WO2000073106A1

WO2000073106A1 - Theft protection device

Info

Publication number: WO2000073106A1
Application number: PCT/BE1999/000066
Authority: WO
Inventors: Berislav Brekalo
Original assignee: Berislav Brekalo
Priority date: 1999-05-26
Filing date: 1999-05-26
Publication date: 2000-12-07
Also published as: AU4025299A

Abstract

A theft protection device is disclosed for a key operated motorised vehicle having a vehicle operation management system. The theft protection device comprises a key receiving unit connected to said vehicle operation management system; a first key provided for cooperating with said key receiving unit for enabling operation of said vehicle; and a control unit provided for receiving a series of condition parameters, comparing each condition parameter of said series of parameters with a dedicated state value, and generating an inhibit signal when at least one of said condition parameters is met by said dedicated state value, said control unit comprising an output for supplying said inhibit signal to said vehicle. The control unit is provided in said first key. The key receiving unit is provided for receiving said inhibit signal and transmitting said inhibit signal to said vehicle operation management system. The theft protection device further comprises an initialisation unit provided for generating said condition parameters and for supplying said condition parameters to said control unit.

Description

"Theft protection device"

BACKGROUND OF THE INVENTION

The present invention relates to a theft protection device for a key operated motonsed vehicle having a vehicle operation management system, said theft protection device comprising a key receiving unit connected to said vehicle operation management system, a first key provided for cooperating with said key receiving unit for enabling operation of said vehicle, and a control unit provided for receiving a series of condition parameters, comparing each condition parameter of said series of parameters with a dedicated state value, and generating an inhibit signal when at least one of said condition parameters is met by said dedicated state value, said control unit comprising an output for supplying said inhibit signal to said vehicle

Such a device is known from WO-A-95/13205, wherein the control unit is integrated in the vehicle operation management system A first key receiving unit, connected to the control system of the vehicle, is provided for receiving the first key and is used to operate the vehicle in a conventional manner The device further comprises a second key receiving device, connected to the vehicle operation management system This second key receiving unit is provided for receiving a second key, e g a chip card The second key is provided for determining the condition parameter, which is in particular a time period, during which the vehicle is rendered operable

The chip card is normally not carried in the vehicle, so that when the condition parameter is met, the operation of the vehicle is inhibited. This enables to protect the vehicle in case of theft, car jacking or the like.

Before the condition parameter is met, the proprietor of the vehicle may introduce his chip card into the second key receiving device and determine a new condition parameter by means of a user interface, connected to the second key receiving device.

A problem of the known device is that it forms an integral part of the vehicle protection system, thus making it incompatible to existing vehicle operation management systems already installed in the vehicle to be protected. In particular, the control unit needs necessarily to be configured in order to receive signals from the user interface and the chip card, through the intermediary of the second key receiving device, and to generate an inhibit signal for inhibiting the operation of the object.

SUMMARY OF THE INVENTION

This problem is solved in the device according to the present invention which is characterised in that said control unit is provided in said first key; said key receiving unit is provided for receiving said inhibit signal and transmitting said inhibit signal to said vehicle operation management system; and said theft protection device further comprises an initialisation unit provided for generating said condition parameters and for supplying said condition parameters to said control unit. By providing that the control unit is provided in the first key, the device according to the invention is compatible with existing vehicle operation management systems provided for receiving a coded signal from the key receiving unit. Under normal circumstances, an "enable" code is transmitted from the key to the vehicle operation management system. In case the condition parameter is met, the inhibit signal is transmitted instead of the enable code. The control unit can easily be initialised by making use of the initialisation unit. In particular, the device according to the present invention can easily be employed in an existing transponder system of a vehicle.

In a first preferred embodiment, the control unit comprises: a) at least one state machine, each state machine having a first input for receiving a dedicated condition parameter from said series of condition parameters, a second input for receiving said dedicated state value, said state machine being provided for: i) comparing said dedicated condition parameter with said dedicated state value, ii) generating a first state signal upon establishing that said state value has not met said condition parameter, iii) generating a second state signal upon establishing that s said state value has met said condition parameter, said state machine further comprising an output for transmitting said state signal; b) a logic unit having an input connected to the output of each state machine for receiving said state signals, said logic unit being provided for generating said inhibit signal upon establishing that at least one of said second signals correspond to said second signal, said logic unit comprising an output for supplying said inhibit signal to said vehicle operation management system. This enables to check with different parameters if the operation of the vehicle may be enabled.

