EP3460775A1 - Method for authorizing remote control - Google Patents

Abstract

The invention relates to a method for authorizing a remote control (12) to be operated by a user (13) and provided with an output device for controlling functions of a device. According to the invention, the device only executes control commands of the remote control (12) if at least once prior authorization has taken place with the following steps:
upon actuation of the remote control (12), the device in response sends an authorization signal to the remote control (12),
the remote control (12) converts the authorization signal into an output signal and outputs the output signal via the output device,
the user (13) executes an input signal dependent input on the remote control (12),
the remote control (12) converts the input into an authorization response and sends the authorization response to the device,
the device compares the authorization response with the sent authorization signal and determines sufficient match.

Description

The invention relates to a method for authorizing a remote control to be operated by a user and provided with an output device for controlling functions of a device. In addition, the invention relates to a system, a computer program and a control unit.

The control of functions of a device by a remote control is known from various fields of technology. For example, reference is made to the control of machines, cranes, air conditioners, devices for output or recording of image or sound, vehicles. Preference is given to wireless remote controls. Also known is the use of a smartphone as a remote control, such as lighting control. From the DE 10 2014 010 089 A1 is the remote control of functions of a vehicle through a smartphone known. The document also discloses a method for authorizing communication between the smartphone or other mobile communication unit and a control device in the vehicle. The authorization is there in particular to ensure that a particular vehicle is controlled only by his driver by remote control. In this context, the driver must initially operate the vehicle in a manner detectable by the vehicle's control unit. The driver must therefore have physical access to functions of the vehicle, in particular pedals, levers or switches can operate on the vehicle.

Object of the present invention is to provide a further method for authorizing a remote control for the control of functions of a device.

• auf eine Betätigung der Fernbedienung sendet die Vorrichtung als Reaktion ein Autorisierungssignal an die Fernbedienung,
• die Fernbedienung wandelt das Autorisierungssignal in ein Ausgabesignal um und gibt das Ausgabesignal über die Ausgabeeinrichtung aus,
• der Benutzer führt eine vom Ausgabesignal abhängige Eingabe an der Fernbedienung aus,
• die Fernbedienung wandelt die Eingabe in eine Autorisierungsantwort um und sendet die Autorisierungsantwort an die Vorrichtung,
• die Vorrichtung vergleicht die Autorisierungsantwort mit dem versandten Autorisierungssignal und stellt ausreichende Übereinstimmung fest.

To solve the problem, it is provided that the device executes control commands of the remote control only if authorization has previously taken place at least once with the following steps:

• upon actuation of the remote control, the device in response sends an authorization signal to the remote control,
• the remote controller converts the authorization signal into an output signal and outputs the output signal via the output device,
• the user executes an output signal dependent input on the remote control,
• the remote converts the input into an authorization response and sends the authorization response to the device
• the device compares the authorization response with the sent authorization signal and determines sufficient match.

The first operation of the remote control is a request for transmission of an authorization signal or a control command. The device has as well as the remote control transmitter and receiver for the intended communication. Preferably, communication is via a radio technology, in particular via WLAN, Bluetooth or other radio technologies for the networking of objects. Output means and output signal are designed and provided such that the user can perceive the output signal.

According to a further aspect of the invention, the device only accepts or executes a control command of the remote control, provided the authorization response is attached to the control command of the remote control, even if the authorization response has already been transmitted by the remote control at least once before. This ensures that a control command from another remote control is not mistakenly accepted.

According to a further aspect of the invention, it is provided that the device does not accept or execute control commands of the remote control when a certain period of time has elapsed since the first or last authorization signal was received. A time window can be defined and stored, within which the control commands of an already authorized remote control are accepted. The beginning of the time window can be dependent on various conditions, namely the input the first or last authorization signal before the currently available control command of the remote control.

