Patent Abstract:
A vehicle remote control system is for a vehicle including a data communications bus extending throughout the vehicle, and at least one vehicle device connected to the data communications bus. The vehicle remote control system includes a remote transmitter, and a true controller at the vehicle for controlling the vehicle device via a true command on the data communications bus, and based upon the remote transmitter. The true controller also controls the vehicle device via a respective counteracting command on the data communications bus based upon detecting a rogue controller attempt to control the at least one vehicle device via a rogue command on the data communications bus. The true controller may thus counteract a rogue controller attempt to start the engine, unlock vehicle doors, roll down windows, and/or disarm the vehicle security system, for example.

Full Description:
FIELD OF THE INVENTION 
   The invention relates to the field of vehicle control, and, more particularly, to vehicle remote control. 
   BACKGROUND OF THE INVENTION 
   A remote vehicle control system may be used to permit a user control of one or more vehicle devices from a distance. A typical remote vehicle control system, for example, in a more modern vehicle may include a controller connected to a plurality of vehicle devices via a data communications bus, and a remote transmitter providing the controller with remote control signals. The vehicle devices, for example, may operate the engine starter, the door locks, the power windows, or the alarm system. 
   An example of such a system is U.S. Pat. No. 5,719,551 to Flick, which discloses a remote transmitter that can remotely control a number of vehicle devices. The controller in the Flick &#39;551 patent is responsive to the remote transmitter and sends command codes over a data communications bus to the vehicle devices. Similarly, U.S. Pat. Nos. 6,275,147, 6,756,885, 6,756,886, and 6,812,829, to Flick also disclose a controller/transmitter used to remotely control a number of vehicle devices via command codes sent over a communications data bus. 
   U.S. Pat. No. 5,583,479 to Hettich et al. also discloses a vehicle controller connected to a number of vehicle devices via a data communications bus and a remote transmitter in communication with the controller. The Hettich et al. patent further discloses that if the alarm system is not deactivated correctly, then the vehicle devices will be impaired or prevented from working properly. 
   U.S. Pat. No. 6,232,873 to Dilz et al. discloses a vehicle security system that detects if an original control unit is no longer active. If the security system determines that the original control unit is no longer active, an alternate circuit that remains active in the vehicle activates an electronic immobilization system. 
   Although conventional remote vehicle control systems operating via the data communications bus have made significant advances in convenience for the user, the overall security may still be an issue. For example, a would-be thief gaining access to the data bus, such as from under the vehicle, may generate rogue commands on the data bus compromising vehicle security. The would-be thief could temporarily connect a rogue controller to the data bus and cause the windows to roll down or the doors to unlock. Once inside the vehicle, the would-be thief could again connect to the data communications bus and start the engine. Of course, if the vehicle had a vehicle security system, the would-be thief could disarm the vehicle security system via the data communications bus. 
   SUMMARY OF THE INVENTION 
   In view of the foregoing background, it is therefore an object of the invention to provide a remote vehicle control system and associated method with both convenience and security features. 
   This and other objects, features, and advantages in accordance with the invention are provided by a remote device control system for a vehicle including a true controller that can detect and counteract a rogue controller. The vehicle may include a data communications bus extending throughout the vehicle, and at least one vehicle device connected to the data communications bus. The vehicle remote control system may include a remote transmitter, and the true controller at the vehicle for controlling the at least one vehicle device via a true command on the data communications bus and based upon the remote transmitter. The true controller may also control the vehicle device via a respective counteracting command on the data communications bus based upon detecting a rogue controller attempt to control the vehicle device via a rogue command on the data communications bus. In some embodiments, the counteracting command may also render inoperable the at least one vehicle device for a period of time. Accordingly, the invention provides a remote vehicle device control system with advanced security features. 
   The true command may include a sequence of true command codes, and the rogue command may include a sequence of rogue command codes. The true controller may detect the rogue controller attempt based upon at least one difference between the sequence of true command codes and the sequence of rogue command codes. In some embodiments, the true controller may detect the rogue controller attempt based upon a difference in timing between the sequence of true command codes, and the sequence of rogue command codes. While in other embodiments, the true controller may detect the rogue controller attempt based upon a difference in content between the sequence of true command codes and the sequence of rogue command codes. 
   The at least one vehicle device may be associated with engine starting, and the true controller may generate an engine shutdown command as the counteracting command. In some embodiments, the vehicle may further comprise an engine speed sensor, and the true controller may cooperate with the engine speed sensor to detect the rogue controller attempt. The vehicle may further comprise an ignition switch sensor, and the true controller may cooperate with the ignition switch sensor to detect the rogue controller attempt. 
   The at least one vehicle device may be associated with vehicle door lock actuation, and the true controller may generate a door lock command as the counteracting command. Alternately or additionally, the at least one vehicle device may be associated with vehicle window actuation, and the true controller may generate a window roll-up command as the counteracting command. 
