Method for controlling authorization to an object and a computer program product for the authorization control

• US 7,859,386 B2
• Filed: 04/23/2003
• Issued: 12/28/2010
• Est. Priority Date: 10/23/2000
• Status: Expired due to Fees

• Current Assignee: Volvo Technology Corporation
• Original Assignee: Volvo Technology Corporation
• Inventors: Lundkvist, Ola
• Primary Examiner(s): Brown; Vernal U
• Application Number:
  US10/249,611
• Publication Number:
  US 20030184431A1
• Time in Patent Office: 2,806 Days
• Field of Search: 340/5.27, 340/5.1, 340/5.2, 340/5.21, 340/5.8, 340/825.69, 340/825.72, 340/5.64, 340/5.61, 340/5.6, 340/10.1, 307/10.1
• US Class Current: 340/5.27
• CPC Class Codes: G07C 2009/00396 starting with prompting the keyless data carrier
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2209/63 Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks

Abstract

Method and arrangement for controlling authorization for access to an object, in which a signal communication via electromagnetic waves is established between the object and a wireless portable unit when a tripping device on the object is actuated. The signal communication includes at least one first signal (X1 . . . Xn) that is sent from the object to the portable unit, and at least one second signal (Y3, Z1 . . . Zn) that is sent from the portable unit to the object in response to the first signal(s). The second signal(s) includes sufficient information for verifying that the portable unit has an approved identity. The verification information is checked, a distance is measured between the object and the portable unit and the authorization is confirmed if both the checked verification information is approved and the measured distance is less than a predetermined value. For the distance measurement, a time (T3) is measured for the transmission of at least one of the first signals and at least one of the second signals with verification information.

Claims

1. A method for controlling access to an object, comprising the steps:

a) establishing signal communication via electromagnetic waves between the object and a wireless portable unit when a tripping device on the object is actuated, the signal communication comprising identity-based data-carrying signals sent from at least one of the object and the wireless portable unit and the identity-based data contained therein serving to identify the signal-sending device;

b) evaluating the distance between the object and the portable unit by measuring the total time for a plurality of said identity-based data-carrying signals to pass between the object and the portable unit;

c) evaluating at least one of said identity-based data-carrying signals to determine whether the identity-based data carried therein is correct; and

d) authorizing access to the object if said total time is below a predetermined threshold and the identity-based data carried in said at least one evaluated signal is correct.

2. The method of claim 1, wherein said identity-based information-carrying signals include a signal (X) from the object that includes object identity data.

3. The method of claim 2, wherein said identity-based information-carrying signals include a signal (Y) from the portable unit that includes data that has been generated by algorithmically processing data included in said signal (X) from the object, said signal (Y) from the portable unit being evaluated in said step c) and the algorithmically generated data contained therein needing to be correct for access to the object to be authorized in said step d).

4. The method of claim 3, wherein said algorithmically generated data is obtained by processing a random number generated by the object and included in said signal (X) from the object.

5. The method of claim 2, wherein said identity-based information-carrying signals include a signal (Z) from the portable unit that includes portable unit identity data.

6. The method of claim 5, wherein said identity-based information-carrying signals include a signal (X) from the object that includes object identity data, said method further comprising

sending a further signal (Y) from the portable unit to the object, which further signal (Y) includes data that has been generated by algorithmically processing data included in said signal (X) from the object, and

evaluating said further signal (Y) to determine whether the algorithmically generated data included therein is correct.

7. The method of claim 6, wherein said further signal (Y) also includes data that has been generated by algorithmically processing a random number generated by the portable unit.

8. The method of claim 6, wherein access to the object is authorized if said total time is below a predetermined threshold, the identity-based data carried in said at least one evaluated signal is correct, and the algorithmically generated data included in said further signal (Y) is correct.

9. The method of claim 7, wherein access to the object is authorized if said total time is below a predetermined threshold, the identity-based data carried in said at least one evaluated signal is correct, and the algorithmically generated data included in said further signal (Y) is correct.

10. The method of claim 6, wherein the time for said further signal (Y) to be transmitted from the portable unit to the object is not used in measuring the total time in said step b).

11. The method of claim 1, wherein said identity-based data-carrying signals comprise signals carrying identity information in parsed form and said evaluating in said step c) is not performed until all parsed identity information-carrying signals have been sent and received.

12. The method of claim 11, wherein said identity information in parsed form includes object identity information (x₂ . . . x_n) in parsed form.

13. The method of claim 11, wherein said identity information in parsed form includes portable unit identity information (z₁ . . . z_n) in parsed form.

14. The method of claim 11, wherein said identity information in parsed form includes object identity information (x₂ . . . x_n) in parsed form and portable unit identity information (z₁ . . . z_n) in parsed form.

15. The method of claim 14, wherein the signals carrying said object identity information (x₂ . . . x_n) in parsed form and the signals carrying said portable unit identity information (z₁ . . . z_n) in parsed form are sent in alternating sequential fashion ( . . . x_n, Z_n, X_n+1, Z_n+1 . . . ).

16. The method of claim 11, wherein the total time in said step b) includes the time for said signals carrying identity information in parsed form to pass between the object and the portable unit.

17. The method of claim 16, wherein the total time in said step b) includes only the time for said signals carrying identity information in parsed form to pass between the object and the portable unit.

18. The method of claim 11, further comprising

sending a further signal (Y) from the portable unit to the object, which further signal (Y) includes data that has been generated by algorithmically processing data the portable unit has received from the object, and

evaluating said further signal (Y) to determine whether the algorithmically generated data included therein is correct.

19. The method of claim 18, wherein said further signal (Y) includes data that has been generated by algorithmically processing a random number generated by the object.

20. The method of claim 19, wherein said further signal (Y) also includes data that has been generated by algorithmically processing a random number generated by the portable unit.

21. The method of claim 19, wherein access to the object is authorized if said total time is below a predetermined threshold, the identity-based data carried in said at least one evaluated signal is correct, and the algorithmically generated data included in said further signal (Y) is correct.

22. The method of claim 20, wherein access to the object is authorized if said total time is below a predetermined threshold, the identity-based data carried in said at least one evaluated signal is correct, and the algorithmically generated data included in said further signal (Y) is correct.

23. The method of claim 1, wherein measuring time commences upon an identity-based data-carrying signal being sent from the object to the portable unit.

24. The method of claim 23, wherein the signal upon which measuring time commences is the first signal in said signal communication.

25. The method of claim 23, wherein the signal upon which measuring time commences is a second or subsequent signal in said signal communication.

26. The method of claim 1, wherein measuring time commences upon an identity-based data-carrying signal being sent from the portable unit to the object, the signal upon which measuring time commences being a second or subsequent signal in said signal communication.

27. The method of claim 6, wherein said further signal (Y) is sent only after the measuring time in said step b) concludes.

28. The method of claim 18, wherein said further signal (Y) is sent only after the measuring time in said step b) concludes.

29. The method of claim 1, wherein the portable unit checks identity-based data received from the object.

30. The method of claim 29, wherein the portable unit only sends signals to the object if the identity-based data checked by the portable unit is approved by the portable unit.

31. The method of claim 1, wherein the identity-based data-carrying signals are encrypted.