DE102014219502A1 - System and method for limited access to a vehicle - Google Patents

Abstract

A system (1) for establishing a restricted access to a vehicle (2) comprises a first mobile unit (3), in particular an intelligent key, and a second mobile unit (4). The first mobile unit (3) is arranged to generate data for authentication for a restricted access. The first mobile unit (3) and the second mobile unit (4) are set up to establish a first direct data connection by means of microwave technology. The first mobile unit (3) further comprises a user interface (6) adapted to receive an acknowledgment of authorization of the first data connection from a user. The first mobile unit (3) is further set up to provide the second mobile unit (3) with the data for authentication by means of the first data connection. The second mobile unit (4) and the vehicle (2) are set up to establish a second direct data connection via microwave technology and to transmit the data for authentication. The vehicle (2) has an association device (7) configured to compare data received by the first mobile unit (3) for authentication with data stored in the vehicle (2) for authentication, and a control device (8) configured for access to the vehicle (2) release, if the data for authentication in matching match.

Description

The invention relates to a system and a method for establishing a restricted access to a vehicle.

The technical implementation of such access is preferably carried out using portable computers, so-called mobile units, which are dedicated to this task or are enabled by appropriate programming for this purpose.

Often it turns out to be problematic to transport goods that are purchased, for example during a shopping spree, to your own vehicle. For example, after acquiring, for example, a large number of garments, it may be necessary to suspend a purchase and first deposit the goods in the vehicle to continue shopping thereafter. Some stores offer a service to transport the goods directly to the vehicle. However, there is again the problem that you either have to accompany the appropriate service provider to the vehicle or this must pass his car key, so that he receives access to the vehicle. Furthermore, normally the access to the vehicle can not be restricted. This also poses a problem with traditional valet parking, in which a service provider is given the vehicle key to turn off the vehicle for the vehicle owner. In particular, from the United States of America is known to solve this problem that the vehicle owner carries with it a further ignition key, which does not entitle the user, for example, to open the trunk and / or the glove box

The US 2010/000130 A1 relates to a so-called smart key for vehicles and a telematic system using the same. The smartkey includes a radio frequency interface unit, a smartkey unit, a universal user identification module (USIM), a USIM unit, and a microcomputer.

The US 2005/0277438 A1 relates to a device for a vehicle, with which a personalized electronic access to voice communication, audio-entertainment and vehicle functions is made possible. The device has an integrated vehicle key, which has a physically and optionally electronically integrated combination of an electronic device for the above-mentioned functions.

Based on this prior art, it is an object of the invention to provide a system and a corresponding method with which a vehicle owner of a third person can enable a well-defined access to a vehicle without having to monitor the access in personal presence.

This object is achieved by the invention specified in the independent claims. Advantageous embodiments of the invention are claimed in the subclaims.

An inventive system for establishing restricted access to a vehicle comprises a mobile unit, in particular a smart key, and a second mobile unit. The first mobile unit is preferably arranged to generate data for authentication for a restricted access, wherein both the first mobile unit and the second mobile unit are respectively set up to establish a first direct data connection by means of microwave technology. The first mobile unit further comprises a user interface configured to receive an acknowledgment of entitlement of the first data connection from a user, and is further configured to provide the data for authentication via the first data connection as a result of the second mobile unit , Here, the second mobile unit and the vehicle are preferably further configured to establish a second direct data connection via local radio and to transmit the data for authentication. The vehicle further preferably has an allocation device, which is in particular configured to compare data received from the first mobile unit for authentication with data stored in the vehicle for authentication, and a control device which is set up to enable access to the vehicle if the data matches authentication during reconciliation.

