DE102016217642A1 - Method for digital rights management for a vehicle and digital rights management system - Google Patents

Abstract

The present invention relates generally to a digital rights management concept for a vehicle 300, and more particularly to a digital rights management method 100 for a vehicle 300 and a digital rights management system 200 for a vehicle 300. The method 100 includes providing 120 a plurality of electronic devices Keys, wherein the respective electronic keys of the plurality of electronic keys each having a respective identifier. Further, the method 100 includes transmitting 130 the respective identifier of the respective electronic key by the respective electronic key for each electronic key of the plurality of electronic keys. In addition, the method 100 includes comparing 140 the transmitted respective identifier with a respective reference identifier to obtain a respective comparison result for each of the transmitted respective identifiers. Further, the method 100 includes determining 150 a total comparison result based on the respective comparison results. The method further includes 100, in the case of a positive overall comparison result, changing 180 an association of the vehicle with a person in a digital rights management system.

Description

The present invention relates generally to a digital rights management concept for a vehicle, and more particularly to a digital rights management method for a vehicle and a digital rights management system for a vehicle.

A vehicle, such as a passenger car, is often used by several people. In this case, the persons may each be assigned different usage authorizations for functions of the vehicle. For example, a first person is assigned a user authorization for locking / unlocking a door lock of the vehicle and a user authorization for starting an engine of the vehicle while a second person is only assigned a user authorization for locking / unlocking the door lock of the vehicle.

Such usage entitlements may be stored in a digital rights management system for the vehicle and managed by the legal owner of the vehicle. In this case, in the digital rights management system, the vehicle can be assigned to the legal holder. In a change of the legal holder of the vehicle, for example, when selling the vehicle, the vehicle can be assigned in digital rights management the new legal holder. In order to avoid an assignment of the vehicle to an unauthorized third person, the new legal owner is often extensively authenticated by means of a smart card to the digital rights management system.

The publication US 2009/0153311 A1 relates to an authentication system for a vehicle. To authenticate a user of the vehicle, user information stored on a smart card is compared with information stored in a database server.

The publication DE 199 12 748 A1 relates to a device for reproducing information in a motor vehicle with a portable transponder, which sends a code to a control unit arranged in the motor vehicle, and with a display, which displays certain data in response to an output signal of the control device.

The publication DE 101 57 110 A1 relates to a vehicle in which registration data of the vehicle are electronically stored in a memory arranged in the vehicle.

The publication DE 10 2014 224 769 A1 relates to a method and a device for delivering a virtual key.

The publication US 2005/0132024 A1 relates to a method for transmitting vehicle-related information from a remote server to a vehicle.

Against this background, it would be desirable to provide an efficient and cost-effective digital rights management concept for a vehicle.

This need is taken into account by a method and a digital rights management system having the features of the independent patent claims. Further advantageous embodiments and further developments are the subject of the dependent claims.

According to a first aspect, embodiments provide a method for digital rights management for a vehicle. The method comprises providing a plurality of electronic keys, wherein the respective electronic keys of the plurality of electronic keys each have a respective identifier. Furthermore, the method comprises a transmission of the respective identifier of the respective electronic key by the respective electronic key for each electronic key of the plurality of electronic keys. In addition, the method comprises comparing the transmitted respective identifier with a respective reference identifier to obtain a respective comparison result for each of the transmitted respective identifiers. Furthermore, the method comprises determining a total comparison result on the basis of the respective comparison results. The method further includes, in the case of a positive overall comparison result, changing a mapping of the vehicle to a person in a digital rights management system. By using the electronic key can be achieved that an unauthorized change in the assignment of the vehicle to the person can be avoided.

The vehicle may be a land vehicle such as a passenger car, a truck or a motorcycle, a rail vehicle such as a train or a streetcar, an aircraft such as a helicopter or an airplane, or a watercraft such as a ship or a boat. Furthermore, the vehicle may have a locking / unlocking device which can be locked / unlocked by means of an electronic key. For example, the vehicle has a door lock.

The electronic keys of the plurality of electronic keys may be vehicle keys, in particular radio keys, of the vehicle, by means of which a locking / unlocking device, such as a door lock, of the vehicle can be locked / unlocked. For example, the majority of the electronic keys 2, 3, 4, 5, 6, 7, 8, 9 or 10.

The transmission of the respective identifier by the respective electronic key can be carried out by means of a respective wireless communication interface of the respective electronic key. In this case, the respective wireless communication interface may have a memory in which the respective identifier is stored, and a processor which is designed to read out the respective identifier from the memory, to generate a signal on the basis of the read identifier, and to output the generated signal , Furthermore, the respective wireless communication interface may have a modulator which is designed to modulate the output signal to a high-frequency carrier signal in order to obtain a high-frequency signal. The respective wireless communication interface may further comprise an amplifier for amplifying the high-frequency signal and an antenna for transmitting the amplified high-frequency signal. For example, the respective wireless communication interface is for communication in the ISM band, in particular in the range of 433 MHz, for communication via near-field communication (NFC), for communication via radio-frequency identification (RFID), for communication according to a Bluetooth protocol, designed for communication according to a wireless local area network (WLAN) protocol and / or for communication via mobile communications.

