EP1484858B1 - Method for functional assembling together components of an authentication facility as well as an authentication facility - Google Patents

Abstract

A base station is initialized through a mobile programming unit on a data-transmission link provided for programming and differing from a data-transmission link serving during a control operation for a device for communicating between an identification transmitter (IDT) and a base station that gets an individual identification allocated and receives a cryptic code to communicate with IDTs. An independent claim is also included for an authentication device with mobile identification transmitters to act as keys.

Description

The invention relates to a method for the functional marriage of Components of an authentication device with each other, which device one or more key mobile identification devices (ID transmitter) and at least one associated with an object Base station includes. Furthermore, the invention relates to an authentication device with one or more keys serving as keys mobile identification transmitters (ID transmitter), at least one object associated base station and a programmer.

Such authentication devices are used to query an authorization for triggering a specific action by an identification transmitter, when it enters the area of a base station. authentication mechanisms are used for example for checking the access authorization of a mobile identification transmitter entrusting Person, for example with regard to access to a building or the like. Such authentication devices are used also to monitor a flow of goods. In this case, a Such identification transmitter of a single product or a batch, For example, be associated with a palette to monitor whether and If necessary, for example, when this leaves a camp.

Keyless access control devices include each an object to be monitored of a door, a gate or the like associated reader and one or more mobile ldifikationsgeber (ID transmitter). The ID encoders are transponders. The communication between such an ID transmitter and the base station can be done for example on an RF radio link. It exists both systems requiring unidirectional communication between the ID transmitter and the base station for authentication of the ID transmitter takes place, as well as those systems in which a bidirectional Communication between these two elements of the conditional access control device takes place to perform an authentication. With such an authentication, a data comparison takes place between Data stored in the ID transmitter and transmitted to the base station and a review of that data for authorization, open the door controlled by this base station or the like to be allowed. Usually the communication contains a cryptic one Key, a so-called crypto-code. Such access authorization control devices are known, where customer- and object-specific the ID encoders and the readers manufacturer by saving a particular identifier in the one or more ID donors and the or the readers are programmed or initialized. The device Joining the individual components is called "marrying". These access authorization control facilities must Thus, before its commissioning be known for one, how many as Key ID encoders and how many readers are needed. It must also be known which ID encoders from which readers as authorized to be recognized. As long as all parameters before the functional marriage of the individual components with each other are known by the measures described above, this is not a problem. In the event, however, that the number of an object associated with ID encoders or readers should be increased, all Units of such an access control device new be married to each other. The same applies if individual ID donors to be lost and replaced by new ones.

From DE 41 34 922 C2 is a system for controlling access to objects become known, in which the reader or readers by the individual ID encoder programmed. This allows the use of unprogrammed Readers, allowing an object extension by one Use of other readers is basically possible without further ado. The ID encoders are also pre-programmed by the manufacturer in this system. Thus, one is in a use of this system at a Retrofitting of ID encoders still depends on the manufacturer. In particular, this prior art system can be hierarchical Closing structures are difficult to realize because each ID transmitter is also simultaneously Disk is and thus basically any reader program can.

Based on the discussed prior art, the invention is the Task based, an aforementioned, generic method in such a way that an authentication device, about a keyless conditional access control device not only in terms of the use and the number of readers but also with regard to the use and the number of ID encoders with larger ones Variability and can be set up with simple measures.

This object is achieved by the independent in the Claim 1 specified method, wherein in a first step the at least one base station by a mobile programming unit one intended for programming and different from the one at Control operation of the device for communication between the at least an ID transmitter and serving the at least one base station Data transmission path distinguishing data transmission path is initialized by this base station from the programming unit individual identification assigned as well as one for communication received with the or the ID donors serving crypto code, if this base station a crypto code is not yet known, and that in one second step through this base station on a for programming provided by and in the control of the establishment for the communication between the at least one ID transmitter and the base station serving data transmission path different Data transmission link those ID transmitter with regard to an intended communication with this base station is initialized, the one authorization to trigger an event by this Base station should be obtained by each of these ID transmitter from the base station an individual identification gets assigned as well as the Communication serving crypto code is received when the ID transmitter Cryptcode is not yet known.

