DE102015223342A1 - A method of operating an authorization device for a vehicle, an authorization device for a vehicle, a method of operating a system for authorizing operation of a vehicle, and a system for authorizing operation of a vehicle - Google Patents

Abstract

A method for operating an authorization device for a vehicle, which is designed for a first communication with the vehicle and has a location unit that is configured to determine a current location of the authorization device. In the method, the authorization device is provided with a locking location that is representative of a location of the vehicle on which a last locking operation of the vehicle has been performed. The locating unit is set, at least for a predetermined period of time, into an operation determining the current location of the authorization device. Depending on the current location and the lock site, a communication operation state of the authorization device is controlled. In the case that the authorization device is in the communication operating state, a first authorization signal for operating the vehicle is provided by means of the first communication. A corresponding authorization device, a method for operating a system for authorizing an operation of a vehicle and a corresponding system are also specified.

Description

A method of operating an authorization device for a vehicle and a corresponding authorization device for a vehicle are provided. There is also provided a method of operating a system for authorizing operation of a vehicle and a corresponding system for authorizing operation of a vehicle.

Keyless entry systems for vehicles, especially motor vehicles, are also known by the names Keyless Entry or Keyless Go. Such access systems serve to automatically unlock and start a vehicle without actively using a car key. For this purpose, the vehicle user carries with him a short-range communication unit which, for example as a result of a mechanical door handle actuation of a vehicle user, provides the vehicle with a cryptographic key for authentication. After successful authentication, the vehicle is unlocked and a start enabled.

In a so-called relay attack ("Relay Station Attack", RSA), the radio link between the communication unit and the vehicle can be extended by means of relay stations. As a result, an attacker can unauthorized open and start the vehicle. The object underlying the invention is to provide a method for operating an authorization device for a vehicle and a corresponding authorization device, which contributes to a high protection against manipulation. It is a further object of the present invention to provide a method of operating a system for authorizing operation of a vehicle, as well as a corresponding system, which contribute to safe and comfortable authorization to the operation of the vehicle.

The objects are achieved by the independent claims. Advantageous embodiments are characterized in the subclaims.

According to a first aspect, the invention is characterized by a method for operating an authorization device for a vehicle. The authorization device is designed for a first communication with the vehicle. The authorization device has a location unit, which is designed to determine a current location of the authorization device.

In the method, a locking location is provided to the authorization device. The locking location is representative of a location of the vehicle on which a last locking operation of the vehicle has been performed.

The locating unit is set, at least for a predetermined period of time, in an operation determining the current location of the authorization device in which the current location of the authorization device is determined.

Depending on the current location and the lock site, a communication operation state of the authorization device is controlled. The communication mode is representative of a communicating operation of the authorization device. In the case that the authorization device is in the communication operating state, a first authorization signal for operating the vehicle is provided by means of the first communication.

The authorization device is, for example, a key for the vehicle, for example a radio key. Alternatively, the authorization device may also be a correspondingly equipped data processing device, such as a smartphone or the like.

The first communication may be a predetermined communication protocol, such as Near Field Communication (NFC). For example, in the first communication, a request signal is provided by the vehicle, which is received by the authorization device. The authorization device then provides the vehicle with a response signal, depending on the request signal, which is representative, for example, of a locking or unlocking of the vehicle. In particular, a keyless operation of the vehicle, ie unlocking and starting without active actuation, can be authorized by means of the first communication. In addition, the authorization device may have a mechanical key and / or a conventional radio module for locking and / or unlocking the vehicle.

The locating unit is in particular a satellite-based system such as GPS (Global Positioning System). Deviating from this, localization can also take place by means of or in combination with GSM localization (Global System for Mobile Communications, GSM) and / or by means of or in combination with WLAN localization (Wireless Local Area Network).

The locating unit may, for example, be continuously in the operation determining the current location of the authorization device are located. Preferably, the locating unit is displaced only for the predetermined period of time, for example cyclically, in the operation determining the current location of the authorization device.

In particular, each of the current location and the locking location is a characteristic value that includes, for example, respective GPS data. The locking location is stored, for example, in a storage unit associated with the authorization device. Alternatively, the locking location may also be provided by a backend. In particular, the locking location is not provided by the vehicle itself. The control of the operating state depending on the current location and the locking location is thus not merely a comparison of the actual vehicle position with the current location of the authorization device.

For example, depending on the current location and the locking location, a distance between the current location and the locking location is determined, wherein when a threshold value is undershot, the authorization device is placed in the communication operating state in which a communicating operation of the authorization device is enabled. In other words, the first communication of the authorization device is made possible only in the vicinity of the locking location, for example by activating an antenna formed for the first communication. The threshold may be an example depending on a range of the antenna. Analogously, for example, when the threshold value is exceeded, the authorization device can be put into an operating state in which the first communication is deactivated or severely limited.

Advantageously, this allows the authorization signal for operating the vehicle, such as the above-mentioned response signal for unlocking the vehicle, to be transmitted only when the authorization device is actually located in the vicinity of the vehicle or the locking location. Relay attack would thus be effective only in this vicinity, but greatly reducing a probability of attack in the presence of the owner of the authorization device.

In an advantageous embodiment according to the first aspect of the current location of the authorization device is determined again after a predetermined time interval. The predetermined time interval is determined depending on a distance between the current location and the locking location.

Advantageously, this contributes to a power-saving operation of the authorization device. In particular, it can thus be concluded when the distance of the authorization device to the vehicle or of the current location from the locking location falls below the predetermined threshold value at which the authorization device is placed in the communication operating state which is representative of a communicating operation of the authorization device. For example, the predetermined time interval is shortened with decreasing distance and extended with increasing distance. The predetermined time interval is for example between one minute and one hour.

In a further advantageous embodiment according to the first aspect, the authorization device has a memory unit. In the event that a locking operation of the vehicle is performed by the authorization device, a first determined current location of the authorization device is stored in the storage unit after performing the locking operation as a locking location.

Advantageously, no interrogation of the interlocking location takes place, so that manipulation attempts can be prevented in which a counterfeit location of the vehicle in the vicinity of the authorization device is provided by the attacker. To transition to the communication mode representative of a communicating operation of the authorization device, the authorization device only compares the current location with the stored locking location. This allows a particularly high security against manipulation with regard to a relay attack.

In the event that no location can be determined at a time at which the locking process is performed, for example because the authorization device is located in an underground car park, the location receivable as soon as possible by the locating unit is stored as a locking location. In this case, a receiver-free time duration of the locating unit can be stored as a feature, so that, in the event of a subsequent approach to the stored locking location, this receiver-free time period is additionally waited for before the authorization apparatus enters the communication operating state, which is representative of a communicating operation of the authorization apparatus.

In a further advantageous embodiment according to the first aspect, the authorization device has a communication interface. The communication interface is designed for a communication with a backend. In the event that a locking operation of the vehicle is performed by the authorization device, a first determined current location of the authorization device is provided after performing the locking operation as a locking location via the communication interface. The communication interface may in particular be a mobile radio unit. Advantageously, this allows a synchronization of the locking location, so that when using a plurality of such authorization devices even in the case of a changed locking location of the vehicle authorization to operate the vehicle by the respective authorization device is made possible. This contributes to a reliable and comfortable operation of the vehicle.

For example, to enter the communication mode representative of a communicating operation of the authorization device, the authorization device queries the locking location stored in the backend and compares it with the current location. This may prevent tampering attempts where a forged location of the vehicle near the authorization device is provided by the attacker. Thus, a high security against manipulation with regard to a relay attack can be made possible.