According to a further aspect of the invention, a wirelessly communicating mobile device is used as a remote control, in particular a smartphone, tablet or a smartwatch. As a smartphone is here in particular a mobile phone with screen and an additional wireless technology understood, so that a mobile network and another wireless network can be used. Modern smartphones can also communicate via Wi-Fi and Bluetooth anyway. Required is only a suitable app as software. Similarly, this applies to tablets and smartwatches or similar mobile devices.

According to another aspect of the invention, a screen is used as the output device. Alternatively, sounds or vibrations can be output.

In accordance with another aspect of the invention, a pattern is displayed on the screen as an output signal. The remote controller accepts a pattern generated by the user by swiping on the screen as input and converts this into the authorization response. Finally, the device then indirectly compares the pattern indicated on the screen with the pattern created by the user by wiping.

According to a further aspect of the invention, a task is displayed on the screen as an output signal. The previously transmitted authorization signal is then the solution of the task or a value derived therefrom. The remote controller accepts a user-entered solution as input and converts it to the authorization response.

According to a further aspect of the invention, rules for transforming the authorization signal into the output signal and / or for transforming the input into the authorization response are stored in the remote control. The rules are preferably implemented as software and stored in the remote control. Also the rules for a reverse transformation can be stored. Finally, the rules for one or both directions may also be stored in the device.

According to another aspect of the invention, the device generates the authorization signal as a random value, the random value being generated electronically by the device. The starting point of the authorization signal can thus be random numbers, which are generated in a manner known per se by suitable software or by random generators. The random numbers then result in the authorization signals by assignment via a stored table or a calculation rule.

According to a further aspect of the invention, an access point for WLAN, Bluetooth or other radio technology is part of the device. In addition, the access point sends the authorization signal and receives the authorization response. The access point has the function of a transmitter and receiver in the device.

According to a further aspect of the invention, the device is a vehicle, wherein the remote control, for example, one or more of the following functions are controlled:
Operation of a parking heater, door closing mechanism, window closing mechanism, roof closing mechanism, parking functions, operation of a lift axle and air suspension, door locking mechanism, operation of aerodynamic flaps; Machine functions, in particular as concrete mixers, cranes, lifts, dump trucks, belt trolleys.

Vehicles are preferably passenger cars or trucks or commercial vehicles. The device may also be a ship or an aircraft, or a part thereof.

According to a further aspect of the invention, the device is part of a building, wherein, for example, one or more of the following functions are controlled:
Door locking mechanism, home automation, lighting, heating, air conditioning.

The invention also provides a system for carrying out one of the above-explained methods and having the features of claim 13. The system is provided with a remote control and an electronic control device for the device, in particular for a vehicle, wherein the control device with a communication module for transmitting of authorization signals and for receiving signals from the remote control.

Furthermore, the subject matter of the invention is a computer program, a computer program product or an app for a remote control or for a control device of a device, namely for carrying out one of the methods.

Finally, the subject of the invention is also a control device with a computer program, a computer program product or an app for carrying out one of the methods.

Fig. 1

eine schematische Darstellung eines Fahrzeugs mit externem Benutzer und drahtloser Fernbedienung,

Fig. 2

eine Tabelle zur Erläuterung der zwischen Fernbedienung und Fahrzeug übertragenen Daten,

Fig. 3

eine virtuelle Tastatur auf einem Smartphone mit Angabe der Reihenfolge der durch Wischen zu berührenden Ziffern.

Further features of the invention will become apparent from the description, moreover, and from the claims. Show it:

Fig. 1

a schematic representation of a vehicle with external user and wireless remote control,

Fig. 2

a table explaining the data transmitted between the remote control and the vehicle,

Fig. 3

a virtual keyboard on a smartphone indicating the order of digits to be touched by wiping.

As a device here is a vehicle 10 is provided, namely a semi-trailer with pneumatic brake system and electronic brake system. Part of the electronic Brake system is an electronic control unit ECU, which can communicate via a communication module 11, in particular a so-called access point, with a WLAN-enabled device, such as a smartphone as a remote control 12 of a user 13. The communication module 11 may be integrated into the control unit ECU or be connected to this via a corresponding line.