An inventive method preferably has the following steps: establishing a first data connection between a first mobile unit, in particular a smart key, and a second mobile unit or the vehicle by means of Nahfunktechnik; Confirming authorization of the first data connection by the first mobile unit or the vehicle; Providing data for authentication by a first mobile unit, in particular an intelligent key or the vehicle to the second mobile unit by means of Nahfunktechnik; Establishing a second data connection between the second mobile unit and the vehicle by means of Nahfunktechnik; Transmitting the data for authentication by the second mobile unit to the vehicle; Comparing the data received from the first mobile unit for authentication and the data stored in the vehicle for identification; Enable access by the vehicle if the data matches authentication during reconciliation.

A vehicle according to the invention is in particular a passenger car.

A mobile unit in the sense of the invention is preferably a device dedicated to the application according to the invention, in particular a so-called intelligent key or smart key, or an electronic device which has a plurality of functions, in particular a smartphone.

A central unit within the meaning of the invention is a centrally arranged computer, in particular a back-end.

A message in the sense of the invention is a closed data unit, which a transmitter or also a sending process sends to a receiver. Preferably, such a data packet has a well-defined length and shape and can be checked in particular for completeness and usability. Preferably, a message is a data packet that can be sent after the Internet protocol.

The invention is based on the approach of being able to issue electronic tickets with its own vehicle key or own vehicle, which enables a third person carrying the electronic ticket to obtain a well-defined access to the vehicle. For example, an employee of a shop in the shopping spree an electronic ticket to be loaded on his smartphone, with which this gets access to the trunk of the vehicle to store purchased by the vehicle owner goods in the vehicle can. Furthermore, it is conceivable that an employee of a valet parking service receives access only to the driver's door and ignition by means of an electronic ticket, but can not open the other doors of the vehicle, as well as the glove box and the trunk. A vehicle owner can thus issue an unlimited number of electronic tickets which allow third persons to perform an action with or on the vehicle, in particular for a limited period of time and / or geographical area, without the vehicle owner for this vehicle key, which therefore also others Actions as desired by the vehicle owner, would have to give out of his possession. Preferably, the vehicle will be present for this purpose, a so-called public key to check a signature of the ticket. This cryptographic signature check preferably includes calculations.

In an advantageous embodiment of the system according to the invention, this further has a central unit. The second mobile unit and the central unit are hereby set up to establish a third data connection and to transmit a first message for enabling access to the vehicle, which has at least data for authentication of the access. The central unit is further set up to verify the data for authentication based on at least one stored in the central unit first criterion and to sign the data for authentication, if the at least one deposited criterion is met. The central unit and the second mobile unit preferably further cooperate to transmit a second message for releasing the access, which comprises at least the signed data for authentication. Finally, in this embodiment, the vehicle is preferably set up to check whether the data is signed for authentication, with release of the access by the vehicle only if the data is signed for authentication by the central unit. This advantageous embodiment allows additional control of access to the vehicle by a central unit, in particular a back-end of a service provider or the vehicle manufacturer, to prevent unauthorized access to the vehicle.

In a further advantageous embodiment of the system according to the invention, the vehicle has a memory device which is set up to store data for authentication for which a release of the access has been granted. In this way, data for authentication that has already been used to gain access to the vehicle can be identified and possibly further access prevented.

The aspects of the invention described above and the associated features disclosed for the development of the system according to the invention also apply to the aspects of the invention described below and to the associated developments of the method according to the invention, and vice versa.

In an advantageous embodiment of the method according to the invention, this further comprises the following steps: transmitting a first message for enabling access to the vehicle, which has at least the data for authenticating the release, from the second mobile unit to the central unit; preferably checking the data for authentication from at least one of the central unit deposited first criterion; further preferably signing the data for authentication by the central unit if the at least one stored first criterion is met; and transmitting, from the central unit to the second mobile unit, a second message for releasing the access comprising at least the signed data for authentication, wherein release of the access by the vehicle occurs only when the data for authentication by the central unit signed.