   The at least one vehicle device may be associated with vehicle security, and the true controller may generate a re-arm vehicle security command as the counteracting command. The true controller may also include a processor and a receiver connected thereto, for example. 
   A method aspect of the invention is for using a vehicle remote control system for a vehicle. The vehicle may include a data communications bus extending throughout the vehicle, a remote transmitter, a true controller connected to the data communications bus and responsive to signals from the remote transmitter, and at least one vehicle device connected to the data communications bus. The method may include controlling the at least one vehicle device via a true command on the data communications bus, and based upon the remote transmitter. The method may further include controlling the at least one vehicle device via a respective counteracting command on the data communications bus based upon detecting a rogue controller attempt to control the at least one vehicle device via a rogue command on the data communications bus. 

   
     BRIEF DESCRIPTION OF THE DRAWINGS 
       FIG. 1  is a schematic diagram of a vehicle remote control system in accordance with invention. 
       FIG. 2  is a comparison of command code timing and content diagrams as may be used by the vehicle remote control system shown in  FIG. 1 . 
       FIG. 3  is a comparison of command code timing and content diagrams as may be used by the vehicle remote control system shown in  FIG. 1 . 
       FIG. 4  is a flowchart illustrating a method according to the invention. 
   

   DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
   The invention will now be described more fully hereinafter with reference to the accompanying drawings, in which preferred embodiments of the invention are shown. This invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. In addition, like numbers are used to refer to like elements throughout the drawings. 
   Referring initially to  FIG. 1 , a remote device control system  10  for a vehicle  12  is now described. The vehicle  12  includes, for example, a data communications bus  14  extending throughout the vehicle, and at least one vehicle device connected to the data communications bus. In the illustrated embodiment, the at least one vehicle device includes an ignition switch  22 , an engine speed sensor  24 , a vehicle security system  26 , a hood position sensor  28 , a door lock actuator  30 , a brake pressure sensor  32 , a window actuator  34 , a transmission sensor  36 , an engine starter  39 , a fuel supply shutoff  40 , and an other controller  42  connected to the data communications bus  14 . 
   The vehicle remote control system  10  includes a remote transmitter  16 , and a true controller  18  at the vehicle for controlling the at least one vehicle device via a true command on the data communications bus  14  and based upon signals received from the remote transmitter. The true command is generated via a true command generator  44  of the true controller  18 . The true command generator  44  may be implemented by a software module running on the processor  46 , for example, as will appreciated by those skilled in the art. 
   The true controller  18  also controls the at least one vehicle device via a respective counteracting command on the data communications bus  14  based upon detecting a rogue controller  20  attempt to control the at least one vehicle device via a rogue command on the data communications bus. The counteracting command is generated via a counteracting command generator  48  based upon the rogue controller detector  50  of the true controller  18 . The counteracting command may render inoperable the at least one vehicle device for a period of time. The delay may prevent the rogue controller  20  from being successful by repeatedly sending rogue commands as will be appreciated by those skilled in the art. 
   The rogue controller  20  is illustrated in dotted lines to indicate that it is removably attached to the data communications bus  14 . For example, the rogue controller  20  may be attached to the data communications bus  14  by an unauthorized person in an attempt to gain access or control of the vehicle  12 . The rogue controller  20  illustratively includes a rogue command generator  60  that generates rogue commands on the data communications bus  14  meant to control the at least one vehicle device. 
   The processor  46  is connected to the data bus interface  52  that, in turn, connects the processor to the data communications bus  14  as will be appreciated by those skilled in the art. The processor  46  is also illustratively connected to a memory  54  and a receiver  56 . The memory may be embedded with the processor  46  in other embodiments. 
   The receiver  56  wirelessly receives communications from the remote transmitter  16  via the communications link  58 . A two-way communications link may also be provided so that the user may receive remote alarms or status information. The remote transmitter  16  maybe a small portable device carried by the user when away from the vehicle, may be a cell tower and related infrastructure, or may be a passive transponder activated at the vehicle. 
   In an alternate class of embodiments, the receiver is not directly connected to the processor  46 . Instead, the receiver  56  may be connected to the logic block  62 , and a data bus interface  64  as will be appreciated by those skilled in the art. In other words, the receiver  56  can communicate with the processor  46  over data communications bus  14 . 
   Turning now additionally to  FIGS. 2 and 3 , embodiments of operation of the true controller  18  are further described. The true command in each figure illustratively includes a respective sequence of true command codes  66 ,  68  and the rogue command in each figure includes a respective sequence of rogue command codes  70 ,  72 . The true controller  18  detects the rogue controller  20  attempt based upon at least one difference between the sequence of true command codes  66 ,  68  and the sequence of rogue command codes  70 ,  72 . 
