WO1993001072A1

WO1993001072A1 - Method and device for verifying the capacity of a driver to drive a vehicle

Info

Publication number: WO1993001072A1
Application number: PCT/FR1992/000614
Authority: WO
Inventors: Pierre Edmond Tuffet
Original assignee: Pierre Edmond Tuffet
Priority date: 1991-07-03
Filing date: 1992-07-01
Publication date: 1993-01-21
Also published as: FR2678750B1; EP0546161A1; JPH06500975A; FR2678750A1

Abstract

An auxiliary relay (17) controls the power supply of a vehicle starting relay (16). A main microprocessor and software unit (20) randomly distributes alphanumeric characters over displays grouped together on a panel, and connects the auxiliary relay (17) to the power supply once the driver has selected the characters of his personal code on the panel within a predetermined time.

Description

METHOD FOR CHECKING THE DRIVING CONDUCT OF A VEHICLE, AND CHECKING DEVICE

CORRESPONDING

The invention relates to a method for controlling the ability of the driver to drive a vehicle, and to the corresponding control device.

For safety reasons, it is desirable for a motor vehicle to be driven only by a person having at the time of starting a certain driving ability. This capacity is assessed on two levels. First of all, a legal plan: only an authorized person, generally the usual driver, must be able to drive a specific vehicle. Then on a physical level: a person whose means are reduced, either by great fatigue, or by an alcoholic state, should not be able to drive a vehicle.

Document EP 0 373 076 describes a system for preventing the theft of a vehicle and its use by a person who does not have the necessary physical capacity. The system includes a keyboard with alphanumeric keys arranged in a non-consecutive order, the keyboard being coupled to an electronic control device.

To use the vehicle, the driver must press the keys to display the correct code within a predetermined time interval.

Document US 3,755,776 describes a control system to prevent the use of a vehicle until the user has completed a physiological test.

A read-only memory contains a plurality of predetermined multi-digit numbers and communicates them sequentially so that pressing the SET key on a keyboard causes the display of a first number for a predetermined time.

The user must then display this number. The display is compared with the first number by a comparator, before authorizing the driving of the vehicle. However, these known devices and methods use predetermined time intervals as a function of average reaction time values and thus have the drawback of not being adaptable to the physiological particularities of the usual driver of the vehicle.

An object of the invention is to propose a new customizable method for controlling this ability to drive, capable of prohibiting the starting of the vehicle both in the case of an unauthorized person and in the case where the legitimate driver is in state of incapacity and to provide a device corresponding to the implementation of the method.

The subject of the invention is a process for automatic control of the driver's ability to drive a vehicle, characterized by the following steps:

- the driver is entered beforehand in a main unit with microprocessor and displays, a confidential code, chosen from a determined number of alphanumeric characters, by measuring the time used by the driver for this code entry, so as to define a time code factor;

- to authorize the vehicle to start, the alphanumeric characters used to choose the code are displayed randomly on the displays,

- the driver is given a delay determined according to his time code factor to select the first character of his code,

- the driver is given a second delay, depending on the time used for entering the code, to select one or more other character (s) of the code,

- and if successful, the vehicle is authorized to start.

According to other characteristics of the invention: in the event of failure, a new attempt is authorized after having made the alphanumeric characters appear in the displays in another distribution. in the event of failure, the display is neutralized for a predetermined period (P) which increases in the event of successive failures, before authorizing a new attempt,

- a limited number of new attempts are authorized.

The invention also relates to an automatic device for controlling the ability of the driver to drive a vehicle, for the implementation of a method which comprises: an auxiliary relay controlling the supply of the vehicle starting relay ; and a main unit with microprocessor and software, randomly distributing a certain number of alphanumeric characters on a corresponding number of displays grouped on a panel, and supplying the auxiliary relay when the driver has selected on the panel and in a time interval predetermined characters which constitute its confidential code.

According to other characteristics of the invention: the displays themselves constitute the contact keys for the selection of the characters of the confidential code by the driver,

- the predetermined time interval consists of a first period determined for the selection of the first character of the confidential code by the driver, and a second period for the selection of the other characters of the code, this second period being a function of time set by the driver to enter his confidential code when the device is put into service,

- there are 16 displays and alphanumeric characters displayed, and at least 4 confidential code characters,

- the main unit includes an output connector for appropriate interfaces, a connector for the initial entry of the confidential code, and a connector for analog inputs,

- a fuse jumper is likely to short-circuit the auxiliary relay to authorize the vehicle to start when it is put into service for the first time. Other characteristics will emerge from the description which follows, made with reference to the appended drawing in which a simplified diagram of an exemplary embodiment of an automatic device for controlling the ability to drive a motor vehicle can be seen.