In a second preferred embodiment, said initialisation unit comprises user interface for establishing said condition parameters. This enables a user of the theft protection device to determine himself the condition parameters to be supplied to the control unit.

In a third preferred embodiment, the device further comprises a second key, in particular a chip card, dedicated to said first key, and said initialisation unit comprises second key receiving means for receiving said second key, and upon receipt of said second key for enabling supplying said condition parameters to said control unit On the one hand, it enhances the security of the initialising unit, since condition parameters will only be supplied by the initialisation unit if the second key is cooperating with the second key receiving means On the other hand, a same initialisation unit can be used for several first keys For each of the first keys, a dedicated second key must be used for supplying the condition parameters In particular, the initialisation units could be foreseen in predetermined locations, enabling the proprietor of the vehicle to "charge" his key with new condition parameters

In a fourth preferred embodiment, said initialisation unit is provided for enabling said supply of condition parameters after a predetermined period of time This could for example be achieved by providing that the user must enter two codes After entering a first code, he has to wait a predetermined period of time, for example 30 minutes, before entering a second code Only after entering and validating the second code, the condition parameters can be supplied to the control unit of the first key

In a fifth preferred embodiment, one of said condition parameters indicates a time period during which said vehicle is operable This type of condition parameters may be useful for vehicle renters, on the one hand, since the car renter could set as condition parameters the period of time the car is rented, with possibly an extra time period On the other hand, car insurers could set a limited period of time corresponding to the validity period of the insurance In case of car jacking, the vehicle could also have a limited period of time during which the vehicle is operable, making it unattractive for the car jacker

In a sixth preferred embodiment, one of said condition parameters indicates a number of allowed ignitions for said vehicle This type of condition parameters is useful for the car owner, since in case of car jacking, the criminal could use the car for a limited number of ignitions. After the condition parameter is met, the operation of the engine and other vital parts is inhibited.

The present invention also relates to a first key as defined in any one of the claims 1 to 10 to be used in a theft protection device.

The present invention further relates to an initialisation unit as defined in any one of the claims 1 to 10 to be used in a theft protection device.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 illustrates a preferred embodiment of a theft protection device according to the present invention.

Figure 2 is a block diagram of the internal circuitry of the device of Figure 1.

DETAILED DESCRIPTION OF THE INVENTION

Keys comprising a code to be transmitted to the key receiving unit are well known in the art as transponder based anti theft systems. In order to activate the vital parts of the vehicle, it is necessary to use the key comprising the dedicated code. Such a provision has been effective to reduce significantly the theft of vehicles. However, it is not effective for preventing car jacking, since the criminal obtains the vehicle together with the key by menacing the driver. Once the criminal is in possession of the car with the coded key, the vehicle is permanently operable by the criminal, since the correct code is supplied to the vehicle operation management system. The weakness of the current transponder system is that the key will operate permanently. Current anti car jacking systems are implemented as additional mechanisms that interact with the vehicle operation management system. They don't use the features of the transponder key, but introduce additional transmitters, codes and keys. For example, use is made of a radio or GSM receiver, hidden in the vehicle. A drawback of these systems is that additional interference could occur with the electronics of the vehicle, that they are only effective during a limited period of time, i.e. until the criminal finds and disables the additional features, and that they can be made ineffective when the vehicle is moved to a place where no radio reception is available. The interference problem can not be solved generically, since it is dependent from the electronics used in the car.

The system according to the present invention is in particular an extension of the transponder based anti theft systems installed on many types of vehicles. As will be explained further in detail, the theft protection device according to the present invention essentially consists in providing a condition parameter which will enable operation of the vehicle according to a predetermined parameter, for example a limited number of ignitions, a limited period of time, .... A combination of several parameters is preferred.