In the event that no location can be determined at a time at which the locking process is performed, as described earlier, the backend can receive the earliest possible locus by the locating unit as a locking location, and optionally the receiver-free duration of the locating unit or a route characteristic as described below to be provided.

In a further advantageous embodiment according to the first aspect, the authorization device comprises a vibration and / or motion sensor unit. By means of the vibration and / or motion sensor unit, a movement of the authorization device is detected. Depending on the detected movement of the authorization device, the operation of the positioning unit determining the current location of the authorization device is controlled.

This advantageously contributes to a particularly power-saving operation of the authorization device. In particular, it can thus be concluded that the distance of the authorization device to the vehicle or the current location to the locking location potentially changes. By way of example, the operation of the location unit determining the current location of the authorization device is deactivated if no movement of the authorization device was detected for a predetermined period of time. In this connection, the above-mentioned predetermined time interval is interrupted by way of example.

In a further advantageous embodiment according to the first aspect, the authorization device comprises a vibration and / or motion sensor unit. By means of the vibration and / or motion sensor unit, a movement of the authorization device is detected. Depending on the detected moving of the authorization device, the communication operation state of the authorization device is controlled.

This advantageously contributes to a power-saving operation of the authorization device. For example, the authorization device can enter an inactive operating state independently of the location unit if no movement of the authorization device is detected.

In a further advantageous embodiment according to the first aspect, a route characteristic value is determined as a function of the detected movement of the authorization device. The route characteristic is representative of a distance covered by the authorization device.

Depending on a last determined by means of the locating unit location and the route characteristic value a corrected current location is determined. Depending on the corrected current location, the communication operating state of the authorization device is controlled.

Advantageously, this enables a particularly reliable and tamper-proof operation of the authorization device. For example, in the event that the locating unit is in a receiver-free state or performs a relatively inaccurate location, the route characteristic value can be used. The route characteristic value may comprise, for example, a movement pattern, by way of example analogous to a pedometer. Depending on the corrected current location, for example, an approach to the locking location can be concluded.

In a further advantageous embodiment according to the first aspect, the authorization device has a first near-field antenna. The first near field antenna is adapted to the first communication with the vehicle.

Controlling the communication operating state of the authorization device includes controlling the communicating operation of the first one Near field antenna. For example, in this connection, the first near-field antenna is decoupled and / or a transmission and / or reception range of the first near-field antenna is greatly reduced. The first near-field antenna is designed, for example, to receive frequencies in the long-wave range (low frequency, LF range) such as 125 kHz or 130 kHz, and / or in the long-wave range (very low frequency, VLF range) such as 20 kHz. For example, the first near-field antenna is further configured to transmit frequencies in the ultra-high-frequency (UHF) range, such as 315 MHz, 433 MHz, and 868 MHz, respectively. In particular, the first near-field antenna may be a so-called Radio Frequency Identification (RFID) transponder. Such an active transponder has, by way of example, a power supply which can be switched on or off in the course of controlling the communicating operation of the transponder so that its transmission and / or reception range is greatly reduced.

Advantageously, the first near-field antenna enables keyless operation of the vehicle without active actuation of the authorization device.

In a further advantageous embodiment according to the first aspect, the authorization device has a second near-field antenna. The second near-field antenna is configured for a second communication with the vehicle.

A second authorization signal for operating the vehicle is provided by means of the second communication.

The second authorization signal serves, for example, to enable the starting of the vehicle. In this context, the second communication, for example, take place only between the second near-field antenna and interior antennas of the vehicle, so that the release is performed only when staying in an interior of the vehicle. By way of example, the second near-field antenna can then be in continuous operation in a communicating mode. Advantageously, this makes it possible to start the vehicle even if the authorization device experiences no movement for a long time, for example when the vehicle user is waiting in the vehicle when the engine is switched off.

According to a second aspect, the invention is characterized by an authorization device for a vehicle. The authorization device is designed to perform a method according to the first aspect.

According to a third aspect, the invention is characterized by a method for operating a system for authorizing an operation of a vehicle. The system comprises a backend with a communication interface and at least one authorization device according to the second aspect.

The at least one authorization device performs a method according to the first aspect.

In an advantageous embodiment according to the third aspect, the at least one authorization device is provided via the communication interface of the backend a locking location. The locking location is representative of a location of the vehicle on which a last locking operation of the vehicle has been performed. In the event that an interlocking operation of the vehicle is performed by the at least one authorization device, a first determined current location of the respective authorization device is provided to the backend as the interlocking location after performing the interlocking operation.

Advantageously, this allows a synchronization of the locking location, so that when using a plurality of such authorization devices even in the case of a changed locking location of the vehicle, an authorization for operation of the vehicle by the respective authorization device is made possible. This contributes to a reliable and comfortable operation of the vehicle.

For example, to enter the communication mode representative of a communicating operation of the authorization device, the authorization device sends a request signal to the backend. The backend provides the least recent interlock location of the requesting authorization device, as determined by one of the plurality of authorization devices, which compares it to the current location determined on that side. This may prevent tampering attempts where a forged location of the vehicle near the authorization device is provided by the attacker. Thus, a high security against manipulation with regard to a relay attack can be made possible.

In the event that no location can be determined at a time at which the locking process is performed, as already described the backend of the earliest possible receivable by the locating unit location as the locking site and optionally the non-receiving Time duration of the tracking unit and / or the route characteristic value are provided.

According to a fourth aspect, the invention is characterized by a system for authorizing an operation of a vehicle. The system comprises a backend with a communication interface and at least one authorization device according to the second aspect. The system is designed to carry out a method according to the third aspect.

Embodiments are explained in more detail below with reference to the schematic drawings.

Show it:

1 a system for authorizing operation of a vehicle in a first state,

2 the system according to 1 in a second state,

3 the system according to 1 in a third state,

4 A first embodiment of a system for authorizing an operation of a vehicle,

5 an authorization device according to the first embodiment,

6 a flowchart for operating the system according to the first embodiment,

7 A second embodiment of a system for authorizing an operation of a vehicle,

8th the authorization device according to the second embodiment,

9 a flowchart for operating the system according to the second embodiment, and

10 A third embodiment of an authorization device.

Elements of the same construction or function are provided across the figures with the same reference numerals.

The following describes an automatic system for unlocking a vehicle without actively using a car key and starting by merely operating the start button. This is made possible by an authorization device such as a car key with a chip, which a vehicle user carries with him.

As soon as a hand approaches a door handle of the vehicle down to a few centimeters, the system is woken up with the aid of a capacitive or optical proximity sensor from the so-called "sleep mode" and an encoded request signal is transmitted via several antennas distributed in the vehicle. The system then enters a receive mode and waits for a confirmation signal. If the authorization device is within range, it receives the acknowledgment signal, decodes it, and retransmits it as a response signal with a new encoding. In the vehicle, the response signal decodes again a control unit and compares this with the request signal. If no correct response signal is present within a predetermined period of time, the controller returns to sleep mode. Pulling the door handle has no effect because a state of the door lock was not changed by the system. If the response signal is correct, the control unit releases the door lock and the door can be opened by pulling the door handle. Alternatively, the vehicle can also be opened by operating the radio remote control and / or a mechanical emergency key. The authorization device therefore includes, for example, the mechanical emergency key, the radio remote control and an RFID transponder.

An engine start operation is essentially the same as that of the door unlock operation, except that the engine start / stop button is operated here. Decisive for the function is that the control unit has recognized the transponder as being in the vehicle.

