DE102014222424A1 - A method of authorizing a communication client to use a communication connection - Google Patents

Abstract

A data server, a communication client, a vehicle key and a method for authorizing a communication client (30) when using a communication connection (V1-V7) are proposed. The method comprises the steps of: - evaluating an identifier from a vehicle key (20) by the communication client (30), - establishing the communication connection (V1-V7) with a data server (40), - comparing the identifier with a predefined reference, and Responding to a positive result of the comparison, - authorizing the communication client (30) to use the communication link (V1-V7).

Description

The present invention relates to a communication client, a data server, a vehicle key, and a method for authorizing a communication client to use a communication connection. More particularly, the present invention relates to improvements for handling secure communication with a vehicle related data service.

The increasing involvement of vehicles in Internet-based data communication (for example, by means of customer portals, for software update and for the transmission of multimedia data, etc.) carries the constant risk of making the vehicle or its data infrastructure the target of attack by hackers. Even though the actual threat of a hacker attack is in fact extremely limited due to extensive security measures, there remains a psychological barrier for many customers to access or even allow access to their vehicle. After all, the vehicle-specific data in a data cloud ("cloud") is sometimes very sensitive. However, the danger does not only exist with regard to data protection aspects, but also from driving safety-specific considerations. Attitudes of safety-relevant functions in the vehicle as well as the updating of the firmware of the vehicle on-board network, many customers do not want or unwillingly over InterNet portals handle. Therefore, many lucrative potential applications can not be realized or only in connection with a small part of the customer base.

To access Internet-based services, some banks provide their customers with so-called "tokens" that generate a code (a PIN and / or a TAN) that allows access to an online account. The display of visual codes on mobile units (e.g., the screen of a smartphone) is also already known. Such applications are used, for example, for electronic boarding passes for air travel. Here, the user can register via the code displayed on his smartphone.

In addition, a fast readout of contact information from business cards, posters, etc., known.

In addition, numerous applications and publications for the exchange of information between a smartphone and a means of transportation (eg via the smartphone interface of the company Apple ^TM ) are known.

Moreover, the storage of different data of the vehicle in the vehicle key (e.g., a current mileage of the vehicle, a tank contents, etc.) is known.

It is an object of the present invention to overcome the drawbacks known in connection with the prior art and to objectively and subjectively make data communication with means of transportation (in the context of the present invention for the sake of simplicity "vehicle") objectively and subjectively safer.

The object identified above is achieved according to the invention by a method for authorizing a communication client when using a communication connection. The communication client can be, for example, a PC and / or a tablet PC and / or a smartphone and / or a personal digital assistant (PDA) or the like. be. The communication connection may comprise, for example, a wireless communication connection which is realized at least partially by means of the Internet. In a first step, an identifier from a vehicle key (also called "radio key") is evaluated by the communication client. The identifier can be read, for example, in data form (digital or electronic) and / or displayed as an optical machine-readable code, in particular 2D code (QR code) and read by the communication client. Previously or subsequently, a communication connection is set up with a data server, wherein the data server can be available, for example, via the Internet. The establishment of the communication connection takes place, for example, at the initiative of the communication client whose user wishes to change a configuration of his means of transportation with the help of an online service of the manufacturer of his vehicle. To authorize the communication client or his user, the identifier from the vehicle key is compared with a predefined reference before the data communication is released via the communication connection. For this purpose, for example, the identifier can be compared with a reference stored in the communication client. Alternatively or additionally, the identifier can be transmitted to the data server and compared there with a predefined reference. In response to a positive result of the comparison (ie the user or his communication client is authorized) the use of the communication connection is released. Inasmuch as the user legitimately associates the vehicle key with a high security standard for authentication, the above-defined method can appropriately secure the data communication with a vehicle-related on-line service and manual entry of identifiers, which is error-prone and time-consuming, unnecessary.