Furthermore, this object is achieved by the in claim 11 reproduced reproduced authentication device.

In the said method for the functional marriage of the components an authentication device with each other is the marriage between one or more readers - the readers are in the context of the invention due to their programming the ID transmitter Properties referred to as base stations - with those ID donors by one or more of those involved in the facility Base stations are to be recognized as authorized by that used for operating the device crypto code is not initialized components initially only the programming unit and thus a single, in particular mobile element of the authentication device is known. This crypto code is used when initializing the Establishment of this programming unit, also referred to as master transmitted to each base station. With the transfer of the Crypto codes on each base station - a process common to every base station carried out - there is a definition and labeling of each individual Base station. All base stations assigned to a programming unit receive their individual identification in this way. The programming unit is an element of the authentication device, so that as with a reinitialization of a base station Object an existing object extended by more base stations can be. These need only in the manner described to be initialized by the programmer. An initialization the ID device associated with the authentication device takes place in one second initialization step by the base stations, wherein all ID encoders that are to be recognized as authorized by this base station initialized or programmed by this base station. These Initialization comprises on the one hand a transmission of the programming unit transferred to the base station in a previous step Kryptcodes. However, the crypto code is only transmitted if it has previously been detected as part of a query that this ID transmitter has not yet received a crypto-code or at least the one for communication does not know this base station serving crypto-code. On the other hand each of these base station is an individual identification assigned to the individual ID encoders and transmitted to them. With this individual identification is then carried out using the predetermined Cryptcodes the authentication control. Is in an ID dealer already stored the crypto-code used for this object, then this ID transmitter is only assigned its individual identification. This is the case, for example, if this ID transmitter is previously at another base station regarding transmission of the crypto-code has already been initialized and the programming at each other Base station serves the purpose, this base station this ID transmitter in terms of its entitlement.

Initializing or programming each ID transmitter of this authentication device by one or more at the authentication device involved base stations makes it clear that for the configuration the authentication device exclusively unprogrammed ID transmitter needed. The same applies to the use of the required Base stations, which in turn - as described above - by the programming unit initialized and programmed. Thus, these can Elements of the conditional access control device from a mass production be removed. An individualization of the individual Components only take effect when these components are used with the help of a programming unit in the manner described with each other be functionally married. Consequently, not only retrofitting with Base stations unproblematic, but in particular can without more system to be added to the ID and more importantly even lost ones are replaced by new ones. This method is particularly suitable as part of a keyless access authorization control device.

In the described method it is provided that for the initialization and programming the individual elements a different data transmission path is used as the one in a control operation the device is provided. In a control operation of the device there is a communication between the base station and the respective ID transmitter expediently on an RF radio link. The Initialization or programming of the individual ID encoders by the base stations can be done on a LF radio link. Although has in such an embodiment, each ID transmitter via a low-frequency part and a However, the NF-section and expediently will be Thus, the LF part of the ID transmitter is also used to the ID transmitter from a Sleep or sleep mode to bring this into its operating mode in which the HF part of the ID transmitter is used for communication started up with a base station. To wake up is from a Base station cyclically sent an AF wake-up signal. The range of a such wake-up signal is limited and dependent on the spatial conditions in the vicinity of the base station. In any case you will be tempted to send the wake-up signal with such a field strength that at a sufficient distance in front of the base station an approaching ID transmitter is awakened and communication on the RF link is completed when the ID transmitter at the example located from the base station controlled door.

To program the ID encoders on the LF path, a data transfer takes place on the NF-track expediently with only a very low field strength, so that for this purpose the ID transmitter in the immediate Must be kept close to the base station. The change of Field strength can be due to the different operating mode of the base station - Programming or initialization mode or control operating mode - respectively.