In the vehicle 10 existing or accumulating data should be available via the remote control 11. Additionally or alternatively, functions of the vehicle 10 should be controllable by the remote control 11, such as functions of a pneumatic suspension (level adjustment), adjustment of a lift axle, door lock, tail lift, aerodynamic flaps, lighting, auxiliary heating, window functions. In particular for the control of the functions must be ensured that only authorized users or authorized remote controls can communicate wirelessly with the communication module 11. In order to guarantee the required high degree of safety, various measures are envisaged:
The communication module 11 is set up so that only one remote control 12 is allowed to communicate with it at any time. The connection - the so-called pairing - is preferably secured by special measures. One possibility is the authorization, as in the DE 10 2014 010 089 A1 is shown. The disclosure of this document is incorporated by reference.

Even after the pairing has taken place between a smartphone as a remote control 12 on one side and the access point as a communication module 11 on the other side, inadvertent functions in the vehicle can be triggered, for example by software error, by taking over the control of the remote control 12 by another Network participants or by latching in the communication between the remote control 12 and communication module 11. To build a further hurdle here and thus gaining security, the user 13 an additional authorization / input is required, the content or information content is specified by the communication module 11. In addition, this specification is transmitted encrypted by the communication module 11 to the remote control 12. The two devices involved (Communication module 11 and remote control 12 = access point and smartphone) know the algorithm for encryption / decryption. The core issue is a further authorization to be carried out from time to time by the remote control 12 or the user 13 in relation to the communication module 11. The user is provided with a task by the communication module 11, which he has to perform by action on the remote control 12 , it is ensured that in fact the user himself is active and not a software error or a third party wants to trigger a function.

In Fig. 1 the sequence of the additional authorization is illustrated by five steps I to V. The remote control 12 has an app for communication with the communication module 11. By means of the remote control 12 is to be accessed, for example, to an existing air suspension and the level of the vehicle 10 are adapted to the height of a loading ramp, not shown. The user 13 selects on its remote control 12 a corresponding control command. The remote control 12 sends the control command in step I to the communication module 11.

The communication module 11 recognizes that a control command is present and requires an additional authorization in a step II. For this purpose, the communication module 11 transmits an internally randomly selected number or digit as an authorization signal to the remote control 12. Alternatively, the communication module 11 generates a random value and determines the authorization signal on the basis of a stored table or arithmetic operation.

In the remote control 12, a table or algorithm is programmed, from which a unique association between the transmitted authorization signal and a sequence of seven digits (or other number of digits) results as the output signal. An example of such a table is in Fig. 2 played. In a step III, a virtual keyboard is displayed on a screen 14 of the remote control 12 together with arrows, from which the sequence of digits results as an output signal, see Fig. 3 ,

In step IV, the user 13 is to wipe as input with his finger the predetermined sequence of digits (the output signal). The wiping pattern (input) thus formed is transmitted to the communication module 11 in step V. Based on the table stored in the communication module 11, the input is converted into the associated authorization signal and compared with the transmitted authorization signal or directly compared with a stored output signal. If they match, the previous control command is executed.

As stated above, in the communication module 11 and in the remote control 12, the table with the authorization signal and the output signal are stored. As an alternative to a table, the relationship between the authorization signal and the output signal can also be obtained in other ways, for example by a computational task or by incorporating network-specific or device-specific values, for example from IP addresses, or by combinations of different methods. A simple mathematical calculation is for example $$\mathrm{output\; signal}=\mathrm{seven\; digits\; off}\left[\mathrm{pi}*{\mathrm{<figure-callout\; id="2"\; label="authorization\; signal"\; filenames="imgf0002.png"\; state="\{\{state\}\}">authorization\; signal</figure-callout>}}^2\right]$$

The result, which theoretically has infinitely many digits due to the property of the number Pi, the first seven digits are used and displayed as an output signal on the screen 14 of the remote control 11 with corresponding arrows to show the order.

