Ford Global Technolgoies, LLC

Ford Motor Company Limited

Lisa Therese Boran

John Robert Van Wiemeersch

Ronald Patrick Brombach

Robert Bruce Kleve

John Thomas Ricks

Xin Ye

Venkata Kishore Kajuluri

Jim Michael Weinfurther

James Weinfurther

Aldi Caushi

Brian Bennie

Thomas Lee Miller

Kosta Papanikolaou

Eric L Reed

Howard Paul Tsvi Linden

Laura Viviana Hazebrouck

Noah Barlow Mass

Daniel Carl Bejune

H Paul Tsvi Linden

Daniel Aaron Zajac

Kevin Thomas Hille

Kevin Smith

Patrick Kevin Holub

Scott Howard Gaboury

David Anthony Symanow

Jochen Schubert

Mark J Scalf

Bradley Warren Smith

Simon John William Hurr

Eric Ramsay Paton

Mark George Vojtisek

Jacob David Nelson

Mark Christian Aaron

Brunilda Bleta Caushi

Daniel James Card

Mark Edward Porter

Mike Raymond Westra

John Demetriou

A powered latch system for motor vehicles includes at least one powered latch that can be controlled based, at least in part, on vehicle operating conditions. The system may be configured to control unlatching of the vehicle doors utilizing data relating to the vehicle speed and/or the existence of a crash event. The powered latch system can be configured as required for various vehicles, and to accommodate specific operating requirements with respect to child locks in various geographic jurisdictions.

Electronic safe door unlatching operations

Systems and methods described herein provide for assigning classifications to signals and corresponding messages for prioritization and transmission across a vehicle CAN bus. The assigned classifications are used to select authentication keys specific to each classification of message. Nodes of the CAN bus can include different sets of keys based on the classifications of messages handled at the nodes. Keys are distributed and localized to reduce any potential impact on critical functions of the vehicle system that may result from compromise of an authentication key.

Assigning categories for messages and symmetric key per category to localize the impact in case of key compromise

A latch system for vehicle doors includes a powered latch including a powered actuator that is configured to unlatch the powered latch. An interior unlatch input feature such as an unlatch switch can be actuated by a user to provide an unlatch request. The system may include a controller that is operably connected to the powered actuator of the powered latch. The controller is configured such that it does not unlatch the powered latch if a vehicle speed is greater than a predefined value unless the interior latch feature is actuated at least two times according to predefined criteria.

Powered latch system for vehicle doors and control system therefor

Authorization of a user device is suspended based on determining, for a first predetermined time, a distance between the user device and a vehicle is greater than a threshold distance. Then a user input specifying a vehicle parameter is requested. Upon receiving the user input, the user input is validated based on the user input matching a stored vehicle parameter. The user device is deauthorized based on a) failing to receive a valid user input within a second predetermined time, or b) receiving a number of invalid user inputs equal to a threshold number.

Vehicle deauthortization of user device

Systems and methods described herein provide for assigning classifications to signals and corresponding messages for prioritization and transmission across a vehicle CAN bus. The assigned classifications are used to prioritize messages, signals, and nodes of the vehicle CAN bus. The classifications are used to prioritize critical messages and high priority messages that control operations of the vehicle system.

Using signal rating to identify security critical CAN messages and nodes for efficient implementation of distributed network security features

The present disclosure relates to a system that allows engagement of an electronic plug-in device (EPID) with an on-board diagnostic II (OBD-II) port of a vehicle. The EPID includes an accelerometer and a processor. The accelerometer detects vibrations associated with engine operation. The processor, in communication with the accelerometer, executes instructions to receive an input waveform from the accelerometer. The processor may determine whether the input waveform from the accelerometer is associated with the engine operation. The processor may transition the EPID from a sleep state to a wake state if the input waveform is detected to be associated with the engine operation. In contrast, the processor may transition the EPID from the wake state to the sleep state when the input waveform is not associated with the engine operation.

System to wake electronic plug-in devices (EPIDs) and related method(s) thereof

A Phone-as-a-Key (PaaK) system includes a pre-processor, a secure processor disposed in communication with the pre-processor, a cache memory associated with the pre-processor and the secure processor, and a memory for storing executable instructions. The pre-processor and the secured processor are configured to perform steps that can mitigate delay caused by mobile device authentication. For example, the pre-processor authenticates an authentication message associated with a mobile device used as a key for the vehicle, and stores the message in the cache memory. The pre-processor receives a door latch actuation signal, and initializes the secure processor in response. The pre-processor then provides access to the vehicle based on the secure processor initialization instruction, and the authentication message stored in the cache memory. After initialization, the secure processor sends a challenge value for second authorization of the mobile device, and triggers remedial actions if the device fails to respond correctly.

Phone as a key low latency vehicle access

A device for controlling a restricted mode of a vehicle is provided. The device includes a controller that is configured to receive an input indicative of a request to change a vehicle state from a fully operational mode to a restricted mode and to transmit a first control signal indicative of a request to limit at least one of vehicle speed and vehicle acceleration. The controller is further configured to monitor a distance traveled by a driver when the vehicle is in the restricted mode and to compare the distance traveled to a predetermined distance limit. The controller is further configured to transmit a second control signal to remove the request to limit the at least one of the vehicle speed and the vehicle acceleration in response to determining that the distance traveled exceeds the predetermined distance limit.

System and method for controlling a restricted mode in a vehicle

An access assessment tool is described for providing a technical solution for selectively controlling access to restricted information and/or implementation of restricted functionalities based on a current vehicle mode and/or validated credentials. The access assessment tool described herein controls the validation of a user or diagnostic tool requesting access to restricted information or implementation of a restricted function before allowing access to the restricted information or allowing implementation of the restricted function.

Customer driving mode for vehicles

A body controller may monitor a vehicle bus for diagnostic requests received from a scan device connected to a diagnostic port when a vehicle perimeter alarm of a body controller is armed. The body controller may reset a predetermined lockout timeout responsive to receipt of a session request from the scan device. Upon expiration of the lockout timeout, the body controller may request to establish the session with the body controller from the scan device for a predetermined access timeout. When the session is established, the body controller may allow a user to program entry devices to the body controller and/or download software updates to the body controller.

Diagnostic port protection to body control module

A vehicle includes a gateway controller configured to interface a diagnostic port to a vehicle communication network. In response to a perimeter alarm system being in an armed state, transfer of messages from the diagnostic port to the vehicle communication network is inhibited. A change session diagnostic request received from the diagnostic port is transferred to the vehicle communication network in response to vehicle speed being less than a threshold and an ignition switch begin in a run position. The transfer of the change session diagnostic request is otherwise inhibited unless intended for a module designated for reprogramming keys.

Vehicle network communication protection

Apparatus for a motor vehicle comprises a location monitor for determining vehicle coordinates for an instantaneous vehicle position within a predetermined reference system. A jurisdictional map database is provided for relating a plurality of jurisdictions to corresponding ranges of coordinates in the predetermined reference system. A regulation database is provided for relating a plurality of vehicle functions to corresponding parametric limitations for respective jurisdictions. A user interface is coupled to the regulation database for configuring at least one of the parametric limitations. A controller is coupled to the location monitor, the jurisdictional map database, and the regulation database for identifying a current jurisdiction in response to the vehicle coordinates, identifying at least one vehicle function having a parametric limitation for the current jurisdiction, and modifying the action of the identified vehicle function to comply with the respective parametric limitation.

Jurisdiction-aware function control and configuration for motor vehicles

Growing community of inventors

Northville, MI, United States of America

Lisa Therese Boran