   In one class of embodiments, the true controller  18  may detect the rogue controller  20  attempt based upon a difference in timing between the sequence of true command codes  66  and the sequence of rogue command codes  70  ( FIG. 2 ). For example, the detector module  50  monitors command codes on the data communications bus  14  and compares them to a copy of the true command codes  66  stored in the memory  54 . At time t 1  the rogue controller detector  50  detects a command code entered onto the data communications bus  14  and begins to compare the command code to the copy of the command codes  66  stored in memory  54 . At time t 3  the rogue controller detector  50  determines a difference between the stored copy of the true command codes  68  and the now identified rogue command codes  70 , which causes the counteracting command generator  48  to generate a counteracting command on the data communications bus  14 . 
   In another class of embodiments, the true controller  18  may detect the rogue controller  20  attempt based upon a difference in content between the sequence of true command codes  68  and the sequence of rogue command codes  72  ( FIG. 3 ). At times t 8  and t 10  the rogue controller detector  50  has examined the contents of the command codes  72  and has found the content, the hexadecimal values 4H and 2B, to match the stored true command codes  68 . At time t 12  the rogue controller detector  50  has determined that the rogue command codes  72  does not match the stored true command codes  68 , that is, C3 is not C4. The counteracting command generator  48  generates a counteracting command on the data communications bus  14  in response. 
   In yet other embodiments, the true controller  18  may use differences in both time and content between the sequence of true command codes and the sequence of rogue command codes to detect a rogue controller  20  attempt. The true controller  18  may also include at least one dummy code in the sequence of true command codes. The dummy code does not cause any vehicle function, but is used by the true controller  18  as another marker with which to identify a rogue command code sequence as will be appreciated by those skilled in the art. In its simplest version, the true controller  18  may need a command on the data bus when the true controller itself recognizes that it did not send the command. 
   The counteracting command is based upon what vehicle device the rogue controller  20  attempts to control. For instance, the at least one vehicle device may be associated with engine starting, and the true controller  18  generates an engine shutdown command as the counteracting command. The vehicle  12  may further comprise an engine speed sensor  24 , and the true controller  18  cooperates with the engine speed sensor to detect the rogue controller  20  attempt. The vehicle  12  may further comprise an ignition switch sensor  22 , and the true controller  18  cooperates with the ignition switch sensor to detect the rogue controller  20  attempt as will be appreciated by those skilled in the art. In other words, the rogue controller detector  50  may indirectly detect the rogue controller command if the engine is running, but the ignition is not switched on. 
   In yet other embodiments, the at least one vehicle device may be associated with vehicle door lock actuation, and the true controller  18  may generate a door lock command as the counteracting command. The at least one vehicle device may be associated with vehicle window actuation, and the true controller  18  may generate a window roll-up command as the counteracting command. In yet other embodiments, the at least one vehicle device may be associated with vehicle security, and the true controller  18  may generate a re-arm vehicle security command as the counteracting command. 
   Those skilled in the art will appreciate the applicability of this detection and the counteracting approach for the remote vehicle control functions, as well. Indeed these concepts may be used by automotive manufacturers to discourage the aftermarket installation of improper remote control systems. Of course, overall vehicle security is also greatly enhanced as will be appreciated by those skilled in the art. 
   A method aspect of the invention is for using a vehicle remote control system for a vehicle as now explained with additional reference to the flowchart  74  of  FIG. 4 . As explained in detail above, the vehicle includes a data communications bus extending throughout the vehicle, a remote transmitter, a true controller connected to the data communications bus and responsive to signals from the remote transmitter, and at least one vehicle device connected to the data communications bus, for example. The method starts at Block  76  and includes controlling the at least one vehicle device via a true command on the data communications bus and based upon the remote transmitter (Block  78 ). The data communications bus is monitored to detect a rogue controller attempting to control a vehicle device over the data communications bus at Block  80 . If a rogue controller attempt is detected at Block  82 , then the at least one vehicle device is controlled via a respective counteracting command on the data communications bus at Block  84 . In addition, the counteracting command can delay the operation of the vehicle device for a period of time at Block  86 , before stopping at Block  88 . 
   Other embodiments include, for example, a vehicle control system without the remote transmitter and associated receiver as disclosed in a co-pending patent application assigned to the assignee of the present application entitled VEHICLE CONTROL SYSTEM AND ASSOCIATED METHOD FOR COUNTERACTING ROGUE COMMAND, Ser. No. 11/000,160, the entire disclosure of which is incorporated herein in its entity by reference. Many modifications and other embodiments of the invention will come to the mind of one skilled in the art having the benefit of the teachings presented in the foregoing descriptions and the associated drawings. Therefore, it is understood that the invention is not to be limited to the specific embodiments disclosed, and that other modifications and embodiments are intended to be included within the scope of the appended claims.

Technology Classification (CPC): 1