GB2584803A

GB2584803A - Key module

Info

Publication number: GB2584803A
Application number: GB2012549.8A
Authority: GB
Inventors: Geoffrey Nixon Robin
Original assignee: Individual
Current assignee: Individual
Priority date: 2014-09-02
Filing date: 2014-09-02
Publication date: 2020-12-16
Anticipated expiration: 2034-09-02
Also published as: GB2584803B; GB202012549D0

Abstract

A method of operating a key module 100 associated with an electronic entry system 104, the method comprising, at the key module: monitoring the proximity of the key module to a mobile telephony device 102 associated with an authorised user of the key module; in response to the monitoring indicating that the distance between the key module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the key module; and on the basis of the received operational status change code, initiating an operational status change in relation to the key module, wherein the operational status change comprises a blinding change which causes the key module to not recognise the electronic entry system. The electronic entry system may comprise a domestic door, office door, vehicle door or industrial door entry system. Also provided is a key module, a computer program, and methods of operating a controllable module.

Description

Key Module

Technical Field

The present invention relates to a key module. In particular, but not exclusively, the present invention relates to a key module associated with a vehicle.

Back ground The loss of any security access device, be it a house key, car key, fob or even a mobile device with access codes embedded on it is perhaps one of the most common and stressful everyday occurrences.

When somebody loses their keys, they lose all access to their personal sanctuaries at the same time. In an instant, an individual can be barred from their home, office, car, or worse, lose the keys that belong to the properties of others: this creates problems which can be enormously stressful and emotionally and fmancially punishing.

Crime statistics from 2014 show that houses are being targeted by burglars who steal high value car keys from inside the house and then return at a later date and steal the owner's vehicle.

Research conducted in 2013 found that 26% of UK car drivers had lost their keys at some point. Rolled out nationally (in the UK), these figures indicate that next year more than 7 million driver may lose or mislay their keys.

At present, there are no satisfactory ways of overcoming this problem; either purchase replacement keys and or change the locks. If the keys fall into the wrong hands, thieves can simply unlock the vehicle and drive away. Many modern vehicle keys have a remote opening function which gives a would be thief the enormous advantage of having the vehicle identify itself Given so many people lose their keys every day, it would be useful to have another level of security to protect what is, for many people, one of the most expensive items they own.

Summary

According to a first aspect of the present invention, there is provided a method of operating a key module associated with a vehicle, the method comprising, at the vehicle key module: monitoring the proximity of the vehicle key module to a mobile telephony device associated with an authorised user of the vehicle; in response to the monitoring indicating that the distance between the vehicle key module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the vehicle key module; and

CD

C\I on the basis of the received operational status change code, initiating an operational status change in relation to the vehicle key module, wherein the operational status change o CO comprises a vehicle blinding change which causes the vehicle key module to not recognise the vehicle.

According to a second aspect of the present invention, there is provided a vehicle key module associated with a vehicle, the vehicle key module being configured to: monitor the proximity of the vehicle key module to a mobile telephony device associated with an authorised user of the vehicle; in response to the monitoring indicating that the distance between the vehicle key module and the mobile telephony device has exceeded a predetermined threshold distance, transmit a lack of proximity alert message to the mobile telephony device; receive, from the mobile telephony device, an operational status change code associated with the vehicle key module; and on the basis of the received operational status change code, initiate an operational status change in relation to the vehicle key module, wherein the operational status change comprises a vehicle blinding change which causes the vehicle key module to not recognise the vehicle.

According to a third aspect of the present invention, there is provided a computer program comprising a set of computer-readable instructions which, when executed by a computerised device, cause the computerised device to perform a method of operating a key module associated with a vehicle, the method comprising, at the vehicle key module: monitoring the proximity of the vehicle key module to a mobile telephony device associated with an authorised user of the vehicle; in response to the monitoring indicating that the distance between the vehicle key module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the vehicle key module; and on the basis of the received operational status change code, initiating an operational status change in relation to the vehicle key module, wherein the operational status change comprises a vehicle blinding change which causes the vehicle key module to not recognise the vehicle.

According to a fourth aspect of the present invention, there is provided a mobile telephony device configured to perform a method according to the first aspect of the present invention.

CD

C\I According to a fifth aspect of the present invention, there is provided a computer program comprising a set of computer-readable instructions which, when executed by a mobile o (C) telephony device, cause the mobile telephony device to perform a method according to the first aspect of the present invention.

