# Patent

## Title
System and method for communicating with a vehicle

## Abstract

A system and method for using a portable device to communicate with a vehicle to authorize one or more vehicle operations. The portable device may authorize the vehicle to unlock/lock doors, start the vehicle engine, or mobilize the vehicle, or a combination thereof. The vehicle may include a vehicle transmitter system with one or more transmitters disposed at various locations on the vehicle, and the portable device may be configured to monitor a communication strength between the portable device and the one or more transmitters of the transmitter system. Based on the monitored signal strength, the portable device may determine location information about itself.

## Background
FIELD OF INVENTION
The present invention relates to authorizing vehicle operations, and more particularly to a portable device configured to authorize one or more vehicle operations.
BACKGROUND OF THE INVENTION
Keyless entry systems for vehicles have become nearly ubiquitous in the automotive realm. In a conventional keyless entry system, a user carries a keyfob having a button that enables the user to initiate a vehicle operation, such as starting the vehicle or mobilizing the vehicle. In response to user activation of the button, the keyfob communicates instructions to the vehicle to initiate the vehicle operation. In one conventional configuration, the vehicle may include a series of RF antennas that allow the vehicle to determine whether the keyfob is present within the vehicle. Because the keyfob in these conventional configurations is carried by the user and serves a singular purpose—operation in conjunction with a keyless entry system—the keyfob is configured to be a simplistic device having limited capabilities. More advanced operations and processing may be performed by the vehicle, rather than the keyfob, so that cost and size of the keyfob may be kept down.
One exemplary operation performed by a conventional keyless entry system is detection inside the vehicle. In keyless entry systems configured to allow mobilization of a vehicle, detection inside the vehicle is often times a concern because there are several scenarios where the driver and the keyfob may be outside the vehicle, but in general proximity thereto. For example, while the driver is refueling the vehicle at a service station, if the vehicle were to be mobilized, a thief, or a young child, may climb into the driver's seat and attempt to drive the vehicle without permission. For at least this reason, conventional keyfob-based vehicle entry systems, in some cases, have utilized a series of RF antennas in the vehicle, so that the vehicle, itself may detect the presence of the keyfob in the vehicle or inside the vehicle cabin, and prevent mobilization, unless the vehicle detects that the keyfob is located in the vehicle.
Portable devices, such as smartphones, as well as smartphone applications (or programs running on the portable devices), have also become nearly ubiquitous. In recent times, there has been some interest in utilizing these portable devices to instruct a vehicle to perform an operation. However, unlike the conventional keyfob, smartphones in use today often times are not specifically configured to communicate with a keyless entry system. Not every smartphone is used in conjunction with a vehicle, so smartphone manufacturers are reluctant to incorporate a keyfob antenna and communication interface into the smartphone, avoiding or reducing unnecessary cost.
For at least these reasons, conventional smartphone applications in the context of vehicle control utilize communication interfaces already present in the device and the vehicle, including, for example, cellular, GPS, and Bluetooth interfaces. These conventional systems, however, are not without downsides. The vehicle, smartphone, and cellular, GPS, or Bluetooth interfaces in the conventional system are not configured to detect presence or location of the smartphone relative to the vehicle, such as presence inside the vehicle. As a result, actual mobilization via the smartphone is not realized.
SUMMARY OF THE INVENTION
In accordance with one embodiment, a portable device may be configured to communicate with a vehicle to authorize one or more vehicle operations. For example, the portable device may authorize the vehicle to unlock/lock doors, start the vehicle engine, mobilize the vehicle, or a combination thereof. The vehicle may include a vehicle transmitter system with one or more transmitters disposed at various locations on the vehicle, and the portable device may be configured to monitor a communication strength between the portable device and the one or more transmitters of the transmitter system. Based on the monitored signal strength, the portable device may determine location information about itself relative to the vehicle. For example, based on a monitored strength of communication from each of the one or more transmitters of the vehicle transmitter system, the portable device may determine that the portable device is proximate to but not within the vehicle, or that the portable device is inside the vehicle. As another example, based on the monitored strength of communication, the portable device may determine whether the portable device is located inside the vehicle and in proximity to a vehicle driver seat.
In another embodiment, based on the location information determined by the portable device about itself, the portable device may communicate an authorization code to the vehicle to authorize a vehicle operation. For example, if the portable device determines the portable device is in proximity to but not within the vehicle, the portable device may communicate an authorization code to unlock one or more doors of the vehicle. As another example, if the portable device determines the portable device is located in an area proximate to the vehicle driver seat, the portable device may communicate an authorization code to allow mobilization of the vehicle.
In still another embodiment, the portable device, based on the determined location information, may communicate information in addition to or alternative to the authorization code. For example, the portable device may communicate the location information about itself relative to the vehicle, or may communicate an instruction to perform a vehicle operation, or both.
In yet another embodiment, the vehicle transmitter system may include a plurality of Bluetooth Low Energy (Bluetooth LE) transmitters, and the portable device may monitor the signal strength of these Bluetooth LE transmitters. In particular, the portable device may use the signal strength of each of the Bluetooth LE transmitters as a basis for determining location information about itself relative to the vehicle. For example, based on the relative strength of each Bluetooth LE transmitter from among multiple transmitters disposed at various positions on the vehicle, the portable device may determine that it is present inside the vehicle and located in proximity to the vehicle driver seat. Based on such a determination, the portable device may communicate an authorization code to allow mobilization of the vehicle.
In even another embodiment, the one or more transmitters of the vehicle transmitter system may include a master device and one or more remote beacon devices disposed at various positions on the vehicle. For example, a remote beacon device may be disposed in the door of the vehicle, and the master device may be disposed in the vehicle dash. The master device and the remote beacon devices may be Bluetooth LE capable devices.
In a further embodiment, the master device of the vehicle transmitter system may be operably connected to a vehicle bus of the vehicle, and may be capable of sending messages along the vehicle bus to initiate one or more vehicle operations, such as an instruction to lock/unlock a vehicle door and to enable mobilization of the vehicle. The master device also may control operation of the remote beacon devices, including, for example, waking the remote beacon devices in response to detecting that a portable device is in range. As another example, the master device may wake the remote beacon devices in response to detecting motion of the vehicle door. In yet another example, the remote beacon devices may be motion sensitive, and may be configured to wake themselves in response to detecting motion.
In still a further embodiment, a method of authorizing a vehicle to perform a vehicle operation is provided. The method may include determining, in a portable device, location information about the portable device relative to the vehicle. Based on the location information, the portable device may communicate an authorization code to the vehicle, enabling the vehicle to perform a vehicle operation. In addition to or alternative to the authorization code, the portable device may communicate location information or an instruction to perform a vehicle operation, or both. Optionally, the portable device may monitor signal strength of a plurality of transmitters disposed on the vehicle, and use monitored signal strength as a basis for determining location information about the portable device relative to the vehicle.
In even a further embodiment, systems and methods utilize a portable device, such as a smart phone, to replace a conventional keyless entry system. The keyfob present in many conventional keyless entry systems may be eliminated by configuring a vehicle to include a vehicle transmitter system, and enabling the portable device, carried by many users in recent times, to authorize or initiate, or both, vehicle operations of the vehicle based on communication with the vehicle transmitter system. In this way, users may be freed from carrying or using a separate keyfob to access their vehicle.
These and other objects, advantages, and features of the invention will be more fully understood and appreciated by reference to the description of the current embodiments and the drawings.
Before the embodiments of the invention are explained in detail, it is to be understood that the invention is not limited to the details of operation or to the details of construction and the arrangement of the components set forth in the following description or illustrated in the drawings. The invention may be implemented in various other embodiments and of being practiced or being carried out in alternative ways not expressly disclosed herein. Also, it is to be understood that the phraseology and terminology used herein are for the purpose of description and should not be regarded as limiting. The use of “including” and “comprising” and variations thereof is meant to encompass the items listed thereafter and equivalents thereof as well as additional items and equivalents thereof. Further, enumeration may be used in the description of various embodiments. Unless otherwise expressly stated, the use of enumeration should not be construed as limiting the invention to any specific order or number of components. Nor should the use of enumeration be construed as excluding from the scope of the invention any additional steps or components that might be combined with or into the enumerated steps or components.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a representative view of a vehicle, a portable device, and an authorization server according to one embodiment.
FIG. 2 is a portable device according to one embodiment.
FIG. 3 is a method of authorizing a vehicle operation according to one embodiment.



