WO1994026564A1

WO1994026564A1 - Electronic anti-theft device for motor vehicles

Info

Publication number: WO1994026564A1
Application number: PCT/EP1994/001480
Authority: WO
Inventors: Michael Kohne; Thomas P. Daue
Original assignee: Michael Kohne; Daue Thomas P
Priority date: 1993-05-07
Filing date: 1994-05-09
Publication date: 1994-11-24
Also published as: EP0648168A1

Abstract

A device for protecting a motor vehicle against illicit use has a driving system controlled by a board computer (40). The device consists of a smart card (1) with a microprocessor (12) and a smart card reader and writer (20) connected to the board computer. The microprocessor processes the information received from the smart card reader and writer into operational data for starting the motor vehicle and supplies them through the smart card reader and writer to the board computer, so that the motor vehicle may be started. The advantage of the invention is that it ensures an increased protection of the motor vehicle against thefts.

Description

Electronic anti-theft device for motor vehicles

The invention relates to a device for protection against unauthorized use of a motor vehicle, which has a drive system controlled by an on-board computer.

With increasing technical development, the demands on an effective anti-theft device of motor vehicles also increase, especially since a modern electronic security technology is opposed to a modern electronic diagnosis for overcoming the anti-theft device.

From DE-Al-3 613 605, DE-C2-3 137 260, DE-Al-3 940 459, DE-Cl-3 835 142, DE-Al-3 733 724, DE-C2 -3 610 954 and EP-B1-0 309 459 electronic systems for theft protection in motor vehicles are already known. In the prior art, however, the electronic anti-theft devices essentially relate to a coded activation of the vehicle drive, an electronic key being used. For a person who wants to steal the motor vehicle, the task is simply to overcome the interlocking of the engagement.

EP-A-0 456 916 describes an electronic theft protection for motor vehicles in which the central processor unit of a motor vehicle can be activated with the aid of a chip card. For this purpose, the chip card has a memory which contains part of the work program of the central processor unit, which has to be transferred from the chip card into the memory of the central processor unit each time for starting the motor vehicle. For this purpose, the chip card is inserted into a write-reading device, a personal identification number is entered on an input keyboard, and after checking the entered the codes from the chip card, if necessary, to the central processor unit in encrypted form. When the chip card is removed, the transmitted program component in the memory of the central processor unit is deleted and the vehicle cannot be used. The program part which is stored on the chip card is transmitted in encrypted form to the reading and writing device, a certain starting sequence of the signal on the chip card and the reading and writing device having to match, otherwise decoding of the signal in the writing / reading device is not possible . The data connections between the read / write device and the central processor unit also take place in encrypted form. This system has the disadvantage that a copy of the chip card can be produced by simply copying the memory content of the chip card and that it can be used in the same way as the original card.

In contrast, the invention has for its object to provide an improved electronic anti-theft device for a motor vehicle, which ensures increased security against unauthorized use of the motor vehicle.

The object is achieved with the features of the claims.

In the solution, the invention is based on the following basic ideas.

A chip card is provided which contains a microprocessor and a memory device, for example a ROM, as the active element. There is also a chip card reader and writer in the passenger compartment, which is connected to the on-board computer via a data connection, for example a data bus, and into which the chip card is inserted before the vehicle is started. The chip card is placed over the chip card reader and writer supplied with coded information for the operation of the motor vehicle. The microprocessor of the chip card decodes and processes this information and delivers necessary operating data, for example mixture composition, ignition sequence, etc., to the central processor unit of the on-board computer, generally an injection computer, via the chip card reader and writer, so that the motor vehicle can start .

The invention has the advantage that the operating data necessary for the operation of the motor vehicle are generated from first and second output data only on the basis of a computing operation using a processing program. The first output data are stored in the memory devices on the chip card and the second output data in the memory devices in the security device. Only when the first data connection is established, i.e. when the chip carrier is inserted into the reading and writing device, the second output data are transmitted to the chip card and linked in the chip card with the first output data, and the operating data thus obtained are forwarded to the safety device and from there to the on-board computer. The data transmission preferably takes place in encrypted form via the various data connections.

According to a preferred embodiment of the invention, the first and second output data are changed after each generation of operating data. This has the advantage that the chip card as such or its behavior changes due to the changed first output data contained in the memory devices of the chip card. A copy produced in the meantime by a chip card would thus be unusable because the original first output data with the changed second output data would not lead to the generation of the operating data when processed by the processing program. The output data are preferably stored in coded form in a table in the first storage devices on the chip card. In addition, the second output data have a code which is preferably also used for coding the first output data. The code can be changed. The code is preferably changed in the manner described above after each generation of operating data. For this purpose, according to a further development of the invention, a counter is provided in the safety device, which preferably runs continuously, even after switching off the ignition, the counter reading of which is used as address at a certain point in time, with that stored in the second memory device A table at this address is called up. For example, since the counter runs at a rate of 100 steps per second, it is not possible for a user to produce a particular result.