According to a sixth aspect of the present invention, there is provided a system comprising a key module and a mobile telephone device configured to perform a method according to the first aspect of the present invention.

Further features and advantages of the invention will become apparent from the following description of preferred embodiments of the invention, given by way of example only, which is made with reference to the accompanying drawings.

Brief Description of the Drawings

Figure 1 shows a system diagram according to embodiments; Figure 2 shows a system diagram according to embodiments; Figure 3 shows a flow diagram according to embodiments; and Figure 4 shows a flow diagram according to embodiments.

Detailed Description

Figure 1 shows a system diagram according to embodiments. Figure 1 comprises a key module 100, a mobile telephony device 102 and a vehicle software system 104 of a vehicle.

In embodiments key module 100 comprises a telephony component and Bluetooth proximity tag paired with the vehicle owner's (or otherwise authorised user of the vehicle) phone/mobile device 102.

In embodiments, if key module 100 goes out of range (or a predetermined threshold distance) of the owner's mobile telephony device 102 for a given amount of time, an alert will be generated and sent to the mobile telephony device 102 notifying the owner. This function may for example be implemented with use of the Bluetooth Link Loss Service enabled on key module 100 and mobile telephony device 102.

In embodiments, key module 100 is paired with the vehicle at factory fit time or if applicable after-market using a standalone component.

In embodiments, the telephony component of key module 100 comprises telephony and Simple Message Service (SMS) functionality allowing the owner to attempt to contact the key module and thus anyone who picks up the call. A command interpreter processor is also part of the system, for example using programmable application processor architecture. In embodiments, the interpreter receives coded command(s) via SMS and triggers the location based services to begin tracking and returning geographical location data (for example latitude and longitude data) as one or more messages (for example over SMS) to the owner's mobile telephony device 102.

S

With regard to vehicle software system 104, here for context and reference purposes, modem vehicles have a number of control units and software subsystems. However, such functionality is not yet presented as a standard application programming interface (API) accessible by third parties (not to be confused with dashboard information UT which may be used as UP UX (Stands for User Experience) to smartphone apps using components such as Apple's CarPlay). In embodiments, beyond id pairing, no direct communication between the vehicle control units and key module 100 is carried out.

With regard to mobile telephony device 102, in embodiments this comprises a device such as a smartphone that supports Bluetooth (e.g. Bluetooth 4.0) and can host third party application software (or 'apps'). Such application software is configured to communicate with key module 100 including for example sending commands and map and trace functionality.

Figure 2 shows a system diagram according to embodiments. Figure 2 comprises a key module 100, a mobile telephony device 102, a vehicle software system 104 and a web module (or 'cloud/software as a service') 106.

In embodiments, key module 100 executes on the application processor using a standard communication stack thus keeping all processing local to a single hardware component. A number of standards, practices and programming requirements (C++/ARM) are referred to; however, the exact implementation of embodiments should not be limited to those described in detail and embodiments may be implemented on a number of different operating systems and architectures.

Key module 100 comprises software running on a consumer hardware module, the system requirements are for a programmable CPU (application processor) with installed security and network components. The application processor may be programmable in C/C++/Java and based on a performance ARM architecture, for example a Google Android port. The applicable performance criteria are measured by responsiveness of hardware module interface (e.g. depressing keys) and connectivity monitoring (e.g. detect signal drop).

The communications stack of key module 100 allows the owner to make a phone call to key module 100 and thus allows the owner to talk to anyone who may have found the key module. In embodiments, further functionality requires commands to be sent to key module 100, proximity loss detection, and location/position services for example involving standard security level and secure communications.

In embodiments, the telephony component of key module 100 comprises a standard subscriber identity module (SIM) hardware stack supporting voice calls and SMS messaging. In embodiments, the telephony component comprises a data component which may for example support Internet Protocol (IP) traffic. In embodiments, the SMS content is encrypted and unique (i.e. one time use) such that the application process will need to access the SMS message store (and event trigger) to decrypt and execute command(s) contained therein. The Open Systems Interconnection (OSI) is included here as an indicator; in embodiments, communication components may follow the standard model and may be bought offthe-shelf The implementation of the stack deals with network communications and supports Transport Layer Security (TLS). In embodiments, the SMS messaging stack is a different subsystem.