The present invention uses the vehicle key as a "dongle" for activation as well as for data transfer from and / or to an external (e.g., Internet based) application. According to the invention, no large data streams via the key are required for this purpose. Instead, the identifier can also be generated as a function of the information stored in the vehicle key, as is the case with the access authorization check when using the vehicle. The correct identifier is generated only with secure data packets or when establishing a secure connection and allows the use of the service, e.g. for a predetermined (e.g., contractual) period or under freely definable conditions. With the invention, therefore, a very flexible and secure activation of services or content within services of any kind is possible. In this case, existing hardware resources of the vehicle key are used. Thus, a conceivable additional token can be saved, which the user would have to carry or search with in order to use a service. Due to the binding of the user to his vehicle key, the proposed method is recommended especially for services associated with the vehicle brand. The process can also increase the economically most relevant customer loyalty. Symbolically speaking, the radio key of the user also opens his Internet portal, in particular with the content that matches the brand of the vehicle.

The dependent claims show preferred developments of the invention.

Preferably, the communication link may be set up for data exchange between an Internet-based database (e.g., a cloud, a personal profile of a user of an on-line service of the vehicle manufacturer, or the like) or its communication client and the vehicle. Here, a packet-switched communication connection can be used, as used in modern mobile communication networks, for example, for accessing the Internet.

The evaluation of the identifier from the vehicle key can preferably take place by means of a short-distance radio connection (for example via Bluetooth, WLAN, or the like). Alternatively or additionally, optical signals can be sensed as an identifier of the vehicle key and interpreted by the communication client. For example, an infrared diode of the vehicle key emit the identifier in the form of pulsed light signals. Alternatively or additionally, a 2D code in the manner of a QR code or as a chronological sequence of different QR codes can be displayed and recognized optically as identifier. For this purpose, for example, a display of a vehicle key can be used. Since many smartphones and other user-related mobile devices already have an optical camera, this camera can be used to read the codes displayed. Alternatively or additionally, manual input of a user on display of the vehicle key of displayed information via a user interface of the communication client may be required to perform the authorization. In this way, there are many ways to use the vehicle key to establish a secure data connection and counteract misappropriation of sensitive data.

In order to avoid eavesdropping on identifications provided by the vehicle key, it can be provided that both the identifier and the predefined reference undergo cyclically corresponding changes. This can be done, for example, at predefined intervals, as is sometimes practiced for accessing company-related information services and online banking portals. Thus, despite all security measures, possibly misplaced identifiers can only be used for authorization for a very limited period of time.

The establishment of the communication connection or the start of the authorization process can take place both by a vehicle belonging to the vehicle key, as well as by a user or an application on a communication client of the user. Alternatively or additionally, the data server (e.g., in response to the availability of updated firmware for certain functions of the vehicle) may prompt the communication client to perform the authorization process of the present invention. Depending on in which instance of the system according to the invention the need for communication is detected, this can be satisfied as quickly as possible.

The identifier or a data record representing the identifier may preferably include information about the destination of the communications connection. For example, a vehicle-specific account or a predetermined application can be called as soon as the identifier is evaluated in the communication client. For example, in an illustrated QR code, information about an application to be started can be contained on the communication client and ensure the automatic start of the APP as soon as the camera of the communication client has acquired the QR code.

For example, a vehicle-specific user account can also be identified. In the context of the present invention, "vehicle-specific" may also mean an identification of the class of the vehicle, a model identifier or an identification of the item (eg via a chassis number, vehicle order number), a software or firmware version number, etc.). An input of a user / vehicle identifier for a login can thus be completely eliminated, whereby incorrect entry and time are minimized.

In particular, the identifier exchanged according to the invention may also include information representing a current or latest known vehicle position (eg coordinates, place name, street name) and / or a technical condition of the vehicle or vehicle system and / or the like, the aforementioned information being in the external application (eg on the communication client or the data server) is usable. In this way, it is possible to automatically address and possibly react to current properties of the vehicle, which can be the cause of the structure for the communication connection. For this purpose, for example, suitable messages, service requests or orders, etc., are sent.

