DE102023004926A1 - Method for encrypting data from a motor vehicle through a cloud system, a corresponding computer program product, a corresponding computer-readable storage medium, and a corresponding cloud system - Google Patents

Abstract

Method for encoding data of a motor vehicle (12) through a cloud system (10), comprising the following steps: receiving a message with data from the motor vehicle (12) through a cloud gateway router (14) of the cloud system ( 10); (S1) extracting the data from a certificate used to authenticate the motor vehicle (12) and inserting the data into a custom header to make it available to downstream services; (S1) Identify the data to be encoded by evaluating the message. (S1) encoding the data into encoded data by an encoding service (16) of the cloud system (10); (S3) replacing the data with encoded data in the original message to create an encrypted message by the cloud gateway router (14); Forwarding the encrypted message to a service router (18) of the cloud system (10) through the cloud gateway router (14); (S3) identifying by the service router (18) the responsible downstream service for each incoming message; and forwarding the encoded message to the identified downstream service. (S4) The invention further relates to a computer program product, a computer-readable storage medium and a cloud system (10).

Description

The invention relates to the field of automobiles. More specifically, the invention relates to a method for encrypting and tokenizing data from a motor vehicle through a cloud system, a corresponding computer program product, a corresponding computer-readable storage medium and a corresponding cloud system.

There is a variety of information used by a complex system such as a motor vehicle to make it functional and connected. Some of this data may be sensitive in nature, such as: B. Personally Identifiable Information (PII), and must be encrypted or tokenized to prevent misuse. For example, a vehicle identification number data is widely considered personal data and is used as a unique identifier between backend systems. While other personal data could be encrypted, the vehicle identification number cannot be easily encrypted because the structure of the vehicle identification number inherently contains relevant meta-information.

It is an object of the present invention to provide a method, a computer program product, a computer-readable storage medium and a cloud system through which a more secure way of handling data from a motor vehicle is provided.

This task is solved by a method, a computer program product, a computer-readable storage medium and a cloud system according to the independent claims. Advantageous embodiments are presented in the dependent claims.

One aspect of the invention relates to a method for encrypting motor vehicle data through a cloud system. A message containing sensitive data is received by the motor vehicle via a cloud gateway router of the cloud system. The sensitive data is extracted from a certificate used to authenticate the motor vehicle to the cloud system, and the data is placed in a custom header to make it available to downstream services. Every message from the vehicle is evaluated and all sensitive data that needs to be protected is encrypted using tokenization or encryption. The data is converted into encrypted data by a cloud system data encoding service. The cloud gateway router replaces the data with the encoded data in the original message, creating an encoded message. The encrypted message is forwarded by the cloud gateway router to a service router in the cloud system. The responsible downstream service is identified by the service router for each incoming message. The encoded message is forwarded to the identified downstream service. The encoded message is decoded by the downstream service if the downstream service's business requires demand for it, or the encoded message is decoded before being passed to a legacy service if a downstream service has an interface to the legacy service that cannot handle the encoded message .

Therefore, customer privacy is protected. Services that process vehicle data often need to uniquely identify the source vehicle from which the data comes. For example, while the vehicle identification number is unique, it is only one possible identifier. If the Service does not have a business use for the actual vehicle identification number, it may use any other unique identifier. Therefore, the information implicitly conveyed in a vehicle identification number does not need to be exposed to that service and the data to be protected is protected from the service and its data processing and storage. Only when necessary can very dedicated, customer-oriented services be given the privilege to decrypt the vehicle identification number again. Other benefits include a lower risk of potential litigation against a company as confidential data is protected by default. It also provides for avoidance of legal/federal fines for failure to protect, identify, or remove personal information. In addition, a standardized platform is provided that tokenizes the vehicle identification number and automatically encrypts personal data, eliminating the need for custom development to implement and manage similar solutions yourself.

According to one embodiment, the encoding process is a tokenization process.

In another embodiment, the data to be encoded is personally identifiable information (PII).

In another embodiment, the data to be encoded is a vehicle identification number.

According to another embodiment, the data to be encoded is a current position of the motor vehicle.

According to another embodiment, when a data breach is detected, an encryption key for encrypting the data and/or a decryption key for decrypting the data is destroyed.