Communication between the programming unit and the base station to initialise and program the base stations also takes place on a short-range communications link. This can also be made on a NF track. A programming or initialization of the base stations by the programming unit can also on other route, for example an infrared route or also be provided by contact.

The programming unit itself is mobile so that it can be addressed to the individual, in distributed to an object arranged base stations can be brought. Therefore, it is in principle not necessary in this process that the Base stations are interconnected. The programming unit itself basically does not need to be actively programmable; rather, can the programming of the individual base stations by the programming unit yourself. This is then expediently as active Transponder working designed. The programming unit can therefore be the same be small, as the individual ID transmitter. Conveniently, the programming unit differs in color or in others However, from the individual ID donors.

In the described method, it is expedient if after a Initialization of a base station and after initialization of the latter Base station as acknowledged to be recognized ID transmitter feedback to the programming unit via the initialization done. It can then by the programming unit associated with this base station Identification regarding otherwise possible assignment of this identification be blocked to another base station. That's it expedient if the feedback to the programming unit not only Information about that contains the base station as intended has been initialized, but also receives information about how Many ID donors are recognized as eligible by this base station. There is then the possibility that the entire ID donor and base station management is made by the programming unit since this in this case not only the identifications of all base stations but also those at the authentication device participating ID donors are known.

Useful for identifying base stations and for identification The individual ID transmitter is the use of one counter, namely a base station counter and an ID transmitter counter. This has under another advantage for the storage of individual elements only a small memory requirement is needed and in particular, in that access to authorization data optionally assigned to an ID transmitter much faster than it would be if the entire memory for identifying, for example, an ID transmitter would have to be searched. The use of a counter is used in this case as an ordinal number or address to access if necessary, to obtain further available data.

Such an access authorization control device can easily be used in addition to the expediently provided mobile passive programming unit be associated with an active programming unit. With this then there is the possibility of certain permissions in the delete individual base stations, for example, in the event that a ID transmitter is lost. With such an active programming unit the base stations can respect the authorization levels of the individual ID encoders are programmed. These in respect of the base station the authorization of this base station known ID transmitter stored data can, for example, a temporal authorization in Framework of a keyless conditional access control device according to which certain ID donors only within a certain Time zone as eligible to be admitted into an object. permission levels For example, they can also be designed in this way be that in the context of an access authorization control a Access to a particular ID provider is allowed only if in addition to this ID transmitter another ID transmitter in the communication area of the base station is arranged.

The described method and the described authentication device can easily be combined with other known systems be and / or superimpose these. It is also possible readily establish hierarchical locking structures or also an additional object identifier as part of the individual identifications use to create different objects with the same Kryptcode work different from each other. In such a case it will be expedient, in each case a suitably passive programming unit, containing the same crypt code, but with an additional one Object identifier programmed, used. Basically it is also possible for different objects different Use crypto codes; but then would have the s.der total equipment involved ID donors also over the appropriate number different crypto codes. Although this is true in principle is possible, one will take into account that this is usually an extension of the duration of the authorization query dialog if the awakened ID transmitter does not coincide with the for this object responsible cryptcode responds.

Fig. 1

eine schematisierte Darstellung einer schlüssellosen Zugangsberechtigungskontrolleinrichtung und

Fig. 2

ein Flussdiagramm, darstellend ein Verfahren zum funktionellen Verheiraten der Komponenten der schlüssellosen Zugangsberechtigungskontrolleinrichtung der Figur 1.

The invention is described below with reference to an embodiment with reference to the accompanying figures. Show it:

Fig. 1

a schematic representation of a keyless access authorization control device and

Fig. 2

3 is a flow chart illustrating a method for functionally marrying the components of the keyless conditional access control device of FIG. 1.

A keyless access authorization control device 1 comprises a plurality, an object 2 associated with base stations B _1, B _2, three ID transmitter ID ₁ - ID ₃ and serving as a programming unit master M. The base stations B _1, B ₂ are within the object 2 are each a door assigned and serve the purpose in an operation of the access authorization control device 1 upon detection of a defined as legitimate ID transmitter, the respective base station B ₁ , B ₂ associated door to unlock and possibly motorized to open. Within the scope of the keyless access authorization control device 1, the ID transmitters ID ₁ - ID ₃ are the mobile keys which can communicate with the base stations B ₁ , B ₂ on an HF path for carrying out the authentication request. The ID encoders ID ₁ - ID ₃ are transponders.