The method according to the invention performs a capacity recognition of a user who types on a keyboard 27 comprising alphanumeric keys.

This recognition is done through the use of 3 significant personalized parameters which are:

- a four-character confidential code, chosen for example from 16 alphanumeric characters from 0 to F (0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, F)

. a first time interval X

. a second time interval Y.

The time X to enter the first two characters of the code is chosen by the usual driver in a personalized range. This time X is subdivided into three ranges:

the first range X1 of predetermined duration between 0 and 0.5 s is a period of uncertainty during which the typing of the first character is not taken into account,

. the second range X2 is a time range comprised in the following interval comprised between 0.5 and 4 s,

. the third range X3 is a second period of uncertainty in the interval from 4s to 6s.

The personalized time range X2 is chosen by the driver: for this purpose, it is advantageous to record a typing sequence of the four characters of the code by the usual driver and to use the parameters of this recording directly.

If the driver manages to enter the first two characters of the code without error before the end of the custom range X2, the second time interval Y does not intervene, and the one who struck the two characters is recognized as the legitimate or authorized driver of the vehicle.

If the driver cannot correctly enter the first two characters of the code in less than 4s but arrives in less than 6s, which corresponds to the second period of uncertainty X3, an additional time interval Y is granted to the driver to enter the last two characters of the confidential code.

The additional time interval Y is counted down so that, from the typing of the first character, the typing test lasts a maximum of twelve seconds.

Advantageously, provision is made to neutralize the control device or to suspend the control process according to the invention in the case of drivers making frequent and short journeys: these are in particular doctors, drivers rendering rescue services such as as paramedics or firefighters, drivers delivering or delivering mail such as couriers, letter carriers or delivery people.

To this end, the driver can neutralize the process for a time N, called neutralization time, preferably between 0 and 999 minutes.

In this case, it is only at the expiration of the neutralization period of predetermined duration N chosen by the driver that the control method which was suspended again ensures capacity control, in accordance with the invention.

Preferably, according to the invention, a predetermined penalty duration P is chosen which serves as the basis for an automatic increment according to a progression increasing, for example according to an arithmetic progression of reason P, a geometric progression of reason P or an analogous increasing progression.

Each time a display error is made, the error event triggers a process blocking until the process stops and returns to the first step of starting the process.

From this first step, a first penalty duration P thus flows which delays the start of the next display.

For example, in the case of a geometric progression, we will have the following sequence of events:

. first mistake

. process shutdown

. wait for P (4 seconds, for example)

. second error,

. process shutdown

. wait for P X P (16 seconds). third mistake

. process shutdown

. wait for P X P X P (64 seconds)

. fourth mistake

. process shutdown

. wait for P X P X P X P (256 seconds). fifth error

. process shutdown

. wait during P X P X P X P X P (1024 seconds, i.e. 17 min 4 s)

. sixth error

. process shutdown

. wait during P X P X P X P X P X P (4096 seconds = 1h 8mn 16s)

This situation arises when a person wants to try to steal the vehicle but this attempt to continually enter the code by trial and error quickly becomes impossible since, between each of these possible attempts, the time becomes longer and longer.

When the attempted theft is interrupted, the owner inherits this penalty. It will suffice to have the vehicle again to wait, allowing this penalty time to elapse which will indicate, in addition, that his vehicle has been the subject of an attempted theft.

The device according to the invention essentially comprises a main unit 20, and an auxiliary relay 17 slaved to the main unit 20 which controls the starting relay 16.

Alternatively, the relay 17 can itself constitute the ignition and / or start relay.

The main unit 20 comprises a microprocessor programmed by appropriate software managing the various parameters to be analyzed and ensuring the random distribution of 16 alphanumeric characters on the 16 electroluminescent displays of the display panel 27. The 16 displays simultaneously constitute keys for contact for entering the driver's personal and confidential code. The main unit 20 also includes a clock; three indicator lights in the form of light-emitting diodes for example, respectively red 21 orange 22 and green 23; an output connector 24 for appropriate interfaces; a connector 25 for the initial entry into memory of the driver's confidential code; and a connector 26 for analog inputs for example.