Furthermore, the transmission of the respective identifier can be carried out by the respective electronic key by means of a respective contact-based communication interface of the respective electronic key. In this case, the respective contact-type communication interface may have a memory in which the respective identifier is stored, and a processor which is designed to read out the respective identifier from the memory, to generate a signal on the basis of the read-out identifier, and to output the generated signal , Furthermore, the respective contact-type communication interface can have a contact for outputting the signal output by the processor. For example, the respective contact-based communication interface for communication with an ignition lock or door lock of the vehicle is formed and the respective identifier is sent when inserting the respective electronic key in the ignition or the door lock of the vehicle.

The respective identifier of the respective electronic key may be a key number, an identification number, an alphanumeric code, a digital code or a digital key. Furthermore, the respective identifier can uniquely identify the respective electronic key.

The respective reference identifier may be a reference key number, a reference identification number, an alphanumeric reference code, a digital reference code or a digital reference key. Furthermore, the respective reference identifier can be stored cryptographically secured in a memory of the vehicle, in the digital rights management system or in a backend of a manufacturer of the vehicle.

The comparison of the transmitted respective identifier with the respective reference identifier may be a comparison for correspondence of the transmitted respective identifier with the respective reference identifier. If the transmitted respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise, the respective comparison result can be negative.

If the respective reference identifier is prestored in a cryptographically secured manner, the comparison of the transmitted respective identifier with the respective reference identifier can furthermore be carried out using a cryptographic function. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise, the respective comparison result can be negative.

In some embodiments, the overall comparison result is positive if all the respective comparison results are positive. Further, in some embodiments, the overall comparison result is positive if the majority of the respective comparison results are positive.

The person may be a natural person or a legal entity. For example, the person is a holder, in particular a legal holder of the vehicle, an owner of the vehicle, an owner of the vehicle, a buyer of the vehicle or a seller of the vehicle.

The digital rights management system may be integrated in the vehicle, for example in an on-board computer of the vehicle, or provided by a backend of a manufacturer of the vehicle. Here, the backend can through be operated by the manufacturer of the vehicle central computer or computer cluster which digitally manages rights to the vehicle, for example using a database. Furthermore, the assignment of the vehicle to the person can be stored in a memory of the digital rights management system, for example in the form of a database entry.

The digital rights management system may also manage user-dependent usage permissions for functions of the vehicle. For example, a first user is assigned a user authorization for locking / unlocking a door lock of the vehicle and a user authorization for starting an engine of the vehicle while a second user is only assigned a user authorization for locking / unlocking the door lock of the vehicle. Here, the user-dependent usage rights can be managed by the person to which the vehicle is assigned.

In some embodiments, the plurality of electronic keys include all of the electronic keys registered on the vehicle. As a result, a security of the method can be increased since the assignment of the vehicle to the person is changed only when all electronic keys registered on the vehicle are made available. In some embodiments, the plurality of electronic keys may consist of all of the electronic keys registered on the vehicle. As a result, a cost savings can be achieved, since only the existing existing on the vehicle electronic key for performing the method can be used.

In some embodiments, the transmission of the respective identifier of the respective electronic key is performed by the respective electronic key in response to receipt of a request to broadcast the respective identifier by the respective electronic key. It can thereby be achieved that the transmission of the respective identifier can be carried out automatically.

The request to broadcast the respective identifier can be sent by means of a wireless communication interface of the vehicle. In this case, the wireless communication interface may have a processor which is designed to generate a signal representing the request to send out the respective identifier and to output the generated signal. Further, the wireless communication interface may include a modulator configured to modulate the output signal to a high frequency carrier signal to obtain a high frequency signal. The wireless communication interface may further include an amplifier for amplifying the high frequency signal and an antenna for transmitting the amplified high frequency signal. For example, the wireless communication interface is for communication in the ISM band, in particular in the range of 433 MHz, for communication via near field communication (NFC), for communication via Radio Frequency Identification (RFID) Communication according to a Bluetooth protocol, designed for communication according to a wireless local area network (WLAN) protocol and / or for communication via mobile communications. Furthermore, the respective wireless communication interface of the respective electronic key may have an antenna for receiving the emitted high-frequency signal. Furthermore, the respective wireless communication interface may comprise a filter, for example a bandpass filter, for suppressing unwanted frequency ranges in the received radio-frequency signal and for obtaining a filtered radio-frequency signal. The respective wireless communication interface may further comprise a demodulator for recovering a modulation signal from the filtered high frequency signal. Further, the respective wireless communication interface may include a processor or analog-to-digital converter for extracting the request from the recovered modulation signal.

In some embodiments, the sending of the respective identifier of the respective electronic key is performed by the respective electronic key in response to an actuation of an actuator of the respective electronic key. By actuating the actuating device can be achieved that a security of the method can be increased, since an additional interaction of the owner of the plurality of electronic keys is required to carry out the method. The actuating device may be a button for opening the vehicle and / or a button for locking / unlocking a door lock of the vehicle. Furthermore, the respective electronic key can be designed to transmit the respective identifier by means of the respective wireless communication interface in response to the actuation of the actuating device.

In some embodiments, the method further comprises displaying a request to provide the plurality of electronic keys. As a result, the owner of the plurality of electronic keys can be made aware of efficiently performing the method. The request can be made by means of a Display device are displayed. For example, the display device is a screen, in particular a screen integrated in the vehicle, a liquid crystal display (LCD), a light-emitting diode (LED), an LED screen or a lamp of a dashboard of the vehicle.