Preferably, the record containing the identifier includes information about which data may be synchronized or not synchronized. For example, depending on a configuration scope, a respective database can be released for synchronization or not released. If a customer has e.g. Vehicle settings stored on a local computer or on a smartphone, the authentication information is transmitted via the QR code.

Preferably, a current configuration of a vehicle associated with the vehicle key can be detected. The current configuration can, for example, relate to a closing unit (closed / opened), doors (opened / closed) or the like. Alternatively or additionally, a relative spatial distance between the vehicle and the vehicle key can be checked, for example by creating a test message from the vehicle key to the vehicle by the vehicle, so that a distance enabling the wireless data transmission can be assumed as given.

For example, the generation or display of the identifier may be in response to a distance or relative position to the vehicle, e.g. whether the key is in the so-called "comfort access range" and / or a specific terminal status of the on-board network of the vehicle is active. Only on the condition that there is a predefined configuration and / or a predefined spatial distance between the vehicle and the vehicle key, the communication client is then authorized to use the communication link. In this way it is prevented that an unauthorized user spends the key to a remote location and from there illegally gains access to the data protected according to the invention. In this way, so to speak, a triple authorization check is realized, wherein the authorized user must be in the vicinity of the vehicle in question, has to establish a predefined configuration of the vehicle and must have at least one vehicle key.

Of course, to further secure the data exchange, it may be provided that several or in particular all vehicle keys have to transmit their identifiers for checking and successfully have them verified with predefined references before the communication connection is released. This prevents the authorization by means of a single stolen vehicle key or the adaptation of a configuration of the vehicle without all users (key owners) agreeing with this measure.

Another way to secure the present invention is to verify the identity of the communication client used before a communication connection can be made with the data server. For example, the identity of a Subscriber Identity Module (SIM) card and / or an International Mobile Station Equipment Identity (IMEI) of the communication client can be read out and, for example, compared in the data server with a respective predefined reference. Alternatively or additionally, a current configuration (operating state) of the communication client (e.g., in the form of a shared PIN lock) may be checked to further secure the use of the data connection. Also, any existing fingerprint scanner can be used to allow the use of the communication client or a dedicated application.

Preferably, the identifier may differ depending on a relative position between the vehicle and the vehicle key. For example, if the vehicle key is inside the vehicle, it can be assumed that the user is also within or in the vicinity of the vehicle. Accordingly, a particularly extensive authorization of the user (eg for a particularly wide variety of functions) can be made. If the vehicle key is located outside the vehicle, restrictions on the authorized scope of functions may prevent the user from being able to initiate countermeasures immediately in the event of an error occurring. Another possible "zone" for a scope of entitlement is, for example, the wireless home network of the user. In other words, it is checked whether the vehicle key is located within the user's wireless network before a (comparatively small) range of functions for the communication connection is enabled.

It should be noted that not all of the above-described communication sections necessarily have to be performed in a tight temporal context. The same applies to the sequence of steps. Of course, for example, a communication client can establish a data connection with the data server, define changes to the configuration of his vehicle and cause the data server to load any necessary data packets to the vehicle before the authorization of the invention of the user takes place. For example, this can optionally only be checked during installation of the data or activation of the changed configuration and, if necessary, granted. Also, any intervening (additional) communication steps (e.g., between the communication client and the vehicle) may be considered to be within the scope of the appended claims.

According to a second aspect of the present invention, a vehicle key for authorizing a communication client when using a communication connection with a data server is proposed. The vehicle key is preferably a brand-specific radio key of a vehicle. This serves in particular to allow the authorized user physical access or driving authorization access to the vehicle. This may have custom design, size, proportions adapted to use as a car key.

The vehicle key comprises a data memory and a transceiver unit. The data store may be, for example, a digital data store containing information for providing the above identifier. A processing unit is set up to read out the identifier and supply it to a transceiver unit in order to send the identifier to the communication client or the data server. The transceiver unit can be designed, for example, as an antenna, as an LED, as an infrared LED or as a matrix display on the surface of the vehicle key. The data memory is set up to store the identifier for authorizing the use of the communication connection by a communications client or its user and to make it available to the processing unit. The processing unit may comprise, for example, a microcontroller, a nanocontroller, or the like. The data memory can be designed as a rewritable data memory, so that the identifier and / or a key ID of the vehicle key can be adjusted. The above construction qualifies the vehicle key for use in a method according to the first aspect of the invention. The features, combinations of features and the resulting benefits arise accordingly.

