodiments of its features can be mixed, matched, or arbitrarily selected by those skilled in the art. Therefore, the Detailed Description is not to be construed in a limiting sense, and the scope of the various embodiments is defined only by the appended claims, along with the full range of equivalents to which such claims are entitled.
Claims
1. 1. A method for providing authentication (1) for accessing a vehicle (10) by means of a portable electronic key (20) configured to process wireless signal exchanges, comprising: The vehicle (10) comprises at least two transceivers (11, 12) distributed at different locations, each of the transceivers (11, 12) transmitting at least a first signal (S1 11、 S1 12 ) and receives at least a second signal (S2) from the portable electronic key (20); The authentication (1) is conditional on the successful completion of a control procedure (CP), the control procedure (CP) comprising: - said first signal (S1 11、 S1 12 ) in the portable electronic key (20), 11、 S1 12 ) based on at least one intensity measurement of the first information (I1 11 , I1 12 ) and - for said second signal (S2), based on at least one intensity measurement of said second signal (S2) in each of said transceivers (11, 12), second information (I2 11 , I2 12 ) and - said first information (I1 11 , I1 12 ) is the second information (I2 11 , I2 12 ) and, if there is a match, initiating or allowing access to an unlocking procedure (UP) configured to provide said authentication (1), The first information (I1 11 , I1 12 ) is the second information (I2 11 , I2 12 ) to check if it matches - said first information (I1 11 , I1 12 ) to form a first ordered data sequence (SQ1); - the second information (I2 11 , I2 12 ) to form a second ordered data sequence (SQ2); - checking the consistency between said first ordered data sequence (SQ1) and said second ordered data sequence (SQ2).
2. Each transceiver (11, 12) has a specific transceiver identifier (ID) assigned to the first information (I1) and the second information (I2) with which it is involved. T ) and 2. The method of claim 1, wherein the match between the first ordered data sequence (SQ1) and the second ordered data sequence (SQ2) is determined based on the transceiver identifier associated with the first information (I1) and the second information (I2) of the first ordered data sequence (SQ1) and the second ordered data sequence (SQ2).
3. The first information (I1 11 , I1 12 ) and the second information (I2 11 , I2 12 3. The method according to claim 1, wherein each of the plurality of parameters is related to at least one of a received signal strength indicator (RSSI), a calculated distance between the transceiver (11) and the portable electronic key (20), and a distance or received signal strength indicator variation.
4. The method according to any one of claims 1 to 3, further comprising transmitting at least one parameter related to a transmission power of the transceiver (11) and / or the portable electronic key (20) between the vehicle (10) and the portable electronic key (20).
5. Each second information (I2 11 , I2 12 ) is transmitted to the portable electronic key (20), the control procedure (CP) is executed in the portable electronic key (20), and / or each first information (I1 11 , I1 12 5. The method according to claim 1, wherein a control procedure (CP) is transmitted to the vehicle (10) and the control procedure (CP) is executed in the vehicle (10).
6. 6. The method of claim 5, wherein initiating or allowing access to the unlocking procedure (UP) is conditioned on the successful completion of each of the control procedures (CP) when the control procedures (CP) are executed in the portable electronic key (20) and the vehicle (10).
7. Any first information (I1 11 , I1 12 ) and / or any second information (I2, I2 11 , I2 12 7. The method according to claim 1, wherein the first authentication process is performed on the first authentication information.
8. The first signal (S1 11、 S1 12 8. The method according to claim 1, wherein at least one of the first signal (S1) and the second signal (S2) is a radio signal.
9. 9. The method according to claim 1, wherein the vehicle (10) comprises several access methods and the authentication (1) relates to accessing the vehicle (10) via a route closest to the transceiver associated with the first information (I1) and / or the second information (I2), which represent the closest location of the portable electronic key (20) relative to the vehicle (10).
10. 10. The method according to claim 1, wherein the unlocking procedure (UP) comprises at least one of an identification of the portable electronic key (20) by the vehicle (10) and an identification of the vehicle (10) by the portable electronic key (20), wherein at least one of the identifications is subjected to a second authentication process.