Referring to figure 1 , the theft protection device according to the present invention comprises a key receiving unit 10, cooperating with the operation management system 16 of the vehicle, on the one hand, and with a control unit 20, on the other hand. The vehicle operation management system is known as such and will therefore not be described in detail.

An initialisation unit 40 is further provided for generating and supplying condition parameters to the control unit 20, as explained further in detail. The initialisation unit comprises a slot 51 for receiving a first key 14, a slot 52 for receiving a chip card 60 dedicated to the first key 14 and a user interface with a display 53 and a keyboard 54.

According to the invention, the control unit 20 is provided in the first key 14. As illustrated in Figure 1 , the first key may be a conventional key which is used for starting the engine of the vehicle. It is to be understood that the first key could also be a probe with a printed circuit board to be inserted in a slot of the key receiving unit for enabling operation of the starting circuit. An additional conventional key is then used for starting the vehicle. It is also conceivable that the first key consists in a chip card transmitting with transponder technology the required codes to enable operation of the vehicle. The vehicle itself could be started in this case with a switch provided in the vehicle, which will only be operable if the driver carries the chip card with the required code. The control unit is provided for receiving a series of condition parameters supplied by the initialisation unit. Further, the control unit is provided for comparing each condition parameter of the series of parameters with a dedicated state value, and generating an inhibit signal when at least one of the condition parameters is met by the dedicated state value. The control unit comprises an output for supplying the inhibit signal to the key receiving device of the vehicle. The control unit further comprises a battery for supplying power to the clock.

The key receiving unit 10 is provided for receiving the inhibit signal and transmitting the inhibit signal to the vehicle operation management system 16.

Figure 2 shows in detail an internal circuitry of the key receiving unit 10, the control unit 20 and the initialisation unit 40 in a preferred embodiment according to the present invention. The key receiving unit 10 comprises a receiver 11 and a transmitter 12 The transmitter 12 is provided for supplying a challenge code to the control unit 20 The challenge code is for example a request to transmit the key code from the key to the key receiving unit, as known from existing transponder based theft protection systems The receiver 11 is provided for receiving a response code supplied by the control unit and transmitting the received response code to the vehicle operation management system In particular, the transmission between the key receiving unit and the control unit in the first key occurs by means of electromagnetic signals

Control unit 20 comprises a transmitter 21 having an input 211 connected to an output 232 of a logic unit 23 and an output 212 provided for transmitting the response code to the receiver 11 A receiver 22 has an input 221 for receiving the challenge code from the transmitter 12 and an output 222 connected to an input 231 of the logic unit 23 The logic unit further comprises two further inputs 233 and 234, to each of which a state machine 30, 31 is connected

A memory 28 is connected to the logic unit 23 The memory, in particular a ROM, is provided for holding a code uniquely identifying the vehicle Preferably, the code also identifies the first key It is to be understood that a same vehicle could be made operable with two or more keys, each having an own identifier Consequently, multiple keys could be linked to one vehicle identifier

An I/O interface 29 comprises outputs 292, 293 and 294, respectively connected to corresponding inputs 235, 302 and 312 of the logic unit 23 and the state machines 30 and 31 State machine 30 further comprises an input 301 connected to output 223 from the receiver State machine 31 further comprises an input 311 connected to an output from clock 32 provided in the control unit 20 The state machines are in particular counters, provided for counting to a threshold value supplied by the I/O interface and supplying a first signal to the logic unit when the threshold value is not reached and a second value when the threshold value is reached The I/O interface 29 comprises an input 291 connected to an output 273 of a message validation unit 27 The message validation unit 27 is further connected to a serial interface 24 through in/output 271 The serial interface 24 is further connected to a transmitter 25 and a receiver 26 Output 282 from memory 28 is connected to input 243 from serial interface 24 for supplying the key ID to the serial interface This is required to perform the decryption

The initialisation unit 40 comprises a receiver 41 and a transmitter 42 provided for communicating with the control unit Such as with the key receiving unit 10, the communication between the initialisation unit 40 and the control unit 20 can occur by means of electromagnetic signals The transmitter 41 and receiver 42 are connected to a encryption/decryption unit 43, which is in turn connected to state machine programming unit master 44 State machine programming unit master is further connected through a bus 45 to a RAM 46, a ROM 47, a microprocessor 48, a chip card reader 49 and a user interface 50