In a further advantageous embodiment of the method according to the invention, the latter has the work step of storing the data for authentication, for which a release of the access was granted, by the vehicle, wherein in particular a set of data for authentication is valid only for a predetermined number of accesses , This embodiment relates to an additional security aspect, in which the vehicle, in addition to any one-time validity specified in the data for authentication, checks the vehicle as to whether the data for authentication has already been used and possibly blocks it.

In a further advantageous embodiment of the method according to the invention, the latter has the work step of transmitting the data for authentication, for which a release of access by the vehicle was granted, by the vehicle to the central unit, in particular data for authentication only for a predetermined number is valid on shares, and the data is stored for authentication by the central unit. This embodiment also relates to an additional security feature of the method according to the invention, with which a control of the number of accesses can be monitored by the central unit.

In a further advantageous embodiment of the method according to the invention, the data for authentication furthermore characterize a point in time and / or a location of its provision by the first mobile unit. In this case, the method preferably has the step of checking the data for authentication based on at least one second criterion stored in the vehicle, in particular a geographically limited space, wherein the access is only released if the second criterion is met. In this way, the temporal and spatial area in which access can take place can be limited.

In a further advantageous embodiment of the method according to the invention, the data for authentication to release further on an indication of the nature of the release of access, in particular at least one type of release, selected from the group: trunk open; open the driver's window, in particular a gap; Open vehicle door, especially driver's door; Start vehicle; Move vehicle, especially within a geographically limited space, in particular in a defined by the data for authentication period.

In a further advantageous embodiment of the inventive method, the data for authentication on a cryptographically secured date.

Other features, advantages and applications of the invention will become apparent from the following description taken in conjunction with the figures. Show it

1 a partial schematic representation of a first embodiment of the system according to the invention for establishing a limited access to a vehicle;

2 a partial schematic representation of a second embodiment of the system according to the invention for establishing a limited access to a vehicle; and

3 a partially schematic block diagram of a preferred embodiment of the method according to the invention for establishing a limited access to a vehicle.

In the following, the invention is based on the 1 and 3 explained with reference to the first embodiment of the system according to the invention.

According to the invention are preferably in a first mobile unit 3 Data for authenticating access to a vehicle 2 generated. The data for authentication preferably contain a cryptographic signature by the first mobile unit 3 by which access is protected against tampering and preferably verifiable by the issuing first mobile unit 3 can be assigned.

• – Nur Kofferraum öffnen (Holen-und-Bringen-Funktion)
• – nur die Fahrzeugscheibe einen Spalt öffnen (Briefkasten-Funktion)
• – Fahrzeugtür öffnen
• – Fahrzeug starten
• – Fahrzeug bewegen

Preferably, it is provided in the inventive method that between an intelligent key, as in the 1 is displayed or the vehicle 2 and an electronic device 4 , in particular a smartphone, using Nahfunktechnik a first connection is made 101 , To improper transfer of data from the smart key 3 , a so-called smartkey or the vehicle 2 to a smartphone 4 To prevent, the intelligent key points 6 and / or the vehicle 2 a User interface 6 on, with which the user a data connection to the smartphone 4 can confirm. If a user has confirmed the authorization of the first data connection 102 , represents the smart key 3 or the vehicle 2 Data for authentication to the second mobile unit 3 ready 103 , Preferably, the access authentication data is similar to an electronic ticket containing information about the identity of both the vehicle to be opened 2 as well as the exhibitor, for example, the vehicle owner, and the user, such as a service provider or seller. Furthermore, the type of access authorization is determined via the data for authentication. In this case, for example, the following shares are eligible for access:

• - Open only trunk (Get-and-bring function)
• - just open the vehicle window a crack (letterbox function)
• - open the vehicle door
• - Start the vehicle
• - move the vehicle

As a result, e.g. Functions such as valet parking or the above-mentioned granting of purchased goods in the trunk to be realized during a purchase.

In a further step, a second data connection between the second mobile unit and the vehicle 2 furnished by means of microwave technology 108 , In this case, for example, systems with standardized Near Field Communication (NFC) method in question, but also other systems, which can set up radio frequency identification (RFID), Bluetooth or other wireless transmission methods, in particular radio transmission methods, data connections.