In some embodiments, the method further comprises detecting a person identifier of the person. As a result, the person to whom the assignment of the vehicle is changed can be determined efficiently. The detection of the person identifier can be carried out by means of a human-machine interface, in particular an input device, such as a keyboard or a touch-sensitive screen, of the vehicle. Furthermore, the detection of the person identifier can be carried out by reading out the person identifier from an electronic identification document. For this purpose, a communication interface, in particular of the vehicle, can be used, which is designed to read out an electronic circuit of the electronic identification document in which the person identifier is stored, in particular by means of Near Field Communication (NFC) or radio frequency identification (Engl Radio Frequency Identification, RFID). Further, the person identifier may be a name of the person, a username assigned to the person, or an identifier of the person in the digital rights management system.

In some embodiments, the method further comprises sending the detected person identifier to the digital rights management system. As a result, the personal rights management of the person to which the assignment of the vehicle is changed can efficiently be provided to the digital rights management system. The transmission of the detected identifier can take place via a communication network, in particular by means of a communication interface of the vehicle. For example, the communication network is a controller area network (CAN) bus system, a data network, a mobile radio network or the Internet.

In some embodiments, the method further includes deleting an association of the vehicle with another person in the digital rights management system. As a result, management of the user-based user authorizations in the digital rights management system by the additional person can be effectively prevented. The additional person may be a natural person or a legal entity. For example, the other person is a previous owner or previous owner of the vehicle. To delete the assignment, a database entry in a database of the digital rights management system, which represents the assignment of the vehicle to the further person, can also be deleted.

In some embodiments, the method further comprises managing usage authorization for a vehicle function of the vehicle in the digital rights management system. In this way, if the assignment of the vehicle to the person changes, existing use authorizations can be efficiently adapted to the change in the assignment. The usage right can be represented by a database entry in a database of the digital rights management system. Furthermore, the database entry may be changed or deleted to manage the usage privilege.

In some embodiments, the method further comprises detecting a position of an electronic key of the plurality of electronic keys relative to the vehicle, wherein the overall comparison result is determined based on the respective comparison results and the detected position. As a result, a security of the method can be increased.

The detection of the position of the electronic key may be performed by means of a detection device for detecting a signal strength value of a wireless communication signal. For example, the detection device detects a signal strength value of a wireless communication signal transmitted from the electronic key when transmitting the identifier of the electronic key. Further, the position of the electronic key relative to the vehicle may indicate whether the electronic key is located in an interior of the vehicle or in an external environment of the vehicle.

In some embodiments, the overall comparison result is positive if all the respective comparison results are positive and the electronic key is located in an interior of the vehicle. Further, in some embodiments, the overall comparison result is positive if the majority of the respective comparison results are positive and the electronic key is located in an interior of the vehicle.

In another aspect, embodiments relate to a digital rights management system for a vehicle. The digital rights management system comprises a memory in which an assignment of the vehicle to a person is stored. Furthermore, the digital rights management system includes a A communication device configured to communicate with a plurality of electronic keys. In this case, the respective electronic keys of the plurality of electronic keys each have a respective identifier. Further, the communication device is configured to receive the respective identifier of the respective electronic key from each electronic key of the plurality of electronic keys. Further, the digital rights management system includes a processor configured to compare each of the received respective identifiers with a respective reference identifier to obtain a respective comparison result. Further, the processor is configured to determine a total comparison result based on the respective comparison results. The processor is also designed in the case of a positive overall comparison result to change the stored in the memory assignment of the vehicle to the person. By using the electronic key can be achieved that an unauthorized change in the assignment of the vehicle to the person can be avoided.

The digital rights management system can be integrated in the vehicle, for example in an on-board computer of the vehicle, or be formed by a backend of a manufacturer of the vehicle. In this case, the backend can be formed by a central computer or computer cluster operated by the manufacturer of the vehicle, which manages rights to the vehicle digitally, for example using a database. Furthermore, the assignment of the vehicle to the person can be stored in a memory of the digital rights management system, for example in the form of a database entry. The digital rights management system may also manage user-dependent usage permissions for functions of the vehicle. For example, a first user is assigned a user authorization for locking / unlocking a door lock of the vehicle and a user authorization for starting an engine of the vehicle while a second user is only assigned a user authorization for locking / unlocking the door lock of the vehicle. Here, the user-dependent usage rights can be managed by a person to which the vehicle is assigned.

The vehicle may be a land vehicle such as a passenger car, a truck or a motorcycle, a rail vehicle such as a train or a streetcar, an aircraft such as a helicopter or an airplane, or a watercraft such as a ship or a boat. Furthermore, the vehicle may have a locking / unlocking device which can be locked / unlocked by means of an electronic key. For example, the vehicle has a door lock.

The electronic keys of the plurality of electronic keys may be vehicle keys, in particular radio keys, of the vehicle, by means of which a locking / unlocking device, such as a door lock, of the vehicle can be locked / unlocked. For example, the majority of the electronic keys 2, 3, 4, 5, 6, 7, 8, 9 or 10.