In embodiments, Bluetooth is used to maintain an active connection for proximity checking, a number of profiles and characteristics (for example Link Loss Service) and alert level control. In embodiments, key module 100 comprises a WiFi 802.11 component which is employed as part of the location based services using a service such as Skyhook to aid positioning in particular when (PS is insufficient due to broken line of sight (LOS). WiFi may also be used as a communication conduit both for access to any further online services, a peer-to-peer channel with the vehicle or owner's computer/mobile device and potential Voice over IP (Vow) functionality.

In embodiments, a USB connection is employed as a standard charging mechanism and high speed bulk data transfer for system updating.

In embodiments, security is a priority to the system which may interface directly with the vehicle management and control unit(s) (supporting advanced immobilisation functions). In embodiments, a Public Key Infrastructure may be employed. In embodiments, a Secure Link Protocol, specific to key module 100, contains a number of fail-safes and checks to reduce attacks on systems. In embodiments, key module 100 comprises a KeyChain component with a key and certificate management system. In embodiments, key module 100 comprises an encrypted store for storing system, vehicle and owner data and may for example be encrypted using Public Key Infrastructure (PM). The store may be wiped remotely as per product requirements specification, say for example by deleting the private key thus no longer allowing decryption of the content.

In embodiments, the Pairing IDs are implemented by one of a number of methods including using universally unique identifiers (UULDS) or certificates/keys, the primary function of which is to only allow communications between paired devices (e.g. key module 100 and the vehicle). In embodiments, these IDs are fixed at factory fit where the vehicle is built and the key module is bound to the vehicle.

To enable secure network communications, Us may be employed.

In embodiments, key module 100 comprises a command framework which is the hub of the specific application code written for the system. In embodiments, the command framework comprises an architecture which contains an event-driven messaging notification service that receives and dispatches commands to the system. In embodiments, a command interpreter parses and expands incoming commands passing them to the processing engine for execution. In embodiments, key module comprises a state machine for managing command transitions, queuing and ordering of commands.

In embodiments, key module 100 comprises a device hardware interface layer. In embodiments, this is included in the reference architecture to indicate a decoupling between the core software components. Aside from being good practice, it can be a requirement that different manufacturers will have different industrial designs and interface operations (buttons/touch screens). The communications interface may also Change based on required features and component availability. The hardware user interface (UI) may for example comprise a number of buttons including for example 'call owner'; however, these could be a number of different combinations and including touch-screens. An update manager may comprise a secure subsystem allowing a partial or complete system update.

With regard to vehicle software system 104, there is currently no standard vehicle Application Programming Interface (API) for controlling any of the vehicle's subsystems including the engine control unit, transmission control units, immobiliser and the associated array of sensors and control etc., so communication with these systems require specific software installed (for example at factory fit time) according to embodiments. In embodiments, a pairing key is implemented.

In embodiments, vehicle software system 104 comprises a key transponder, immobiliser and charging system. In embodiments, an encrypted identification code unique to that key and vehicle is transmitted to allow the engine to start.

In embodiments, vehicle software system 104 comprises a dashboard head unit API. There are now a number of emerging technologies and proprietary standards being adopted in this domain, for example Apple's CarPlay, MirrorLink and Google's Open Automotive Alliance. The primary use for these systems is to use the vehicle display and interface functionality to access smartphone apps such as navigation and audio. In embodiments, the vehicle's display and control switches/knobs could be employed to directly control application software running on key module 100 and/or mobile telephony device 102 and may for example have a modified and safety conformant UX.

With regard to mobile device and/or computer 102, the owner communicates with key module 102 using application software (or 'app'), and if required handling the voice call thus hiding the key module phone number, or allowing communication via a third party call handling system.

In embodiments, the app is native, secure and incorporates tracking, tracing, and configuration management, access to a central services via web services or suitable API In embodiments, the app will provide the owner with an interface to support making calls, messaging and finding keys along with any additional commands defined in the product requirements specification. In embodiments, the command framework receives requests from the UX component (User eXperience) and translates these to command communications to key module 100 using the Secure Link Protocol (for example #over TLS).

In embodiments, the architecture exploits modern design pattern practices including Model View Controller, Chain of Command and Delegates to maintain an updatable application and secure code. In embodiments, the command communications include version stamping, pairing id and auditing information which may be recorded by for example an insurance company. In embodiments, a suitably decoupled and secure architecture will provide flexibility of (product) requirements to allow communication directly with key module 100 or via a central agency. Embodiments comprise a built-in and hardware based security framework for managing certificates, keys and polices. In embodiments, communications with key module 100 and any web services follow standard Authentication, Authorisation and Accounting protocols.