A maximum range of the RFID transponder, for example, between 2 meters and some 10 meters, but can be increased as described above in a so-called relay attack. For this reason, such access systems are very controversial. However, a distinction must be made between normal key radio systems and real keyless entry systems. In the following, these systems will again be clarified in general.

1 to 3 show a system for authorizing an operation of a vehicle 200 in three states. The authorization device 100 is designed, for example, as a radio key which is located outside of a near field area (first and third state 1 . 3 ) or within the near field area (second state 2 ) with respect to the vehicle 200 located.

The authorization device 100 is for example designed for communication by means of at least one of the following radio technologies: Remote Keyless Entry (RKE), Passive Keyless Entry (PKE), Near Field Communication (NFC).

The authorization device 100 has in this context, for example, a radio unit 101 to activate RKE by means of button on. By means of RKE, for example, vehicle doors and trunk lid can be unlocked or locked by transmitting a radio signal when the vehicle user presses the button. The radio unit 101 For example, it is designed to emit a 315 MHz or 433.92 MHz RKE signal. In the authorization device 100 For example, a microcontroller is housed, like the radio unit 101 only when the button is pressed sends a previously defined protocol. Advantageously, so only power is consumed when the button is pressed and the system is only vulnerable during this time.

The vehicle 200 has a control center 201 with an RF receiver for the evaluation of the received radio signals and for the activation of further control units 221 . 231 and 241 on.

At the control unit 221 it may for example be a steering wheel lock, which by the control center 201 can be released. At the control unit 231 For example, it may be a start button for starting the engine. At the control unit 241 it may, for example, be an engine control unit. The RF receiver receives the data of the radio unit 101 and directs them to the control units 221 . 231 and 241 further. In this case, an identity of the transmitter is checked and given instructions for controlling the door opening. Authorization devices with multiple buttons can also perform additional functions such as opening the trunk, turning on flashing lights, an alarm function, etc. Here, great care is taken to encrypt the sent protocol to ensure that only a specific vehicle is opened.

The authorization device 100 further comprises a unit for radiating PKE and / or NFC, which is also referred to below as the first near-field antenna 111 referred to as. The first near field antenna 111 is in particular to a first communication with built-in antennas in the vehicle 211 educated. The first communication is based, for example, on PKE and / or NFC. PKE allows the vehicle user to unlock a vehicle door or trunk by simply pulling the door handles without having to press a button. It suffices if the vehicle user carries the authorization device or brings it near the vehicle.

For this comes a low-frequency radio link between the vehicle 200 and the authorization device 100 for use. antennas 211 of the vehicle 200 can in this context as in 1 shown in different areas of the vehicle 200 be housed. For example, near the door opener (ie in the door directly or eg in the outside mirror) or in the area of the tailgate or the gas cap. These built-in low frequency antennas initiate the first communication and may, for example, detect multiple authorization devices within a radius of between 1.5 and 2 meters. The reception radius is ideally applied as low as possible.

As soon as the vehicle user pulls or even touches a door handle, the control center sends 201 a low frequency signal to confirm the authenticity of the authorization device. Provided the authorization unit 100 and the respective antenna 211 are in mutual range can thereupon the authorization unit 100 an RF response to the control center 201 to transfer. On a successful reconciliation with the authorization unit 100 the vehicle is then automatically unlocked within a few milliseconds.

The vehicle 200 In addition, the immobilizer and also the ignition can be released when the authorization unit 100 located in the vehicle interior. The engine can then be started by pressing the starter button or turning an ignition switch.

When leaving the vehicle 200 locking occurs either by pressing a button on one of the door handles, by touching a capacitive area or by the vehicle user getting away from the vehicle 200 away.

In the case of the low-frequency radio link between the vehicle 200 and the authorization device 100 For example, short-range communication (NFC) can be used. It is an extremely short-range wireless technology that facilitates the secure exchange of data and is increasingly used for other secure transactions, such as an "electronic wallet" built into the mobile phone.

Such an NFC operates by way of example with 13.56 MHz at baud rates in the range of 106 kbit / s to 424 kbit / s. Unlike the systems described above, one of the NFC interfaces activates its Transmitter and thus works as an NFC initiator. The high frequency current flowing in the antenna induces a magnetic field that extends around the antenna loop and passes through the antenna loop of the nearby other NFC interface. This creates an induction voltage in the antenna loop of the other NFC interface, which the receiver of this other NFC device can detect. If the NFC interface receives signals and the corresponding commands of an NFC initiator, this NFC interface automatically assumes the role of an NFC target. For data transmission between the NFC interfaces, the amplitude of the emitted alternating field is modulated (ASK modulation).

In 1 is also a symbolic range 113 PKE and NFC in the area of the authorization device 100 , a symbolic range 103 from RKE and a symbolic range 213a -D of PKE and NFZ in the area of the vehicle 200 (Range 213a in the driver's door area, range 213b in the passenger door area, range 213c in the area of trunk lid, range 213d in the tank cap area). For clarity, there is a range of PKE and NFC for immobilizer activation in the interior of the vehicle 200 not shown in detail.

The authorization device 100 and / or the vehicle 200 may have an extremely short range, for example to prevent misuse and / or due to a limited allowable transmit power. Through several antennas 211 of the vehicle 200 At different positions can be detected whether the vehicle user is on the driver's door, on the trunk or, for example, during a refueling process on the tank lid. Accordingly, only the necessary accesses, in the vicinity of which one is located, can be unlocked. If the vehicle user, for example, more than 0.5 meters from the vehicle 200 removed (cf. 1 ), then the vehicle leaves 200 do not open at any of the entrances. Even a vehicle start is not possible if the authorization device 200 not in the vehicle 200 is recognized. The respective range 113 . 213a - 213d is for example at 125kHz at a maximum of 2 meters and at 433 MHz at some 10 meters.

3 shows the system according to 1 in a third state where the ranges 113 . 213a by means of range bridging technology 300 be bridged, for example in the context of a relay attack. Here are two transmitting and receiving units 310 . 320 with symbolic reach 313 . 323 used, which emulate an identical interface as in the authorization device 100 and in the vehicle 200 themselves are present. These two receiving and transmitting units 310 . 320 are again using high-speed wireless technology 311 . 321 connected with each other. Will now be the first receiving and transmitting unit 310 near the authorization device 100 positioned and the second transmitting and receiving unit 320 near the vehicle 200 so can vehicle 200 and authorization device 100 regardless of the spatial distance 301 communicate unnoticed with each other. The vehicle 200 can be started and moved in this way, for example.

To complicate such manipulation attempts, for example, signal propagation times and / or modulation methods can be adapted. As the performance of manipulation components increases, the system remains in place 1 but still surmountable.

4 shows a further system for authorizing an operation of a vehicle in a first embodiment, in which an effort for manipulation is not limited to the technique of distance bridging. The system differs from the previous system in that the authorization device 100 additionally a tracking unit 121 which is formed a current location 511 the authorization device 100 to investigate. For this the locating unit receives 121 for example, signals of a location system 500 , here exemplified by satellites 501 . 503 . 505 a GPS system. The authorization device 100 is in 4 by way of example at one time at one of several locations 511a . 511b . 511c shown.

The authorization device 100 according to the first embodiment is described in detail in 5 shown. Next to the locating unit 121 can the authorization device 100 optionally, for example, a movement and / or vibration unit 131 and / or a control device 141 exhibit. The control device 141 For example, it may include a memory unit and / or a battery.

Both size and cost and power consumption of such components are low. In particular, these components can be used to improve a security standard of the first system with regard to short-range radio communication. In addition, a flexibility of the keyless access can be extended, it can be a maintenance and / or supply of a vehicle owner with status information regarding his vehicle are made possible.