The communication device may be configured for wireless communication with the plurality of electronic keys. In this case, the communication device may have a receiver device for receiving a radio frequency signal which is emitted by the respective electronic key and which represents the respective identifier. For this purpose, the receiver device can have an antenna for receiving the emitted high-frequency signal. Furthermore, the receiver device may comprise a filter, for example a bandpass filter, for suppressing unwanted frequency ranges in the received radio-frequency signal and for obtaining a filtered radio-frequency signal. The receiver device may further comprise a demodulator for recovering a modulation signal from the filtered high frequency signal. Further, the receiver means may comprise a processor or an analog-to-digital converter for extracting the respective identifier from the recovered modulation signal. For example, the communication device is for communication in the ISM band, in particular in the range of 433 MHz, for communication via near-field communication (NFC), for communication via radio-frequency identification (RFID) for communication according to a Bluetooth protocol, designed for communication according to a wireless local area network (WLAN) protocol and / or for communication via mobile communications.

Further, the communication device may be configured for wired communication with the plurality of electronic keys. For this purpose, the communication device may have a contact for receiving an electronic signal output via a contact of a respective contact-type communication interface of the respective electronic key, which represents the respective identifier. Further, the communication device may include a processor or an analog-to-digital converter for extracting the respective identifier from the received electronic signal. For example, the communication device is in an ignition lock or a door lock of the vehicle integrated.

The respective identifier of the respective electronic key may be a key number, an identification number, an alphanumeric code, a digital code or a digital key. Furthermore, the respective identifier can uniquely identify the respective electronic key.

The respective reference identifier may be a reference key number, a reference identification number, an alphanumeric reference code, a digital reference code or a digital reference key. Furthermore, the respective reference identifier can be stored cryptographically secured in the memory.

The processor may be a central processing unit (CPU) of the vehicle or of the central computer or computer cluster forming the backend. Further, the processor may be configured to perform a match for the emitted respective identifier with the respective reference identifier to compare the transmitted respective identifier with the respective reference identifier. If the transmitted respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise, the respective comparison result can be negative.

If the respective reference identifier is prestored in a cryptographically secured manner, the processor can also compare the transmitted respective identifier with the respective reference identifier using a cryptographic function. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise, the respective comparison result can be negative.

In some embodiments, the overall comparison result is positive if all the respective comparison results are positive. Further, in some embodiments, the overall comparison result is positive if the majority of the respective comparison results are positive.

The person may be a natural person or a legal entity. For example, the person is a holder, in particular a legal holder of the vehicle, an owner of the vehicle, an owner of the vehicle, a buyer of the vehicle or a seller of the vehicle.

In some embodiments, the plurality of electronic keys include all of the electronic keys registered on the vehicle. As a result, a security of the method can be increased since the assignment of the vehicle to the person is changed only when all electronic keys registered on the vehicle are made available. In some embodiments, the plurality of electronic keys may consist of all of the electronic keys registered on the vehicle. As a result, a cost savings can be achieved, since only the existing existing on the vehicle electronic key for performing the method can be used.

In some embodiments, the digital rights management system includes a display device for displaying a request to provide the plurality of electronic keys. This may facilitate use of the digital rights management system. The display device may be a screen, in particular a screen integrated in the vehicle, a liquid crystal display (LCD), a light emitting diode (LED), an LED screen or a lamp of a dashboard of the vehicle.

In some embodiments, the digital rights management system includes a man-machine interface for inputting a person identifier of the person. As a result, the person to whom the assignment of the vehicle is changed can be determined efficiently. The man-machine interface may be an input device such as a keyboard or a touch screen. Further, the person identifier may be a name of the person, a username assigned to the person, or an identifier of the person in the digital rights management system.

In some embodiments, the communication device is further configured to send a request to broadcast the respective identifier of the respective electronic key to the electronic key of the plurality of electronic keys.

It can thereby be achieved that a user interaction to send out the respective identifier of the respective electronic key can be dispensed with. In this case, the communication device may further comprise a transmitter device with a processor, which is designed to generate a signal representing the request, and to output the generated signal. Furthermore, the transmitter device may have a modulator which is designed to modulate the output signal to a high-frequency carrier signal in order to obtain a high-frequency signal. The transmitter device may further comprise an amplifier for amplifying the high-frequency signal and an antenna for transmitting the amplified signal Have high-frequency signal. By way of example, the transmitter device is for communication in the ISM band, in particular in the region of 433 MHz, for communication via near-field communication (NFC), for communication via radio-frequency identification (RFID) for communication according to a Bluetooth protocol, designed for communication according to a wireless local area network (WLAN) protocol and / or for communication via mobile communications.

In some embodiments, the digital rights management system includes position detection means for detecting a position of an electronic key of the plurality of electronic keys relative to the vehicle, wherein the processor is configured to determine the overall comparison result based on the respective comparison results and the detected position. This can increase the security of the digital rights management system.

The position detection device can be designed to detect a signal strength value of a wireless communication signal. For example, the position detection device detects a signal strength value of a wireless communication signal transmitted by the electronic key when transmitting the identifier of the electronic key. Further, the position of the electronic key relative to the vehicle may indicate whether the electronic key is located in an interior of the vehicle or in an external environment of the vehicle.