In embodiments, the phone app may communicate with the vehicle subsystems and control units there maybe requirements, for example to allow communication of state information to/from the dashboard instrument cluster Typically the owner would use their mobile phone or tablet to communicate with key module 100; however, embodiments comprise a desktop version of the app, for example for use in case the mobile device is not available for some reason.

With regard to web module 106, this allows one or more features and technical functions to be implemented via a web module (or 'central server'). Embodiments comprise an API encapsulation of one or more features along with security and management functionality. For example, an owner/user is able to contact their key module 100 from any networked device using a website or web-app which is served by this architecture. In embodiments, a unique set of login credentials may be issued in order to allow identification of the owner as legitimate. In embodiments, third party agencies such as insurance companies or the emergency services would be able to access the owner's key module 100 say in a call centre scenario where a user calls in having had their keys stolen and the insurance policy require the agency to find and track the vehicle. Embodiments enable more proactive control via the police tracking and shutting down the vehicle remotely. In embodiments, operational requirements for updating software and maintaining command symmetry between all parties can be best served by a centrally managed web module system.

In embodiments, the service software is implemented in a native programming language such as Java, C# and would be subject to security penetration testing.

In embodiments, key module 100 comprises a vehicle ignition module configured with one or more the following integrated functions/capabilities: I. Vehicle Stop / Start, Open/Lock 2. Mobile telecommunications network interface, for example incorporating Universal Mobile Telecommunications Services, phone, Bluetooth, SMS Text, and GPS Data capabilities.

3. Ability to "pair with" other mobile devices so the key module can be controlled by those devices.

4. Ability to "pair with" other mobile devices so that the key module has (possibly limited) control and access to the ftmctions of that device.

5. Ability to act as an interface between the vehicle and the owner via the owner's mobile device.

6. Ability to send, receive and issue data instructions between itself and mobile telephony device 102 and to pass data on to the vehicle when located into the vehicles electronics systems or within the vehicle electronics sphere of influence.

7. Ability to enable paired mobile phone functions to be displayed and accessed via the vehicle's on-board electronic systems.

8. Ability to make and receive voice calls, SMS texts, GSM, GPS and Bluetooth and Data from all platforms as a stand-alone device.

Embodiments comprise measures, including one or more of a method, a key module, apparatus, a computer program, a mobile telephony device and a system for use in operating a key module associated with a vehicle. At the vehicle key module, the proximity of the vehicle key module to a mobile telephony device associated with an authorised user of the vehicle is monitored. In response to the monitoring indicating that the distance between the vehicle key module and the mobile telephony device has exceeded a predetermined threshold distance, a lack of proximity alert message is transmitted to the mobile telephony device. An operational status change code associated with one or more of the vehicle and the vehicle key module is received from the mobile telephony device. On the basis of the received operational status change code, an operational status change in relation to one or more of the vehicle and the vehicle key module is initiated.

The predetermined threshold distance may be set according to a comfort zone for the owner, for example 30m. In embodiments, the predetermined threshold distance is user configurable via one or more of the key module and the mobile telephony device.

In embodiments, the initiating comprises disabling an ignition function of the vehicle key module whereby the vehicle key module cannot be used to start the ignition of the vehicle.

In embodiments, the initiating comprises disabling a vehicle entry function of the vehicle key module whereby the vehicle key module cannot be used to unlock one or more doors of the vehicle.

In embodiments, the initiating comprises activating a geographical location function on the vehicle key module to report a geographical location of the vehicle key module to the mobile telephony device.

In embodiments, the initiating comprises activating an audible signal generation function on the vehicle key module.

In embodiments, the initiating comprises activating a visible signal generation function on the vehicle key module.

Embodiments comprise receiving user input responsive to the activated visible signal generation function, and initiating a telephone call from the vehicle key module to the mobile telephony device.

In embodiments, the initiating comprises activating a vehicle vicinity function on the vehicle key module to monitor whether the vehicle key module is within a given predetermined threshold distance from the vehicle. In some such embodiments, in response to the activated vehicle vicinity function indicating that the vehicle key module is within the given predetermined threshold distance from the vehicle, transmitting a vehicle vicinity alert message to the mobile telephony device.

In embodiments, the initiating comprises activating a microphone of the vehicle key module and transmitting audio signals detected by the activated microphone to the mobile telephony device.