The second key 60, in particular a chip card, is dedicated to the first key This signifies that the first key can only be initialised using the unique dedicated chip card If multiple keys are issued for a same vehicle, each key will have its dedicated chip card

The chip card contains an algorithm that identifies the code in memory 28 uniquely identifying the vehicle and the first key Preferably, the chip card 60 further contains additional algorithms for secret PIN codes to be used when using the initialisation unit For initialising and "charging" the control unit 20 in the first key 14, use is made of the initialisation unit 40 and preferably also the second key 60. The initialisation unit is used by the car owner each time he wishes to reset the condition parameters to be supplied to the control unit of the first key. This unit and the chip card will, under normal circumstances, be held at a safe place, for example at the office. It is only brought home by the car owner when recharging is necessary. The first key 14 and the chip card 60 are inserted in their respective slots 51 and 52. The user will introduce the condition parameters to be transmitted to the control unit. In particular, these condition parameters indicate a time limit of the key validity, for example 20 days, and a number of ignitions of the vehicle, for example 25.

The user will be requested to input a first PIN code dedicated to the chip card. A validation of the chip card algorithm to check the correctness of the first PIN code is performed by the initialisation unit 40.

When the correct code is introduced, the initialisation unit is held in a hold mode during a predetermined period of time, for example 30 minutes, during which both the first key and the chip card must remain inserted in the initialisation unit. This provision is effective to limit the phenomena of "home jacking", whereby the criminal forces the vehicle owner to furnish the key. In case he has to wait 30 minutes before the condition parameters are transmitted to the control unit, the criminal will be further discouraged.

Preferably, a second PIN code is input after that predetermined period of time. After checking the correctness of the second PIN code, the condition parameters introduced by the user are passed by the state machine programming unit master 44, encrypted by the encryption/decryption unit 43 and transmitted through transmitter 42 to the receiver 26 from the control unit 20. When the owner is threaten, he can input a fake (one time usable code), enabling the vehicle to operate for example during one day and 10 ignitions. When at least one of these parameters is expired, the chip card and key combination must be re-enabled by a code provided by an official organism, e.g. the insurance company. This will further discourage the home-jacker, since he is almost sure that he can only get a vehicle operable for a restricted time, for example one day. According to an alternative, transmission between the initialisation unit and the control unit is simply enabled after the predetermined period of time, without having to introduce a second PIN code.

The encrypted condition parameters are received by receiver 26 and are transmitted to the serial interface 24. In the interface 24, the parameters are decrypted. The integrity of the received parameters is checked at the message validation unit, which performs in particular a message checksum. The encryption/decryption process enhances security when data is transmitted between the control unit and the initialisation unit.

The transmitter 25 is provided for ensuring handshaking in the encryption protocol and could additionally transmit the status of the state machines from the control unit to the initialisation unit. The latter allows to display on the initialisation unit the status of the different parameters.

The I/O interface, which is in particular an n-bit register, processes the received condition parameters and transmits each condition parameter to the dedicated state machine. In the given example, the parameter indicating 25 ignitions is transmitted to state machine 30 where a threshold value is set to 25. The parameter indicating a validity of 20 days (or 1.728.000 seconds) is transmitted to state machine 31 , where a threshold value is set to 1.728.000.

When introducing the first key 14 in the key receiving unit 10 of the vehicle. A challenge code is supplied from the vehicle operation management system 16 and transmitted through transmitter 12 to the control unit receiver 22. This challenge code comprises in particular a request for supplying the vehicle and key identifier from the control unit to the key receiving unit. Upon receipt of the challenge code, a signal is transmitted from receiver 22 to the logic unit 23, triggering the logic unit for retrieving the code from the memory 28. In state machine 30, where the threshold value is for example set to 25 ignitions, there is checked if the number of ignitions (performed with this particular key) since the last initialisation is less than or equal to the threshold value. This is in particular achieved as follows: each time the logic unit is challenged, in particular when the vehicle is started, a pulse is transmitted from the vehicle operation management system 16 to the control unit.