According to a further embodiment of the invention, the security device is arranged on the cable that connects the on-board computer to the peripheral devices. The safety device is preferably integrated in the multiple plug at the end of this cable or combined with it to form a structural unit. For example, the safety device can be cast with the plug in a housing. This embodiment has the advantage that the already vor¬ handenen signal connections ^"on-board computer to the Peri¬ pheriegeräten as detector devices and Steuereinrich¬ obligations can be interrupted by the safety device or ver¬ changes. In a particularly preferred Aus¬'s leadership form the safety device in the It is possible to change signals on the signal lines in such a way that the on-board computer is simulated to be in an operating state that is actually not present, by modifying or completely blocking the signals coming from the detector devices and generating other signals. This embodiment of the invention does not require an intervention in the on-board computer, in particular the programs used therein.

In addition or as an alternative to the use of a chip carrier, a fingerprint reader and an associated evaluation device are provided, with which the authorization of a person to drive the motor vehicle can be checked and the security device is only triggered when an authorized person is identified, the operation to release the motor vehicle. This configuration has the advantage that the protection against unauthorized use of a motor vehicle is further increased.

According to a particularly preferred embodiment of the invention, the chip card reader and writer is integrated in the ignition lock and / or the active element of the chip card is integrated in the ignition key. This has the advantage that the same functionality offers greater ease of use and greater security.

The advantage of the invention is that an unauthorized person cannot start the motor vehicle simply by overcoming a lock, since for the starting process a data exchange and processing of information in operating data for the motor vehicle drive, preferably for an injection device for the fuel , required are.

The chip card receives the information in coded form, for example an individual code for the respective vehicle, and decodes it before processing. After successful start-up, the chip card is no longer required until the next engine start and can be removed from the chip card reader and writer again. Both the chip card and the chip card reader and writer can be produced in a very small version. The smart card reader and -Record can be retrofitted into the motor vehicle and can be attached, for example, in the glove compartment or on the center console. As already stated above, the chip card reader and writer is preferably installed in the ignition lock present in a motor vehicle. In this case, the active element of the chip card is integrated in the ignition key. In this case, the ignition key forms the carrier for the chip, which is arranged, for example, on the key handle and can be connected to corresponding contact pins in the ignition lock via corresponding contact surfaces, preferably in the beard area. This creates a simple connection between the chip and the chip card reader and writer.

In an embodiment according to the invention, a time interval (e.g. 10 to 30 minutes) that can be set by the vehicle driver is stored on the chip card, and a concealed switch is attached to the vehicle and is connected to the on-board computer. If the driver is forced to leave the vehicle in the event of a robbery while the engine is running and the chip card is inserted, he can actuate the switch to have the chip card reader and writer read out the set time period and send it to the on-board computer, which then runs out of the Zeitab¬ section turns off the engine, the chip card can not start the engine again.

This embodiment has the advantage that the motor vehicle is stopped safely for the driver only after he has moved away from him.

In another embodiment of the invention, the chip card contains information which, after the chip card has been inserted into the chip card reader and writer, releases a lock for the engine and trunk hood. For this purpose, an electronic device can also be installed that controls the locking. Parallel to the parking len of the motor after operating the hidden switch, the lock is actuated. A small emergency voltage battery can be arranged in the vehicle, which actuates the lock when the vehicle battery is empty.

The invention is illustrated below using examples and

Drawing explained in more detail. Show it

Fig. 1 is a block diagram of a first embodiment of the

Invention and Fig. 2 is a block diagram of a second embodiment of the invention.

The embodiment of the invention shown in FIG. 1 comprises a chip card 10 with a first microprocessor 12, a first program memory 14 and a first data memory 16. The chip card 10 is connected to a reading and writing device 20 via a first data connection 18. The reading and writing device is connected to a security device 30 via a second data connection 28, a bidirectional data connection, preferably for serial data transmission. The safety device 30 comprises a second microprocessor 32, a second program memory 34 and a second data memory 36. The safety device is connected to an on-board computer 40 of a motor vehicle via a third data connection 38.

First output data are stored in the first data memory 16 and second output data are stored in the second data memory 38. A first processing program is also stored in the first program memory. As soon as a chip card is inserted into the reading and writing device, the security device 30 receives a signal, whereby the second microprocessor 32 delivers the second output data stored in the second data memory 36 to the first microprocessor. Processing takes place in the first microprocessor 12 on the chip card 10 by means of the processing program in FIG the first data memory 16 existing first output data and the transmitted second output data. In this processing, the operating data necessary for the operation of the motor vehicle are generated and supplied from the chip card to the safety device 30 via the reading and writing device 20. In this example, the operating data are sent from the safety device 30 to the on-board computer 40, which can only start the electronics for the engine management, for example, after receiving this operating data.