In embodiments, the initiating comprises transmitting, to a communication interface of the vehicle, a command to change an operational status of the vehicle.

In embodiments, the operational status change command commands disabling of an ignition system of the vehicle.

In embodiments, the operational status change command commands disabling of an ignition system of the vehicle when the vehicle is next stationary.

In embodiments, the operational status change command commands locking of one or more doors of the vehicle.

Embodiments comprise a vehicle key module associated with a vehicle, the vehicle key module being configured to monitor the proximity of the vehicle key module to a mobile telephony device associated with an authorised user of the vehicle, in response to the monitoring indicating that the distance between the vehicle key module and the mobile telephony device has exceeded a predetermined threshold distance, transmit a lack of proximity alert message to the mobile telephony device, receive, from the mobile telephony device, an operational status change code associated with one or more of the vehicle and the vehicle key module, and on the basis of the received operational status change code, initiate an operational status change in relation to one or more of the vehicle and the vehicle key module.

Embodiments comprise a computer program comprising a set of computer-readable instructions which, when executed by a computerised device, cause the computerised device to perform a method of operating a key module associated with a vehicle, the method comprising, at the vehicle key module, monitoring the proximity of the vehicle key module to a mobile telephony device associated with an authorised user of the vehicle, in response to the monitoring indicating that the distance between the vehicle key module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device, receiving, from the mobile telephony device, an operational status change code associated with one or more of the vehicle and the vehicle key module, and on the basis of the received operational status change code, initiating an operational status change in relation to one or more of the vehicle and the vehicle key module.

Embodiments comprise a mobile telephony device configured to perform embodiments described herein.

Embodiments comprise a computer program comprising a set of computer-readable instructions which, when executed by a mobile telephony device, cause the mobile telephony device to perform embodiments described herein.

Embodiments comprise a system comprising a key module and a mobile telephone device configured to perform embodiments described herein.

Embodiments comprise apparatus substantially in accordance with any of the examples as described herein with reference to and illustrated by the accompanying drawings.

Embodiments comprise methods substantially in accordance with any of the examples as described herein with reference to and illustrated by the accompanying drawings.

Embodiments involve a key module 100 associated with a vehicle. In embodiments, key module 100 comprises a smart ignition key created as a part of the vehicle which enables indirect communication between the vehicle and a mobile telephony device 102 associated/owned by the vehicle owner (or other authorised user of the vehicle). In embodiments, key module 100 acts as an electronic data-bridge that allows mobile data traffic between the vehicle and the owner's mobile phone device.

In embodiments, key module 100 does not directly affect the vehicle's security system, although it can be remotely caused to changes states which in turn causes the vehicle's on-board electronics to change behaviour.

In embodiments, key module 100 has smart phone functionality incorporated into its design at the point of manufacture, for example including Universal Mobile Telecommunications Service (UMTS) and/or any other appropriate telephony/telecommunications functionality.

In embodiments, key module 100 keeps, records and retains data relating to its parent vehicle's mileage, service history etc. In embodiments, in the event of unusual circumstances such as an accident, key module 100 will log all information as to time, place, conditions etc. In embodiments, in the event of air bag deployment, key module 100 will call the emergency services with all the relevant information. Closely allied to this function, in embodiments key module 100 comprises a built-in "Panic Button" facility.

In embodiments, key module 100 draws power from and charges itself via the vehicle's power supply. When not in use, key module 100 may be charged via a dedicated induction pad or similar device. In embodiments, when key module 100 reaches a minimum power reserve, a low power signal is emitted. In embodiments, if key module 100 powers off in its passive state, then key module 100 will still allow access to the vehicle in the normal way. In embodiments, if key module 100 has powered off (e.g. in search mode) it may need to be charged before allowing access to the vehicle.

In embodiments, key module 100 is uniquely electronically bonded to (or 'paired with') the vehicle at a given point in the vehicle's manufacture.

In embodiments, key module 100 is powered by its own built-in battery. This battery may be charged in a number of ways, for example by induction when located within a specific region in relation to the vehicle's ignition circuit. As another example, key module 100 may be charged by being placed on its own induction pad or via a USB connection.

In embodiments, system upgrades and hard data information exchange between key module 100 and other computing devices is available via a built in USB port.