According to a third aspect of the present invention, a communication client for an authorized use of a communication connection to a data server is proposed. The communication client can be designed, for example, as a smartphone, as a tablet PC, as a personal digital assistant (PDA) or as a desktop PC. It can also be understood as a wireless communication terminal. The communication client therefore comprises an evaluation unit (for example a programmable processor) which is set up to evaluate an identifier from a vehicle key as has been described in connection with the second aspect of the invention. Furthermore, the communication client comprises a transceiver device which is set up to establish the communication connection with the data server and to use the communication connection for data exchange with the data server in the case of a successful comparison of the identifier with a predefined reference. This comparison can be carried out, for example, by the evaluation unit of the communication client, if the predefined reference is available to it. Alternatively or additionally, the comparison can be carried out in the data server, wherein the data server informs the communication client of the result of the comparison and in particular also establishes the (secure) communication connection for the data exchange. Alternatively or additionally, a comparison between the identifier and the predefined reference in the vehicle key can be performed, which informs the communication client or the data server about the successful authorization. The features, combinations of features and the advantages resulting from these arise in accordance with the above aspects of the invention.

According to a fourth aspect of the present invention, a data server for Operation of a communication connection proposed, which has a transceiver unit, which is set up to establish at least a first communication connection with a communication client, which may be configured, for example, according to the third aspect of the invention. In addition, the transceiver unit is set up to receive an identifier of a vehicle key by the communication client. Furthermore, the data server comprises an evaluation unit which is set up to compare the identifier with a predefined reference and, in response to a positive result of the comparison, the use of the first communication connection (with the communication client) and / or a second communication connection (eg between the communication client and a vehicle associated with the vehicle key). Of course, this second communication connection can also be established or realized by means of the data server.

The authorization of the communication connection proposed in the context of the present invention can include the use of transaction number (TAN) as an identifier or in addition to an identifier, which can be stored, for example, in the vehicle key. To establish an authorized communication link, a respective TAN may be predefined as the TAN to be used for the next authorization, or may be pre-set for use by the communication client or the data server as part of establishing a communication request of one of the TANs. The TANs can also be stored wirelessly or via a cable connection in the vehicle key.

Further details, features and advantages of the invention will become apparent from the following description and the figures. Show it:

1 a schematic overview of components of an embodiment of a data server according to the invention, an embodiment of a communication client according to the invention, an embodiment of a vehicle key according to the invention and possible communication paths in carrying out an embodiment of a method according to the invention; and

2 a flowchart illustrating steps of an embodiment of a method according to the invention.