Currently, the vehicle keys are equipped with more and more comfort technology, so that a basis for such an extension can already be present. So include newer radio keys In addition to the technology for vehicle unlocking, for example, often already a control device such as a microcontroller.

By means of the additional components, in particular by means of the locating unit 121 can now be recognized, whether the authorization device 100 near the vehicle 215 which functions independently of the existing radio and antenna technology and also independently of the vehicle. This could disable all externally vulnerable wireless technology as soon as the authorization device 100 no longer near the vehicle 215 located.

As a tracking unit 121 For example, a GPS receiver is suitable. These GPS receivers are present today in most smart phones or theft detection systems. They are extremely small or available in the order of a few millimeters. The power consumption of such systems is now relatively small.

To a power consumption of the locating unit 121 It is also conceivable to reduce the movement and / or vibration unit 131 in the authorization device 100 to obstruct. Also, such blocks are available in a very small and cheaper design. They are also installed in most smart phones for sports applications.

4 shows the authorization device 100 in the location 511a for example, outside the vehicle range or not near the vehicle 215 , The authorization device 100 is in a dormant state where no movement has been registered for a long time. In this state, for example, the locating unit 121 and the movement and / or vibration unit 131 completely disabled, the first near field antenna 111 shut down or extremely throttled and the radio unit 101 and the control device 141 only active in the short term.

In the site 511b is the authorization device 100 outside the vehicle range in the moving state or not at rest. In this state, for example, the radio unit 101 and the tracking unit 121 only active in the short term. An example is the locating unit 121 only active when the control device 141 They look for a like based on the 6 queries described algorithm. The movement and / or vibration unit 131 and the control device 141 for example, are fully active while the first near field antenna 111 switched off or extremely throttled.

In the site 511c is the authorization device 100 near the vehicle 215 , for example, also in a moving state. In this state, for example, the radio unit 101 only short term active, the first near field antenna 111 , the tracking unit 121 , the movement and / or vibration unit 131 and the control device 141 are fully active. At the location 511c this is in particular the location where the vehicle is located 200 last time locked. The site 511c is also referred to below as the locking location.

The system, in particular the control device 141 For example, a data and program memory is stored in which a program is stored, which is described below with reference to the flowchart of 6 is explained in more detail.

The program is started in a step S61 in which, for example, variables are initialized. For example, in the step S61, further, in case of locking operation of the vehicle 200 through the authorization device 100 the current location is carried out 511 the authorization device 100 determined and stored in the storage unit.

For example, be timely after leaving the vehicle 200 determines the corresponding GPS data and this in the storage unit of the authorization device 100 stored. The vehicle user ( 4 , Location 511c ) gets out of the vehicle 200 out, leaving the motion and / or vibration sensor 131 detects a move. In case a movement is detected, the control device switches 141 the first near-field antenna 111 for the near area free. The authorization device 100 is thus placed in a communication mode. As long as the vehicle user is still close to the vehicle 215 Thus, the authorization device still receives short-range radio signals from the vehicle 200 which, for example, contain information that the vehicle 200 currently still open and not locked. For example, the first near-field antenna becomes 111 at least not disabled as long as the authorization device 100 Short range data from an indoor antenna 211 of the vehicle 200 (see. 1 ) or if no vibrations are registered.

However, the vehicle user leaves the vehicle 215 then stores the authorization device 100 immediately the GPS data of the site 511c from. This is especially the moment in which the vehicle 200 self-closing directly or slightly delayed. Removes the vehicle user further from the vehicle 200 and leaves the area of vehicle proximity 215 . which exemplifies a well-defined range 10 to 1000 Meters around the site 511c corresponds, then recognizes the authorization device 100 using new GPS data that matches the stored GPS data of the lock site 511c be compared. So only GPS data are stored, which were determined simultaneously with the vehicle state "open" and at the same time the Nahbereichsfunkkontakt is lost. Closes the vehicle 200 however, while driving, then this may also be the time at which the vehicle user the vehicle 200 manually opened or unlocked from inside. The program is then continued in a step S63.

In step S63 is the authorization device 100 in the location 511b outside the near field radio range of the vehicle 200 , The one by the locating unit 121 determined current location 511 included current authorization device GPS data 100 therefore differ in terms of the stored GPS data of the locking location 511c from each other. The control device 141 now uses this information to a communicating operation of the first near-field antenna 121 to control. For example, this decouples an antenna part for the near range or the range 113 extremely reduced. From this point on, the authorization device is 100 no longer vulnerable from outside, where a nearby vehicle is artificially faked. The program is then continued in a step S65.

In step S65, the locating unit becomes 121 at least for a given period in a current location 511 the authorization device 100 determining operation. The authorization device 100 compares the current GPS data with the stored GPS data, making the first near field antenna 111 can be switched on early. In the event that the authorization device 100 outside the vehicle 215 for example, the program is continued immediately thereafter in step S65. Alternatively, for example, a battery life of the authorization device 100 also extend the program only after a predetermined time interval in step S65, so that the GPS positioning or position determination is retarded carried out.

In particular, in this case, the time interval depending on a distance to the vehicle 200 be determined, or the position determination is carried out depending on the distance. Depending on a last determined distance and a theoretically possible approach to the vehicle 200 For example, a timer may trigger the next position detection. In an advantageous manner, for example, in addition, the motion sensor 131 be used. The more shocks the motion sensor 131 The shorter the calculated distances between the GPS positions, the shorter the GPS position determinations will be. Join the motion sensor 131 no movement, so no position determination is performed. So it can be ensured that the authorization device 100 early the area around the vehicle 215 recognizes and in time the first near-field antenna 111 connecting them. Thus, a safe and comfortable, keyless access to the vehicle 200 realizable.

Will the authorization device 100 not moved, so stored for example, etc. then it switches to sleep or sleep mode. In sleep mode, the first near-field antenna remains 111 disabled and the authorization device 100 needs virtually no electricity. In this case, if there is no movement of the authorization device for a certain period of time 100 is detected, the program is continued in a step S67. Otherwise, in the event that the authorization device 100 within the vehicle 215 the program continues in a step S69.

In step S67, it is checked if the authorization device 100 is moved. Only at a renewed shock, for example, if the vehicle user in the morning the authorization device 100 In the hand, the authorization device is activated 100 again and the program proceeds to step S65 so that GPS data is adjusted.

The sleep mode as well as the GPS data acquisition can be designed flexibly and depending on the surrounding data. In the case of the authorization device 100 Receives radio data from the vehicle interior, so for example, the antenna 211 , which is adjusted to authorize the ignition and the immobilizer, sleeps the authorization device 100 not a. This also ensures that the vehicle 200 does not automatically close when the vehicle user the vehicle 200 without authorization device 100 leaves.

Also by an authorization device 100 that only with the motion or vibration sensor 131 is extended, an improvement in tamper resistance could already be achieved. By linking to the locating unit 121 can be contributed to a particularly high security against manipulation. In particular, an effort for manipulation is significantly increased. However, when foreign GPS data is faked and superimposed on the real signals, they only become evaluated when the authorization device 100 is in motion and not in sleep mode. Optionally, as mentioned above, the additional improvements to the existing communication can be made.

In the step 69 becomes the first near field antenna 111 switched into a communicating mode, allowing operation of the vehicle 200 how an unlock or engine start can be authorized as described above. The program is then continued in step S61.