In embodiments, key module 100 comprises an actual physical key embedded within its body. In embodiments, this actual "old fashioned" physical key is incorporated into the body of key module 100 in such a way that, in the event of the power supply either dropping below a minimum support level or failing altogether, the key mechanism will be released. However, in embodiments, the physical key will only be released if the power supply runs down or out without any of the other higher functions being engaged. For example, if "ping" range function has been activated because the key module 100 and mobile telephone device 102 are outside their comfort zone (predetermined threshold distance), the physical key will not be released. In embodiments, if key module 100 is opened/destroyed in an effort to get at the physical key stem, the actual act of breaking the key module 100 body will break or damage the physical key in such a way as to render it useless. In embodiments, the physical key will only allow access to the base level functions of the vehicle or locking mechanism, such as open/close/stop/start.

Figure 3 shows a flow diagram according to 'passive state' or 'search mode' embodiments. In its passive state, only the functions and parameters of key module 100 are changed, accessed or engaged by the mobile telephony device 102 of the vehicle owner's (or other authorised user of the vehicle). A number of functions on mobile telephony device 102 can also be changed, accessed or engaged by key module 100 once the two devices have been paired or bonded together. For example Audio, RDF, GPS, SMS and other signal output and data functions may be operated in either direction between the two devices, so key module 100 can be used to locate mobile telephony device 102 and if required lock that device out until it is found.

In step 3a, once key module 100 is paired with mobile telephone device 102, the key module 100 will typically be in hibernation with most or all systems dormant except for a "ping" or location function. The "ping" function tells the two devices that they are within the owner's pre-set comfort zone or acceptable range (or 'predetermined threshold distance'). Once key module 100 passes outside of the owners pre-set safe zone, key module 100 is presumed lost or misplaced.

In step 3b, key module 100 detects that mobile telephony device 102 is "outside" the nominal range or "comfort zone" and sends mobile telephony device 102 a text message (and possibly also a vibrate message alert).

In step 3c, if key module 100 is not easily located, the owner can access key module 100 via mobile telephony device 102 to activate either a radio detection frequency (RDF) transponder of key module 100 and/or an audible signal function of key module 100. If key module 100 cannot be traced by the audio signal, the RDF feature can be engaged via mobile telephony device 102 and will be able to zero in on key module 100 if it has (for example) been lost behind furniture, dropped out of a pocket, left in a shop, etc. In step 3d, key module 100 cannot be located and is out of audible and RDF range (or possible is out of the operating parameters of these functions).

In step 3e, if key module 100 remains undetected, it is reasonable to assume that it is either comprehensively lost or has been picked up. At this stage, the owner may choose to either proceed to step 3g and make a telephone call to key module 100 to see if the call is answered. Alternatively, if there is an element of doubt as to how key module 100 has been lost, the owner may enter in user input 'Code 1' on mobile telephony device 102. Upon receipt of the 'Code I' user input, mobile telephone device 102 transmits a corresponding operational status change code to key module 100 in step 3f In step 3f, mobile telephony device sends an SMS text (or other suitable message) to key module 100 which carries a function activation code Once received this code implements one or more of the following: (i) A GPS signal function of key module 100 is switched to its On state.

This will enable the owner to track and find key module 100 by tracing the signal using mobile telephony device 102.

(ii) A key vehicle entry function of key module 100 is disabled. This will ("if" pressed by the finder) call mobile telephony device 102 and establish verbal contact between the owner and the finder, (iii) A visible signal generation function on key module 100 is activated, for example a flashing light emitting diode (LED) call button or suchlike. This will "if' pressed by the finder call mobile telephony device 102 and establish verbal contact between the owner and the finder.

(iv) A vehicle vicinity function on key module 100 is activated. This will send an SMS "Alert" text to the owner with the information that key module 100 is with or within the immediate vicinity of the vehicle, that further attempts to locate the keys should be stopped and that the (Active) Code 2 functions of key module 100 have been engaged.

Once the vehicle has been rendered secure by "blinding" (in other words the mobile device causes the module to not recognise the vehicle), the owner may then either continue to trace the unit by a combination of the above functions.

In step 3g, having made the vehicle safe, the owner may choose to call key module 100 directly in the knowledge that whatever the outcome the vehicle has been rendered secure.

In step 3h, either key module 100 has been detected and returned to its rightful owner or (Code 2, Active State) functions are engaged.

