DE102016217642B4 - Digital rights management method for a vehicle and digital rights management system - Google Patents

Abstract

Method (100) for digital rights management for a vehicle (300), with:
Providing (120) a plurality of electronic keys (240), the respective electronic keys (240) of the plurality of electronic keys (240) each having a respective identifier;
Sending (130) the respective identifier of the respective electronic key (240) by the respective electronic key (240) for each electronic key (240) of the plurality of electronic keys (240);
Comparing (140) the respective identifier sent with a respective reference identifier to obtain a respective comparison result for each of the respective identifiers sent;
Determining (150) an overall comparison result based on the respective comparison results; and
in the event of a positive overall comparison result, changing (180) an assignment of the vehicle (300) to a person in a digital rights management system (200);
wherein the transmission (130) of the respective identifier of the respective electronic key (240) is carried out by the respective electronic key (240) in response to an actuation of an actuating device of the respective electronic key (240).

Description

The present invention relates generally to a concept for digital rights management for a vehicle and in particular to a method for digital rights management for a vehicle and a digital rights management system for a vehicle.

A vehicle, such as a passenger car, is often used by several people. In this case, the people can be assigned different usage rights for functions of the vehicle. For example, a first person is assigned a usage authorization for locking / unlocking a door lock of the vehicle and a usage authorization for starting an engine of the vehicle, while a second person is only assigned a usage authorization for locking / unlocking the door lock of the vehicle.

Such usage authorizations can be stored in a digital rights management system for the vehicle and managed by the legal owner of the vehicle. The vehicle can be assigned to the legal owner in the digital rights management system. If the legal owner of the vehicle changes, for example when the vehicle is sold, the vehicle can be assigned to the new legal owner in the digital rights management. In order to avoid assigning the vehicle to an unauthorized third person, the new legal holder is often authenticated using a smart card on the digital rights management system.

The publication US 2009/0153311 A1 relates to an authentication system for a vehicle. To authenticate a user of the vehicle, user information stored on a smart card is compared with information stored in a database server.

The publication DE 199 12 748 A1 relates to a device for reproducing information in a motor vehicle with a portable transponder which sends a code to a control device arranged in the motor vehicle, and with a display which shows certain data as a function of an output signal of the control device.

The publication DE 101 57 110 A1 relates to a vehicle in which registration data of the vehicle are stored electronically in a memory arranged in the vehicle.

The publication DE 10 2014 224 769 A1 relates to a method and a device for delivering a virtual key.

The publication US 2005/0132024 A1 relates to a method for transmitting vehicle-related information from a remote server to a vehicle.

The publication DE 103 37 424 A1 relates to a device for securing a vehicle against theft by means of locking at least one essential operating element of the vehicle.

The publication DE 10 2009 023 095 A1 relates to methods and devices for programming vehicle keys for establishing primary keys and secondary keys for controlling vehicle functionality.

The publication DE 10 2011 103 674 B3 relates to a method and a device for teaching several keys to an authorization device of a vehicle.

Against this background, it would be desirable to create an efficient and cost-effective concept for digital rights management for a vehicle.

A method and a digital rights management system with the features of the independent claims take account of this need. Further advantageous embodiments and developments are the subject of the dependent claims.

According to a first aspect, exemplary embodiments create a method for digital rights management for a vehicle. The method comprises providing a plurality of electronic keys, the respective electronic keys of the plurality of electronic keys each having a respective identifier. Furthermore, the method comprises sending the respective identifier of the respective electronic key through the respective electronic key for each electronic key of the plurality of electronic keys. In addition, the method comprises comparing the respective identifier sent with a respective reference identifier in order to obtain a respective comparison result for each of the respective identifier sent. The method further comprises determining an overall comparison result on the basis of the respective comparison results. In the case of a positive overall comparison result, the method also includes changing an assignment of the vehicle to a person in a digital rights management system. Through the Using the electronic key can ensure that an unauthorized change in the assignment of the vehicle to the person can be avoided.

The vehicle may be a land vehicle such as a passenger car, a truck or a motorcycle, a rail vehicle such as a train or a tram, an aircraft such as a helicopter or an airplane, or a water vehicle such as a ship or a boat. Furthermore, the vehicle can have a locking / unlocking device which can be locked / unlocked by means of an electronic key. For example, the vehicle has a door lock.

The electronic keys of the majority of the electronic keys can be vehicle keys, in particular radio keys, of the vehicle, by means of which a locking / unlocking device, such as a door lock, of the vehicle can be locked / unlocked. For example, the majority of the electronic keys are 2, 3, 4, 5, 6, 7, 8, 9 or 10.

