The invention relates to a transmitter for a remote control group for a shared function such as opening a garage door. It also relates to a receiver for such a group and to a group of a receiver and a plurality of transmitters.
Our prior European Patent No.
Such features in a transmitter are very helpful for learning. However, there remains a need for improving security in the transmitter-receiver link. One approach to achieving improved security is to encrypt using an encryption key. However, this means that the installation engineer needs to access the receiver to program it to allow introduction of each new transmitter of the group. This is time-consuming and expensive.
It is therefore an object of the invention to provide:
According to the invention, there is provided a remote control group as set out in claim 1.
In one embodiment, the valid code is variable according to pre-set criteria.
In one embodiment, the valid code comprises a hopping index.
In another embodiment, the valid code comprises a combination of a fixed discrimination value known to the receiver and a hopping index.
In one embodiment, the slave transmitter comprises means for generating the encryption key by processing a manufacturer-set key with a site code which is unique to the group.
In one embodiment, the slave transmitter comprises means for receiving the site code in an encrypted teaching radiation signal and for decrypting said signal to determine the site code using a teaching decryption key.
In one embodiment, the slave transmitter comprises means for storing a transmitter-specific serial number and for transmitting the serial number together with the encrypted code.
According to another aspect, the master transmitter processor comprises:
In one embodiment, the receiver processor comprises means for:
In another embodiment, the receiver processor comprises means for determining if the serial number is valid by:
The invention will be more clearly understood from the following description of some embodiments thereof, given by way of example only with reference to the accompanying drawings in which
Referring to
The memory capacity is adequate for four sets of data, as described above. This allows the transmitter 1 to be used for up to four different remote control groups. However, for clarity, operation for only one group is described below.
The microprocessor 2 is programmed to recognise a switch 7 depression as a transmit instruction. Simultaneous depression of two or more switches in various pre-set configurations are interpreted as user instructions for auxiliary functions such as a teach mode or randomisation of codes. Programming of the microprocessor 2 at manufacture determines whether the transmitter is a master or a slave. Slaves do not have a teach mode. The transmitter 1 is a slave.
The transmitter 1 is part of a remote control group also comprising a receiver and a master transmitter. The latter is used for teaching both the receiver and the transmitters 1. It has the same hardware configuration as the transmitter 1, but is additionally programmed with a teach mode.
The remote control group is given a unique site code by the installer and the master transmitter teaches the site code to the receiver and to the transmitters 1. This effectively empowers the installer to set the manner in which the remote control group operates from a security viewpoint. Each master transmitter is pre-programmed at manufacture with a unique (to it) site code. Therefore the installer may use the pre-programmed site code of a master transmitter as that of the group. Alternatively, he may change it by randomising the pre-set value.
Each new transmitter stores the following after manufacture:
The master transmitter teaches the site code to a (slave) transmitter 1 using a teaching encryption key. The transmitter 1 decrypts it using a teaching decryption key. After decryption, the transmitter 1 uses the site code to generate the encryption key for use in sending signals to the receiver for control of the shared group function. After it is used to generate the encryption key, it is not necessarily stored as it is not required again. The encryption key is 64 bits long. The master transmitter also teaches a discrimination value to the transmitter 1. This is an agreed value that enables the receiver to determine that it has correctly decrypted the transmission. It could, for example, be part of the site code or the serial number or any other agreed number.
The encryption key could alternatively be generated by only the master transmitter and taught to the receiver and the transmitters 1. However this suffers from the disadvantage of involving transmission of the encryption key.
When the user is given the new transmitter, he or she can immediately use it without the need for an installation engineer to access the receiver. There are two stages to the introduction of the new transmitter to the receiver by the user as follows.
The user presses the "transmit" button. The microcontroller encrypts the initial hopping index and the discrimination value with the encryption key to provide a valid encrypted code. The (unencrypted) serial number and the encrypted code are transmitted, and are received by the receiver. The receiver decrypts the code using its stored decryption key to determine the discrimination value and the initial hopping index. The receiver then checks the (decrypted) discrimination value and, if valid, it stores the serial number and the initial hopping index.
The user presses the "transmit" button again and the transmitter increments the hopping index and then encrypts the discrimination value and the incremented hopping index to provide a new encrypted code. Although there may only be a one-digit difference between this incremented hopping index and the initial hopping index, the encrypted code is very different due to the complex nature of the encryption. The receiver decrypts the new encrypted code to determine the discrimination value and the incremented hopping index, and reads the serial number. If the following criteria are met the receiver activates the shared group function (e.g. opens a gate) and stores the incremented hopping index:
Thereafter, the user only needs to press the transmit button once to activate the shared group function. This two-stage acceptance process prevents a spuriously "acceptable" noise signal from being able to activate the group function.
It will be appreciated that there is no need for the installation engineer to program the receiver to introduce (validate) a new transmitter. However, this is not achieved at the expense of reduced security as there is comprehensive encryption. Thus, for example, an installer organisation may teach a new transmitter and send it to the user in the post, with considerable savings in time and money. Another aspect contributing to security is the fact that "breaking" of encryption in one group will have no effect on security at another group having the same or another manufacturer's equipment. This is because the encryption key is unique to each group. Also, unauthorised copying of the transmitted encrypted code is of no benefit to a thief as it changes from one transmission to the next in an unpredictable manner due to encryption of the combined discrimination value and incrementing hopping index. It is envisaged that where particularly strong security is required (such as at a bank) the user may safely store the (single) master transmitter thus preventing any unauthorised teaching of new transmitters.
The invention is not limited to the embodiments described but may be varied in construction and detail.
This list of references cited by the applicant is for the reader's convenience only. It does not form part of the European patent document. Even though great care has been taken in compiling the references, errors or omissions cannot be excluded and the EPO disclaims all liability in this regard.