Figure 4 shows a flow diagram according to 'active state' embodiments where communication with vehicle software system 104 may be conducted. Key module 100 can be put into its active state in a number of ways as described below. It is important to note that in embodiments, key module 100 does not interact with or change any parameters of the on-board electronic system of the vehicle (for example when key module 100 is remotely blinded by mobile telephony device 102 so it no longer recognises the vehicle). In embodiments, with key module 100 in its blinded state, the vehicle alarm systems retain their integrity and will remain in that state. In essence, the lock remains the same but the key changes its state. The term "tripped" used herein means that the one or more of the key module 100 "active state" functions have been caused to respond, (for example, the alarm has been activated or tripped). It should be understood that the Figure 4 "active state" flow diagram represents an example logical sequence of events and other embodiments may employ other sequences. In reality, any of these steps may be immediately activated depending on the circumstances that key module 100 senses once a Code 2 instruction is received. For example, in embodiments, if the vehicle has been stolen and iS being driven at the time the Code 2 instruction is received, key module 100 will automatically transition to step 41 Step 4a. The Code 2-SMS Text message is received by key module 100.

One or more of these following "active state" functions are now switched on: (i) Auto proximity alert.

(ii) Vehicle blinding.

(iii) Engine cut out when vehicle is stationary.

Step 4b. Step 4a functions are active, but none have been activated, for example the proximity alarm has not been tripped. The 4a functions will remain on standby until any security functions are tripped or a Figure 3h (code 2) cancel text has been sent by mobile telephony device 102.

Step 4c. One or more of the key module 100 step 4b functions have been activated (or tripped'). For example, key module 100 was within the vehicle vicinity function's pre-set range at the time the Code 2 SMS Text was received. The Key Module 100 is assumed stolen.

Step 4d. The key module 100 automatically sends SMS Text/Data information to mobile telephony device 102, such as insurance and police services noting the time, date and other relevant information about the event.

Step 4e. The key module 100 has been introduced into the vehicle's ignition loop The vehicle itself can now be assumed stolen. In this condition, in some embodiments, all functions as described in the "active embodiments" are activated.

Step 41 Conclusion -here, either the key module 100 functions were activated in time to neutralise any threat of theft, or the vehicle was taken without consent, tracked and disabled when stopped. In accordance with embodiments, either the vehicle has been rendered secure by the early activation of the key module 100 built-in passive security functions, or the vehicle can be tracked and secured by the active security functions Embodiments of the present invention enable a radical shift of the whole concept and existing mind-set of security access devices (for example keys). Embodiments promote an actual conscious shift from the status quo that exists at present, where the tendency can be to "put all eggs in one basket", or more specifically referring to embodiments described here "all keys on one chain" (any chain is only as strong as its weakest link) to a situation where any key or link can be lost or misplaced and then traced and found by utilising the functions inherently built into the other keys or links. All things being bidirectional, if somebody loses their keys they can find them or at least render them void by using their mobile phone. Likewise, if somebody loses their phone, they can find it or void it by using their keys.

The above embodiments are to be understood as illustrative examples of the invention. Further embodiments of the invention are envisaged. For example, in alternative embodiments, further command codes in addition to Code 1 and Code 2 may be devised and configured on key module 100 and mobile telephony device 102.

The embodiments described above primarily relate to a vehicle security device. However, alternative embodiments apply to non-vehicle scenarios. The key module of embodiments can be used where a sophisticated electronic entry system may be advantageous or required. The key module of embodiments can be applied wherever a key system/device is present to ensure flexibility, personal security and safety for any domestic, office, vehicle or industrial door entry system.

Alternative embodiments do not specifically relate to access or entry systems or vehicles. For example, embodiments may be used in applications such as remotely controlled monitoring devices where one or more features of a module may be directly controlled and accessed by a mobile telephony device.

Embodiments comprises a method of operating a controllable module, the method comprising, at the controllable module; monitoring the proximity of the controllable module to a mobile telephony device associated with an authorised user of the controllable module; in response to the monitoring indicating that the distance between the controllable module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the controllable module; and on the basis of the received operational status change code, initiating an operational status change in relation to the controllable module.

It is to be understood that any feature described in relation to any one embodiment may be used alone, or in combination with other features described, and may also be used in combination with one or more features of any other of the embodiments, or any combination of any other of the embodiments. Furthermore, equivalents and modifications not described above may also be employed without departing from the scope of the invention, which is defined in the accompanying claims.