A pulse is then transmitted from receiver 22 to state machine 30. In the given example, where the threshold value has been set to 25, the counter has initially as value 25. Each time a signal is transmitted from the receiver to the state machine 30, the counter value is decremented with one unity.

As long as the counter value does not reach the value 0, this signifies that the condition parameter is not met. In that case, a first signal, is transmitted from the state machine 30 to the logic unit 23. If the counter value is 0, this signifies that the number of ignitions has reached the condition set by the user. This will cause a second signal to be generated at the state machine 30, which will be transmitted to the logic unit. This transmitted signal generates a wrong response, resulting in failure of the engine to engage.

In the given example, the condition parameter is 25, since 25 ignitions are allowed before the recharging the key. The dedicated state value is the number of ignitions, thus the number of pulses received the receiver, since the last time the condition parameters have been supplied to the control unit. When the number of ignitions meets the conditions parameter, i.e. when the number of ignitions is equal to 25, an inhibit signal is generated. In the state machine 31 , there is checked whether or not a time limit, set by the user, is reached. The operation is similar to the state machine 30. In this case, a pulse is supplied by clock 32 to the state machine 31 , for example every second. The counter value in state machine 31 is decremented each second with one unity. In the given example, the condition parameter is a time limit equal to 1.728.000 seconds, since 20 days are allowed before the recharging the key. The dedicated state value is the time period, thus the number of pulses received from the clock, since the last time the condition parameters have been supplied to the control unit. When the time limit meets the conditions parameter, i.e. when the time lapsed since the last recharging reaches 20 days, an inhibit signal is generated.

When the signals transmitted from the state machines 30, 31 to the logic unit 23 are both first signals, a correct code is transmitted from the logic unit 23 to the key receiving unit 10. This will enable operation of the vehicle. When at least one the signals transmitted from the state machines to the logic unit is a second signals, indicating thus that one of the conditions has been met, an inhibit signal will be generated by the logic unit and transmitted from the logic unit to the key receiving unit. This will inhibit operation of the vehicle. The inhibit signal is for example an interference signal which is transmitted to the vehicle operation management system. It is to be understood that the transmission of an inhibit signal could also signify that no signal (or a signal having a value low) is transmitted. The operation of the vehicle may be inhibited in several ways, for example : disabling the starting circuit, disabling the fuel supply, .... It is also conceivable that the operation of the vehicle is disabled after a predetermined period of time. This enables the user, in case he forgot to "charge" his key, to rejoin his home where his initialisation unit and second key are located.

The described device is thus efficient for discouraging car jacking criminals but is not limited for this purpose. This device could conceivably be required by insurance companies, wherein a time limit, for example 1 year, is determined by the insurance company for enforcing payment of the insurance premium. A combination of both is also conceivable: the device could in that case comprise two state machines identifying a time limit, one of which can be set by the vehicle owner and the other one by the insurance company. The second key could in that case have an upper limit on its validity. This can be implemented by limiting the number of days, for example 40 days, during which the second key 60 can charge with the given PIN codes. In order to perform additional charging, the owner must obtain a new set of PIN codes from his insurance (after verification that the vehicle was not reported stolen) or car rental company. An alternative could be that the owner gets a new chip-card each time he gets its insurance card.

Other state machines checking other types of conditions parameters could be used in addition or instead of the described state machines, for example maximum driving distance, maximum geographic distance from owners house (this requires a GPS in the vehicle). These new parameters can be passed by the vehicle operation management system to the logic unit and the additional state machines. In that case, the logic unit 23 could be challenged not only when starting the vehicle, but more generally each time a pulse is transmitted from the vehicle operation management system to the control unit 20.

A warning signal, indicating that one of the conditions is almost met, could conceivable be generated by the control unit to alert the car owner that he should charge his key soon.