In some embodiments, the overall comparison result is positive if all the respective comparison results are positive and the electronic key is located in an interior of the vehicle. Further, in some embodiments, the overall comparison result is positive if the majority of the respective comparison results are positive and the electronic key is located in an interior of the vehicle.

Some exemplary embodiments of the present invention will be explained in more detail below with reference to the accompanying figures. Show it:

1 a flowchart of a method for digital rights management for a vehicle according to an embodiment;

2 an arrangement having a digital rights management system for the vehicle according to an embodiment and a plurality of electronic keys;

3 an arrangement with the vehicle, a digital rights management system for the vehicle according to an embodiment and the plurality of electronic keys;

4 an arrangement comprising a data processing device, a digital rights management system for the vehicle according to an embodiment and the plurality of electronic keys; and

5 a schematic representation of a database in which vehicles are assigned persons.

Various embodiments will now be described in more detail with reference to the accompanying drawings, in which some embodiments are illustrated. In the figures, the thickness dimensions of lines, layers and / or regions may be exaggerated for the sake of clarity.

In the following description of the attached figures showing embodiments, like reference numerals designate like or similar components. Further, summary reference numbers are used for components and objects that occur multiple times in one embodiment or in a drawing, but are described together in terms of one or more features. Components or objects which are described by the same or by the same reference numerals may be the same, but possibly also different, in terms of individual, several or all features, for example their dimensions, unless otherwise explicitly or implicitly stated in the description.

Although embodiments may be modified and changed in various ways, exemplary embodiments are illustrated in the figures as examples and will be described in detail herein. It should be understood, however, that it is not intended to limit embodiments to the particular forms disclosed, but that embodiments are intended to cover all functional and / or structural modifications, equivalents and alternatives that are within the scope of the invention. Like reference numerals designate like or similar elements throughout the description of the figures.

Note that an element referred to as being "connected" or "coupled" to another element may be directly connected or coupled to the other element, or intervening elements may be present. If an item is considered "direct Connected "or" directly coupled "is referred to as another element, there are no intervening elements. Other terms used to describe the relationship between elements should be interpreted in a similar fashion (eg, "between" versus "directly in between,""adjacent" versus "directly adjacent," etc.).

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the embodiments. As used herein, the singular forms "a," "an," "an," and "the," "the," are also meant to include the plural forms unless the context clearly indicates otherwise. Furthermore, it should be understood that the terms such as e.g. "Including," "including," "having," and / or "comprising," "comprising," and / or "comprising" as used herein, indicating the presence of said features, integers, steps, operations, elements, and / or components but do not preclude the presence or addition of one or more features, integers, steps, operations, elements, components, and / or groups thereof.

Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly assigned to one of ordinary skill in the art to which the embodiments pertain. Further, it should be understood that terms, e.g. those that are defined in commonly used dictionaries are to be interpreted as having the meaning consistent with their meaning in the context of the relevant art, and not to be interpreted in an idealized or overly formal sense, unless this is so is explicitly defined.

1 shows a flowchart of a method 100 for digital rights management for a vehicle according to an embodiment. The procedure 100 may be performed after a sale of the vehicle by a buyer of the vehicle to change an assignment of the vehicle to a seller of the vehicle in the digital rights management system. Here, the digital rights management system may be an element of the vehicle. For this purpose, the vehicle may have a central processing unit (CPU) and a memory, wherein the digital rights management system is stored in the form of a database in the memory and is managed by means of the CPU. In this case, an assignment of the vehicle to a person can be represented in the digital rights management system by a database entry which includes a vehicle identification of the vehicle and a person identification of the person.

The buyer can carry out the procedure 100 by selecting a corresponding menu item in a vehicle menu displayed by means of a screen of the vehicle. The procedure 100 includes a provision 120 a plurality of electronic keys, each of the electronic keys having a respective identifier. For this purpose, the buyer can arrange the electronic keys in an interior of the vehicle. For example, the buyer places the electronic keys on a center console of the vehicle.

Furthermore, the method comprises 100 a sending out 130 the respective identifier by each of the electronic keys. The buyer can send out 130 by actuating an actuator of each electronic key. For example, with each electronic key, the buyer presses a button to open the vehicle or a button to lock / unlock a door lock of the vehicle. Furthermore, the sending can 130 be performed by querying the respective identifier of the electronic key by the vehicle. For example, the vehicle sends a request to send by means of a communication device 130 the respective identifier to the electronic key.

In addition, the process includes 100 a comparison 140 the transmitted respective identifier with a respective reference identifier to obtain a respective comparison result, for each of the transmitted respective identifiers. The comparison 140 can be performed by means of the vehicle's CPU. Furthermore, the comparison 140 a comparison to match the emitted respective identifier with the respective reference identifier. If the respective identifier and the respective reference identifier match, then the respective comparison result can be positive. Otherwise, the respective comparison result can be negative. In some embodiments, the respective comparison result can be displayed to the buyer, for example by means of the screen of the vehicle.

Further, the method includes 100 a determination 150 a total comparison result based on the respective comparison results. The determining 150 can be performed by means of the vehicle's CPU. If all the respective comparison results are positive, then the overall comparison result can be positive. In some embodiments, the overall comparison result may be displayed to the buyer, for example by means of the screen of the vehicle.