In particular, the method is a computer-implemented method. Therefore, a further aspect of the invention relates to a computer program product comprising program code means for executing a method according to the preceding aspect. The computer program product can also be viewed as a computer program.

A further aspect of the invention relates to a computer-readable storage medium comprising at least the computer program product according to the preceding aspect.

A further aspect of the invention relates to a cloud system for encrypting data of a motor vehicle, comprising at least one cloud gateway, an encryption device and a service router, wherein the cloud system is configured to carry out the method according to the invention. In particular, the method is carried out by the cloud system.

The cloud system can be configured as an electronic computing device. The electronic computing device can include processors, circuits, in particular integrated circuits, and other electronic means for carrying out the method.

Advantageous forms of the method are to be viewed as advantageous forms of the cloud system. The cloud system may include means for carrying out the method according to the first aspect of the invention.

Further advantages, features and details of the invention emerge from the following description of preferred embodiments and from the drawings. The features and combinations of features mentioned previously in the description as well as the features and combinations of features mentioned in the following description of the figures and/or shown in the figures alone can be taken not only in the combination specified in each case, but also in any other combination or alone, without to depart from the scope of the invention.

The novel features and feature of the disclosure are set forth in the appended claims. The accompanying drawings, which are incorporated into and form a part of this disclosure, illustrate exemplary embodiments and, together with the description, serve to explain the principles disclosed. The same numbers are used throughout the figures to refer to similar features and components. Some embodiments of systems and/or methods in accordance with embodiments of the present subject matter will now be described below, by way of example only, and with reference to the accompanying figures.

• 1 ein schematisches Blockdiagramm gemäß einer Ausführungsform eines Wolkensystems;
• 2 ein weiteres schematisches Blockdiagramm gemäß einer Ausführungsform des Wolkensystems;
• 3 ein weiteres schematisches Blockdiagramm gemäß einer Ausführungsform des Wolkensystems; und
• 4 ein weiteres schematisches Blockdiagramm gemäß einer Ausführungsform des Wolkensystems.

The drawings show in:

• 1 a schematic block diagram according to an embodiment of a cloud system;
• 2 another schematic block diagram according to an embodiment of the cloud system;
• 3 another schematic block diagram according to an embodiment of the cloud system; and
• 4 another schematic block diagram according to an embodiment of the cloud system.

In the figures, the same elements or elements with the same function are identified by the same reference numerals.

As used herein, the word “exemplary” is used to mean “serving as an example, example or illustration.” Any embodiment or implementation of the present subject matter described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other embodiments.

While the disclosure is subject to various modifications and alternative forms, specific embodiments thereof have been shown by way of example in the drawings and will be described in detail below. It should be understood, however, that the disclosure is not intended to be limited to the individual forms disclosed, but on the contrary, the disclosure is intended to cover all modifications, equivalents and alternatives that fall within the scope of the disclosure.

The terms “includes”, “comprising” or other variations thereof are intended to cover non-exclusive inclusion, so that a Device, apparatus or method comprising a list of components or steps, not only includes such components or steps, but may also include other components or steps not expressly listed or inherent in such device or device or method . In other words, one or more elements in a system or device prefixed with "comprises" or "comprises" does not exclude, without further limitation, the existence of other elements or additional elements in the system or method.

In the following detailed description of the embodiment of the disclosure, reference is made to the accompanying drawings, which form a part of this disclosure and in which a specific embodiment in which the disclosure may be embodied is shown for purposes of illustration. This embodiment has been described in sufficient detail to enable those skilled in the art to practice the disclosure, and it will be understood that other embodiments may be used and that changes may be made without departing from the scope of the present disclosure. The following description is therefore not to be understood as limiting.

1 shows a schematic block diagram according to an embodiment of a cloud system 10. The cloud system 10 is configured for encoding data from a motor vehicle 12 and includes at least one cloud gateway 14, an encoding service 16 and at least one service router 18. In particular, the cloud system can 10 may be designed at least partially as an electronic computing device 20, wherein the electronic computing device 20 comprises at least processors, circuits, in particular integrated circuits, or other electronic means for carrying out the methods according to the invention.

Furthermore shows 1 a vehicle identification number (VIN) token-enabled service 22 and a legacy service 24. Furthermore, a location service 26 and an unprivileged service 28 are shown.