Claims

Claims 1. A method of operating a key module associated with an electronic entry system, the method comprising, at the key module: monitoring the proximity of the key module to a mobile telephony device associated with an authorised user of the key module; in response to the monitoring indicating that the distance between the key module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the key module; and on the basis of the received operational status change code, initiating an operational status change in relation to the key module, wherein the operational status change comprises a blinding change which causes the key module to not recognise the electronic entry system.
2. A method according to claim 1, wherein the electronic entry system comprises a door entry system.
A method according to claim 1 or 2, wherein the electronic entry system comprises one or more of the following: a domestic door entry system, an office door entry system, a vehicle door entry system, and an industrial door entry system
4. A method according to any preceding claim, wherein the initiating comprises disabling an entry function of the key module whereby the key module cannot be used to unlock one or more doors of the electronic entry system
5. A method according to any preceding claim, wherein the initiating comprises activating a geographical location function on the key module to report a geographical location of the key module to the mobile telephony device.
6. A method according to any preceding claim, wherein the initiating comprises activating an audible signal generation function on the key module.
7. A method according to any preceding claim, wherein the initiating comprises activating a visible signal generation function on the key module.
8. A method according to claim 7, comprising: receiving user input responsive to the activated visible signal generation function; and initiating a telephone call from the key module to the mobile telephony device.
9. A method according to any preceding claim, wherein the initiating comprises activating a geographical location function on the key module to report a geographical location of the key module to the mobile telephony device.
A method according to any preceding claim, wherein the initiating comprises activating a vicinity function on the key module to monitor whether the key module is within a given predetermined threshold distance from the electronic entry system.
11. A method according to claim 10, comprising, in response to the activated vicinity function indicating that the key module is within the given predetermined threshold distance from the electronic entry system, transmitting a vicinity alert message to the mobile telephony device.U.
A method according to any preceding claim, wherein the initiating comprises activating a microphone of the key module and transmitting audio signals detected by the activated microphone to the mobile telephony device.H.
A method according to according to any preceding claim, wherein the initiating comprises transmitting, to a communication interface of the electronic entry system, a command to change an operational status of the electronic entry system.
14. A method according to claim 13, wherein the operational status change command commands locking of one or more doors of the electronic entry system.
15. A key module associated with an electronic entry system, the key module being configured to: monitor the proximity of the key module to a mobile telephony device associated with an authorised user of the key module; in response to the monitoring indicating that the distance between the key module and the mobile telephony device has exceeded a predetermined threshold distance, transmit a lack of proximity alert message to the mobile telephony device; receive, from the mobile telephony device, an operational status change code associated with the key module; and on the basis of the received operational status change code, initiate an operational status change in relation to the key module, wherein the operational status change comprises a blinding change which causes the key module to not recognise the electronic entry system.
16. A computer program comprising a set of computer-readable instructions which, when executed by a computerised device, cause the computerised device to perform a method of operating a key module associated with an electronic entry system, the method comprising, at the key module: monitoring the proximity of the key module to a mobile telephony device associated with an authorised user of the key module; in response to the monitoring indicating that the distance between the key module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the key module; and on the basis of the received operational status change code, initiating an operational status change in relation to the key module, wherein the operational status change comprises a blinding change which causes the key module to not recognise the electronic entry system.
17. A mobile telephony device configured to perform a method according to any of claims Ito 14.
18. A computer program comprising a set of computer-readable instructions which, when executed by a mobile telephony device, cause the mobile telephony device to perform a method according to any of claims 1 to 14.
19. A system comprising a key module and a mobile telephone device configured to perform a method according to any of claims Ito 14
20. A method of operating a controllable module associated with an electronic entry system, the method comprising, at the controllable module: monitoring the proximity of the controllable module to a mobile telephony device associated with an authorised user of the controllable module; in response to the monitoring indicating that the distance between the controllable module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the controllable module; and on the basis of the received operational status change code, initiating an operational status change in relation to the controllable module, wherein the operational status change comprises a blinding change which causes the controllable module to not recognise the electronic entry system.
21. A method of operating a controllable module, the method comprising, at the controllable module: monitoring the proximity of the controllable module to a mobile telephony device associated with an authorised user of the controllable module; in response to the monitoring indicating that the distance between the controllable module and the mobile telephony device has exceeded a predetermined threshold distance, transmitting a lack of proximity alert message to the mobile telephony device; receiving, from the mobile telephony device, an operational status change code associated with the controllable module; and on the basis of the received operational status change code, initiating an operational status change in relation to the controllable module.