The encryption/decryption process is in particular performed as follows. During "charging" the first key 14, the initialisation unit 40 and the control unit 20

During the "charging" of the key, 40 and 20 perform a dialogue. This dialogue is encrypted/decrypted using encryption/decryption unit 43 and interface 24. The encryption and decryption parameters are controlled by the second key 60 in the initialisation unit 40 (in particular enabled by PIN code) and the memory 28 in the control unit 20. If the second key 60 does is not dedicated to the control unit 20 of the first key 14, no dialogue can take place and the control unit 20 can not be "charged". The I/O interfaces 44 and 29 dialogue together using messages of fixed length, for example 8 bytes. A possible message format could be : BYTE 1 : identification of state machine that gets new value (e.g. 30 or

31 ) BYTE 2 : bits 40 .. 47 of new value of the condition parameter BYTE 3 : bits 32 .. 39 of new value of the condition parameter BYTE 4 : bits 24 .. 31 of new value of the condition parameter BYTE 5 : bits 16 .. 23 of new value of the condition parameter BYTE 6 : bits 8 .. 15 of new value of the condition parameter BYTE 7 : bits 0 .. 7 of new value of the condition parameter BYTE 8 : sum of BYTE 1 to 7 modulo 255

It should further be noted that the control unit could be built with discrete components or partially or entirely integrated in a chip. In particular, the elements 23, 24 and 27 to 32 could be integrated in one chip. These techniques of integration are known as such and will therefore not be described in detail.

PARTS LIST 10 key receiving unit

11 receiver

12 transmitter 14 first key

16 vehicle operation management system 20 control unit in key

21 transmitter

22 receiver

23 logic unit

24 serial interface 25 transmitter

26 receiver

27 message validation unit

28 memory (ROM containing vehicle ID and first key ID)

29 I/O interface (state machine programming unit slave) 30 state machine

31 state machine

32 clock

40 initialisation unit receiver transmitter encryption / decryption unit

I/O interface (state machine programming unit master) bus

RAM

ROM micro processor chip card reader user interface slot for first key slot for chip card display keyboard

second key, e.g. a chip card

Claims

CLAIMS A theft protection device for a key operated motonsed vehicle having a vehicle operation management system, said theft protection device comprising a) a key receiving unit connected to said vehicle operation management system, b) a first key provided for cooperating with said key receiving unit for enabling operation of said vehicle, and c) a control unit provided for receiving a series of condition parameters, comparing each condition parameter of said series of parameters with a dedicated state value, and generating an inhibit signal when at least one of said condition parameters is met by said dedicated state value, said control unit comprising an output for supplying said inhibit signal to said vehicle, characterised in that d) said control unit is provided in said first key, e) said key receiving unit is provided for receiving said inhibit signal and transmitting said inhibit signal to said vehicle operation management system, and f) said theft protection device further comprises an initialisation unit provided for generating said condition parameters and for supplying said condition parameters to said control unit The theft protection device of claim 1 , wherein the control unit comprises a) at least one state machine, each state machine having a first input for receiving a dedicated condition parameter from said series of condition parameters, a second input for receiving said dedicated state value, said state machine being provided for i) comparing said dedicated condition parameter with said dedicated state value, ii) generating a first state signal upon establishing that said state value has not met said condition parameter, iii) generating a second state signal upon establishing that said state value has met said condition parameter, said state machine further comprising an output for transmitting said state signal; b) a logic unit having an input connected to the output of each state machine for receiving said state signals, said logic unit being provided for generating said inhibit signal upon establishing that at least one of said second signals correspond to said second signal, said logic unit comprising an output for supplying said inhibit signal to said vehicle operation management system 3. The theft protection device of claim 2, wherein a) said first key comprises a code receiving unit for receiving a challenge code from said key receiving unit, said code receiving unit comprising an output connected to the logic unit for transmitting said challenge code to said logic unit, and b) said logic unit comprises a code transmitting unit for transmitting said inhibit signal to said key receiving unit. 4. The theft protection device of claim 3, wherein the code receiving unit comprises a further output connected to the second input of one of said state machines 5 The theft protection device according to any one of the preceding claims, wherein said initialisation unit comprises user interface for establishing said condition parameters 6. The theft protection device according to any one of the preceding claims, further comprising a second key, in particular a chip card, dedicated to said first key, and said initialisation unit comprises second key receiving means for receiving said second key, and upon receipt of said second key for enabling supplying said condition parameters to said control unit. 7. The theft protection device according to claim 6, wherein the second key has a validity parameter indicating a validity period during which said second key enables said supplying of condition parameters.