The encoding service 16 may include a tokenization service 30 and a location encryption service 32 and a decoding service 34, a location decryption service 36, an encryption service for other PII data 38 and a decryption service for other PII data 40.

The solution follows a logical approach in which the cloud system 10 consists of the target services that need to encrypt/decrypt data or not, and an encoding service 16 that includes the encoding and decoding functionality.

• • Bereich 1: Legacy-Dienst erfordert Klartextdaten
• • Bereich 2: Zieldienst dekodiert den Standort des Fahrzeugs für den Verbrauch
• • Bereich 3: Dekodierungsversuch des Zieldiensts abgelehnt
• • Bereich 4: Vernichten aller Schlüssel im Falle einer Datenschutzverletzung („Stecker ziehen“)

While one of the embodiments is focused on protecting VIN/FIN, it is clear that this approach and solution could also be used to protect other sensitive and confidential data. To illustrate the effectiveness, several applications within a connected car cloud ecosystem where tokenization should be applied were identified. These applications can focus on scenarios such as: E.g.:

• • Area 1: Legacy service requires plain text data
• • Area 2: Destination service decodes the vehicle's location for consumption
• • Area 3: Decoding attempt by target service rejected
• • Area 4: Destroy all keys in the event of a data breach (“pull the plug”)

• Eine Anfrage von dem Kraftfahrzeug 12 kann bei dem Cloud-Gateway-Router 14 in dem Cloud-System 10 eintreffen. (S1)

Before the effectiveness of this tokenization process can be illustrated and applied, a first workflow takes place that begins with sensitive data coming from the motor vehicle 12 into the cloud system 10, as in 1 shown:

• A request from the motor vehicle 12 may arrive at the cloud gateway router 14 in the cloud system 10. (S1)

The cloud gateway router 14 may extract the VIN (Vehicle Identification Number) from the certificate used to authenticate the motor vehicle 12 to a backend and place the VIN in a custom header to make it available to all downstream services.

• • Der Cloud-Gateway-Router 14 kann die Werte der ursprünglichen Daten durch codierte Daten in der ursprünglichen Nachricht ersetzen.

Each message/event from the motor vehicle 12 is evaluated and any information that is considered protected, such as the VIN in the message header or location data, is identified and is then tokenized/encrypted. (S2)

• • The cloud gateway router 14 can replace the values of the original data with encoded data in the original message.

The cloud gateway router 14 can forward the message to the service router 18. (S3)

• • Wenn das Geschäft eines nachgelagerten Dienstes eine entsprechende Nachfrage benötigt, kann dieser Dienst die Berechtigung haben, codierte Daten in ihren ursprünglichen Datenwert zu dekodieren/zu entschlüsseln. (S4)
• • Wenn ein nachgeschalteter Dienst eine Schnittstelle zu einem Legacy-Dienst hat, der keine codierten Daten verarbeiten kann, kann er auch codierte Daten in ihren ursprünglichen Datenwert dekodieren/entschlüsseln, bevor er sie an den Legacy-Dienst 24 (S6) weitergibt. Dieser Fall ist in 2 näher beschrieben.

The service router 18 can identify the responsible destination/downstream service for each incoming message and deliver the message forward this service (S4). The routing decision can be made solely by the address header of the message. The entire payload and especially the encoded data may be opaque to the service router 18.

• • If the business of a downstream service requires such demand, that service may have the authority to decode/decrypt encoded data into its original data value. (S4)
• • If a downstream service interfaces with a legacy service that cannot handle encoded data, it can also decode/decrypt encoded data into its original data value before passing it to the legacy service 24 (S6). This case is in 2 described in more detail.

2 shows a further embodiment according to the invention, in particular of the aforementioned area 1. In most organizations there are so-called legacy services 24, which must be present, but are fragile enough not to be changed often. The invention allows a target service that has a dependency on a legacy service 24 that does not otherwise need to consume sensitive data to do so in a controlled and auditable manner.