DETAILED DESCRIPTION
A system and method in accordance with one embodiment includes using a portable device to communicate with a vehicle to authorize one or more vehicle operations. For example, the portable device may authorize the vehicle to unlock/lock doors, start the vehicle engine, or authorize mobilization of the vehicle, or a combination thereof. The vehicle may include a vehicle transmitter system with one or more transmitters disposed at various locations on the vehicle, and the portable device may be configured to monitor a communication strength between the portable device and the one or more transmitters of the vehicle transmitter system. Based on the monitored signal strength, the portable device may determine location information about itself.
A vehicle control system, according to one embodiment, is shown in FIGS. 1-2, and generally designated 100. As depicted, the vehicle control system 100 includes a vehicle 1 and a portable device 2. The portable device 2 may be a smartphone capable of running one or more smartphone applications, and being carried by a user. The portable device 2 may include a control unit 40 and one or more transceivers capable of wireless communication, including, for example, a Bluetooth LE transceiver 44 and a cellular transceiver 42. The components associated with principal operation of the portable device 2 (and not associated with the vehicle control system) are generally conventional, and therefore will not be described in detail. For example, in the context of a smartphone, no effort is made to describe the electronic components associated with the smart phone itself, such as the user interface and the display. It should be understood that the portable device 2 is not limited to a smartphone, and that the portable device 2 may be any type of device carried by a user and separable from a vehicle, including, for example, a key fob.
The vehicle 1 in the illustrated embodiment of FIG. 1 may include a vehicle system 20 having an engine control module 22, a doorlock control module 24, an engine ignition system 26, and a vehicle bus 32. The engine control module 22 may form a central processor of the vehicle, and may coordinate control over vehicle operations and systems of the vehicle. The vehicle bus 32 may provide a communication interface through which components of the vehicle may communicate. For example, the engine control module 22 may communicate with various components of the vehicle through the vehicle bus 32, which, in one configuration, is a wired CAN bus (controller area network bus). The doorlock control module 24 may control operation of the door locks, including, for instance, separate control over locking/unlocking of the driver side and passenger-side door locks. The engine ignition system 26 may be in operable communication with the engine starter and fuel systems to enable ignition of the vehicle engine. Similar to portable device 2, components associated with principal operation of the vehicle 1 (and not associated with the vehicle control system) are generally conventional, and therefore will not be described in detail. For example, no effort is made to describe in detail conventional components of the vehicle 1, such as the engine starter, fuel systems, and the traction control system. Additionally, although shown as separate systems or components, it should be understood that one or more of the engine control module 22, the doorlock control module 24, and the engine ignition system 26 may be distributed control systems in various components of the vehicle or may be integrated into one device or component of the vehicle.
In the illustrated embodiment of FIG. 1, the vehicle 1 may also include a plurality of transmitters 10, 12 capable of transmitting signals to one or more transceivers of the portable device 2. For example, the plurality of transmitters 10, 12 may be Bluetooth LE capable transmitters configured to transmit signals to the Bluetooth LE transceiver 44 of the portable device 2. As described herein, based on the communication signal from one or more of the plurality of transmitters 10, 12, the portable device 2 may determine location information about itself. For purposes of disclosure, the transmitters 10, 12 are described in connection with a Bluetooth LE system, but it should be understood that any type of communication technology or framework may be utilized, including, for example, standard Bluetooth technology. Additionally, one or more of the transmitters 10, 12 may be transceivers capable of transmitting and receiving communication.
The plurality of transmitters 10, 12 in the illustrated embodiment of FIG. 1 includes a master transmitter 10 and one or more beacon transmitter devices 12. The master transmitter 10 may direct operation of or communicate with the beacon transmitter devices 10 via a vehicle transmitter communication interface 30, which may be a wired or wireless interface. For purposes of disclosure, the transmitter communication interface 30 is shown separate from the vehicle bus 32, but it should be understood that the transmitter communication interface 30 and the vehicle bus 32 may be a shared bus, such as a CAN bus. The master transmitter 10 may also communicate with the vehicle system 20 via the vehicle bus 32 to authorize or initiate, or both, one or more vehicle operations. For example, the master transmitter 10 may instruct, based on communication from the portable device 2, the vehicle system 20 to lock or unlock a door of the vehicle.
The one or more beacon transmitter devices 12 may be disposed at various locations on the vehicle, potentially known to the portable device 2, enabling the portable device 2 to determine location information about itself based on a communication signal strength. Example locations include a vehicle dash, a rearview exterior minor, and a lower portion of the driver side door, or a combination thereof. In the illustrated embodiment of FIG. 1, the master transmitter 10 is disposed in the vehicle dash, and two beacon transmitter devices 12 are disposed respectively in the lower portion of the driver side door (proximate to a floor of the vehicle) and the rearview exterior minor. It should be understood, however, that embodiments described herein are not limited to this configuration, and that the master transmitter 10 and the one or more beacon transmitter devices 12 may be disposed anywhere on the vehicle 2.
In one embodiment, the master transmitter 10 may be a Bluetooth LE device, powered by the vehicle system 20, and including an omnidirectional antenna for communicating with the Bluetooth LE transceiver 44 of the portable device 2. With this configuration, the master transmitter 10 may establish a Bluetooth LE connection between itself and the portable device 2, allowing the portable device 2 to communicate with the master transmitter 10 when in proximity to the vehicle 1.
