EP-4736143-A1 - METHOD AND DEVICES FOR MONITORING ACCESS TO A VEHICLE, AND TEMPORALLY CONFIGURABLE RELAY ATTACK DEFENSE SYSTEM
Abstract
The invention relates to a method and a device (TRX1, TRX2, TRX3, TRX4, TRX5, TRX-LF1, TRX-LF2, 8, SG1) for monitoring access (111, 112) to a vehicle (7), said method and device being designed such that - the access (111, 112) is granted or denied on the basis of a position (xUWB3, yUWB3; dUWB3), which is determined using messages (10-12) transmitted per UWB, of a mobile device transceiver (8) relative to the vehicle (7) and - a determination (10-12; 13-15, TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of the position (xUWB3, yUWB3; dUWB3) of the mobile device transceiver (8a) relative to the vehicle (7) is started within a specified time window (ZS; Za; Zb).
Inventors
- SCHINDLER, CHRISTIAN
Assignees
- AUMOVIO Germany GmbH
Dates
- Publication Date
- 20260506
- Application Date
- 20240607
Claims (14)
- 1. Device (TRX1, TRX2, TRX3, TRX4, TRX5, TRX-LF1, TRX-LF2, 8, SG1) for controlling access (111, 112) to a vehicle (7), designed to -that the access (111, 112) is granted or denied depending on a position or distance (xllWB3, yllWB3; dUWB3) of a mobile device transceiver (8) relative to the vehicle (7) determined by messages transmitted via UWB (10-12), and -that a determination (10-12; 13-15, TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a position or distance (xllWB3, yllWB3; dUWB3) of the mobile device transceiver (8a) relative to the vehicle (7) is started within a predetermined time window (Za; Zb).
- 2. Device according to claim 1, designed to -that a time window (Za) is specified to the mobile device transceiver (8a) by the vehicle (7) by means of a message, and -that a determination (TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a UWB position (xllWB3, yllWB3; dUWB3) or distance (xllWB3, yllWB3; dUWB3) of the mobile device transceiver (8a) relative to the vehicle (7) is started within the communicated time window (Za).
- 3. Device according to one of the preceding claims, designed to -that a determination (10-12; 13-15, TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a position or distance (xllWB3, yllWB3; dUWB3) of the mobile device transceiver (8a) relative to the vehicle (7) is started within a predetermined time window (Za; Zb) in that the mobile device transceiver (8a) is switched to be ready to receive and/or send (Za, Zb) messages (10-12; 13-15) used for determining the distance during the time window (Za, Zb).
- 4. Device according to one of the preceding claims, designed to -that a determination (10-12; 13-15, TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a position or distance (xllWB3, yllWB3; dUWB3) of the mobile device transceiver (8a) relative to the vehicle (7) is started within a predetermined time window (Za; Zb) insofar as the vehicle (7) is switched to be ready to receive and/or ready to send (ZS) for messages (10-12; 13-15) serving to determine the distance during the time window (Za, Zb) or during a sub-window (ZS) in the time window (Za, Zb).
- 5. Device according to one of the preceding claims, designed to -that a time window (ZS, Za, Zb) is determined by the vehicle (7, SG1) depending on the number of mobile device transceivers (8a, 8b) present or to be used and/or the temporal position and/or the slot of the respective localized and authenticated ID mobile device transceiver (8a, 8b).
- 6. Device according to one of the preceding claims, designed to - that the time window (Za, Zb) is determined by the vehicle (7, SG1 ), taking into account different operating modes of a vehicle control unit (SG1 ), in particular depending on whether the access use case was started in “low power mode” or in “high power mode”.
- 7. Device according to one of the preceding claims, designed to - that different time windows (ZS, Za, Zb) are defined for each of several mobile device transceivers (8, 8a, 8b) and/or the communication of the vehicle (7) with one of the mobile device transceivers (8, 8a, 8b).
- 8. Device according to one of the preceding claims, designed to - that a determination (TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a UWB position or UWB distance (xllWB3, yUWB3; dUWB3) of a mobile device transceiver (8a) relative to a vehicle (7) and/or a notification of a time window (Za, Zb) takes place when an authentication and/or an additional distance determination (xLF1, yLF1; dLF1) of a mobile device transceiver (8a) relative to a vehicle (7) has taken place on an LF frequency and/or an RF frequency and/or a UWB frequency and/or an NFC frequency and/or a Bluetooth frequency (ZLFRF).
- 9. Device according to one of the preceding claims, designed to -that within a time window (ZUWB) preferably following the predetermined time window (Za, Zb), the determination (10-12; 13-15, TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a UWB position (xUWB3, yUWB3; dUWB3) of a mobile device transceiver (8a) relative to the vehicle (7) comprises the sending and/or receiving of messages (10-12, 13-15), and the determination (T_rnd1, T_rsp1, T_rnd2, Trsp2) of a UWB position is carried out by calculation (T_rnd1, T_rsp1, T_rnd2, Trsp2) during or after the following time window.
- 10. Device according to one of the preceding claims, designed to -that the predetermined time window (Za, Zb) for sending and/or receiving messages (10-12; 13-15) when determining (T_rnd1, T_rsp1, T_rnd2, Trsp2) a UWB position is shorter than ten times or three times or double the time required to exchange the messages (10-12; 13-15) with one or more UWB transceivers (TRX1, TRX2, TRX3, ..), and/or is shorter than 200 milliseconds or is 100 milliseconds.