The transmission of the respective identifier by the respective electronic key can be carried out by means of a respective wireless communication interface of the respective electronic key. In this case, the respective wireless communication interface can have a memory in which the respective identifier is stored and a processor which is designed to read the respective identifier from the memory, to generate a signal on the basis of the identifier read out and to output the generated signal . Furthermore, the respective wireless communication interface can have a modulator which is designed to modulate the output signal onto a high-frequency carrier signal in order to obtain a high-frequency signal. The respective wireless communication interface can furthermore have an amplifier for amplifying the high-frequency signal and an antenna for transmitting the amplified high-frequency signal. For example, the respective wireless communication interface for communication in the ISM band, in particular in the range of 433 MHz, for communication via near-field communication (NFC), for communication via radio frequency identification (RFID), trained for communication according to a Bluetooth protocol, for communication according to a Wireless Local Area Network (WLAN) protocol and / or for communication via mobile radio.

Furthermore, the respective identifier can be sent out by the respective electronic key by means of a respective contact-based communication interface of the respective electronic key. The respective contact-based communication interface can have a memory in which the respective identifier is stored, and a processor which is designed to read the respective identifier from the memory, to generate a signal on the basis of the identifier read out and to output the generated signal . Furthermore, the respective contact-based communication interface can have a contact for outputting the signal output by the processor. For example, the respective contact-based communication interface is designed for communication with an ignition lock or door lock of the vehicle, and the respective identifier is sent when the respective electronic key is inserted into the ignition lock or the door lock of the vehicle.

The respective identifier of the respective electronic key can be a key number, an identification number, an alphanumeric code, a digital code or a digital key. Furthermore, the respective identifier can uniquely identify the respective electronic key.

The respective reference identifier can be a reference key number, a reference identification number, an alphanumeric reference code, a digital reference code or a digital reference key. Furthermore, the respective reference identifier can be pre-stored in a cryptographically secure manner in a memory of the vehicle, in the digital rights management system or in a backend of a manufacturer of the vehicle.

The comparison of the emitted respective identifier with the respective reference identifier can be a comparison to ensure that the emitted respective identifier matches the respective reference identifier. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise the respective comparison result can be negative.

If the respective reference identifier is pre-stored in a cryptographically secure manner, the comparison of the respective identifier sent with the respective reference identifier can also be carried out using a cryptographic function. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise the respective comparison result can be negative.

In some embodiments, the overall comparison result is positive if all of the comparison results are positive. Furthermore is in some embodiments, the overall comparison result is positive if the majority of the respective comparison results are positive.

The person can be a natural person or a legal person. For example, the person is a holder, in particular a legal holder, of the vehicle, an owner of the vehicle, an owner of the vehicle, a buyer of the vehicle or a seller of the vehicle.

The digital rights management system can be integrated in the vehicle, for example in an on-board computer of the vehicle, or can be provided by a backend of a manufacturer of the vehicle. Here, the backend can be formed by a central computer or computer cluster operated by the manufacturer of the vehicle, which digitally manages rights to the vehicle, for example using a database. Furthermore, the assignment of the vehicle to the person can be stored in a memory of the digital rights management system, for example in the form of a database entry.

User-dependent usage authorizations for functions of the vehicle can also be managed in the digital rights management system. For example, a first user is assigned a usage authorization for locking / unlocking a door lock of the vehicle and a usage authorization for starting an engine of the vehicle, while a second user is only assigned a usage authorization for locking / unlocking the door lock of the vehicle. Here, the user-dependent usage authorizations can be managed by the person to whom the vehicle is assigned.

In some embodiments, the majority of the electronic keys include all of the electronic keys registered on the vehicle. This increases the security of the method, since the assignment of the vehicle to the person is only changed when all electronic keys registered on the vehicle are provided. In some embodiments, the plurality of electronic keys can consist of all electronic keys registered on the vehicle. This can save costs, since only the electronic keys already registered on the vehicle are used to carry out the method.

In some exemplary embodiments, the transmission of the respective identifier of the respective electronic key is carried out by the respective electronic key in response to receipt of a request for the transmission of the respective identifier by the respective electronic key. It can thereby be achieved that the transmission of the respective identifier can be carried out automatically.