7 shows a system 1 to authorize operation of a vehicle 200 in a second embodiment. This system 1 differs from the previous embodiment in that the authorization device 100 additionally a communication interface 151 has (see detailed representation in 8th ). At the communication interface 151 it is, for example, a mobile unit such as GSM, UMTS or LTE. In this context, the communication interface includes 151 For example, a subscriber identity module such as a SIM card. The system 1 also has a backend, contrary to the first embodiment 400 with a communication interface 401 . 403 . 405 on. In particular, the system can 1 several such authorization devices include.

In the future, the automatic emergency call system eCall will become mandatory for all vehicles in the EU. In addition, many vehicles will in the future offer connection to the Internet or be prepared for it by technology. Thus, each vehicle is already equipped with a mobile SIM card or has a preparation for such a card. Thus, basically any future vehicle would be able to provide specific data from the vehicle to an external system.

SIM cards are available in very small, compact sizes such as mini SIM, micro SIM, nano SIM as pluggable systems, or as even smaller embedded SIM system, which is installed directly. A size of the SIM card is exemplified 6 mm × 5 mm. Now you add each authorization device 100 a data transmission technology (including Embedded SIM card) added, so if necessary, certain data can be encrypted encrypted. This need not be different SIM cards, but rather the SIM cards may have the same subscriber ID, for example as one in the vehicle 200 built. Alternatively, a subscriber ID of the authorization devices is also 100 regardless of the vehicle 200 built conceivable. In particular, the vehicle needs 200 have no digital data access. For such a system, for example, provider fees can be low, since no telephony function is used, but only a very small amount of data is generated, which can be organized by the vehicle manufacturer.

The aim of the mobile data access is an encrypted synchronization of the GPS data, so that all the vehicle 200 associated authorization devices 100 the locking location 511c can query. Similar to theft tracking devices that send GPS location information, the authorization device may 100 the GPS data used when locking the vehicle 200 be captured, encrypted in the backend 400 For example, store on an external memory. This may be, for example, an encrypted cloud offered and managed by the vehicle manufacturer.

In the site 511c In the second embodiment, both the vehicle 200 as well as the authorization device 100 at the moment of locking the vehicle 200 receive the GPS data and store internally as well as encrypted to the backend 400 transfer. In this state, for example, the communication interface 151 fully active.

In the site 511b it is also possible in the second embodiment, the backend 400 to inquire whether a newer lock location relative to the time key 511c is present. In this state, for example, the communication interface 151 only active in the short term.

In the site 511a For example, in the second embodiment, the first near-field antenna is 111 and the communication interface 151 completely deactivated.

For example, an authorization is carried out as follows: The vehicle user is initially in the vehicle 200 , The authorization device 100 is active at close range because it is still the inner short-range antenna 211 of the vehicle 200 receives. The vehicle user gets out of the vehicle 200 out. He moves and the motion or vibration sensor 131 register this. He leaves the vehicle 200 and the near field reception registers the antenna 211 in the door area. The vehicle 200 can now use the authorization device 100 locate in the door area. Also the authorization device 100 receives the short range radio data from the antenna 211 in the door area. Exactly this point in time signals the authorization device 100 and the vehicle 200 in that the vehicle user is equal to the near field radio range of the vehicle 200 could leave. Consequently, the current GPS data is received. Now breaks off the near field contact, then stores the authorization device 100 the last received GPS data. The vehicle 200 is identical. It determines the current GPS data and transfers it via the communication interface 401 encrypted to the backend 400 , In the backend 400 They are used with the time key as a locking location 511c deposited.

Also the authorization device 100 dubbed after loss of short-range radio from the vehicle 200 promptly encrypted its stored GPS data via the communication interface 403 to the backend 400 where they are also key-based with time code.

Depending on the approved radius of the vehicle 215 should both the GPS data of the vehicle 200 as well as from the authorization device 100 lie in a defined area to each other. The same applies to the time key of both transmitted signals. Removes the vehicle user further from the vehicle 200 and leaves the area of vehicle proximity 215 , then this recognizes the authorization device 100 using new GPS data that compares it with the stored GPS data. So only GPS data are stored, which were determined simultaneously with the vehicle condition "open" at close range. So closes the vehicle 200 while driving, this is the time when the vehicle user is the vehicle 200 manually opened or unlocked from inside. While the authorization device 100 from the vehicle 200 For example, the doors close away automatically, either manually or automatically after a short time.

The authorization device 100 is now in the location 511b outside the near field radio range of the vehicle 200 and the current GPS data also differ with respect to the stored GPS data. The control device 141 now uses this information to the first near-field antenna 111 or decouple the antenna portion for the near range or extremely reduce its range.

As already described, the motion sensor can additionally be used for position determination 131 be used. The more shocks the motion sensor 131 and the smaller the calculated distances between the GPS positions, the shorter the GPS position determinations will have to be. The same applies to the cloud query whether the stored GPS data is still up to date, so the communication via the communication interfaces 151 . 401 . 403 . 405 ,

Will the authorization device 100 For example, if not moved, it also goes into sleep mode. Only with a renewed vibration activates the authorization device 100 again and resembles the GPS data from the backend 400 from. If now deviating GPS data with a newer time key in the backend 400 these are stored internally and the interrogation algorithms are executed accordingly.

In the same way, other authorization devices work 100 that have not been used for a long time, for example. During a movement, first the GPS data from the backend 400 queried and stored internally. The backend 400 always sends the GPS data with the most current time key.

With the data query from the backend 400 This is similar to the direct GPS data acquisition. In order to save electricity, this can be done analogously to the first exemplary embodiment. The farther the authorization device 100 from the vehicle 200 is removed, the less frequently the data should be queried and / or determined.

Also, a change in the vehicle position, for example in the event of a towing the vehicle 200 , could with the backend 400 be matched. This could be vibration sensors in the vehicle 200 , which are associated with alarm systems or crash sensors, for example. As long as they are active in a towing process, the vehicle could 200 also in the closed state continuously the backend 400 synchronize with the current GPS data.

GPS data discovery and cloud usage minimize direct communication between vehicles 200 and authorization device 100 , Since very little data is transmitted, strong encryption can be used, especially with regard to backend communication 400 be applied. Because the authorization device 100 is not constantly on receipt, are barely open doors for an external manipulation attack. The identity key or internal reconciliation key on which the vehicle is located 200 and its immobilizer has been factory tuned, remains on the appropriate authorization device as in prior art systems 100 ,

Advantageously, the described synchronization of the locking location allows 511c a separate, keyless operation of the vehicle 200 through several authorization devices 100 even if this has been moved in the meantime and has a new locking location.

A program for operating the system 1 is in 9 shown. In the step S91 become the GPS data of the respective authorization device 100 determined analogously to the program according to the first embodiment. Instead of the locking location 511c however, only in the local storage unit of the authorization device 100 For example, in a step S92, it is additionally stored via the communication interfaces 151 . 401 . 403 . 405 the backend 400 provided. The program is then continued in a step S93.

In step S93, different from that in step S63 according to the first embodiment, the lock-up location 511c through the backend 400 provided. For example, the location information of the vehicle 200 by the respective authorization device 100 be queried. If these are identical to those stored in the storage unit, then the vehicle user has the currently used vehicle key. If the stored GPS data are different, then, for example, a stored time key determines which GPS data is more up-to-date.

The one in the backend 400 stored position data may have been deposited directly from the vehicle, or from the last used authorization device 100 with which the vehicle 200 was left. Decisive which GPS data are the most current, then the time key, which was deposited there. The time key does not have to pass through the authorization device 100 be generated, but by the backend 400 be deposited, for example, at the moment of the connection. A probability that an authorization device 100 that at an earlier date the vehicle 200 closed, but later connected to the backend 400 receives is very low. The program is then continued in a step S95.