A communication between the ID encoders ID ₁ - ID ₃ and the base stations B ₁ and B ₂ takes place with the aid of a crypto-code. Furthermore, the ID transmitters ID ₁ - ID ₃ and likewise the base stations B ₁ and B _{2 are} identified with an individual identification in order to assign different authorizations for the use of the base stations B ₁ and B ₂ to the ID transmitters ID ₁ - ID ₃ to be able to. For this purpose, the base stations B ₁ , B ₂ must be functionally married to those IDs ID ₁ - ID ₃ , each of which is to be recognized as authorized by a base stations B ₁ , B ₂ , so that upon detection of an identified as legitimate ID transmitter the unlocked door is unlocked or opened by a motor. For the purpose of marrying the components of the access authorization device 1 is the master M. The master M is a mobile passive programming unit. The master M differs from the ID donors ID ₁ - ID ₃ by a slightly larger design and by a different color coding of its housing. Amongst other things, a crypto-code is stored in the master M in an electronic storage medium, with which the bidirectional communication between a base station B ₁ or B ₂ and an ID transmitter ID ₁ , ID ₂ or ID _{3 is to} take place. Further, the master M includes two counters - a base station counter and an ID transmitter counter. The master M and the access authorization control device 1 associated base stations B ₁ , B ₂ can communicate with each other on a LF link, the range of this communication is limited to a few centimeters. Thus, communication between the master M and a base station B ₁ , B _{2 is} possible when the master M is held to a base station B ₁ , B ₂ .

The base stations B ₁ , B ₂ and also the ID transmitter ID ₁ - ID ₃ each comprise an RF transceiver part for carrying out the bidirectional communication in an access authorization control mode of the access authorization control device 1. The base stations B ₁ , B ₂ further comprise an NF transmitting-receiving part; ID encoders ID ₁ - ID ₃ include a LF receiver. A programming or initialization of the ID transmitter ID ₁ - ID ₃ is carried out by the base stations B ₁ and B ₂ on the LF line, it being provided that acknowledgment signals as feedback from the ID encoders ID ₁ - ID ₃ to the respective base station B ₁ and B _{2 are sent} on the RF link. In principle, it can also be provided to send such feedback or acknowledgment signals also on the LF path. In such a case, the ID transmitter ID ₁ - ID ₃ also include a LF transmission unit.

The base stations B ₁ , B ₂ and also the ID transmitter ID ₁ - ID _{3 come} from a mass production and have before their functional marriage to each other and their assignment to the object 2 no individual features that would be necessary in the description of the invention. Thus, prior to their initialization, these elements - base stations and ID transmitters - can be assigned to any conditional access control device 1 or any object.

The method for initializing and programming the individual elements of the access authorization control device 1 by the master M is described below with reference to the flowchart of FIG. To initialize a base station, in this case the base station B ₁ , the master M is held in the immediate vicinity of the base station B ₁ , so that the master M can communicate with the base station B ₁ on a LF radio link. For this purpose, the master M is placed directly to the base station B ₁ . With the entry of the master M in the LF transmission range of the base station B ₁ this is awakened and transmitted to the base station B _1, a first signal with which the programming mode of the base station B _{1 is} opened. In this programming mode bidirectional communication between the master M and the base station B ₁ can take place. In a first query is checked by the master M, whether the base station B _{1 has} already received an individual identification (identifier). This can be done for example by querying an identification memory. If the memory is empty, the base station - in this case the base station B ₁ - is neither functionally assigned to the object 2 nor the access authorization control device 1. In this case, the master M transmits to the base station B ₁ a base station identification, an object identifier and a crypto-code. All transmitted data are stored in the base station B ₁ . It is expedient to store the transmitted crypto-code on a different storage medium than the transmission of the base-station identification and the object identifier.