Via the second wireless connection, the data for authentication, which may be signed, from the second mobile unit 4 to the vehicle 2 transfer 109 , The vehicle 2 This is similar to the first mobile unit 3 received data in the vehicle 2 stored data for authentication 110 , The data for authentication is preferably with those data for authentication, which is the smart key 3 of the vehicle 2 or the vehicle 2 initially to the second mobile unit 4 has provided identical. Therefore votes from the smartphone 4 received data with those in the vehicle 2 according to the vehicle 2 providing the data for authentication, which may additionally be provided by the central unit 5 signed by the smart key 3 or vehicle 2 even issued. Therefore, the vehicle granted 2 which is identified by the data for authentication, which, as mentioned above, constitute an electronic ticket identifying second mobile unit 4 Access.

Further preferably, the authentication data to which the vehicle has been granted access is either in a storage device 9 stored in the vehicle itself 114a , or these are first to the central unit 5 transmitted 113 and saved there 114b , That way, the vehicle can 2 itself or when transmitting the data for authentication from the smartphone 4 to the central unit 5 according to a second embodiment of the invention according to 2 be verified, whether a number of access, which is the smart key 3 or the vehicle 2 for a set of data for authentication had already been consumed.

Further preferably, the authentication data further includes a time and / or location of its provision by the mobile unit 3 , That way, the vehicle can 2 check whether the data for authentication satisfy a second criterion which is stored in the vehicle 111 , In particular, this second criterion may be a geographically limited space and / or a period of time granted for the use of this data for authentication. Thus, the vehicle can 2 even then deny release based on authentication data that has expired, when to the vehicle 2 There is no data connection because corresponding criteria relating to a set of data for authentication are already stored in the vehicle itself. This is important, for example, when the vehicle is in an underground car park. Another application arises when the vehicle is to be stolen by means of the electronic ticket. A lapse of the limited period of time may result in the vehicle being unusable beyond a certain point in time.

Are the authentication data already in the vehicle? 2 deposited, it is preferably a root certificate or a vehicle owner certificate, which the vehicle 2 through the second mobile unit 4 authenticated data, in particular by means of a cryptographic check. This may preferably be a substantive validation, for example, in relation to the period and the place of access.

A control device 8th in the vehicle 2 preferably controls the functionalities of the vehicle 2 , which can be activated with the respective access. In particular, the control device 8th the locking system of the vehicle 2 , especially operate the central locking or individual components of the central locking and release a starting of the vehicle.

• – ist das Anfragen des Smartphone 4 als vertrauenswürdig eingetragen
• – gibt es eine angemessene Anzahl von Zugangsanfragen oder versuchen zu viele dritte Personen gleichzeitig, Zugang zu dem Fahrzeug 2 zu erhalten
• – hat der Fahrzeughalter dem gewünschten Zugang, bzw. er durch diesen Zugang gewährte Funktionalität, zugestimmt.

Other first criteria used by the back-end 5 ie the central entity, as security policies could be checked in relation to the electronic ticket, are:

• - is the request of the smartphone 4 registered as trustworthy
• - There are a reasonable number of access requests or too many third parties at the same time, access to the vehicle 2 to obtain
• - The vehicle owner has the desired access, or he granted by this access functionality approved.

In a further embodiment of the invention, which in 2 is presented before establishing a second data connection 108 another, third data connection between the second mobile unit 4 and a central unit 5 produced 104 , wherein a first message N1 relating to the release of access to the central unit 5 is transmitted. On the basis of this message N1, which has at least the data for authentication of the access, the central unit can check on the basis of a stored first criterion whether access to the vehicle 2 for the smartphone 4 is entitled. The first criteria are, for example, a geographical or temporal area, an ID of the smartphone 4 or information about the owner of the smartphone 4 , which may be stored on this, in question. If this meets at least a first criterion, the data for authentication with a signature of the central unit 5 Mistake 106 , Finally, these are transmitted via the data connection, in particular in a second message N2 for enabling access to the second mobile unit 4 returned 107 , A release of an access by the vehicle can in this case only take place if the data for authorization by the central unit 5 signed.