The steps S95-S99 may be performed in analogy to the steps S65-S69 of the program according to the first embodiment. Is the authorization device 100 in sleep mode because it is not moved, for example, so can a communicating operation of the communication interface 151 be set so that no one through the mobile data system to the authorization device 100 can access. Each authorization device 100 is, for example, individual, since this is also vorbreitet for the electronic immobilizer with an internal adjustment key. This can then also be used for data encryption via the backend 400 be used and thus constantly adapted.

The procedures mentioned in the first and second embodiments contribute to an improved manipulation security. The direct costs per vehicle increase only slightly.

In a third embodiment ( 10 ) is an authorization device 100 which differs from the preceding embodiments in that it comprises a second near-field antenna 161 with a symbolic reach 163 having. The second near-field antenna is analogous to the first near-field antenna, for example 111 trained and serves a second communication with the vehicle 200 , separate from the first communication through the first near-field antenna 111 , The second near field antenna 161 is thus only of the vehicle 200 lying antenna 211 addressed. In particular, a separate identity key can be provided by the second communication. The second near field antenna 161 is not from the antennas 211 in the vehicle door or antennas 211 , via which the vehicle access takes place, addressed and the vehicle 200 accepts the separate identity key only when the vehicle 200 was properly unlocked, so as described by means of the radio unit 101 or the first communication. The second near field antenna 161 can then be activated permanently, for example. This advantageously enables a keyless starting of the vehicle 200 even if the authorization device 100 is long and there is no movement. For example, this would be the case if the vehicle 200 is switched off and the vehicle user waits with the engine off.

In a fourth embodiment (not shown in detail) remains as an alternative to the third embodiment, the first near-field antenna 111 active until it is actively disconnected again. For example, the first near-field antenna becomes 111 switched on as soon as the authorization device 100 the vehicle 200 approaches (see first and second embodiments), or when the vehicle 200 over the radio unit 121 is opened. The authorization device recognizes in both cases when in the interior of the vehicle 200 arrives. The first near field antenna 111 therefore remains active. Only the GPS and backend matching, which needs the most energy, is suppressed. Only when the vehicle user the vehicle 200 leaves and thus the authorization device 100 moves, becomes the first near-field antenna 111 actively disconnected as soon as the authorization device 100 no antenna 211 of the vehicle 200 recognizes more.

In the event that the vehicle 200 after some time falls asleep, so for example when it stops its control units shut down, sends the internal antenna 211 For example, no more signals and a keyless start is no longer possible. In the event that the vehicle user the vehicle leaves, becomes the internal antenna 211 but woken again as soon as the door is opened. Thus, the inside of the vehicle 200 permanently connected first near-field antenna 111 be turned off when the authorization device 100 the respective antenna 211 happened in the door area. Advantageously, this allows keyless locking of the vehicle 200 even if the authorization device 100 is long and there is no movement.

• 1. Der Fahrzeugführer stellt den Motor ab.
• 2. Er verlässt das Fahrzeug mit dem als Autorisierungsvorrichtung ausgebildeten Funkschlüssel, wodurch dieser bewegt wird bzw. Erschütterungen registriert.
• 3. Der Fahrzeugführer passiert die Fahrzeugtür und verschließt das Fahrzeug entweder über einen Funktaster oder das Fahrzeug verschließt sich automatisch, indem der Fahrzeugführer sich vom Fahrzeug entfernt. Der Funkschlüssel registriert beim Verlassen des Fahrzeugs die Nahfeldantennen der Fahrzeugtür.
• 4. In beiden Fällen (Betätigung des Funktasters oder Entfernen von den Nahfeldantennen im Türbereich) wird eine GPS-Ortung gestartet. Gleichzeitig wird der Nahbereichsfunk getrennt.
• 5. Wenn GPS-Daten ermittelt wurden, werden sie im Funkschlüssel intern gespeichert und/oder mit einem Backend abgeglichen. In dem Backend wird dann zusätzlich ein Zeitschlüssel hinterlegt.
• 6. Im Sonderfall, dass kein GPS-Signal sofort empfangbar und/oder kein Abgleich mit dem Backend möglich ist, misst der Funkschlüssel die Zeit ab dem manuellen oder automatischen Verschließen des Fahrzeugs. Diese Zeit kann dann bei einer Fahrzeugannäherung wieder genutzt werden um die Nahbereichsantennen früher wieder zuzuschalten.
• 7. Im Sonderfall, dass überhaupt kein GPS-Signal empfangbar ist, z.B. in einer Tiefgarage, und vom Fahrzeugverschluss bis zur Bewegungslosigkeit des Funkschlüssels kein Empfang besteht, speichert der Funkschlüssel die Zeit vom Fahrzeugverschluss bis zu dem Zeitpunkt, an dem keine Erschütterungen mehr auftreten. Zeitdaten vom Fahrzeugverschluss bis zum Einschlafen des Funkschlüssels können neben der inneren Abspeicherung auch an das Backend übergeben werden, beispielsweise kurz bevor der Funkschlüssel wegen fehlender Erschütterungen einschläft. Denkbar ist auch, dass der Funkschlüssel erst die Antennen abtrennt, sobald GPS- oder Netzempfang besteht.

The following describes a first application in which a driver leaves the vehicle.

• 1. The driver stops the engine.
• 2. He leaves the vehicle with the trained as authorization device radio key, whereby this is moved or registered shocks.
• 3. The driver passes the vehicle door and closes the vehicle either via a wireless pushbutton or the vehicle closes automatically by the driver away from the vehicle. The radio key registers the near field antennas of the vehicle door when leaving the vehicle.
• 4. In both cases (pressing the wireless pushbutton or removing the near field antennas in the door area), GPS positioning is started. At the same time the short-range radio is disconnected.
• 5. If GPS data has been determined, it will be stored internally in the remote key and / or compared with a backend. In the backend a time key is then additionally deposited.
• 6. In the special case that no GPS signal can be received immediately and / or no adjustment with the backend is possible, the radio key measures the time from the manual or automatic locking of the vehicle. This time can then be used again in a vehicle approach to switch on the short-range antennas earlier again.
• 7. In the special case that no GPS signal can be received at all, eg in an underground car park, and there is no reception from the vehicle closure to the immobility of the radio key, the radio key stores the time from the vehicle closure to the time when no vibrations occur. Time data from the vehicle closure to falling asleep the radio key can be passed to the backend in addition to the internal storage, for example, shortly before the radio key falls asleep due to lack of vibration. It is also conceivable that the remote key separates the antennas, as soon as GPS or network reception exists.