The one or more beacon transmitter devices 12 may be disposed on the vehicle at locations separate from the master transmitter 10, and may be battery powered such that may operate without vehicle power. Alternatively, or additionally, the beacon transmitter devices 12 may receive power from the vehicle. In the illustrated embodiment, the beacon transmitter devices 12 include directional antennas that facilitate determining location information about the portable device. For example, a beacon transmitter device 12 positioned in the driver side door may include a directional antenna aimed toward the driver side seat such that, if the portable device 2 is currently located outside the vehicle, or in a rear seat of the vehicle, the signal strength between the beacon transmitter device 12 in the driver side door and the portable device 2 may be low relative to the signal strength between the portable device 2 and the master transmitter 10 or another beacon transmitter device 12, or both. Based on the signal strength of communication from at least one of the master transmitter 10 and the one or more beacon transmitter devices 12, the portable device 2 may determine location information about itself, such as whether the portable device is in proximity to the driver-side seat.
In one embodiment, a beacon transmitter device 12 disposed on the exterior of the vehicle 1, such as a rearview exterior minor or a vehicle door handle, may include a user input that enables a user to enter information to unlock the vehicle 1. For example, the user input may be one or more buttons that allow entry of a code to unlock the vehicle. If the user is not carrying the portable device 2, or if the portable device 2 is non-operational (e.g., the battery of the portable device is drained), the user input may provide an alternative way to gain entry to the vehicle 1.
The one or more beacon transmitter devices 12 in the illustrated embodiment of FIG. 1 may be configured to conserve power by entering a sleep mode in which the one or more beacon transmitter devices 12 do not emit a signal to the portable device 2. The one or more beacon transmitter devices 12 may wake-up in response to one or more conditions. For example, the one or more beacon transmitter devices 12 may be motion activated such that motion of a vehicle door awakens a beacon transmitter device 12. As another example, the master transmitter 10 may be capable of waking the one or more beacon transmitter devices 12 in response to one or more conditions, such as detecting that a portable device 2, paired with the master transmitter 10, is in proximity to the master transmitter 10. In addition to or alternatively, the master transmitter 10 may wake the one or more beacon transmitter devices 12 in response to a user opening a vehicle door, such as the driver-side vehicle door. The master transmitter 10, as described herein, may be coupled to the vehicle bus 32, and may monitor the bus for communication, such as communication indicating a vehicle door has been opened, allowing the master transmitter 10 to control the one or more beacon transmitter devices 12 based on one or more conditions related to the vehicle. Each of the one or more beacon transmitter devices 12 may transmit a signal to the portable device 2, which, based on the strength of these signals, may determine location information about itself. For example, if the signal received from a beacon transmitter device 12 disposed within a cabin of the vehicle is weaker than the signal received from a beacon transmitter device 12 disposed external to the cabin, the portable device 2 may determine that the portable device 2 is located outside the vehicle, but in proximity thereto. In one embodiment, the master transmitter 10 may perform measurements on the signals transmitted from the one or more beacon transmitter devices 12, and, based on these measurements, may direct one or more of the beacon transmitter devices 12 to adjust a power level or gain of a signal being transmitted. In this way, the master transmitter 10 may calibrate the one or more beacon transmitter devices 12 to a configuration of the vehicle 1, potentially improving the ability of the portable device 2 to determine location information about itself based on the strength of the signals being transmitted from the one or more beacon transmitter devices 12. Additionally, or alternatively, the master transmitter 10 may direct the one or more beacon transmitter devices 12 to adjust the gain of a signal being transmitted based on environmental factors, such as temperature.
In one embodiment, each of the one or more beacon transmitter devices 12 may transmit a Bluetooth discovery signal, or a received signal strength indicator (RSSI) signal, or both, to the portable device 2 upon waking. The signal transmitted from each of the beacon transmitter devices 12 may be repeatedly transmitted at a rapid rate, so that the portable device 2 may use the RSSI signals to determine location information of the portable device 2 relative to the one or more remote beacons 12. The master transmitter 10 may direct the one or more beacon transmitter devices 12 to adjust the transmission rate based on one or more factors, such as whether a portable device 2 is connected to the master transmitter 10. For example, in response to a portable device 2 connecting to the master transmitter 10, the master transmitter 10 may direct the one or more beacon transmitter devices 12 to increase the transmission rate. If the portable device 2 provides a valid authorization code, and the portable device 2 is no longer determining location information about itself, the master transmitter 10 may direct the one or more beacon transmitter devices 12 to reduce the transmission rate, potentially conserving power. Additionally, or alternatively, the master transmitter 10 may direct the one or more beacon transmitter devices 12 to go to sleep.
As another example, the master transmitter 10 may direct one of the beacon transmitter devices 12 to increase the transmission rate while maintaining the transmission rate of another beacon transmitter device 12. Increased transmission rate from a beacon transmitter device 12 may further facilitate a location determination in the portable device 2. Accordingly, depending on the location information provided by the portable device 2, the master transmitter 10 may direct one beacon transmitter device 12 considered proximate to a location of the portable device 2 to increase its transmission rate, while a beacon transmitter device 12 considered farther away may be directed to maintain or reduce its transmission rate. In yet another example, a beacon transmitter device 12 disposed on an exterior mirror may transmit or advertise at a low rate until the portable device 2 is detected. After the portable device 2 is detected, a beacon transmitter device 12 disposed near an inside of the driver-side door may at least one of wake-up and increase its advertisement rate.