The procedure 100 also includes in the case of a positive overall comparison result Change 180 the assignment of the vehicle to the person in the digital rights management system. Changing 180 can be performed by changing the person identifier in the database entry representing the assignment of the vehicle to the person. For example, in the database entry, the person identifier of the seller is replaced by the person identifier of the buyer.

The procedure 100 may also include optional steps which may be included in the 1 are shown as dashed blocks. In some embodiments, the method includes 100 optionally an ad 110 a request to provide the plurality of electronic keys. The ads 110 the request can be made by means of the screen of the vehicle. It can also be displayed which electronic keys should be provided by the buyer. For example, it is indicated that all electronic keys registered to the vehicle or only certain electronic keys are to be provided.

In some embodiments, the method includes 100 optionally also detecting 160 the person identification of the person. The capture 160 can be performed by means of a man-machine interface of the vehicle. For example, the screen of the vehicle is designed as a touch-sensitive screen and the human-machine interface is formed by the touch-sensitive screen.

In some embodiments, the method includes 100 optionally also a sending 170 the registered person identifier to the digital rights management system. To send out 170 the detected person identifier, the human-machine interface can be communicatively connected to the CPU of the vehicle.

In some embodiments, the method includes 100 Optionally, in case of a negative overall comparison result, a refusal 190 access to the digital rights management system. Here, the buyer by means of the screen of the vehicle refusing 190 of access. For example, a message is displayed on the screen that access was denied because an incorrect electronic key was provided.

2 shows an arrangement with a digital rights management system 200 for the vehicle according to an embodiment and a plurality of electronic keys 240 , The digital rights management system 200 includes a memory 210 in which the assignment of the vehicle to the person is stored, for example in the form of the database entry described above. It also includes the digital rights management system 200 a communication device 220 which is used for wireless communication with the majority of electronic keys 240 is trained. For this purpose, the communication device 220 an antenna 221 on. Further includes the digital rights management system 200 a processor 230 ,

The procedure 100 can using the digital rights management system 200 be performed. In the 2 are two electronic keys 240 shown, which each have a respective identifier, and which in the process step 120 to be provided. In addition, the communication device 220 be formed in the process step 130 sent out respective identifiers of the electronic key 240 to recieve.

Next, the comparison 140 and determining 150 by means of the processor 230 be performed. The processor 230 is also designed, in the case of a positive overall comparison result, that in the memory 210 stored assignment of the vehicle to change the person.

3 shows an arrangement with the vehicle 300 , a digital rights management system 200 for the vehicle 300 according to an embodiment and the plurality of electronic keys 240 , In the 3 are two electronic keys 240 pictured, which in an interior of the vehicle 300 are arranged. The vehicle 300 has a display device 310 for example, a screen, and a man-machine interface 320 , for example, touch-sensitive input elements. It also has the digital rights management system 200 the memory 210 , the communication device 220 and the processor 230 on. Here is communication device 220 in the vehicle 300 arranged during the store 210 and the processor 230 outside the vehicle 300 are arranged. For example, the memory 210 and the processor 230 through a backend of a manufacturer of the vehicle 300 provided. Further, the communication device 220 and the processor 230 over a cellular connection 330 , as a mobile connection according to a Universal Mobile Telecommunications System (UMTS) standard or a Long Term Evolution (LTE) standard, communication technology connected. Here, the communication device 220 be formed, the received respective identifiers over the cellular connection 330 to the processor 230 send out. In an alternative embodiment, the memory 210 and the processor 230 in the vehicle 300 be integrated. Furthermore, the method can 100 using the in the 3 shown arrangement are performed.

The procedure 100 as well as the digital rights management system 200 can at a sale of the vehicle 300 be used. Here is in the digital rights management system 200 the vehicle 300 a previous holder, for example the seller, of the vehicle 300 assigned. The new owner, for example the buyer, of the vehicle 300 can be done using the method 100 the assignment of the vehicle 300 change to the previous holder.

According to one embodiment, the new holder of the vehicle 300 an implementation of the method 100 by means of the display device 310 and the human-machine interface 320 initiate. For example, the new holder selects for this purpose a menu item in one by means of the display device 310 displayed on the vehicle menu, the new holder reports on a means of the display device 310 displayed login mask or sets the new holder a setting of the vehicle 300 back to a factory setting. Then, the new holder by means of the display device 310 a request to provide or present all to the vehicle 300 registered electronic key 240 are displayed. In this case, the new holder, the number of electronic keys 240 displayed on the vehicle 300 are registered. This allows the new owner to recognize whether he is buying or handing over the vehicle 300 all electronic keys 240 the previous holder has received. To the sending 130 the respective identifier of the respective electronic key 240 Initiate the new holder according to a first alternative in succession to all electronic keys 240 an actuator, such as a button to open the vehicle 300 or a key for locking / unlocking a door lock of the vehicle 300 , actuate. According to a second alternative, for this purpose, the communication device 220 or the vehicle 300 a request to send 130 the respective identifier of the respective electronic key 240 to the electronic keys 240 send out. This can also be determined whether the electronic key 240 in an interior of the vehicle 300 are located. Following this, the respective identifiers and the respective reference identifiers may be processed by the processor 230 be compared with each other to obtain the respective comparison results. Furthermore, by means of the processor 230 the overall comparison result can be determined. If the overall comparison result is positive or communication with all electronic keys was successful, the assignment of the vehicle may be successful 300 be changed to the previous holder. To change 180 the assignment of the vehicle 300 can the assignment of the vehicle 300 be deleted to the previous holder. Furthermore, to change 180 the assignment of the vehicle 300 the vehicle 300 be assigned to the new holder. This can be achieved that the procedure 100 only runs when all on the vehicle 200 registered electronic key 240 to be provided.