An application example of the invention is as follows: At a party, a remote friend wants access to the trunk of the vehicle 2 Obtain a vehicle owner to bring out his previously stored there personal items. Since the distant acquaintance has drunk, can the key of the vehicle 2 not be given, because he could lose the key or even move the vehicle. Also the distant acquaintance to the vehicle 2 to accompany is out of the question, because the celebration can not be left or the weather does not allow a companion. Even a remote opening, for example, with a "remote door unlock" is not possible because the vehicle is in an underground car park, where there is no data connection via a mobile network.

The vehicle owner can according to the invention an electronic ticket for the smartphone 4 the known with his intelligent key 3 for the next five minutes, in which the acquaintance is authorized, the trunk of the vehicle 2 to open. The vehicle owner may also issue multiple electronic tickets to several guests of the party, preferably via a management app, such as the smart key 3 or in turn can see the open electronic tickets on his smartphone and this preferably by means of a data connection via a back-end 5 change, eg from a single use to a permanent use in a certain period of time or an early devaluation / deprivation of rights or adaptation of the access right, for example the door to be opened. Preferably, the back-end is synchronizing 5 the setting on the management app directly with the vehicle in question 2 so that this will only allow authorized access.

As mentioned, the invention works without network access, for example in underground car parks and in countries in which the vehicle owner has no data / telephone tariff. There may be individual access rights to the vehicle 2 be granted and the vehicle owner always has the certainty that the vehicle 2 can not be moved. Also, the car key can not be lost and no vehicle key needs to be returned from a third person to the vehicle owner.

It will be apparent to those skilled in the art that the operations of the invention may be carried out as in the order described above, as well as in any other order in which the teaching of the invention may be practiced.

LIST OF REFERENCE NUMBERS

 1

 system

 2

 vehicle

3

 First mobile unit

4

 Second mobile unit

5

 Central unit

 6

 User interface

 7

 allocator

 8th

 control device

 9

 memory device

N1

 First message

N2

 Second message

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• US 2010/000130 Al [0004]
• US 2005/0277438 A1 [0005]

Claims (10)