Depending on the desired security functions are released in the vehicle 10 after the authorization, or even granted access to the usually existing CAN bus. It can also be provided that the communication module 11 requests an additional authorization for each control command. Alternatively, a time window may be provided within which control commands are accepted without additional authorization. In this case, the time window preferably begins with the input of the last wiping pattern in the communication module 11. Alternatively, a new additional authorization may generally be required after a defined period of time has elapsed after the last additional authorization.

Basically, the communication module 11 performs the specified operations. However, it is also possible a version in the control unit ECU, apart from the communication with the remote control 12th

List of Reference Numerals (part of the description)

10

vehicle

11

communication module

12

remote Control

13

user

14

screen

ECU

electronic control unit

Claims (16)

Method for authorizing a remote control (12) to be operated by a user (13) and having an output device for controlling functions of a device, characterized in that the device only executes control commands of the remote control (12) if authorization has been provided at least once before the following steps took place: upon actuation of the remote control (12), the device in response sends an authorization signal to the remote control (12), the remote control (12) converts the authorization signal into an output signal and outputs the output signal via the output device, the user (13) executes an input signal dependent input on the remote control (12), the remote control (12) converts the input into an authorization response and sends the authorization response to the device, the device compares the authorization response with the sent authorization signal and determines sufficient match. A method according to claim 1, characterized in that the device only accepts or executes a control command of the remote control (12) if the authorization response is attached, even if the authorization response has already been transmitted from the remote control (12) at least once before. A method according to claim 1 or 2, characterized in that the device does not accept or execute control commands of the remote control (12) when a certain period of time has elapsed since the receipt of the first or last authorization signal. A method according to claim 1 to 3, characterized in that a wirelessly communicating mobile device is used as a remote control (12), in particular a smartphone, tablet or a smartwatch. A method according to claim 1 to 4, characterized in that a screen (14) is used as the output device. A method according to claim 5, characterized in that on the screen (14) a pattern is displayed as an output signal, and that the remote control (12) accepts a pattern generated by the user by wiping on the screen (14) as input and converts it into the authorization response , A method according to claim 5, characterized in that on the screen a task is displayed as an output signal, and that the remote control (12) accepts a solution entered by the user (13) as input and converts it into the authorization response. Method according to Claims 1 to 7, characterized in that rules for transforming the authorization signal into the output signal and / or for transforming the input into the authorization response are stored in the remote control (12). A method according to claims 1 to 8, characterized in that the device generates the authorization signal as a random value, wherein the random value is generated by the device electronically. Method according to claims 1 to 9, characterized in that an access point for WLAN, Bluetooth or another radio technology is part of the device, and that the access point sends the authorization signal and receives the authorization response. Method according to claims 1 to 10, characterized in that the device is a vehicle (10) and in particular one or more of the following functions are controlled with the remote control (12): Operation of a parking heater, Door closing mechanism, Sash moving mechanism, Roof closing mechanism Park features Operation of a lift axle, Operation of an air suspension, Door locking mechanism, Operation of aerodynamic valves; Machine functions, in particular concrete mixers, cranes, lifts, dump trucks, Band wagon. Method according to claims 1 to 10, characterized in that the device is part of a building and in particular one or more of the following functions are controlled with the remote control (12): Door locking mechanism, Home automation, Lighting, Heater, Air conditioner. System for carrying out the method according to one of the preceding claims, with remote control (12) and electronic control unit (ECU), in particular for a vehicle (10), wherein the control unit (ECU) is equipped with a communication module (11) for transmitting authorization signals and for receiving of remote control signals (12). Computer program, computer program product or app for a remote control (12), namely for carrying out the method according to one of Claims 1 to 12. Computer program, computer program product or app for a control unit (ECU) of a device, namely for carrying out the method according to one of claims 1 to 12. Control unit (ECU) with a computer program, a computer program product or an app according to claim 15.

Images