• 1. Der Fahrzeugführer nimmt den Funkschlüssel und setzt sich Richtung Fahrzeug in Bewegung. Der Funkschlüssel nimmt also Bewegung bzw. Erschütterung wahr.
• 2. Der Funkschlüssel nimmt eine GPS-Ortung vor und vergleicht sie mit den abgespeicherten Werten der letzten Fahrzeugverschließung. Besteht eine Kopplung mit einem Backend können ggf. aktuellere GPS-Daten mit aktuellerem Zeitschlüssel abgefragt und übernommen werden.
• 3. Aus den ermittelten und den abgelegten oder den vom Backend neu bezogenen Daten berechnet der Funkschlüssel die Fahrzeugentfernung.
• 4. Aus der berechneten Entfernung kann der Funkschlüssel eine interne Zeit bzw. ein Zeitintervall festlegen, wann der nächste GPS-Abgleich notwendig ist. Bei großer Entfernung erfolgt dies in einem großen Zeitintervall, bei kleiner Entfernung in einem kleinen Zeitintervall. Je näher der Funkschlüssel dem Fahrzeug also kommt, desto kürzer aufeinanderfolgend werden die GPS-Abgleiche durchgeführt. Bei Synchronisation mit dem Backend können zusätzliche GPS-Abfragen nützlich sein. Das Fahrzeug könnte beispielsweise inzwischen mit einem anderen Funkschlüssel bewegt und anderorts abgestellt worden sein. Sollten sich die Daten vom Backend geändert haben, also andere GPS-Daten mit jüngeren Zeitschlüsseln vorliegen, dann werden diese erneut übernommen und wieder ab Punkt 3. begonnen.
• 5. Für den Sonderfall, dass keine GPS-Daten vorhanden sind, kann im Funkschlüssel ein Zeitraum hinterlegt sein, in dem der Funkschlüssel bei der Fahrzeugverschließung keine GPS-Daten empfangen hat, also vom Fahrzeugverschluss bis der Funkschlüssel abgelegt wurde bzw. er keine Bewegung mehr registriert hat. Für diesen Zeitraum plus eine vorgegebene Zeitspanne wird dann die Nahbereichsantenne aktiviert. Gleichzeitig wird kontinuierlich der GPS-Empfang geprüft während der Funkschlüssel Bewegung registriert. Falls in der Zeit, in der die Nahbereichsantennen zugeschaltet wurden, doch ein GPS-Empfang möglich ist, wird wieder bei Punkt 3. begonnen.
• 6. In Punkt 4. und 5. wird sichergestellt, dass früh genug vor Erreichen des Fahrzeugs die Nahbereichsantennen aktiviert werden. Dies kann auch mittels einer Hysterese erfolgen, bei der ein frühes Deaktivieren der Nahbereichsantennen beim Entfernen vom Fahrzeug und ein früheres Aktivieren bei Annäherung zum Fahrzeug durchgeführt werden. Bei der Fahrzeugannäherung ist ein Relais-Angriff bzw. eine Manipulation durch Dritte deutlich unwahrscheinlicher. Daher kann hier die Antenne frühzeitiger zugeschaltet werden. Durch eine frühzeitige Zuschaltung der Nahbereichsantennen bei Fahrzeugannäherung kann auch das Zeitintervall relativ groß bleiben. Der Berechnungsaufwand und der Stromverbrauch werden dadurch verringert.
• 7. Immer, wenn zwischendurch keine Bewegung registriert wird, kann auch ein zusätzlicher Zeitmesser dies erfassen. Je nach Zeitraum kann dann festgelegt werden, ob bei erneuter Bewegung eine neue GPS-Abfrage notwendig ist. Der Funkschlüssel sollte schließlich aus dem Zeitraum der Bewegungstätigkeit den neuen GPS-Abgleich berechnen. Zeiträume, in denen der Funkschlüssel nicht bewegt wird oder er keine Erschütterungen erfährt, werden nicht mit in die Annäherung mit eingerechnet.

In the following, a second application is described in which a driver takes the remote key and moves in the direction of the vehicle.

• 1. The driver takes the remote control key and starts moving towards the vehicle. The radio key thus perceives movement or vibration.
• 2. The remote key performs a GPS location and compares it with the stored values of the last vehicle closure. If there is a link with a backend, possibly more up-to-date GPS data with a more up-to-date time key can be queried and accepted.
• 3. The radio key calculates the vehicle distance from the data determined and stored or from the backend.
• 4. From the calculated distance, the radio key can specify an internal time or a time interval when the next GPS calibration is necessary. At a long distance this is done in a large time interval, at a small distance in a small time interval. The closer the radio key to the vehicle comes, the shorter the successive GPS balances are performed. When syncing with the backend, additional GPS queries may be useful. For example, the vehicle could now have been moved with another radio key and parked elsewhere. If the data has changed from the backend, ie other GPS data with younger timekeys are available, then these are taken over again and started again from point 3.
• 5. In the special case that no GPS data is available, a period can be stored in the radio key, in which the radio key has received no GPS data in the vehicle closure, ie from the vehicle shutter to the radio key was stored or he no longer movement registered. For this period plus a predetermined period of time then the short-range antenna is activated. At the same time, the GPS reception is continuously checked during the radio key movement registered. If a GPS reception is possible during the time the local area antennas are switched on, the procedure starts again from point 3.
• 6. In paragraphs 4 and 5 it is ensured that the near range antennas are activated soon enough before reaching the vehicle. This can also be done by means of a hysteresis in which an early deactivation of the short-range antennas when removing from the vehicle and an earlier activation when approaching the vehicle are performed. When approaching the vehicle, a relay attack or manipulation by a third party is much less likely. Therefore, the antenna can be switched on earlier. By early connection of the near-field antennas when approaching the vehicle, the time interval can also remain relatively large. The calculation effort and the power consumption are thereby reduced.
• 7. Whenever no movement is detected in between, an additional timer can detect it. Depending on the time period, it can then be determined whether a new GPS query is necessary when moving again. The radio key should eventually calculate the new GPS balance from the period of movement activity. Periods in which the radio key is not moved or he experiences no vibrations, are not included in the approach with.

• 1. Der Fahrzeugführer nähert sich dem Fahrzeug. Mittels des GPS-Annäherungsalgorithmus wurde früh genug der Nahfeldfunk des Funkschlüssels zugeschaltet oder der Fahrer öffnet über den Funktaster die Fahrzeugtür.
• 2. In beiden Fällen erkennt der Nahfeldfunk in der Tür den Funkschlüssel, während sich der Fahrer ins Fahrzeug bemüht. Im einfachsten Fall lässt der Funkschlüssel die Nahfeldantenne zugeschaltet, verzichtet aber, solange er sich in der Reichweite der Fahrzeug-Innen-Nahfeldantenne befindet, auf weitere GPS-Abgleiche. Auch wenn keine Erschütterungen mehr erkannt werden, lässt er die Nahfeldantennen zugeschaltet. Der Schlüssel trennt die Antenne erst, wenn er erneut die Nahfeldantenne in der Tür wahrnimmt, oder einen Verriegelungsbefehl über den Funktaster. In dem Moment, wo eine Tür von innen geöffnet wird, werden diese Tür-Antennen zugeschaltet oder das Fahrzeug hat sie immer aktiv.
• 3. Alternativ wäre eine zweite Nahfeldfunkantenne denkbar, welche immer aktiv ist und nur von der inneren Fahrzeugantenne akzeptiert wird. Die zweite Nahfeldfunkantenne wird zum Beispiel nur akzeptiert, wenn zuvor eine Fahrzeugannäherung bzw. Fahrzeugöffnung und keine Entfernung des Funkschlüssels vom Fahrzeug bzw. eine Verschließung per Funkschlüssel erkannt wurde. Eine Registrierung des Funkschlüssels an der Tür und eine darauffolgende Registrierung im Fahrzeuginnenraum bedeutet eine Annäherung. Eine Registrierung zuerst im Innenraum und eine darauffolgende an der Fahrzeugtür bedeutet hingegen eine Entfernung vom Fahrzeug. Eine ständig aktive zweite Nahfeldfunkantenne nur für die Fahrzeuginnenantenne wird dann vom Fahrzeug nur (an)erkannt, wenn zuvor das Fahrzeug den Fahrzeugzugang über die Außenantennen mittels der GPS-Antennenzuschaltung erkannt hat. In anderen Worten umfasst der Schlüssel getrennte Nahbereichsantennen für den Fahrzeugzugang (GPS und abschaltbare Antenne) und eine ständig aktive für den Fahrzeugstart. Das Fahrzeug erkennt die ständig aktive Antenne mit einer anderen Teilnehmer-ID für den Fahrzeuginnenraum aber nur dann an, wenn der normale Fahrzeugzugang erkannt wurde.

