Immobilizer Description and Operation

Immobilizer Description and Operation

The immobilizer system functions are provided by the body control module (BCM) and the engine control module (ECM), as well as any modules which store and report the security code.

When an ignition key is inserted into the ignition lock cylinder and the ignition is switched ON, the encrypted code in the key is energized by the immobilizer coil surrounding the ignition lock cylinder. This immobilizer coil is part of the immobilizer antenna. The encrypted code transmits a signal that contains its unique value, which is received by the BCM. The BCM then compares this value to a value stored in memory. The BCM also monitors various modules to determine that the stored environment ID matches.

If both the environment ID and the value received from the transponder match, the BCM will send the prerelease password via serial data to the ECM. If the encrypted codes unique value is incorrect or the environment ID does not match, the BCM will send the fuel disable message to the ECM.

When the ECM receives the BCM prerelease password, the ECM will challenge the password. The ECM sends this challenge back to the BCM via serial data. Both the ECM and BCM perform a calculation on this challenge. If the calculated response from the BCM equals the calculation performed by the ECM, the ECM will allow vehicle starting.

The components of the theft system are as follows:

* BCM
* ECM
* Immobilizer antenna
* Ignition key/fob
* Security indicator
* Various modules which store and report the environment ID are BCM, IPC, HVAC, EBCM, ECM and SDM

BCM is programmed with the environment ID at the manufacturer.

Body Control Module (BCM)

The immobilizer system is an integral part of the BCM and is controlled internally within the BCM. The BCM can learn up to 8 keys/fob (transponder values).

The BCM uses the following inputs:

* Environment ID exchange with various modules
* Encrypted code from key/fob from immobilizer coil

The BCM uses the following outputs:

* Prerelease password communication with ECM
* Challenge/response with ECM

When an ignition key is inserted into the ignition lock cylinder and the ignition is switched ON, the encrypted code in the key is energized by the immobilizer coil surrounding the ignition lock cylinder. The energized transponder transmits a signal that contains its unique value, which is received by the BCM. The BCM then compares this value to the learned key code stored in memory. The BCM then performs one of the following functions:

* If the encrypted code value matches the values stored in the BCM memory, the BCM will send the prerelease password to the ECM via serial data.
* If the encrypted code unique value does not match the value stored in the BCM, the BCM will send the start disable message to the ECM via serial data.
* If the BCM is unable to measure the ignition key encrypted code value, the BCM will not send any messages to the ECM.

Engine Control Module (ECM)

When the ECM receives the BCM prerelease password, the ECM will challenge the password. The ECM sends this challenge back to the BCM via the serial data circuit. Both the ECM and BCM perform a calculation on this challenge. If the calculated response from the BCM equals the calculation performed by the ECM, the ECM will allow vehicle starting.

The ECM will disable vehicle starting if any of the following conditions occur:

* The prerelease password is invalid.
* The start disable password is sent by the BCM.
* No passwords are received. There is no communication with the BCM.
* The BCM calculated response to the challenge does not equal the calculation performed by the ECM.

Immobilizer Antenna

The immobilizer antenna contains an immobilizer coil which surrounds the ignition cylinder. The coil passively powers the key/fob located in the ignition key when the key is in the ignition. When powered, the key/fob transmits its unique value to the immobilizer antenna, which is then relayed to the BCM via a LIN serial data circuit. The immobilizer antenna also receives B+ and ground from the BCM.

Immobilizer antenna is used to:

1. Learn key/keys
2. To start vehicle with or without RF interference
3. To start vehicle when key/fob battery is dead

The Ignition Key/Fob

The ignition key/fob encrypted value is fixed and unable to be changed. The immobilizer system uses the ignition key transponder value to determine if a valid ignition key is being used to start the vehicle. There are approximately 3 trillion possible encrypted code values. There are no visible electrical contacts. The keys are identified by + symbol in a circle stamped into the steel shank of the key.

Environment ID

Various modules throughout the vehicle learn a specific environment ID during the module programming process. The environment ID learned by each individual module matches the security code stored in the BCM, which is the environment ID master. Prior to starting, each of the modules which store a environment ID will compare their ID to that of the ID stored in the BCM. If all the IDs match, the engine starting process will continue. If the environment ID do not match, engine starting will be disabled.

Security Indicator

The BCM will command the instrument panel cluster to illuminate the security indicator when the ignition key is in the ON position to indicate a fault is noted in the immobilizer system and when the engine starting is disabled.