8. The theft protection device according to claim 6 or 7, wherein said initialisation unit is provided for enabling said supply of condition parameters after a predetermined period of time.

9. The theft protection device according to any one of the preceding claims, wherein one of said condition parameters indicates a time period during which said vehicle is operable. 10. The theft protection device according to any one of the preceding claims, wherein one of said condition parameters indicates a number of allowed ignitions for said vehicle.

11. The theft protection device according to any one of the preceding claims, further comprising warning means, connected to said control unit for warning said user is when at least one of said condition parameters is almost met.

12. A first key as claimed in any one of the preceding claims to be used in a theft protection device.

13. An initialisation unit as claimed in any one of the claims 1 to 11 to be used in a theft protection device. AMENDED CLAIMS

[received by the International Bureau on 08 August 2000 (08.08.00); original claims 1-13 replaced by new claims 1-12 (3 pages)]

1. A theft protection device for a key operated motorised vehicle having a vehicle operation management system, said theft protection device comprising: a) a key receiving unit connected to said vehicle operation management system; b) a first key provided for cooperating with said key receiving unit for enabling operation of said vehicle; and c) a control unit provided for receiving a series of condition parameters, comparing each condition parameter of said series of parameters with a dedicated state value, and generating an inhibit signal when at least one of said condition parameters is met by said dedicated state value, said control unit comprising an output for supplying said inhibit signal to said vehicle, wherein d) said control unit is provided in said first key; e) said key receiving unit is provided for receiving said inhibit signal and transmitting said inhibit signal to said vehicle operation management system; and f) said theft protection device further comprises an initialisation unit provided for generating said condition parameters and for supplying said condition parameters to said control unit characterised in that said theft protection device further comprises a second key, in particular a chip card, dedicated to said first key, and said initialisation unit comprises second key receiving means for receiving said second key, and upon receipt of said second key for enabling supplying said condition parameters to said control unit.

. The theft protection device of claim 1 , wherein the control unit comprises: a) at least one state machine, each state machine having a first input for receiving a dedicated condition parameter from said series of condition parameters, a second input for receiving said dedicated state value, said state machine being provided for: i) comparing said dedicated condition parameter with said dedicated state value, ii) generating a first state signal upon establishing that said state value has not met said condition parameter, iii) generating a second state signal upon establishing that said state value has met said condition parameter, said state machine further comprising an output for transmitting said state signal; b) a logic unit having an input connected to the output of each state machine for receiving said state signals, said logic unit being provided for generating said inhibit signal upon establishing that at least one of said second signals correspond to said second signal, said logic unit comprising an output for supplying said inhibit signal to said vehicle operation management system.

3. The theft protection device of claim 2, wherein a) said first key comprises a code receiving unit for receiving a challenge code from said key receiving unit, said code receiving unit comprising an output connected to the logic unit for transmitting said challenge code to said logic unit, and b) said logic unit comprises a code transmitting unit for transmitting said inhibit signal to said key receiving unit.

4. The theft protection device of claim 3, wherein the code receiving unit comprises a further output connected to the second input of one of said state machines.

5. The theft protection device according to any one of the preceding claims, wherein said initialisation unit comprises user interface for establishing said condition parameters.

6. The theft protection device according to claim any one of the preceding claims, wherein the second key has a validity parameter indicating a validity period during which said second key enables said supplying of condition parameters.

7. The theft protection device according to any one of the preceding claims, wherein said initialisation unit is provided for enabling said supply of condition parameters after a predetermined period of time. 8. The theft protection device according to any one of the preceding claims, wherein one of said condition parameters indicates a time period during which said vehicle is operable.

9. The theft protection device according to any one of the preceding claims, wherein one of said condition parameters indicates a number of allowed ignitions for said vehicle.

10. The theft protection device according to any one of the preceding claims, further comprising warning means, connected to said control unit for warning said user is when at least one of said condition parameters is almost met. 11. A first key as claimed in any one of the preceding claims to be used in a theft protection device. 12. An initialisation unit as claimed in any one of the claims 1 to 10 to be used in a theft protection device.