In the base station identification is in the illustrated embodiment is an element of a counter series. Since the initialization of the access authorization control device 1, the base station B _{1 is} initialized and programmed as the first example, it receives the counter element "1" as a base station identification. The transmitted object identifier represents a suitable identifier for the object 2. After successful transmission and storage of said data from the master M to the base station B ₁ , a feedback from the base station B _{1 is sent} to the master M. The base station counter of the master M is then increased by one counter, so that the first counter can not be awarded again. Thus, the base station identification of the next base station to be programmed and initialized, for example the base station B _{2, is} uniquely predefined with the next counter. This receives the next counter, which is the counter element "2" in the described embodiment. The programming of the base station B ₁ is basically finished after receiving the feedback from the base station B ₁ to the master M. By removing the master M from the base station B ₁ , the latter automatically switches from its programming mode to the access authorization control operating mode.

Programming and initialization of further base stations of the access authorization control device 1, for example the base station B _2, takes place in an analogous manner.

• Initialisierung abgeschlossen, wird die bereits zuvor beschriebene Rückmeldung von der Basisstation B₁ an den Master M gesendet. Diese Rückmeldung enthält ebenfalls eine Information über die Anzahl der von der Basisstation B₁ im Rahmen der vorangegangenen Initialisierung bzw. Programmierung eingerichteten ID-Geber. Der Master M umfasst einen ID-Geber-Zähler, der durch diese Rückmeldung eingestellt wird. Sind beispielsweise von der Basisstation B₁ die drei ID-Geber, ID₁, ID₂ und ID₃ initialisiert und programmiert worden, befindet sich der Zähler des Masters M an der Stelle "4". Durch Entfernen des Masters M von der Basisstation B₁ wird der Programmiervorgang abgeschlossen und die Zugangsberechtigungskontrolleinrichtung 1 schaltet auf ihren Zugangsberechtigungskontrollmodus um.

In the event that immediately in connection with a programming of a base station, such as the base station B ₁ at the same time those ID encoders are to be programmed and initialized, which are to be recognized as justified by this base station B ₁ , is such an ID transmitter, for example the ID transmitter ID ₃ also bring in close proximity to the base station B ₁ . Before sending the feedback from the base station B ₁ to the master M is basically a query whether an ID transmitter is to initialize or not. In the event that an ID transmitter, such as the ID transmitter ID _{3 is} arranged in the immediate vicinity of the base station B ₁ in this query time, this feedback from the base station B ₁ to the master M is not yet issued. Rather, first the ID transmitter ID ₃ and then optionally further ID transmitter is programmed or initialized by the base station B ₁ . This communication takes place between the base station B ₁ and the ID transmitter ID ₃ on a LF radio link. By introducing the ID transmitter ID ₃ in the vicinity of the base station B ₁ this is awakened and switched to its programming mode. The programming of the ID transmitter ID ₃ is basically carried out in the same way as the programming of the base station B ₁ by the master M. In a first query is queried in the illustrated embodiment, whether the ID transmitter ID ₃ in the base station B. ₁ stored crypto code is known. This can be done, for example, by reading the crypto-code memory of the ID transmitter ID ₃ . If the crypto code memory of the ID transmitter ID _{3 is} empty, the ID encoder ID ₃ has not yet been programmed or initialized. This means that the ID transmitter ID ₃ is a new one. In this case, the crypto-code, the object identifier and an ID-encoder identification are then transmitted from the base station B ₁ to the ID transmitter ID ₃ . For this purpose, the base station B ₁ has an ID transmitter counter, which operates in principle like the above-described base station counter of the master M. If the ID transmitter ID ₃ is the first ID transmitter which is authorized to access this base station B _{1 is to be} programmed, this receives the ID encoder identification "1". The following, from the Basisstatioh B ₁ to be programmed as part of this programming process ID transmitter, for example, the ID transmitter ID ₁ , ID ₂ then successively receive the following elements of this counter series, namely the ID encoder identifications "2" or " 3 ". If the named data have been transmitted to the ID transmitter ID ₃ as intended and have been stored there, a feedback message is sent to the base station B ₁ by the ID transmitter ID ₃ . The ID transmitter counter of the base station B ₁ is then increased by one counter. In the event that further ID encoders are to be initialized by the base station B ₁ or programmed as authorized access, these are successively brought into the vicinity of the base station B ₁ and initialized or programmed in the same manner. Is the ID encoder programming or