According to a further embodiment, the vehicle is before the sale 300 in the digital rights system 200 assigned to the seller. For example, the seller is the holder of the vehicle 300 registered and may use rights or rights to the vehicle 300 manage and / or delete. The seller has a total of five electronic keys 240 For example, vehicle keys, for the vehicle 300 , The buyer buys the vehicle 300 and receives all five electronic keys when purchasing 240 of the seller. Using the method 100 The buyer can assign the vehicle 300 to the seller in the digital rights management system 200 change. For example, the buyer changes the owner of the vehicle 300 and possibly deletes existing usage authorizations for the vehicle 300 , The procedure 100 can on the vehicle 300 initiated or requested, for example by means of the display device 310 and the human-machine interface 320 , Following this, on one by means of the display device 310 User interface displayed a prompt or message that displays all five electronic keys 240 to provide or submit to the assignment of the vehicle 300 or to change the holder. Now the vehicle can 300 or the communication device 220 Try sequentially with all five electronic keys 240 to communicate, for example by performing the method steps 130 to 150 , If this succeeds or the overall comparison result is positive, the buyer can assign the vehicle 300 or the holder of the vehicle 300 in the digital rights management system 200 to change. After that, the buyer as a new owner can have full access to the vehicle 300 have and manage the usage permissions.

4 shows an arrangement with a data processing device 400 , a digital rights management system 200 for the vehicle 300 according to an embodiment and the plurality of electronic keys 240 , Unlike the one in the 3 The arrangement shown are the display device 310 For example, a screen, the man-machine interface 320 , for example a keyboard, and the communication device 220 not in the vehicle 300 but arranged in the data processing device 400 integrated. Further, the communication device 220 and the processor 230 via a data connection 410 For example, a Local Area Network (LAN) connection, a Wide Area Network (WAN) connection or an Internet connection, communication-related. Here, the communication device 220 be formed, the received respective identifiers over the data connection 410 to the processor 230 send out. The data processing device 400 may be provided by a public authority or body responsible for road transport. Furthermore, the method can 100 using the in the 4 shown arrangement by the buyer of the vehicle 300 carried out by the public authority or body responsible for road transport.

5 shows a schematic representation of a database 500 in which vehicles 300 Persons are assigned. Database 500 can through the digital rights management system 200 be provided and / or managed digitally. For example, the database is in memory 210 saved.

Database 500 has a first table 510 on, in which data can be stored to the persons. Here, in the left column of the first table 510 Personal identifiers of the persons are stored. Further, in the middle column of the first table 510 Names of people are saved while in the right column of the first table 510 Addresses of the persons can be stored.

Furthermore, the database points 500 a second table 520 on, in which data to the vehicles 300 can be stored. This can be done in the left column of the second table 520 Vehicle identifications of the vehicles 300 get saved. Further, in the middle column of the second table 520 Vehicle types of the vehicles 300 while in the right column of the second table 520 official license plate of the vehicles 300 can be stored.

Database 500 also has a third table 530 on, in which the vehicles 300 are assigned to the persons. Here, in the left column of the third table 530 the vehicle identifications of the vehicles 300 while in the right column of the third table 530 the personal identifiers of the persons can be stored. This can be the vehicle 300 whose vehicle identifier is stored in a line associated with the person whose personal identifier is stored in the same line.

In some embodiments, to change 180 the assignment of the vehicle 300 to the person the associated person identification in the right column of the third table 530 by one in the left column of the first table 510 saved additional person identification to be replaced. For example, when selling the vehicle 300 replaces the personal identifier of the previous owner with the personal identifier of the new owner.

In some embodiments, a vehicle owner may use the method 100 in a memory of the vehicle 300 and in the digital rights management system 200 which is provided, for example, by a backend as the owner of the vehicle 300 to obtain rights that allow them to manage these rights and grant user rights or permissions. This may be the holder of the affected vehicle 300 as such, to identify unauthorized access to, for example, the digital rights management system 300 to avoid for third parties. If the vehicle 300 Now the ownership changes, the buyer of the said vehicle can 300 who then became the new owner of this vehicle 300 is to have the opportunity to yourself as a holder of the vehicle 300 entered.

In some embodiments, by means of the method 100 an authentication, for example, the person to be made and this already in the vehicle 300 standard technique used.

In some embodiments, the communication device 220 or the digital rights management system 200 especially easy in vehicles 300 How to integrate newer vehicles, as communicating with an electronic key 240 , like a key or car key, is already possible. This can be done by querying the electronic key 240 be implemented. Furthermore, used car buyers can have the assurance that the seller has all the registered electronic keys 240 has delivered.

In some embodiments, the method may be 100 and / or the digital rights management system 200 in all vehicles 300 with electronic keys 240 , such as digital keys, and / or online mobile services with associated rights management.

In some embodiments, the person may be in the process of performing the method 100 on the vehicle 300 or the digital rights management system 200 be authenticated.