11. The method according to any one of claims 1 to 10, wherein the vehicle (10) is an automobile, a mobility device, or a micromobility device, and / or the portable electronic key (20) is a key fob, a smartphone, a personal assistant, a netbook, a smartwatch, or a smart wearable.
12. A portable electronic key (20) configured to provide authentication (1) for accessing the vehicle (10) according to the method of any one of claims 1 to 11, said portable electronic key (20) comprising: An electronic key transceiver (21) configured to process radio signal exchanges, said radio signal exchanges comprising: at least two first signals (S1, S2, S3, S4, S5, S6, S7, S8, S9, S10, S11, S12, S13, S14, S15, S16, S17, S18, S19, S20, S21, S22, S23, S24, S25, S26, S27, S28, S29, S30, S31, S32, S33, S44, S45, S46, S47, S48, S49, S50, S51, S52, S53, S54, S55, S56, S57, S58, S59, S60, S61, S62, S63, S64, S65, S66, S67, S68, 11 , S1 12 )and, - a second signal (S2) emitted by said electronic key transceiver (21); A processing unit (25) connected to the electronic key transceiver (21), - said at least two first signals (S1 11、 S1 12 ) in the portable electronic key (20), 11、 S1 12 ) based on at least one intensity measurement of the first information (I1 11 , I1 12 ) and - associated second information (I2) determined based on the strength measurements of said second signal (S2) in each of said transceivers (11, 12); 11 , I2 12 ) and Each first piece of information (I1 11 , I1 12 ) is the related second information (I2 11 , I2 12 a processing unit (25) configured to check whether the authentication (1) matches the authentication (1) and, if so, to initiate or allow access to an unlocking procedure (UP) configured to provide said authentication (1), The first information (I1 11 , I1 12 ) is the second information (I2 11 , I2 12 ) to check if it matches - said first information (I1 11 , I1 12 ) to form a first ordered data sequence (SQ1); - the second information (I2 11 , I2 12 ) to form a second ordered data sequence (SQ2); - checking the consistency between said first ordered data sequence (SQ1) and said second ordered data sequence (SQ2).
13. A vehicle (10) configured to provide authentication (1) for accessing the vehicle (10) through at least a wireless signal exchange with a portable electronic key (20) according to the method of any one of claims 1 to 11, the vehicle (10) comprising: At least two transceivers (11, 12) distributed at different locations, each transceiver (11, 12) transmitting at least a first signal (S1 11 , S1 12 At least two transceivers (11, 12) configured to transmit a first signal (S1) and receive at least a second signal (S2) from the portable electronic key (20); A controller (15), - each first signal (S1 11、 S1 12 ) in the portable electronic key (20), 11、 S1 12 ) based on at least one intensity measurement of the first information (I1 11 , I1 12 ) and - from each of said transceivers (11, 12) relevant second information (I2) determined on the basis of at least one intensity measurement of said second signal (S2) at each transceiver (11, 12); 11 , I2 12 ) and Each first piece of information (I1 11 , I1 12 ) is the related second information (I2 11 , I2 12 a controller (15) connected to said at least two transceivers (11, 12) for checking whether the authentication (1) matches the authentication (1) and, if so, initiating or allowing access to an unlocking procedure (UP) configured to provide said authentication (1); The first information (I1 11 , I1 12 ) is the second information (I2 11 , I2 12 ) to check if it matches - said first information (I1 11 , I1 12 ) to form a first ordered data sequence (SQ1); - the second information (I2 11 , I2 12 ) to form a second ordered data sequence (SQ2); - checking the consistency between said first ordered data sequence (SQ1) and said second ordered data sequence (SQ2).
Citation Information
Patent Citations
Access protection system operating method for motor vehicle, involves arranging object station and mobile station for exchanging signal, and establishing access authorization when receiving intensities of signals differ by specific value
DE102005058041A1
Defense against relay attack in passive keyless entry systems
EP3594913A2
Communication system and communication device
JP2014139752A
Keyless entry device and control method thereof
JP2016035133A
Wireless communication correctness determination system
JP2017137751A