1. 1. Die Cloud-Gateway-Routenintegration mit dem Codierungsdienst 16 kann bereitgestellt werden;
2. 2. Der VIN-Token-fähige Dienst 22 ist in den Codierungsdienst 16 integriert und kann mit Berechtigungen zum Dekodieren von VIN-Werten ausgestattet werden (z. B. unter Verwendung von VIN in diesem Fall);
3. 3. Der Cloud-Gateway-Router 14 kann den Codierungsdienst 16 aufrufen, um die VIN zu tokenisieren;
4. 4. Die tokenisierte VIN, die von dem authentifizierten Fahrzeug am Cloud-Gateway-Router abgeleitet ist, kann an den Dienstrouter 18 weitergegeben werden;
5. 5. Der Dienstrouter 18 kann in der Lage sein, Fahrzeugnachrichten ohne besondere Behandlung für tokenisierte/verschlüsselte Daten weiterzuleiten;
6. 6. Der VIN-Token-fähige Dienst 22 ruft den Codierungsdienst 16 auf, um die VIN für die Verwendung durch einen Legacy-Dienst 24 zu dekodieren.

The presented solution allows the token-aware service 22 to decrypt the necessary data to communicate with the legacy service 24. This authorization could then be revoked immediately once the legacy service 24 has been replaced or removed. This procedure may include the following steps:

1. 1. Cloud gateway route integration with encoding service 16 can be provided;
2. 2. The VIN token-enabled service 22 is integrated with the encoding service 16 and can be provided with permissions to decode VIN values (e.g. using VIN in this case);
3. 3. The cloud gateway router 14 can call the encoding service 16 to tokenize the VIN;
4. 4. The tokenized VIN derived from the authenticated vehicle at the cloud gateway router may be passed to the service router 18;
5. 5. The service router 18 may be able to route vehicle messages without special treatment for tokenized/encrypted data;
6. 6. The VIN token-enabled service 22 calls the encoding service 16 to decode the VIN for use by a legacy service 24.

• - Annehmen von Anforderungen vom Dienstrouter 18 mit tokenisierter VIN;
• - Protokollierung der tokenisierten VIN;
• - Dekodierung der Fahrgestellnummer über den Kodierungsdienst; und
• - Aufruf des Legacy-Dienstes 24 unter Verwendung der Klartext-VIN im Pfad.

The steps of the token-enabled service are:

• - Accept requests from service router 18 with tokenized VIN;
• - Tokenized VIN logging;
• - Decoding the VIN through the coding service; and
• - Call legacy service 24 using the plain text VIN in the path.

• - Akzeptieren der Anforderung von dem tokenfähigen Dienst 22; und
• - Protokollierung der Klartext-VIN.

The legacy service steps are:

• - Accepting the request from the token-enabled service 22; and
• - Logging of plain text VIN.

3 shows another block diagram of an embodiment of the invention, particularly according to area 2. In most cases, a service within the cloud system 10 will need to decode some or all of the tokenized data due to the nature and functionality provided by the service. One of the most important sensitive data points that must be protected is when the motor vehicle 12 sends location data as part of the request URI required by the destination service to process the request.

1. 1. Die Cloud-Gateway-Integration mit dem Codierungsdienst ist bereits bereitgestellt.
2. 2. Der Ortungsdienst 26 kann in einen Codierungsdienst integriert sein und kann mit Berechtigungen zum Dekodieren von Geo-Ortungswerten ausgestattet werden;
3. 3. Das Cloud-Gateway 14 kann einen Codierungsdienst aufrufen, um die VIN zu tokenisieren und den Standort zu verschlüsseln (z. B. unter Verwendung von VIN und Standort in diesem Fall), zum Beispiel durch Hinzufügen einer URI-Ersetzungslogik zu dem Cloud-Gateway-Router 14 und durch Hinzufügen einer Nachrichtentext-Ersetzungslogik zu dem Cloud-Gateway-Router 14;
4. 4. Die tokenisierte VIN und der verschlüsselte Ort, der von dem authentifizierten Kraftfahrzeug 12 am Cloud-Gateway-Router 14 abgeleitet wird, können an den Service-Router 18 weitergegeben werden;
5. 5. Der Dienstrouter 18 kann in der Lage sein, Fahrzeugnachrichten ohne besondere Behandlung für tokenisierte/verschlüsselte Daten weiterzuleiten;
6. 6. Der Ortungsdienst 26 kann Ortsdaten für seine dienstspezifische Verwendung dekodieren, jedoch nicht die VIN.