In an alternative, that can change 180 the assignment of the vehicle 300 without the use of safety precautions. Here, a user, for example, the vehicle 300 or the digital rights management system 200 after buying, for example, the vehicle 300 , without any queries the holder of the vehicle 300 change. For this purpose, the user selects an option in the user menu, for example, a vehicle menu of the vehicle 300 , and can then register as a holder. With this option, an authentication before access can be omitted and any person could easily register as a holder.

In another alternative, to perform the altering 180 the assignment of the vehicle 300 just an electronic key 240 or keys, in particular for authentication. Here, the user can only select an electronic key after selecting the function 240 submit in order to register as a holder. Again, the vehicle can automatically with the electronic key again 240 communicate or the user can press a specific key on the electronic key 240 actuate. This can be compared to changing 180 the assignment of the vehicle 300 without electronic key 240 a security can be increased. With the variant that all electronic keys 240 However, when you deploy a breaker, potential attackers may find it a lot harder to gain access to this feature.

In a further alternative, by means of the method 100 Furthermore, a digital rights management for objects are provided which have a locking / unlocking device, wherein the locking / unlocking device by means of an electronic key 240 can be locked / unlocked. For example, the object is a house or an apartment and the locking / unlocking device is an electronic door lock of a door of the house or apartment.

The embodiments described above are merely illustrative of the principles of the present invention. It will be understood that modifications and variations of the arrangements and details described herein will be apparent to others of ordinary skill in the art. Therefore, it is intended that the invention be limited only by the scope of the appended claims and not by the specific details presented in the description and explanation of the embodiments herein.

LIST OF REFERENCE NUMBERS

100

method

110

Show

120

Provide

130

send out

140

to compare

150

Determine

160

To capture

170

send out

180

Change

190

Deny

200

digital rights management system

210

Storage

220

communication device

221

antenna

230

processor

240

electronic key

300

vehicle

310

display device

320

Human-machine interface

330

cellular Line

400

Data processing device

410

Data Connection

500

Database

510

first table

520

second table

530

third table

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• US 2009/0153311 A1 [0004]
• DE 19912748 A1 [0005]
• DE 10157110 A1 [0006]
• DE 102014224769 A1 [0007]
• US 2005/0132024 A1 [0008]

Claims (10)

Procedure ( 100 ) for digital rights management for a vehicle ( 300 ), with: Deploy ( 120 ) a plurality of electronic keys ( 240 ), whereby the respective electronic keys ( 240 ) of the majority of electronic keys ( 240 ) each have a respective identifier; Sending out ( 130 ) of the respective identifier of the respective electronic key ( 240 ) by the respective electronic key ( 240 ) for each electronic key ( 240 ) of the majority of electronic keys ( 240 ); To compare ( 140 ) the transmitted respective identifier with a respective reference identifier to obtain a respective comparison result, for each of the transmitted respective identifiers; Determine ( 150 ) of a total comparison result based on the respective comparison results; and in the case of a positive overall comparison result, changing ( 180 ) an assignment of the vehicle ( 300 ) to a person in a digital rights management system ( 200 ). Procedure ( 100 ) according to claim 1, wherein the plurality of electronic keys ( 240 ) all on the vehicle ( 300 ) registered electronic key ( 240 ). Procedure ( 100 ) according to claim 1 or 2, wherein the sending ( 130 ) of the respective identifier of the respective electronic key ( 240 ) by the respective electronic key ( 240 ) in response to receipt of a request to send the respective identifier by the respective electronic key ( 240 ) is carried out. Procedure ( 100 ) according to claim 1 or 2, wherein the sending ( 130 ) of the respective identifier of the respective electronic key ( 240 ) by the respective electronic key ( 240 ) in response to actuation of an actuator of the respective electronic key ( 240 ) is carried out. Procedure ( 100 ) according to one of the preceding claims, with advertisements ( 110 ) a request to provide the majority of electronic keys ( 240 ). Procedure ( 100 ) according to any one of the preceding claims, with detection ( 160 ) a person identification of the person. Procedure ( 100 ) according to claim 6, with sending ( 170 ) of the recorded personal identification to the digital rights management system ( 200 ). Procedure ( 100 ) according to one of the preceding claims, with deletion of an assignment of the vehicle ( 300 ) to another person in the digital rights management system ( 200 ). Procedure ( 100 ) according to one of the preceding claims, with management of a use authorization for a vehicle function of the vehicle ( 300 ) in the digital rights management system ( 200 ). Digital rights management system ( 200 ) for a vehicle ( 300 ), with: a memory ( 210 ), in which an assignment of the vehicle ( 300 ) is stored to a person; a communication device ( 220 ), which are used for communication with a plurality of electronic keys ( 240 ), the respective electronic keys ( 240 ) of the majority of electronic keys ( 240 ) each have a respective identifier, and wherein the communication device ( 220 ), the respective identifier of the respective electronic key ( 240 ) of each electronic key ( 240 ) of the majority of electronic keys ( 240 ) to recieve; and a processor ( 230 ) configured to compare each of the received respective identifiers with a respective reference identifier to obtain a respective comparison result, to determine a total comparison result based on the respective comparison results, and in the case of a positive overall comparison result stored in the memory ( 210 ) stored assignment of the vehicle ( 300 ) to change the person.

Images