The control unit 40 of the portable device may monitor the signal strength (RSSI data) from each of the remote transmitter devices 12, and determine, based on the monitored signal strength, if the portable device 2 is located in close proximity to the vehicle 1 for unlocking or within the front part of the vehicle 1 for allowing mobilization of the vehicle 1. It should be understood that the portable device 2 may determine location information about itself in a variety of ways. For example, the control unit 40 of the portable device 2 may determine location information based on whether the signal strength from any one of the one or more remote beacons 12 exceeds a threshold. In other words, if the signal strength from one of the remote beacons 12 exceeds a threshold, or is within a range, the control unit 40 of the portable device 2 may determine the portable device 2 is in proximity to that remote beacon 12. In addition to, or alternatively, the control unit 40 may determine location information about the portable device 2 based on the relative signal strength from two or more remote beacons 12. As an example, if the signal strength from a first remote beacon 12 is above or below a first threshold, or within a first range, and the signal strength from a second remote beacon 12 is also above or below a second threshold, or within a second range, the control unit 40 of the portable device 2 may determine the portable device 2 is likely positioned in a particular location relative to the first and second remote beacons 12. As another example, the control unit 40 may determine location information based on a differences among the signal strengths of communication from the two or more remote beacons 12. A difference between the signal strength from the first remote beacon 12 and the signal strength of the second remote beacon 12 may be indicative of location information of the portable device 2 relative to the first and second remote beacons 12.
Accuracy in the determination of a location of the portable device 2 may depend on a variety of factors. For example, the potential accuracy may depend on the number of beacon transmitter devices 12, the positions of the beacon transmitter devices 12, whether a beacon transmitter device 12 includes a directional antenna or an omnidirectional antenna, and the transmission rate of the beacon transmitter device 12.
The thresholds or ranges, or both, utilized by the control unit 40 may be determined during or based on a calibration or setup process implemented by the portable device 2 in order to associate the portable device 2 with the vehicle 1, and to acclimate the portable device 2 to one or more characteristics of the vehicle 1. The physical construction of the vehicle 1 may differ between makes or models, or both. These differences may affect transmission of signals from the one or more transmitters 10, 12. Calibration during the setup process may enable the portable device 2 to tailor the process for determining location information relative to the vehicle 1 in order to reduce the impact of construction differences among vehicles. Calibration may also include adjusting the transmission level of the remote beacon devices. For example, the master device 10 may direct one or more of the remote beacon devices to increase or reduce the transmission power in calibration.
The thresholds, ranges, or both, may be set by the calibration process, and may not change during operation. Alternatively, the calibration process may adjust the threshold, ranges, or both during operation. For example, the portable device 2 may monitor signal strength from the one or more transmitters 10, 12, and adjust a threshold based on changes in signal strength. Put differently, the control unit 40 may dynamically adjust the thresholds or ranges, or both, based on one or more parameters, such as historical strength readings (e.g., RSSI readings). Changes may be implemented periodically during operation or continuously.
In one embodiment, a Bluetooth LE protocol may be used between the portable device 2 and the vehicle 1 to allow communication that enables the portable device 2 to transmit commands and status to the vehicle 1. The low power profile of Bluetooth LE may enable the vehicle control system 100 to provide a connection or link between the portable device 2 in the vehicle 1, while potentially avoiding excessive power drain on the vehicle 1 and the portable device 2.
An agreed-upon protocol including a sequence of messages and events may be established between the portable device 2 and the vehicle 1, such that presence of the portable device 2 inside the vehicle may be confirmed, and the vehicle 2 may be securely started and mobilized. The agreed-upon protocol may include at least one of authentication, authorization, and encrypted communication. For example, messages between the portable device 2 and the vehicle 1 may be encrypted, such that another device listening to Bluetooth LE traffic may be prevented from unauthorized initiation of a vehicle operation. As another example, the agreed-upon protocol may utilize one or more of pre-shared keys, code hopping, and timestamp hashing algorithms. It should be understood that the agreed-upon protocol is not limited to the to the authentication, authorization, and encryption algorithms described herein.
In response to the portable device 2 determining location information related to itself relative to the vehicle 1, the portable device 2 may communicate information to the master transmitter 10 to authorize or initiate, or both, one or more vehicle operations. The communicated information may include a shared secret code that the master transmitter 10 of the vehicle 2 may authenticate to authorize a vehicle operation, such as mobilizing the vehicle 2, or, in other words, starting and enabling the vehicle 2 to be driven.
In an alternative embodiment, the master transmitter 10 may determine location information about the portable device 2 relative to the vehicle 1. The portable device 2 may communicate information to the master transmitter 10 regarding a strength of communication between the portable device 2 and one or more transmitters of the vehicle transmitter system, including, for example, at least one of the master transmitter 10 and one or more of the remote beacons 12. Based on the information communicated from the portable device 2 to the master transmitter 10, the master transmitter 10 may determine a location of the portable device 2 relative to the vehicle 1, such as whether the portable device 2 is in proximity to but exterior to the vehicle 1, or whether the portable device is within the vehicle 1 and in proximity to the vehicle driver seat.