• Initialization completed, the previously described feedback from the base station B _{1 is sent} to the master M. This feedback likewise contains information about the number of ID transmitters set up by the base station B ₁ in the context of the preceding initialization or programming. The master M includes an ID encoder counter, which is set by this feedback. If, for example, the three ID transmitters, ID ₁ , ID ₂ and ID _{3 have been} initialized and programmed by the base station B ₁ , the counter of the master M is located at the position "4". By removing the master M from the base station B ₁ , the programming operation is completed and the conditional access control device 1 switches to its conditional access control mode.

In the event that several base stations are part of the object 2, as is the case in the illustrated embodiment, with the programming of a base station this also the count "ID encoder counter" of the master M is sent, so that when programming of the ID transmitter ID ₃ as access authorization at the base station B _{2 of} this would receive the counter element "4", for example, as an ID transmitter identification. In this way, any authorization recognition via the ID transmitter identification is possible. Each ID transmitter receives in its programming in terms of access authorization to multiple base stations, such as the base stations B ₁ and B ₂ for each base station B ₁ and B ₂ independent identifier. Therefore, to identify the individual ID encoders ID ₁ - ID ₃ basically complicated identifiers can be dispensed with.

This is the case when programming an ID transmitter at the first request the knowledge of the provided for the object 2 crypto codes has been found that the crypto-code memory of the ID transmitter is not empty is and stored in the ID transmitter crypto code with that in the Base station stored matches, it is at this programming ID encoder to one that previously from a other base station of the object has been initialized. In a further query then takes place an object-related query, whether this ID encoder the object 2 is already known. Is the ID transmitter the object 2 as such already by storing a corresponding identifier As is known, this ID transmitter to be programmed is obvious one that already has this from another base station Object 2 has been initialized and possibly programmed. consequently is an ID provider who is authorized to access further base stations of the object 2 to be detected. In this In this case, the ID transmitter becomes an ID encoder identifier for this one Base station assigned and transmitted to the ID transmitter. After successful Feedback from the ID transmitter to the base station becomes the counter reading the base station increased accordingly.

The further procedure corresponds to that described above to the programming process to bring to conclusion.

LIST OF REFERENCE NUMBERS

1

keyless access authorization control device

2

object

B ₁ , B ₂

base station

ID ₁ - ID ₃

ID transmitter (identification transmitter)

M

Master (programming unit)

Claims (11)