For example, the security device sends a code that corresponds to a product of two prime numbers to the processor of the chip card. This breaks down the code into the two prime numbers and calculates using the formula

Y = X to the power 3 mod N the data for the motor electronics from a table in the memory of the chip card. X is the data from the table, N is the product of the prime number and Y is the data that is then transmitted from the chip card to the security device. This then transmits the data to the engine electronics.

The code is preferably changed after each use of the chip card. The random status of a constantly running counter (not shown) and as a pointer to a table is used for this. The element that the pointer points to is the new code. The counter runs ^" continuously (even after the ignition is switched off) at a speed of 100 steps per second. As a result, it is not possible for a user to provoke a specific result.

The embodiment shown in FIG. 2 is a further development of the invention. The safety device is connected to the cable to be connected to the on-board computer. In the example shown, the safety device device integrated with the connector to be connected to the motor electronics in one unit, for example by gluing or casting. The on-board computer itself is unchanged. By arranging the safety device 30 in the signal path between the on-board computer and peripheral units, some of the lines can be cut and connected to the safety device. Operational signals for the engine electronics and signals from the engine electronics to individual components are blocked or changed by the electronics of the safety device. The signal transmitter A and signal transmitter B 50 ₁ and 50 ₂ serve, for example, the brand transmitter for top dead center, the angle transmitter for determining the working position of the engine or the control "ignition on" from the ignition key. The ignition amplifier 60 ₁ for emitting ignition pulses, the injector 60 ₂ for emitting injection pulses or other components 60 _n , such as the gasoline pump and the throttle valve, can be used as actuating devices.

In this embodiment, operationally relevant signals for the engine electronics and signals from the engine electronics to individual components, such as the injection valve, can be blocked or changed by the electronics on the safety device. As in the first embodiment, the security device is connected to the reading and writing device for a microprocessor chip card. By inserting a valid card, the original signals are then routed into or out of the motor electronics.

Below are some examples of what control signals can be interrupted or changed for the external control device.

Measurement signals from detectors are supplied in digital and analog form as input variables. The signals "top dead center" and "position of the crankshaft" are digital values. Motronik counts the impulses of the crankshaft position from the impulse top dead center and thus determines the actual position of the crankshaft / camshaft and the speed. The sensor for the crankshaft position is usually just an encoder that reproduces the teeth on the starter ring gear on the crankshaft in the form of rectangular pulses, i.e. there is no angle indication, the Motronik calculates these from the two values dead center and number of teeth from dead center.

For the mixture preparation, there are sensors that measure the amount of air sucked in (always indirectly via dynamic pressure, suction pipe vacuum or speed of the air sucked in). These are analog values, usually variable resistances which are measured in voltage (0 to 7V, impressed current) or current (a few mA, impressed voltage).

The throttle valve position is partly supplied as a digital value (idle position, full throttle position) and as a variable angle value, i.e. a resistance of a few kOhm depending on the throttle position 0-90 degrees.

The triple speed, intake air quantity and throttle valve position mainly determine the metered injection quantity per cylinder and the ignition timing.

In addition, the air temperature, the air pressure, the engine temperature and some other influencing variables are measured. However, only a small percentage of these are included in the calculation. An interruption or change of these signals affects the vehicle's readiness to drive.

Essentially digital control signals with a variable pulse width are output. These control the opening times of the petrol injection nozzles and ignition timing Point. Valve control is also influenced in luxury vehicles.

If the ignition impulses or the petrol injection impulses are blocked, the engine will not work.

The blocking and changing of signals should preferably be on the input side. The control pulses for the injection nozzles are of low impedance with a high inductive component (coils) and require very complex circuits. Only the control signals for the ignition are passed on to an amplifier, which generates the actual high voltage.

The input signals can be easily blocked or influenced using conventional electronic means. The variables top dead center, crankshaft position, air quantity, throttle valve position and ignition pulses are therefore preferably influenced by the invention.

In the simplest case, the digital signals are blocked by an electronic switch (CMOS transistor), or the digital signal goes to an electronic gate and is e.g. AND linked.

The analog signals are blocked by an analog semiconductor switch (the signals are unipolar, so that standard ICs are sufficient).

A further form of the invention is a change in the signals which are sent to the motronics or passed on by them.

For example, the pulses from the top dead center sensor can be delayed by a certain time (switchable delay line), the pulses from the crankshaft position are divided by a digital counter by 2,4,8, leaving the same apply to the output pulses for the ignition amplifier. Or a permanent idle position of the throttle valve is signaled by connecting an open collector gate to the relevant signal line.

The analog signals are generated by means of a D / A converter and supplied to the Motronik instead of the original data and thus signal a e.g. very small amount of air sucked in.