Both the portable device 2 and the vehicle 1 may communicate with an authorization server 3, such as a key server, to obtain a secret code or authorization code. In one embodiment, the authorization server 3 may communicate with the portable device 2 and vehicle 1 via cellular communication, which may be encrypted. The portable device 2, as described above, may include a cellular transceiver 42 that enables the portable device 2 to communicate with the authorization server 3 to obtain a collection of shared secret codes. Likewise, the master transmitter 10 of the vehicle 1 may access a cellular transceiver 28, such as a cellular modem or a telematics unit, of the vehicle system 20 to communicate with the authentication server 3 to obtain the collection of shared secret codes. The collection of shared secret codes may include one or more keys, and may be provided by the authentication server 3 separately or at one time. The collection of the shared secret codes may include a seed for calculating one or more keys.
By providing the same collection of shared secret codes to both the portable device 2 and the vehicle 1, the vehicle control system 100 may provide a degree of security to potentially prevent unauthorized access to one or more vehicle operations, such as unauthorized access to vehicle door locks. For example, after receiving an authorization code from the portable device 2, the master transmitter 10 may compare the received authorization code to one of the shared secret codes received from the authorization server 3. If the received authorization code matches the shared secret code, the master transmitter 10 may successfully authenticate the portable device 2, and authorize mobilization. In one embodiment, to further enhance security and to prevent replay attacks, both the portable device 2 and the master transmitter 10 may be configured to use an authorization code only once. In this context, the collection of shared secret codes received from the authorization server 3 may provide a limited number of authorizations. As a result, the portable device 2 and the master transmitter 10 may communicate with the authorization server 3 to obtain additional shared secret codes. Additionally, or alternatively, the portable device 2 and the master transmitter 10 may use the collection of shared secret codes as a seed to generate additional valid authorization codes.
In one embodiment, the master transmitter 10 and the portable device 2 may utilize asymmetric keys, one public and one private, to securely communicate information, such as an authorization code or a request from the portable device 2 to the master transmitter 10 to authorize or perform a vehicle function. The master transmitter 10 may be provided a private key during manufacture, from the authorization server 3, or the portable device 2, or a combination thereof. To avoid potential compromises in security, such as in case the private key becomes known to or compromised by a potential unauthorized user, the private key may expire or become revoked. The portable device 2 may be responsible for key-management, obtaining public or private keys, or a combination thereof, from the authorization server 3, revoking an existing private key, and providing a private key to the master transmitter 10. A public key obtained from the authorization server 3 and stored in the portable device 2 may allow the portable device 2 to encrypt information communicated to the master transmitter 10. By storing the private key in the master transmitter 10, the master transmitter 10 may be capable of verifying whether the public key provided by the portable device 2 is valid and not expired. By utilizing the portable device 2 for key-management, the master transmitter 10 may not utilize the cellular transceiver 28 to obtain a collection of shared secret codes or a private key.
As described herein, the master transmitter 10 may authorize and initiate a vehicle operation in response to receiving an authorization code from a portable device 2 that matches a stored shared secret code received from an authentication server 3 or generated based on communication from the authentication server 3. In other words, reception of a valid authentication code may enable the master transmitter 10 to authenticate the portable device 2 in terms of presence of the portable device 2 in the vehicle and in terms of authorization from the portable device 2 to start and enable mobilization of the vehicle 1. It should be understood, however, that the vehicle control system 100 is not so limited, and that reception of a valid authorization code may cause any number of operations to occur in the master transmitter 10. For example, the master transmitter 10 may authenticate the portable device 2 based on reception of a valid authorization code, and may wait to initiate one or more vehicle operations until specific instructions to do so are received from the portable device 2.
In one embodiment, the portable device 2 may be configured to notify the user if the portable device 2 is removed from proximity to the vehicle 1, based on monitored signal strength or loss of signal, while the vehicle 1 is running. Additionally, or alternatively, the portable device 2 may notify the user that the vehicle 1 is or has been shut off based on absence of a message or signal transmitted from the vehicle 1.
A method according to one embodiment of the present invention is shown in FIG. 3, and generally designated 300. The process described in connection with the method 300 may be conducted on a vehicle control system configured according to any of the embodiments described herein. For example, the vehicle control system may be similar to the vehicle control system 100 described in connection with the illustrated embodiments of FIGS. 1-2, and may include, for example, a vehicle 1, a portable device 2, and an authorization server 3. For purposes of disclosure, the method 300 is described in connection with a Bluetooth LE communication interface, but it should be understood that any type of communication interface may be used.