System ( 1 ) establishing a restricted access to a vehicle ( 2 ), comprising: a first mobile unit ( 3 ), in particular a smart key, and a second mobile unit ( 4 ), the first mobile unit ( 3 ) is adapted to generate data for authentication for a restricted access, wherein the first mobile unit ( 3 ) and the second mobile unit ( 4 ) are adapted to establish a first direct data connection by means of microwave technology, wherein the first mobile unit ( 3 ) a user interface ( 6 set up to receive an acknowledgment of authorization of the first data connection from a user, and wherein the first mobile unit ( 3 ), the second mobile unit ( 3 ) provide the data for authentication by means of the first data connection, the second mobile unit ( 4 ) and the vehicle ( 2 ) are arranged to establish a second direct data connection via Nahfunktechnik and transmit the data for authentication; and wherein the vehicle ( 2 ) an allocation device ( 7 ) established by the first mobile unit ( 3 ) received data for authentication in the vehicle ( 2 ) for authentication purposes, and a control device ( 8th ), set up for access to the vehicle ( 2 ) if the data for authentication matches. System ( 1 ) according to claim 1, further comprising a central unit ( 5 ), wherein the second mobile unit ( 4 ) and the central unit ( 5 ) are arranged to establish a third data connection and a first message (N1) for enabling access to the vehicle ( 2 ), which has at least the data for authenticating the access; the central unit ( 5 ), the data for authentication is based on at least one in the central unit ( 5 ) check the first criterion and to sign the data for authentication, if the at least one deposited first criterion is met; the central unit ( 5 ) and the second mobile unit ( 4 ) are further arranged to transmit a second message (N2) for releasing the access, which comprises at least the signed data for authentication, wherein the vehicle ( 2 ) is set up to check whether the data are signed for authentication, whereby a release of the access by the vehicle ( 2 ) takes place only when the data for authentication by the central unit ( 5 ) are signed. System ( 1 ) according to claim 1 or 2, wherein the vehicle ( 2 ) a memory device ( 9 ) has set up data for authentication, for which a release of access has been granted to save. Procedure ( 100 ) establishing at least limited access to a vehicle ( 2 ), comprising the following steps: manufacturing ( 101 ) of a first data connection between a first mobile unit ( 3 ), in particular a smart key, or the vehicle ( 2 ) and a second mobile unit ( 4 ) by means of Nahfunktechnik; To confirm ( 102 ) authorization of the first data connection by the first mobile unit ( 3 ) or the vehicle ( 2 ); Provide ( 103 ) of the data for authentication by the at least one first mobile unit ( 3 ) or by the vehicle ( 2 ) to the second mobile unit ( 4 ); Produce ( 108 ) a second data connection between the second mobile unit ( 4 ) and the vehicle ( 2 ) by means of Nahfunktechnik; Transfer ( 109 ) of the data for authentication by the second mobile unit ( 4 ) to the vehicle ( 2 ); Compare ( 110 ) from the first mobile unit ( 3 ) received data for authentication in the vehicle ( 2 ) stored data for authentication; and sharing ( 112 ) of access by the vehicle ( 2 ) if the credential authentication data match. Procedure ( 100 ) according to claim 4, further comprising the following steps: transmitting ( 104 ) of a first message (N1) for releasing access to the vehicle (N1) 2 ), which comprises at least the data for authentication of the access, from the second mobile unit ( 4 ) to a central unit ( 5 ); To verify ( 105 ) of the data for authentication based on at least one in the central unit ( 5 ) deposited first criterion; Sign ( 106 ) of the data for authentication by the central unit ( 5 ) if the at least one deposited first criterion is met; and transfer ( 107 ) of a second message (N2) for releasing the access, which has at least the signed data for authentication, from the central unit ( 5 ) to the second mobile unit ( 4 ), whereby a release of access by the vehicle ( 2 ) takes place only when the data for authentication by the central unit ( 5 ) are signed. Procedure ( 100 ) according to claim 4 or 5, further comprising the following steps: storing ( 114a ) the data for the authentication for which a release of the access was granted, through the vehicle ( 2 In particular, a set of data for authentication is valid only for a predetermined number of accesses. Procedure ( 100 ) according to any one of claims 4 to 6, further comprising the following steps: transmitting ( 113 ) of the authentication data for which the vehicle has been granted access by the vehicle to the central unit ( 5 In particular, a set of data for authentication is valid only for a predetermined number of accesses; and saving ( 114b ) of the data for authentication by the central unit ( 5 ). Procedure ( 100 ) according to one of claims 4 to 7, wherein the data for authentication further includes a time and / or location of its provision by the first mobile unit ( 3 ), and wherein the method further comprises the following steps: checking ( 111 ) of the data for authentication on the basis of at least one stored in the vehicle second criterion, in particular a geographically limited space and / or a limited period of time, wherein the release of the access takes place only if the second criterion is met. Procedure ( 100 ) according to one of claims 4 to 8, wherein the data for authentication of the release further include an indication of the type of release of the access, in particular at least one type of release, selected from the group: trunk open; Opening the driver's window, in particular a gap; Open vehicle door, especially driver's door; Vehicle ( 2 ) start; Vehicle ( 2 ), in particular within a geographically limited space, more particularly in the period defined by the data for authentication. Procedure ( 100 ) according to one of claims 4 to 9, wherein the data for authentication comprise a cryptographically secured date.

Images