1 shows a vehicle 10 , which has a roof antenna 6 as a transceiver unit and an electronic control unit 9 is set up as an evaluation unit, communication links V1, V2, V3 with a vehicle key 20 , a smartphone 30 and a data cloud 50 perform. In the dashboard is a screen 8th whose settings (eg brightness, background image) as well as the settings of comfort seats exemplified are provided via a data server 40 can be adjusted. The illustrated vehicle key 20 also includes an antenna 6 as a transceiver unit, which information technology with a programmable processor 2 is connected as an evaluation unit. Also with the programmable processor 2 In terms of information technology, a non-volatile data memory is connected 3 and an infrared diode 7 (Also representing a part of the transceiver unit), by means of which the vehicle key 20 with an access module (not shown) of the vehicle 10 can communicate. The surface of the vehicle key 20 has a (proportionately free cut) display 11 on which a QR code 12 is displayed as identifier. By changing the display on the display 11 can be a chronological sequence of different QR codes 12 represented and used for the authorization of a communication connection. Via a communication link V7 is the vehicle key 20 with the smartphone 30 connected. The smartphone 30 represents an example of a communication client of the user. It includes a touch screen 1 as user interface, which information technology with a programmable processor 2 is connected as an evaluation unit. Also with the programmable processor 2 In terms of information technology, a Subscriber Identity Module (SIM) reader is connected 4 , an optical camera 5 as a receiving unit and a non-volatile data memory 3 in which instructions for executing individual steps of an embodiment of a method according to the invention are stored. About the optical camera 5 can the smartphone 30 the QR code 12 of the vehicle key 20 read in and as part of a request to establish a communication connection V4 with a data cloud 50 or in the context of establishing a communication connection V6 with a data server 40 over the antenna 6 send. The data server 40 in turn has a programmable processor 2 as well as a transceiver unit 6 for receiving, sending and processing the data. For example, if the user wants to adjust the screen settings 8th or the seats of his vehicle 10 change, he opens a corresponding application or visits a predetermined address via a browser on his smartphone 30 , making a communication request about the data cloud 50 with the data server 40 is built. To ensure that only the authorized user initiates the configuration adjustments, the data server initiates 40 via the communication links V4, V6 and V7 the sending of a data memory 3 of the vehicle key 20 stored identifier to this with a predefined reference through its programmable processor 2 to be compared. If the transferred ID is the same as the predefined reference, it will be the one from the smartphone 30 transmitted data records to adapt the configuration via the communication links V1, V6 to the vehicle 10 sent and activated there.

About the method described above, which is to be understood only as an example, unauthorized access to the configuration of the vehicle 10 about the data cloud 50 prevented.

2 shows steps of an embodiment of a method according to the invention for authorizing a communication client when using a communication connection. In step 100 an identifier from a vehicle key is evaluated by the communication client. This can be done for example by means of an optical camera of the communication client, which detects a displayed on a screen of the vehicle key 2D code as an identifier. In step 200 the communication link is established with the data server and in step 300 verifies a current configuration of a vehicle associated with the vehicle key, whether the vehicle is unlocked. Additionally, in step 400 checks whether a MAC address of the communication client matches a reference stored in the data server. This process may, for example, only relate to a checksum of the MAC address, so that the amount of data to be transported can be reduced. In step 500 the identifier is compared from the vehicle key with a predefined reference, wherein the identifier has a transaction number (TAN), which is also stored as a predefined reference in the data server. In response to a successful comparison will be in step 600 the communication client authorized to use the established communication connection. Accordingly, the application used by the communication client can be used to customize the configuration of the vehicle as well as to update the existing firmware in the vehicle.

The present invention enables a drastic increase in the security of an authorization for a data exchange in connection with a vehicle. It provides easy handling of increasingly complex vehicle data, personal data and settings, as well as the exclusion of erroneous and manipulative data adjustments. In addition, the range of functions of the vehicle key perceived by the customer is considerably increased. In other words, the vehicle key (hardware) has an additional right to exist. Also, the uploading of firmware updates directly by the customer is much safer and relieves the workshops.

LIST OF REFERENCE NUMBERS

1

 Touch Screen

2

 programmable processor

3

 data storage

4

 SIM reader

5

 optical camera

6

 antenna

7

 Infrared LED

8th

 screen

9

 electronic control unit

10

 vehicle

11

display

12

QR code

20

Car key / Radio key

30

Smartphone

40

data server

50

data cloud

100-600

 steps

V1-V7

communication links

Claims (14)