- 11 .Device according to one of the preceding claims, designed to -that a UWB position determination is or includes a position determination or distance determination with messages (10-12) on a UWB frequency and/or with one or more UWB transceivers (TRX1 -TRX6).
- 12. Device according to one of the preceding claims, -wherein enabling access to the vehicle (7) comprises opening and/or unlocking at least one vehicle door (111, 112) and/or enabling the starting of the engine of the vehicle (7).
- 13. Device according to one of the preceding claims, -wherein the vehicle (7) only grants access (111, 112) to the vehicle (7) if at least one further condition is met, in particular that an authentication check has identified the mobile device transceiver (8a), while if the at least one further condition is not met the vehicle (7) refuses access (111, 112) to the vehicle (7).
- 14. Method for controlling access (111, 112) to a vehicle (7), in particular with a device according to one of the preceding claims, characterized in that -that a determination (10-12) TRX1, TRX2, TRX3; T_rnd1, T_rsp1, T_rnd2, Trsp2) of a UWB position or UWB distance (xllWB3, yllWB3; dUWB3) of a mobile device transceiver (8a) relative to the vehicle (7) is started within a predetermined time window (Za, Zb).
Description
Description "Methods and devices for controlling access to a vehicle; Time-configurable Relay Attack Defense System" The application concerns methods and devices for controlling access to a vehicle. To control access to a vehicle, a position (e.g. in the form of at least a two-dimensional (x,y) position and/or a distance) of a mobile device transceiver (e.g. smartphone, smartwatch, ID transmitter (e.g. Vehicle key, key fob)) relative to at least one vehicle transceiver, e.g. -via UWB with a ToF distance determination (ToF: Time of Flight; UWB according to Wikipedia: transmission with a bandwidth e.g. greater than 500MHz and/or a bandwidth of more than 20% of a center frequency) e.g. in a so-called "UWB Ranging Session" -and/or by means of a LF localization with messages on a LF frequency, according to Wikipedia LF = 30-300KHz), and/or e.g. with a message signal strength measurement (RSS) e.g. of an RF signal etc. Vehicle access control systems are known, for example, from DE11 2014 006 819, DE10 2019 215 535.9, DE 10 2019 211 792.9 and DE 10 2021 207 725. One object of the invention is to optimize the control of access to a vehicle. The object is solved by the subject matter of the independent patent claims. Some particularly advantageous embodiments of the invention are specified in the subclaims and the description. Embodiments of the invention can provide alternatives to existing solutions for effectively securing a vehicle access system against relay attacks. With time windows that can be set on both sides (suitable / overlapping / identical in the vehicle and mobile device transceiver), it is possible to optimize the power consumption and the temporal performance of the access system. UWB transmit and receive windows can be kept short to reduce power consumption. UWB transmit and receive windows can be selected independently of the respective operating mode in order to achieve the optimal temporal performance. Some embodiments of the invention according to the subclaims: For example, according to embodiments of the invention, a time window can be set by a mobile device transceiver or by the vehicle and/or specified by a message. For example, during the time window the mobile device transceiver and/or the vehicle are switched to receive and/or transmit mode. Further features and advantages of some advantageous embodiments of the invention emerge from the further subclaims and the following description of some embodiments of the invention with reference to the drawing. To illustrate some possible embodiments of the invention, the following schematically shows: Fig. 1 a transmission of messages between a mobile device transceiver and vehicle transceivers for LF distance determination and UWB distance determination (UWB distance measured with a UWB frequency and/or UWB transceivers), Fig. 2 an embodiment of a UWB distance determination based on the exchange of e.g. three messages and possibly also of send-receive times and/or runtimes in a simple ranging session, Fig. 3-5 inventive embodiments of a control of access to a vehicle with a start of the determination of a UWB position of a mobile device transceiver relative to a vehicle within a predetermined time window. Fig. 1 shows, by way of example, using suitable sequences, how communication takes place between one (TRX1) of several vehicle transceivers (TRX1, TRX2, TRX3, TRX4, TRX5, TRX6) of a (motor) vehicle 7 and a mobile device transceiver 8a, 8b (e.g. Mobile phone, smartphone, smartwatch, watch, ID transmitter, car key, key fob etc.) of a user (9) some messages 10,11,12 are exchanged via UWB (e.g. on a UWB / UltraWideBand frequency and/or with a UWB bandwidth) in order to determine at least a position d1 (e.g. distance d1) representing the distance d1 from the mobile device transceiver 8 to the vehicle transceiver TRX1 of a vehicle 7. (As shown schematically in Fig. 3, several mobile device transceivers 8a, 8b may also attempt to gain access to a (different or the same) vehicle.) Accordingly, messages 13, 14, 15 can be exchanged between a further (TRX2) of several (also referred to as anchors) vehicle transceivers of the (motor) vehicle 7 and the mobile device transceiver 8 using (e.g. UWB / UltraWideBand) in order to determine a position d2 (e.g. distance d2 or message runtime) representing a distance d2 from the mobile device transceiver 8 to the vehicle transceiver TRX2. Accordingly, a distance value d3 representing a distance d3 from the mobile device transceiver 8 to the vehicle transceiver TRX3 (e.g. distance d3 or message propagation times) can be determined if necessary. From one or two or more distance values d1, d2, d3 etc., the position of the mobile device transceiver 8 relative to at least one vehicle transceiver TRX1 and/or to/in the vehicle 7 (or to the vehicle center or a vehicle transceiver) can be determined (e.g. by triangulation), e.g. by a control unit SG1, which control unit SG1 e.g. provides information on signal propagation