1. Process for the functional intermarrying of the components of an authentication facility, which facility (1) comprises one or more mobile identification transmitters (ID transmitters) (ID₁ - ID₃) and at least one base station (B₁, B₂) that is assigned to an object, characterised by the fact that in a first step the at least one base station (B₁, B₂) is initialised by a mobile programming unit (11) on a data transmission route provided for programming purposes and differing from the data transmission route serving for communications between the at least one ID transmitter (ID₁ - ID₃) and the at least one base station (B₁, B₂) during a check operation of the facility, in that this base station (B₁, B₂) is assigned an individual identification by the programming unit (11) and also receives a crypto-code that serves for communicating with the ID transmitter or transmitters (ID₁ - ID₃) if a crypto-code is not known to this base station (B₁, B₂), and that in a second step those ID transmitters (ID₁ - ID₃) that are to receive authorisation to trigger an event by way of this base station (B₁, B₂) are initialised by this base station (B₁, B₂) on a data transmission route that is provided for programming purposes and differs from the data transmission route serving for communications between the at least one ID transmitter (ID₁ - ID₃) and the base station (B₁, B₂) during a check operation of the facility with a view to intended communications with the base station (B₁, B₂), in that each of these ID transmitters (ID₁ - ID₃) are assigned an individual identification by the base station (B₁, B₂) and receives the crypto-code serving for communications if a crypto-code is not yet known to the ID transmitter (ID₁ - ID₃).
2. Process in accordance with Claim 1, characterised by the fact that a check-back signal to the base station (B₁, B₂) by the ID transmitter (ID₁ - ID₃) initialised by a base station (B₁, B₂) takes place on the data transmission route serving communications between the ID transmitter (ID₁ - ID₃) and the base station (B₁, B₂) during a check operation of the facility (1) using the crypto-code if the transmitted data has been received and stored by the ID transmitter (ID₁ - ID₃), and that the base station (B₁, B₂) inhibits any re-assignment of this ID transmitter identification upon receipt of the designated check-back signal.
3. Process in accordance with Claim 1 or Claim 2, characterised by the fact that following the process of initialising the at least one base station (B₁, B₂), a check-back signal regarding the effected initialisation is transmitted to the programming unit (11) and that the programming unit (11) inhibits any re-assignment of this base station identification upon receipt of the check-back signal.
4. Process in accordance with Claim 3, characterised by the fact that the check-back signal to the programming unit (11) contains information on the ID transmitter identification(s) assigned by the base station (B₁, B₂).
5. Process in accordance with any of Claims 1 to 4, characterised by the fact that the base station identifications assigned by the programming unit (11) and the ID transmitter identifications assigned by each base station (B₁, B₂) are counter states of a base station counter and an ID transmitter counter, respectively.
6. Process in accordance with Claim 4 and Claim 5, characterised by the fact that the counter states are detected by the programming unit (11) and that, by each further initialisation of a base station (B₁, B₂), the next free ID transmitter counter state, respectively, is transmitted to the base station to be initialised (B₁, B₂) as the initial counter state of the ID transmitter counter of this base station (B₁, B₂).
7. Process in accordance with any of the aforementioned claims, characterised by the fact that, upon transmission of the initialisation data by the programming unit (11), an object identifier is likewise transmitted to the base station (B₁, B₂) and transmitted by the same to the ID transmitter (ID₁ - ID₃) to be initialised by the same.
8. Process in accordance with any of the aforementioned claims, characterised by the fact that upon a control operation of the facility (1) a bi-directional communication takes place between a base station (B₁, B₂) and an ID transmitter (ID₁ - ID₃) on a low-frequency route.
9. Process in accordance with any of the aforementioned claims, characterised by the fact that the programming and/or initialisation of the ID transmitter (ID₁ - ID₃) is effected by a base station (B₁, B₂) on a low-frequency route.
10. Process in accordance with any of the aforementioned claims, characterised by the fact that the programming and/or initialisation of a base station (B₁, B₂) is carried out by the programming unit (11) on a low-frequency route.
11. Authentication facility with one or more mobile identification transmitters (ID transmitters) (ID₁ - ID₃) serving as keys, at least one base station (B₁, B₂) assigned to an object, as well as a programming unit (11), characterised by the fact that

    the programming unit (11) is designed to function in the manner of an active transponder and features a readable memory containing a crypto-code as well as storage positions for filing base station identifications and ID transmitter identifications,

    the programming unit (11) and each base station (B₁, B₂) each feature a communication facility for conducting a communication, respectively,

    each base station (B₁, B₂) has a readable memory for storing the crypto-codes transmitted by the programming unit (11) and storage positions for filing a base station identification and ID transmitter identifications that have been assigned and transmitted by the programming unit (11),

    each base station (B₁, B₂) and the ID transmitters (ID₁ - ID₃), respectively, feature a communication facility for conducting a communication, and

    each ID transmitter (ID₁ - ID₃) has a readable memory for storing the crypto-code assigned and transmitted by a base station (B₁, B₂) and also storage positions for filing I D transmitter identifications relating to base stations.

Images