This workflow can include the following steps:

1. 1. Cloud gateway integration with encoding service is already provided.
2. 2. The location service 26 may be integrated with an encoding service and may be provided with permissions to decode geolocation values;
3. 3. The cloud gateway 14 may invoke an encoding service to tokenize the VIN and encrypt the location (e.g., using VIN and location in this case), for example by adding URI replacement logic to the cloud gateway router 14 and by adding message text replacement logic to the cloud gateway router 14;
4. 4. The tokenized VIN and encrypted location derived from the authenticated motor vehicle 12 at the cloud gateway router 14 may be passed to the service router 18;
5. 5. The service router 18 may be able to route vehicle messages without special treatment for tokenized/encrypted data;
6. 6. The location service 26 can decode location data for its service-specific use, but not the VIN.

• - Annehmen einer Anfrage von dem Dienstrouter 18 mit verschlüsselten Standortdaten;
• - Protokollierung des verschlüsselten Standorts;
• - Dekodierung von Standortdaten über einen Codierungsdienst; und
• - Protokollierung des Klartextspeicherorts.

For example, the steps of the location service are:

• - Accepting a request from the service router 18 with encrypted location data;
• - Encrypted location logging;
• - Decoding location data via an encoding service; and
• - Plain text location logging.

4 shows another schematic block diagram according to an embodiment of the invention. In particular, area 3 is shown. Not all services within a connected car cloud ecosystem should be able to process, let alone decode, tokenized data. By only allowing certain services, the privilege to decrypt the data is protected in the interests of the customer and the company.

1. 1. Die Cloud-Gateway-Integration mit dem Codierungsdienst ist bereits bereitgestellt.
2. 2. Der unprivilegierte Dienst 28 kann sich bewusst sein, dass er tokenisierte Daten verarbeitet, aber er kann keine Berechtigungen zum Dekodieren von VINs erhalten (z. B. unter Verwendung von VIN in diesem Fall);
3. 3. Der Cloud-Gateway-Router 14 ruft den Codierungsdienst auf, um die VIN zu tokenisieren.
4. 4. Die tokenisierte VIN, die von dem authentifizierten Kraftfahrzeug 12 am Cloud-Gateway-Router 14 abgeleitet wurde, kann an den Dienstrouter 18 weitergegeben werden;
5. 5. Der Dienstrouter 18 kann in der Lage sein, Fahrzeugnachrichten ohne besondere Behandlung für tokenisierte/verschlüsselte Daten weiterzuleiten;
6. 6. Die Dekodierung der VIN schlägt fehl, wenn sie von dem nicht privilegierten Dienst 28 angefordert wird, weil sie nicht vertrauenswürdig sind, die VIN bleibt tokenisiert.

The workflow steps are:

1. 1. Cloud gateway integration with encoding service is already provided.
2. 2. The unprivileged service 28 may be aware that it is processing tokenized data, but it cannot obtain permissions to decode VINs (e.g. using VIN in this case);
3. 3. The cloud gateway router 14 calls the encoding service to tokenize the VIN.
4. 4. The tokenized VIN derived from the authenticated motor vehicle 12 at the cloud gateway router 14 may be passed to the service router 18;
5. 5. The service router 18 may be able to route vehicle messages without special treatment for tokenized/encrypted data;
6. 6. Decoding of the VIN fails when requested by the unprivileged service 28 because they are not trusted, the VIN remains tokenized.

• - Akzeptieren einer Anfrage vom Gateway mit der tokenisierten VIN;
• - Protokollierung der tokenisierten VIN;
• - Versuch, die Fahrgestellnummer zu entschlüsseln; und
• - Protokollierung der Dekodierungsergebnisse.

The unprivileged service steps are:

• - Accepting a request from the gateway with the tokenized VIN;
• - Tokenized VIN logging;
• - Attempt to decipher the VIN number; and
• - Logging of decoding results.

According to Area 4, administrators have the ability to “pull the plug” so that there is no longer a key to decrypt encrypted data. This feature is typically used when a data breach occurs.