Method for authorizing a communication client ( 30 ) when using a communication connection (V1-V7) comprising the steps: - evaluating ( 100 ) an identifier from a vehicle key ( 20 ) by the communication client ( 30 ), - Build up ( 200 ) the communication link (V1-V7) with a data server ( 40 ), - To compare ( 500 ) the identifier with a predefined reference, and in response to a positive result of the comparison, - Authorize ( 600 ) of the communication client ( 30 ) for using the communication connection (V1-V7). Method according to claim 1, wherein the communication connection (V1-V7) - with the data server ( 40 ) of the vehicle key ( 20 ) associated vehicle ( 10 ), and / or - a packet-switched communication connection (V1-V7), in particular using an Internet protocol. Method according to claim 1 or 2, wherein the communication client ( 30 ) - a PC or - a tablet, and / or - a smartphone, and / or - a personal digital assistant. Method according to one of the preceding claims, wherein the evaluation of the identifier from the vehicle key ( 20 ) - by means of a short-range radio link and / or - by means of optical signals (infrared), in particular using a camera ( 5 ) of the communication client ( 30 ) and an ad ( 11 ) of the vehicle key ( 20 ), and / or - by means of a manual input of a user on a display ( 11 ) of the vehicle key ( 20 ) is displayed. Method according to one of the preceding claims, wherein the comparison of the identifier with the predefined reference - within the communication client ( 30 ) or - on the data server ( 40 ) he follows.  Method according to one of the preceding claims, wherein the identifier and the predefined reference undergo cyclic, mutually corresponding changes at predefined time intervals. Method according to one of the preceding claims, wherein the establishment of the communication connection (V1-V7) from - a vehicle key ( 20 ) belonging vehicle ( 10 ) or - a user or - the communication client ( 30 ) or - the data server ( 40 ) is initiated. Method according to one of the preceding claims, wherein the communication connection (V1-V7) - for access to a data cloud ( 50 ), and / or - for communication with a vehicle key ( 20 ) belonging vehicle ( 10 ), and / or - for updating a firmware of the vehicle key ( 20 ) belonging to the vehicle ( 10 ), and / or - to access a customer portal of a manufacturer of the vehicle key ( 20 ) belonging to the vehicle ( 10 ) is used. Method according to one of the preceding claims, wherein the identifier in the vehicle key ( 20 ) decides on the destination of the communication connection (V1-V7). Method according to one of the preceding claims, further comprising the steps - checking ( 300 ) a current configuration of the vehicle key ( 20 ) associated vehicle ( 10 ) and / or a relative spatial distance of the vehicle ( 10 ) to the vehicle key ( 20 ), and only in response to a predefined configuration and / or spatial distance - Authorize ( 600 ) of the communication client for the use of the communication link (V1-V7). Method according to one of the preceding claims, further comprising the steps - checking ( 400 ) an identity and / or a current configuration of the communication client ( 30 ), and only in response to a predefined identity or configuration of the communication client ( 30 ) - Authorize ( 600 ) of the communication client ( 30 ) for using the communication connection (V1-V7). Car key for authorizing a communication client ( 30 ) when using a communication connection (V1-V7) with a data server ( 40 ) comprising - a data store ( 3 ), - a transceiver unit ( 6 ), and - a processing unit ( 2 ), where - the data memory ( 3 ), an identifier for authorizing the use of the communication connection (V1-V7) by a communication client ( 30 ), - the processing unit ( 2 ), the identifier in response to a communication request from the communication client ( 30 ) with a data server ( 40 ) from the data store ( 3 ), and - the transceiver unit ( 6 ), the read-out identifier to the communication client ( 30 ) to send. Communication client for authorized use of a communication connection (V1-V7) to a data server ( 40 ) comprising: - an evaluation unit ( 2 ), which is set up, an identifier from a vehicle key ( 20 ) according to claim 12, - a transceiver device ( 6 ), which is set up, - the communication connection (V1-V7) with the data server ( 40 ) and, in the case of a successful comparison of the identifier with a predefined reference, the communication connection (V1-V7) for data exchange with the data server ( 40 ) to use. Data server for operating a communication connection, comprising: - a transceiver unit ( 6 ), which is set up, - a first communication connection (V4, V6) with a communication client ( 30 ), and An identifier of a vehicle key ( 20 ) by the communication client ( 30 ), and - an evaluation unit ( 2 ), which is set up to compare the identifier with a predefined reference, and in response to a positive result of the comparison, the use of a second communication connection (V4, V1) by the communication client ( 30 ) to authorize.

Images