The annex relay 17 comprises a coil 30; a closing contact 31; and in parallel on this contact a jumper 18 capable when it is in place of short-circuiting the contact 31 when the vehicle is put into service for the first time.

The starting relay 16 conventionally comprises a coil 32 and a closing contact 33 capable of supplying electrical power to the starter 15 from the battery 13 of the vehicle.

In the drawing is also symbolized the ignition key 34 with its three positions: rest 10, supply 11 of the electrical circuits 14 of the vehicle, and starting 12.

The conducting wire 41 connects to the battery 13 on the one hand the ignition key 34 and on the other hand the microprocessor of the main unit 20. The conducting wire 42 ensures the supply of the various components of the main unit, apart from the microprocessor, when the electric circuits 14 of the vehicle are supplied from position 11 of the ignition key . The conducting wire 43 connects the position 12 of the ignition key to the contact 31 of the annex relay 17. The conducting wire 44 ensures the supply of the coil 32 of the starting relay 16 when the closing contact 31 of the annex relay 17 is closed , or shorted by jumper 18.

The operation of the device is for example the following assuming that it has just been mounted on a vehicle: the destructible jumper 18 is in position and short-circuits the contact 31. It is thus possible to supply the electrical circuits of the vehicle and to memorize a coding sequence for a time of personalized duration X2 using the device according to the invention.

After having chosen and memorized a coding sequence different from the sequence already memorized in the device, the device commands the irreversible destruction of the jumper 18 by passing an electric current of intensity corresponding to the fusion of the jumper 18 and to the opening of contact 31.

Via the connector 25, an external microcomputer is connected to the main unit with a view to recording in the non-volatile memory the driver's confidential code of the abovementioned penalty time P and, optionally, of a neutralization time N not bad. This operation allows the main unit 20 to memorize on the one hand the coding sequence, on the other hand the time taken by the driver to enter the characters of this coding sequence. As there are 16 displays on panel 27, the coding sequence includes at least 4 alpha numeric characters, chosen hereinafter from 16 characters: 0, 1, 2, 3, 4, 5, 6, 7, 8,

9, A, B, C, D, E, F. All the confidential code and the time taken to store it constitutes a characteristic of the driver determining in particular the time X2 mentioned above, and can be defined as the factor code- time. When the storage of this time code factor is complete, the microcomputer is disconnected and the automatic aptitude control device is ready to operate. The device then controls the fusion of the destructible jumper 18.

The ignition key is switched to position 11 and the vehicle's electrical circuits are supplied, as well as the main unit 20 via the conductor wire 42. The orange light 22 lights up to invite the driver to dial his confidential code by pressing the corresponding keys on panel 27.

The software causes the 16 characters of the alphanumeric series to appear on the displays, at random, for example in the layout shown.

The device includes an internal relay, not shown, slaved to the main unit 20, which displays the aforementioned characters according to a random code created by the aforementioned software.

The driver then has a delay of 4s for example to identify on the panel the first character of his confidential code and press the corresponding key. If he does so, he has a new time limit, depending on the time he spent to enter his confidential code, to identify the other characters of his code in order and to press the corresponding keys. If the operation proceeds satisfactorily, the time code factor is validated by the main unit, the orange light 22 goes out and the green light 23 lights up. The coil 30 of the annex relay is supplied and the contact 31 closes. The driver then has a fixed time, for example 30s, to start.

When the ignition key is switched to its start 12 position, the coil 32 is supplied, the contact 33 closes and the starter is supplied by the coil 13. The vehicle is therefore ready to start. If, for example for reasons of alcohol level, the driver has not identified the first character of his code within the time limit 4s, the software proposes, after a delay of 0.5s, a new random display of the 16 alphanumeric characters on the 16 boxes of the display panel 27, for a new duration of 4s. The software can renew this offer for example up to 3 times.

If within the initial delay of 4s for example, the driver does not press the key corresponding to the first character of his code, or if he is mistaken in the order of entry of his code, or if he presses a character does not not being part of his code, or if, after having selected the first character, he does not select the others within the predetermined delay as a function of his code-time factor, then the main unit 20 does not recognize him as a conductor having capacity to drive the vehicle and the coil 30 of the auxiliary relay is not supplied: the vehicle cannot start and the red indicator 21 lights up by flashing.

The driver then has the possibility of returning the ignition key to its rest position, and to start again the operations to make a new attempt.