The method may include detecting in the portable device 2 an available Bluetooth LE connection to the master transmitter 10 of the vehicle 1. Step 302. After detecting the available Bluetooth LE connection, the portable device 2 may communicate with the master transmitter 10 to negotiate and establish a Bluetooth LE connection. Step 304. Establishment of a Bluetooth LE connection with the portable device 2 may be considered a trigger condition by the master transmitter 10. And, in response to such a trigger condition, the master transmitter 10 may wake one or more beacon transmitter devices 12 via the vehicle transmitter communication interface 30 such that the one or more beacon transmitter devices 12 become discoverable by the portable device 2, and rapidly transmit signals capable of being monitored by the portable device 2. Step 306. For example, the transmission rate may be about 30 times per second. The portable device 2 may monitor a strength of a signal received from each of the one or more beacon transmitter devices 12. Based on the monitored strength of each signal, the control unit 40 of the portable device 2 may determine location information regarding the portable device 2 relative to the vehicle 1. For example, the control unit 40 may compare the monitored strength of each signal relative to one another to determine location information, such as whether the portable device 2 is located within or exterior to the vehicle 1. Based on the determined location information, the portable device 2 may communicate an authorization key or code to the master transmitter 10 of the vehicle 1. Step 308. For example, if the control unit 40 determines the portable device 1 is located exterior to the vehicle 1, the control unit 40 may communicate via the Bluetooth LE interface 44 an authorization key to authorize unlocking of a vehicle door. After receiving such an authorization key, the master transmitter 10 may compare the authorization key against a stored key to determine whether the authorization key is valid to unlock a door. If the authorization key is valid, the master transmitter 10 may communicate with the vehicle system 20 to authorize and initiate unlocking of the vehicle door. The master transmitter 10, at this stage, may direct the one or more beacon transmitter devices 12 to discontinue transmission of signals in order to conserve power.
In one embodiment, the master transmitter 10 may monitor the vehicle bus 32 for the occurrence of one or more operating conditions of the vehicle 1, such as if a door has been opened, or if a brake pedal has been depressed. Step 310. In response to the occurrence of one or more operating conditions (e.g., a trigger condition), the master transmitter 10 may instruct the one or more beacon transmitter devices 12 to become discoverable and to transmit signals rapidly to the portable device 2. If the master transmitter 10 does not receive communication from a portable device 2 within a predetermined time period, the master transmitter 10 may instruct the one or more beacon transmitter devices 12 to discontinue transmitting signals, and may wait for another trigger condition, such as occurrence of one or more operating conditions of vehicle 2 or establishment of a Bluetooth LE connection with a portable device 2, or both, before waking the one or more beacon transmitter devices 12.
Based on reception of signals from the beacon transmitter devices 12, the control unit 40 of the portable device 2 may determine location information regarding the portable device 2 relative to the vehicle 1. Step 312. The determination in step 312 may be similar to the process described in step 308. Based on the determined location information being indicative that the portable device 2 is within the vehicle 1, the control unit 40 may transmit an authorization code to the master transmitter 10, authorizing the master transmitter to start and mobilize the vehicle 1. The authorization code may be similar to the authorization code described above to authorize a vehicle operation, such as unlocking the door. For example, the master transmitter 10 may compare the authorization code against a stored authorization code or key to determine whether the authorization code received by the portable device 2 is valid to initiate starting or mobilization of the vehicle 1. If the authorization code received by the portable device 2 is valid, the master transmitter 10 may instruct the vehicle system 20, via the vehicle bus 32, to mobilize and start the vehicle 1. After a valid authorization code is received by the master transmitter 10, the master transmitter 10 may direct the one or more beacon transmitter devices 12 to discontinue transmission of signals. Step 314. The vehicle system 20 may validate that the mobilization command received from the master transmitter 10 is in fact a valid command, and if so, may start and mobilize the vehicle 1. Alternatively, the master transmitter 10 may authorize the vehicle system 20 to mobilize, and the vehicle system 20 may wait until at least one of a start button and a brake pedal are activated to start the vehicle.
Directional terms, such as “vertical,” “horizontal,” “top,” “bottom,” “upper,” “lower,” “inner,” “inwardly,” “outer” and “outwardly,” are used to assist in describing the invention based on the orientation of the embodiments shown in the illustrations. The use of directional terms should not be interpreted to limit the invention to any specific orientation(s).
The above description is that of current embodiments of the invention. Various alterations and changes may be made without departing from the spirit and broader aspects of the invention as defined in the appended claims, which are to be interpreted in accordance with the principles of patent law including the doctrine of equivalents. This disclosure is presented for illustrative purposes and should not be interpreted as an exhaustive description of all embodiments of the invention or to limit the scope of the claims to the specific elements illustrated or described in connection with these embodiments. For example, and without limitation, any individual element(s) of the described invention may be replaced by alternative elements that provide substantially similar functionality or otherwise provide adequate operation. This includes, for example, presently known alternative elements, such as those that might be currently known to one skilled in the art, and alternative elements that may be developed in the future, such as those that one skilled in the art might, upon development, recognize as an alternative. Further, the disclosed embodiments include a plurality of features that are described in concert and that might cooperatively provide a collection of benefits. The present invention is not limited to only those embodiments that include all of these features or that provide all of the stated benefits, except to the extent otherwise expressly set forth in the issued claims. Any reference to claim elements in the singular, for example, using the articles “a,” “an,” “the” or “said,” is not to be construed as limiting the element to the singular. Any reference to claim elements as “at least one of X, Y and Z” is meant to include any one of X, Y or Z individually, and any combination of X, Y and Z, for example, X, Y, Z; X, Y; X, Z ; and Y, Z.