The necessary data for changes and the blocking of signals are stored on the chip card. All of this leads to an incorrect metering of the amount of gasoline and an incorrect ignition timing.

All these influences have the consequence that the engine starts when the ignition lock is bridged, but does not under any circumstances get the vehicle going and signal a defect due to misfiring, misfiring, etc. This has the advantage that the thief does not suspect an additional lock (the engine starts after all), but suspects greater damage to the engine and, because of the repair that is assumed to be necessary, stops theft. This avoids further destruction in the passenger compartment when searching for electronic locks. In addition, the permanent attempts to start (the engine keeps turning off) and the misfires associated with loud bangs develop a background noise that is much more likely to attract third-party attention than an alarm system.

With the aid of a casting compound, after the circuit board of the safety device has been installed, it is glued directly to the plug and the connected cables. This ensures security against manipulation.

As an alternative to the card reader unit, a reader for fingerprints can be provided. By hanging up a fin The reader then releases the motor electronics. Furthermore, it is possible to use the chip card as a tachograph, with corresponding data being supplied to the chip card during operation of the vehicle and being stored in the first data memory for later analysis or diagnosis.

Claims

Patent claims

1. Device for protection against unauthorized use of a motor vehicle, which has an on-board computer (40), comprising: a) a chip carrier (10) which has a first microprocessor (12) and second memory devices (14, 16 ), b) a reading and writing device (20), which is connected to the chip carrier (10) via a first data connection (18), and c) a security device (30), which has a second microprocessor (32) and second storage devices (34, 36), which is connected via a second data connection (28) to the reading and writing device (20) and via a third data connection (38) to the on-board computer (40), characterized in that the first memory devices (14, 16) contain first output data and a processing program, the second memory devices (34, 36) contain second output data, the second output data from the second memory being established after the first data connection (18) has been established device (34, 36) are delivered to the first microprocessor (12), the first microprocessor (12) processes the first output data with the second output data by means of the processing program and thereby generates operating data which are sent to the safety device (30) can be delivered.

2. Device according to claim 1, characterized in that after each generation of operating data, preferably the second microprocessor (32) generates changed first and second output data, the changed second output data are stored in the second memory devices (34, 36) and the changed first output data are stored in the first storage devices (14, 16).

3. Device according to claim 1 or 2, characterized gekennzeich¬ net that the first output data are stored in coded form in a table in the first memory devices (14, 16), the second output data have a code, the code being changeable.

4. The device according to claim 3, characterized in that the second memory devices (34, 36) have a Codeta¬ table, the security device has a preferably continuously running counter, the counter reading being used at a certain time as the address and the this address in the code table code is assigned to the second output data.

5. Device according to one of claims 1 to 4, characterized in that the safety device (30) is arranged on a cable to be connected to the on-board computer, the signal connections from the on-board computer (40) to peripheral units (50, 60) be interrupted or changed by the safety device (30).

6. The device according to claim 5, characterized in that the safety device (30) changes the signal connections in such a way that the on-board computer (40) is simulated a non-existent operating state of the motor vehicle.

7. The device according to claim 5 or 6, characterized gekennzeich¬ net that the safety device is integrated with a multipole plug of the cable to be connected to the on-board computer (40) to form a structural unit.

8. The device in particular according to one of claims 1 to 7, characterized by a reading device for fingerprints and an evaluation device which, after an authorization check, causes the security device (30) to release the operation of the motor vehicle.

9. Device according to one of claims 1 to 8, characterized in that the chip carrier is a chip card (10).

10. Device according to one of claims 1 to 8, characterized in that the chip carrier is a key, preferably an ignition key of a motor vehicle.

11. The device according to one of claims l to 10, characterized in that the reading and writing device (20) for the chip carrier is integrated in a lock, preferably an ignition lock.

12. Device according to one of claims 1 to 4, characterized in that the on-board computer (40) is a computer for the engine electronics.

13. Device according to one of claims 1 to 12, characterized in that a concealed switch is attached to the vehicle, which causes the on-board computer when actuated to switch off the engine after a selectable period of time, the engine not being restarted by means of the chip carrier can.

14. The apparatus according to claim 13, characterized in that the selectable period of time is ge ge stored on the chip carrier and is readable by the reading and writing device (20) for the chip carrier (10).

15. The device according to one of claims 1 to 14, characterized in that the chip carrier (10) is information contains, which releases the locking of the engine and trunk hood after the insertion of the chip carrier into the reading and writing device (20) for the chip carrier.

16. A method of operating a device according to any one of claims 1 to 15, characterized in that a) the chip carrier receives coded information for the operation of the motor vehicle from the on-board computer via the reading and writing device, b) the chip carrier decodes and verifies the information ¬ works, and c) the chip carrier via the reading and writing device supplies operating data to the central processor unit of the on-board computer, which make it possible to start the motor vehicle.