When the contact is restored, the penalization time P predetermined before the device is put into service, preferably fixed by construction, is incremented automatically according to an increasing progression.

The incrementation takes place after each display error materialized by the flashing of the red light 21 and after the corresponding cut of the contact.

The main unit 20 counts the number of failures in the attempts to enter the confidential code. When the number of these failures reaches a preset value, 3 or 5 for example, the main unit 20 controls, via the connector 25 and an appropriate interface, an alarm signal or backup operations, such as by example the lighting of the hazard warning lights, the automatic dialing of a telephone number, on a car telephone, the transmission of a signal over the air, or the locking of the brakes. When the driver is not the legitimate driver, the main unit thus acts as an anti-theft device.

The driver who is not in his normal state, that is to say who is not able to recognize in sequence the characters of his code and to press the corresponding keys respecting his own code factor- time, is also prohibited from using his vehicle.

In the preferred embodiment, to allow the driver to follow the different phases of the process, the LEDs that light up have the following meanings:

- GREEN: ignition or starting allowed

- FIXED YELLOW: authorized code entry - FLASHING YELLOW: first character of the code not valid

- FIXED RED: system blocked, contact must be switched off

- RED FLASHING: code error, mandatory contact cut-off.

The main unit 20 can also control other functions linked to compliance with certain safety rules such as the wearing of seat belts or the locking of doors, thanks to the connector 26 for analog inputs.

It is possible to provide for the initial assembly that the device has a reserved code, for example 0000 which deactivates the device. The first operation to be carried out by the vehicle owner is therefore to change this code to a confidential code, which he chooses: memorizing the new confidential code results in the destruction of the fuse jumper 18, for example by passing a current corresponding electric. Then, starting from this confidential code, he can hand over the code 0000 each time he entrusts his vehicle to a professional of its kind (dealer, garage owner, expert, repairer, accessory maker), who in turn will take responsibility for the vehicle. with the device neutralized. In order to allow maintenance or repairs of the vehicle, in the event that the device can no longer be neutralized, another fuse jumper 18 must be returned to position, so that the driving of the vehicle is no longer subject to the condition d of the driver. For safety reasons, the fuse jumper 18 must be housed in a location that is difficult to access and must be put in place and removed using a special tool.

Claims

1. Method for automatic control of the driver's ability to drive a vehicle, characterized by the following steps:

- a confidential code, chosen from a determined number of alphanumeric characters, is entered beforehand by the driver in a main unit with microprocessor and displays, by measuring the time used by the driver for this code entry, so as to define a time code factor;

- and if successful, the vehicle is authorized to start.

2. Method according to claim 1 characterized in that in the event of failure, a new attempt is authorized after having displayed on the displays the alphanumeric characters in another distribution.

3. Method according to claim 1 or 2 characterized in that in the event of failure, the display is neutralized for a predetermined period (P) which increases in the event of successive failures, before authorizing a new attempt.

4. Method according to claim 3 characterized in that a limited number of new attempts are authorized.

5. Automatic device for controlling the ability of the driver to drive a vehicle, for implementing a method according to any one of the preceding claims, characterized in that comprises: a relay (17) controlling the supply of the relay (16) for starting the vehicle; and a main unit (20) with microprocessor and software, randomly distributing a certain number of alphanumeric characters on a corresponding number of displays grouped on a panel (27), and supplying the auxiliary relay (17) when the driver has selected on the panel and within a predetermined time interval the characters which constitute its confidential code.

6. Device according to claim 5, characterized in that the displays themselves constitute the contact keys for the selection of the characters of the confidential code by the driver.

7. Device according to claim 5, characterized in that the predetermined time interval consists of a first period determined for the selection of the first character of the confidential code by the driver, and a second period for the selection of the others characters of the code, this second delay being a function of the time taken by the driver to enter his confidential code when the device is put into service.

8. Device according to claim 5, characterized in that the displays and the alphanumeric characters displayed are 16 in number and the characters of the confidential code at least 4 in number.

9. Device according to claim 5, characterized in that the main unit (20) comprises an output connector (24) for appropriate interfaces, a connector (25) for the initial entry of the confidential code, and a connector (26 ) for analog inputs.

10. Device according to claim 5 characterized in that a fuse jumper (18) is capable of short-circuiting the auxiliary relay (17) to authorize the starting of the vehicle during the first commissioning.