## Claims

1. A system that authorizes a vehicle operation of a vehicle, the vehicle including a vehicle system capable of controlling the vehicle operation, the vehicle including a driver-side door, said system comprising:
a master transmitter configured to communicate to the vehicle system authorization to initiate the vehicle operation, wherein said master transmitter includes a vehicle interface capable of communicating said authorization to the vehicle system via a vehicle bus;
a plurality of remote communication devices disposed on the vehicle, each of said plurality of communication devices capable of receiving wireless communications from a portable device, said plurality of remote communication devices including a directional communication device carried by a driver-side door and disposed in an interior space of the driver-side door, said directional communication device including a directional antenna aimed substantially toward a driver-side seat of the vehicle, said plurality of remote communication devices including a cabin exterior communication device disposed on the vehicle outside the interior space of the driver-side door and outside the vehicle cabin of the vehicle;
said portable device configured to wirelessly communicate an authorization code to said master transmitter to authorize the vehicle operation, said portable device including a transceiver capable of receiving wireless communications from the master transmitter;
wherein at least one of said master transmitter and said portable device is configured to determine if a location of said portable device is in proximity to the driver-side seat of the vehicle but not in proximity to a passenger-side seat or a rear seat of the vehicle, wherein said determination of said location is based on a difference between 1) a signal strength of wireless communications relative to said directional communication device carried by the driver-side door and disposed in the interior space of the driver-side door and 2) a signal strength of wireless communications relative to said cabin exterior communication device disposed outside the interior space of the driver-side door and outside the vehicle cabin, wherein the signal strength of wireless communications relative to said directional communication device with the directional antenna aimed substantially toward the driver-side seat of the vehicle facilitates locating the portable device in proximity to the driver-side seat but not in proximity to the passenger-side seat or the rear seat; and
wherein said portable device communicates said authorization code to said master transmitter.

2. The system of claim 1 wherein said plurality of remote communication devices are capable of transmitting wireless communications to said portable device, and wherein said portable device is configured to determine said location based on a relative strength between wireless communications received from said plurality of remote communication devices.

3. The system of claim 2 wherein said master transmitter is configured to calibrate wireless communications transmitted from said plurality of remote communication devices, wherein said master transmitter is configured to calibrate said plurality of remote communication devices by directing said plurality of remote communication devices to adjust a power level of communications based on a monitored strength of wireless communications transmitted from each of said plurality of remote communication devices.

4. The system of claim 2 wherein said portable device is configured to determine said location based on a signal strength of wireless communications transmitted by said plurality of remote communication devices being at least one of above and below a threshold.

5. The system of claim 4 wherein said portable device determines said threshold in a calibration mode, wherein said threshold is affected by one or more physical characteristics of the vehicle.

6. The system of claim 1 wherein, in response to said portable device determining said portable device is in proximity to and exterior to the vehicle, said portable device communicates said authorization code to said master transmitter, wherein said authorization code authorizes said master transmitter to authorize the vehicle system to unlock a vehicle door.

7. The system of claim 1 wherein, in response to said portable device determining said portable device is within the vehicle and in proximity to a driver seat of the vehicle, said portable device communicates said authorization code to said master transmitter, wherein said authorization code authorizes said master transmitter to authorize the vehicle system to at least one of start and mobilize the vehicle.

8. The system of claim 1 further comprising an authentication server remote from the vehicle and said portable device, said authentication server capable of communicating wirelessly with the vehicle and said portable device, wherein both said master transmitter and said portable device receive information from said authentication server including at least of one or more one shared keys, one or more server provided authorization codes, and protocol information;
wherein said authorization code transmitted by said portable device is based on said information; and
wherein said master transmitter uses said information as a basis for determining whether said authorization code is valid.

9. The system of claim 1 wherein said portable device and said master transmitter communicate using an asymmetric key pair, wherein said portable device is configured to communicate with said master transmitter using a public key, and wherein said master transmitter is configured to validate communication from said portable device based on a secret key accessible to said master transmitter, wherein said public key and said secret key form said asymmetric key pair.

10. The system of claim 1 wherein the cabin exterior communication device is disposed outside the interior space of the driver-side door and on a driver side of the vehicle.

11. The system of claim 1 wherein the directional communication device includes a directional antenna aimed toward a cabin of the vehicle.

12. The system of claim 1 wherein said directional communication device and said cabin exterior communication device transmit signal strength information with respect to communications with the portable device, wherein said master transmitter is in communication with said directional communication device and said cabin exterior communication device, and wherein, based on said signal strength information, said master transmitter determines if said location of the portable device is in proximity to the driver-side seat of the vehicle but not in proximity to the passenger-side seat or the rear seat.