In a third application, the driver is in the near field area of the vehicle and would like to start or restart the vehicle.

• 1. The driver approaches the vehicle. By means of the GPS approach algorithm, the near-field radio of the radio key was switched on soon enough or the driver opens the vehicle door via the radio push-button.
• 2. In both cases, the near-field radio detects the radio key in the door while the driver tries to get into the vehicle. In the simplest case, the remote control key allows the near field antenna to be switched on, but waives further GPS adjustments as long as it is within the range of the vehicle interior near-field antenna. Even if no more shocks are detected, he lets the near field antennas switched on. The key separates the antenna only when it detects the near field antenna in the door again, or a locking command via the wireless pushbutton. The moment a door is opened from the inside, these door antennas are switched on or the vehicle always has them active.
• 3. Alternatively, a second near field radio antenna would be conceivable, which is always active and is only accepted by the inner vehicle antenna. The second near-field radio antenna is accepted, for example, only if a vehicle approach or opening and no removal of the remote key from the vehicle or a remote control key has been detected beforehand. A registration of the remote key on the door and a subsequent registration in the vehicle interior means an approximation. A registration first in the interior and a subsequent on the vehicle door, however, means a distance from the vehicle. A constantly active second near-field radio antenna for the vehicle interior antenna is then only recognized by the vehicle if the vehicle has previously recognized the vehicle access via the external antennas by means of the GPS antenna connection. In other words, the key includes separate proximity antennas for vehicle access (GPS and turn-off antenna) and a constantly active for vehicle start. The vehicle recognizes the constantly active antenna with a different user ID for the vehicle interior but only if the normal vehicle access has been detected.

LIST OF REFERENCE NUMBERS

1

 system

100

authorization device

101

radio unit

103

Range

111

first near-field antenna

113

Range

121

locating unit

131

Motion sensor unit

141

control device

151

Communication Interface

161

second near-field antenna

163

Range

200

vehicle

201

control Center

211

antenna

213a, 213b, 213c, 213d

Range

215

vehicle near

221

steering lock

231

start button

241

Engine control unit

300

Range bridging technology

310

 first transmitting and receiving unit

311

High-speed wireless technology

313

Range

320

 second transmitting and receiving unit

321

High-speed wireless technology

323

Range

400

backend

401, 403, 405

Communication Interface

500

tracking system

501, 503, 505

satellite

511

current location

511a, 511b

Location

511c

 locking location

Claims (13)

Method for operating an authorization device ( 100 ) for a vehicle ( 200 ), which leads to an initial communication with the vehicle ( 200 ) is formed and a locating unit ( 121 ), which leads to a determination of a current Location ( 511 ) of the authorization device ( 100 ) in which - the authorization device ( 100 ) a locking location ( 511c ) representative of a location of the vehicle ( 200 ), at which a last locking operation of the vehicle ( 200 ), - the tracking unit ( 121 ) at least for a given period of time into a current location ( 511 ) of the authorization device ( 100 ) determining the current location ( 511 ) of the authorization device ( 100 ), depending on the current location ( 511 ) and the locking location ( 511c ) a communication operation state of the authorization device ( 100 ) which is representative of a communicating operation of the authorization device ( 100 ), and - in the case that the authorization device ( 100 ) in the communication mode, a first authorization signal for operating the vehicle ( 200 ) is provided by the first communication. Method according to claim 1, in which - the current location ( 511 ) of the authorization device ( 100 ) is determined again after a predetermined time interval, wherein - the predetermined time interval depends on a distance between the current location ( 511 ) and the locking location ( 511c ) is determined. Method according to one of the preceding claims, wherein the authorization device ( 11 ) has a memory unit, in which - in the event that a locking operation of the vehicle ( 200 ) by the authorization device ( 100 ), a first determined current location ( 511 ) of the authorization device ( 100 ) after performing the locking operation as a locking location ( 511c ) is stored in the storage unit. Method according to one of the preceding claims, wherein the authorization device ( 100 ) a communication interface ( 151 ) which is adapted to communicate with a backend ( 400 ), in which - in the event that an interlocking operation of the vehicle ( 200 ) by the authorization device ( 100 ), a first determined current location ( 511 ) of the authorization device ( 100 ) after performing the locking operation as a locking location ( 511c ) via the communication interface ( 151 ) provided. Method according to one of the preceding claims, wherein the authorization device ( 100 ) a vibration and / or motion sensor unit ( 131 ), in which - by means of the vibration and / or motion sensor unit ( 131 ) moving the authorization device ( 100 ), and, depending on the detected movement of the authorization device ( 100 ) of the current location ( 511 ) of the authorization device ( 100 ) determining operation of the locating unit ( 121 ) is controlled. Method according to one of the preceding claims, wherein the authorization device ( 100 ) a vibration and / or motion sensor unit ( 131 ), in which - by means of the vibration and / or motion sensor unit ( 131 ) moving the authorization device ( 100 ), and, depending on the detected movement of the authorization device ( 100 ) the communication operating state of the authorization device ( 100 ) is controlled. Method according to one of the preceding claims 5 or 6, wherein - depending on the detected movement of the authorization device ( 100 ) a route characteristic value is determined that is representative of a traveled distance of the authorization device ( 100 ), - depending on one by means of the locating unit ( 121 ) last determined location and the route characteristic a corrected current location is determined, and - depending on the corrected current location of the communication operating state of the authorization device ( 100 ) is controlled. Method according to one of the preceding claims, wherein the authorization device ( 100 ) a first near-field antenna ( 111 ), which is designed for the first communication with the vehicle ( 200 ), in which - controlling the communication operating state of the authorization device ( 100 ) controlling the communicating operation of the first near field antenna ( 111 ). Method according to one of the preceding claims, wherein the authorization device ( 100 ) a second near-field antenna ( 161 ), which is designed for a second communication with the vehicle ( 200 ), in which - a second authorization signal for operating the vehicle ( 200 ) is provided by the second communication. Authorization device ( 100 ) for a vehicle ( 200 ), which is adapted to perform a method according to any one of the preceding claims 1 to 9. Method for operating a system ( 1 ) for authorizing operation of a vehicle ( 200 ), whereby the system ( 1 ) a backend ( 400 ) with a communication interface ( 401 . 403 . 405 ) and at least one authorization device ( 100 ) according to claim 10, wherein - the at least one authorization device ( 100 ) performs a method according to any one of the preceding claims 1 to 9. Method according to claim 11, in which - the at least one authorization device ( 100 ) via the communication interface ( 401 . 403 . 405 ) of the backend ( 400 ) a locking location ( 511c ) representative of a location of the vehicle ( 200 ), at which a last locking operation of the vehicle ( 200 ), and - in the event that the vehicle is locked ( 200 ) by the at least one authorization device ( 100 ), a first determined current location ( 511 ) of the respective authorization device ( 100 ) after performing the locking operation as a locking location ( 511c ) the backend ( 400 ) provided. System ( 1 ) for authorizing operation of a vehicle ( 200 ), comprising - a backend ( 400 ) with a communication interface ( 401 . 403 . 405 ), and - at least one authorization device ( 100 ) according to claim 10, wherein the system ( 1 ) is adapted to perform a method according to any one of the preceding claims 11 or 12.

Images