• 1 . Die Cloud-Gateway-Integration mit dem Codierungsdienst ist bereits bereitgestellt.
• 2. Der Cloud-Gateway-Router 14 kann einen Codierungsdienst aufrufen, um die VIN zu tokenisieren (z. B. unter Verwendung von VIN in diesem Fall);
• 3. Die tokenisierte VIN, die von dem authentifizierten Kraftfahrzeug 12 am Cloud-Gateway-Router 14 abgeleitet wurde, kann an den Dienstrouter 18 weitergegeben werden;
• 4. Der Dienstrouter 18 kann in der Lage sein, Fahrzeugnachrichten ohne besondere Behandlung für tokenisierte/verschlüsselte Daten weiterzuleiten;
• 5. Die Datenschutzverletzung tritt auf;
• 6. Der Administrator meldet sich bei der Admin-Konsole im Codierungsdienst / der integrierten Kryptografielösung an;
• 7. Der Hauptschlüssel kann gelöscht werden;
• 8. Der Administrator sieht und meldet visuell, dass Daten möglicherweise nicht wiederhergestellt werden können.
• 9. Die Dekodierung der VIN schlägt fehl, wenn sie vom Zieldienst angefordert wird.

The goal is to prevent a service from ever being able to decode the VIN again. This workflow can include the following steps:

• 1 . Cloud gateway integration with the encoding service is already deployed.
• 2. The cloud gateway router 14 may invoke an encoding service to tokenize the VIN (e.g., using VIN in this case);
• 3. The tokenized VIN derived from the authenticated motor vehicle 12 at the cloud gateway router 14 may be passed to the service router 18;
• 4. The service router 18 may be able to route vehicle messages without special treatment for tokenized/encrypted data;
• 5. The data breach occurs;
• 6. The administrator logs in to the Admin Console in the encoding service/integrated cryptography solution;
• 7. The master key can be deleted;
• 8. The administrator visually sees and reports that data may not be recoverable.
• 9. VIN decoding fails when requested by the target service.

According to this invention, a gateway can be a standalone entity, such as a gateway. For example, the Head Unit Gateway (HGW) with a custom configuration that maps the incoming messages to the destination services instead of the normal destination. And a target service can be a downstream service (typically a microservice) that should receive the message/event.

Reference symbol list

10

Cloud system

12

motor vehicle

14

Cloud gateway router

16

Coding service

18

Service router

20

electronic computing device

22

Tokenable service

24

Legacy service

26

Location service

28

Unprivileged service

30

Tokenization service

32

Location encryption service

34

Decoding service

36

Location decryption service

38

Encryption service for other PII data

40

Decryption service for other personal data

S1 - S6

Steps of the method

Claims (10)

Method for encoding data of a motor vehicle (12) through a cloud system (10), comprising the following steps: - Receiving a message with data from the motor vehicle (12) through a cloud gateway router (14) of the cloud system (10); (S1) - Extracting the data from a motor vehicle authentication certificate (12) and inserting the data into a custom header to make it available to downstream services; (S1) - Identification of the data to be encoded by evaluating the message; (S1) - Encoding the data into encoded data by an encoding service (16) of the cloud system (10); (S3) - replacing the data with encoded data in the original message to create an encrypted message by the cloud gateway router (14); - forwarding the encrypted message to a service router (18) of the cloud system (10) through the cloud gateway router (14); (S3) - identifying the responsible downstream service for each incoming message by the service router (18); - Forward the encoded message to the identified downstream service. (S4) Method for decoding data from a motor vehicle (12) through a cloud system (10), comprising the steps: - Receipt of an encrypted message by a downstream service (S5); - Decoding of the encrypted message by the downstream service (S5) - Decoding the encoded message by the cloud system (10) before passing it on to a legacy service (24), if the downstream service has an interface to the legacy service (24) that cannot process the encoded message. (S5) Procedure according to Claim 1 , characterized in that the coding process is a tokenization process (30). Procedure according to Claim 1 or 3 , characterized in that the data to be encoded is personally identifiable information. Procedure according to one of the Claims 1 until 4 , characterized in that the data to be encoded is a vehicle identification number. Procedure according to one of the Claims 1 until 5 , characterized in that the data to be encoded is a current position of the motor vehicle (12). Procedure according to one of the Claims 1 until 6 , characterized in that if a data breach is detected, an encryption key for encrypting the data and/or a decryption key for decrypting the data are destroyed. Computer program product, the program code means for executing a method according to one of the Claims 1 until 7 includes. Computer-readable storage medium that contains at least the computer program product Claim 8 includes. Cloud system (10) for encoding data of a motor vehicle (12), comprising at least one cloud gateway router (14), an encoding service (16) and a service router (18), the cloud system (10) to execute one Method according to one of the Claims 1 until 7 is configured.

Images