13. The system of claim 12 wherein said directional communication device and said cabin exterior communication device are communicatively coupled to each other.

14. The system of claim 1 wherein, in response to said determination of said location of the portable device being within the vehicle and in proximity to the driver-side seat of the vehicle but not in proximity to the passenger-side seat or the rear seat, said at least one of said master transmitter and said portable device authorizes said vehicle for at least one of starting and mobilization of the vehicle; and
wherein in response to said determination of said location of the portable device being in proximity to the passenger-side seat or the rear seat but not in proximity to the driver-side seat, said at least one of said master transmitter and said portable device abstains from instructing the vehicle to authorize the at least one of starting and mobilizing of the vehicle.

15. A method of authorizing a vehicle operation of a vehicle, the vehicle including a vehicle driver-side door, the vehicle including a vehicle system capable of controlling the vehicle operation, the method comprising:
providing a directional communication device with a directional antenna aimed substantially toward a vehicle driver-side seat, the directional communication device being carried by a vehicle driver-side door and disposed in an inner space of the vehicle driver-side door;
providing a cabin exterior communication device disposed on the vehicle outside the inner space of the vehicle driver-side door and outside the cabin interior;
receiving communications in the directional communication device;
receiving communications in the cabin exterior communication device;
transmitting communications from a portable device, wherein the portable device is separate from the vehicle;
determining, based on signal strength of communications with the portable device, a location of the portable device is in proximity to the driver-side seat of the vehicle but not in proximity to a passenger-side seat or a rear seat of the vehicle, said determining including determining the location based on a difference between 1) a signal strength of communications relative to the directional communication device carried by the vehicle driver-side door and in the inner space of the vehicle driver-side door and 2) a signal strength of communications relative to the cabin exterior communication device outside the inner space of the vehicle driver-side door and outside the cabin interior, wherein the signal strength of wireless communications relative to said directional communication device with the directional antenna aimed substantially toward the driver-side seat of the vehicle facilitates locating the portable device in proximity to the driver-side seat but not in proximity to the passenger-side seat or the rear seat; and
based on the location, communicating an authorization code to the vehicle authorizing the vehicle to perform the vehicle operation.

16. The method of claim 15 further comprising transmitting communications from the directional communication device and the cabin exterior communication device to the portable device, wherein said determining includes determining the location based on a strength of the communications from the directional communication device and a strength of the communications from the cabin exterior communication device.

17. The method of claim 16 wherein the communications transmitted from the first and second remote communication devices have a transmission rate, and wherein based on receiving the authorization code, a transmission rate of the communications from the directional communication device and the cabin exterior device is reduced to conserve power.

18. The method of claim 17 wherein the communications from the directional communication device and the cabin exterior device are discontinued based on receiving a valid authorization code.

19. The method of claim 15 further comprising communicating to the vehicle at least one of the location to the vehicle and an instruction to perform the vehicle operation.

20. The method of claim 15 wherein the location is indicative of at least one of whether the portable device is proximate and exterior to the vehicle and whether the portable device is in the interior of the vehicle.

21. The method of claim 10 wherein, in response to receiving the authorization code, the vehicle is authorized for mobilization and starting.

22. A master vehicle device disposed on a vehicle, said master vehicle device comprising:
a transceiver configured to communicate wirelessly with a portable device separable from the vehicle;
a vehicle communication interface configured to communicate with a plurality of remote communication devices,
wherein the plurality of remote communication devices include a directional communication device carried by a vehicle driver-side door and disposed in an interior space of the vehicle driver-side door of the vehicle, wherein the directional communication device includes a directional antenna aimed substantially toward a driver-side seat of the vehicle, and
wherein said plurality of remote beacon communication devices include a cabin exterior communication device disposed on the vehicle outside the interior space of the vehicle driver-side door and outside the vehicle cabin of the vehicle; and
a controller configured to determine if a location of the portable device is in proximity to the driver-side seat of the vehicle but not in proximity to a passenger-side seat or a rear seat of the vehicle, said controller configured to determine said location based on a difference between 1) a signal strength of wireless communications relative to the directional communication device carried by the driver-side door and disposed in at least one of the interior space of the driver-side door and the vehicle cabin and 2) a signal strength of wireless communications relative to the cabin exterior communication device disposed outside the interior space of the driver-side door and outside the vehicle cabin, wherein the signal strength of wireless communications relative to said directional communication device with the directional antenna aimed substantially toward the driver-side seat of the vehicle facilitates locating the portable device in proximity to the driver-side seat but not in proximity to the passenger-side seat or the rear seat.

23. The master device of claim 22 wherein, based on said controller determining the portable device is in proximity to and exterior to the vehicle, said controller instructs a control system of the vehicle to unlock a vehicle door.

24. The master device of claim 22 wherein, in response to said controller determining the portable device is within the vehicle and in proximity to the driver-side seat of the vehicle but not in proximity to the passenger-side seat or the rear seat, said controller instructs the control system of the vehicle to authorize at least one of starting and mobilization of the vehicle; and
wherein in response to said controller determining the portable device is in proximity to the passenger-side seat or the rear seat but not in proximity to the driver-side seat, said controller abstains from instructing the control system of the vehicle to authorize the at least one of starting and mobilizing of the vehicle.

25. The master device of claim 22 wherein the controller is operably coupled to the vehicle transmitter communication interface, and wherein said controller of said master device directs operation of the directional communication device and the cabin exterior communication device via said vehicle transmitter communication interface.