The request to send the respective identifier can be sent using a wireless communication interface of the vehicle. In this case, the wireless communication interface can have a processor which is designed to generate a signal which represents the request to transmit the respective identifier and to output the generated signal. Furthermore, the wireless communication interface can have a modulator which is designed to modulate the output signal onto a high-frequency carrier signal in order to obtain a high-frequency signal. The wireless communication interface can also have an amplifier for amplifying the high-frequency signal and an antenna for transmitting the amplified high-frequency signal. For example, the wireless communication interface for communication in the ISM band, in particular in the range of 433 MHz, for communication via near-field communication (NFC), for communication via radio frequency identification (RFID), for Communication in accordance with a Bluetooth protocol, for communication in accordance with a Wireless Local Area Network (WLAN) protocol and / or for communication via mobile radio. Furthermore, the respective wireless communication interface of the respective electronic key can have an antenna for receiving the transmitted high-frequency signal. Furthermore, the respective wireless communication interface can have a filter, for example a bandpass filter, in order to suppress unwanted frequency ranges in the received radio-frequency signal and to obtain a filtered radio-frequency signal. The respective wireless communication interface can also have a demodulator in order to recover a modulation signal from the filtered high-frequency signal. Furthermore, the respective wireless communication interface can have a processor or an analog / digital converter for extracting the request from the recovered modulation signal.

In some exemplary embodiments, the respective identifier of the respective electronic key is sent out by the respective electronic key in response to an actuation of an actuating device of the respective electronic key. By actuating the actuating device, it can be achieved that the security of the method can be increased, since an additional interaction of the owner of the majority of the electronic keys is required to carry out the method. The Actuating device can be a button for opening the vehicle and / or a button for locking / unlocking a door lock of the vehicle. Furthermore, the respective electronic key can be designed to send the respective identifier in response to the actuation of the actuating device by means of the respective wireless communication interface.

In some embodiments, the method further includes displaying a prompt to provide the plurality of electronic keys. As a result, the owner of the majority of the electronic keys can be efficiently informed that the method has been performed. The request can be displayed by means of a display device. For example, the display device is a screen, in particular a screen integrated in the vehicle, a liquid crystal display (LCD), a light-emitting diode (LED), an LED screen or a lamp on a dashboard of the vehicle.

In some embodiments, the method further includes detecting a person's identity. As a result, the person to whom the assignment of the vehicle is changed can be determined efficiently. The identification of the person can be carried out by means of a human-machine interface, in particular an input device, such as a keyboard or a touch-sensitive screen, of the vehicle. Furthermore, the identification of the person can be carried out by reading out the person's identification from an electronic identification document. For this purpose, a communication interface, in particular of the vehicle, can be used, which is designed to read out an electronic circuit of the electronic identification document, in which the person identification is stored, in particular by means of near field communication (NFC) or radio frequency identification (English) Radio Frequency Identification, RFID). Furthermore, the person identifier can be a name of the person, a user name assigned to the person or an identifier of the person in the digital rights management system.

In some exemplary embodiments, the method also includes sending the recorded personal identification to the digital rights management system. This enables the digital rights management system to be efficiently provided with the person identification of the person to whom the assignment of the vehicle is changed. The detected identifier can be sent out via a communication network, in particular by means of a communication interface of the vehicle. For example, the communication network is a controller area network (CAN) bus system, a data network, a mobile radio network or the Internet.

In some embodiments, the method further includes deleting an assignment of the vehicle to another person in the digital rights management system. In this way, an administration of the user-based usage authorizations in the digital rights management system can be efficiently prevented by the other person. The other person can be a natural person or a legal person. For example, the other person is a previous owner or previous owner of the vehicle. To delete the assignment, a database entry in a database of the digital rights management system, which represents the assignment of the vehicle to the other person, can also be deleted.

In some embodiments, the method further includes managing a usage authorization for a vehicle function of the vehicle in the digital rights management system. In this way, when the assignment of the vehicle to the person is changed, existing usage authorizations can be efficiently adapted to the change in the assignment. The usage authorization can be represented by a database entry in a database of the digital rights management system. Furthermore, the database entry can be changed or deleted to manage the user authorization.

In some embodiments, the method further comprises detecting a position of an electronic key of the plurality of electronic keys relative to the vehicle, the overall comparison result being determined on the basis of the respective comparison results and the detected position. This can increase the security of the method.

The detection of the position of the electronic key can be carried out by means of a detection device for detecting a signal strength value of a wireless communication signal. For example, the detection device detects a signal strength value of a wireless communication signal emitted by the electronic key when the identifier of the electronic key is emitted. Furthermore, the position of the electronic key relative to the vehicle can indicate whether the electronic key is arranged in an interior of the vehicle or in an external environment of the vehicle.

In some embodiments, the overall comparison result is positive if all respective comparison results are positive and the electronic key is located in an interior of the vehicle. Furthermore, in some exemplary embodiments, the overall comparison result is positive if the majority of the respective comparison results is positive and the electronic key is located in an interior of the vehicle.

According to a further aspect, exemplary embodiments relate to a digital rights management system for a vehicle. The digital rights management system includes a memory in which an association of the vehicle with a person is stored. Furthermore, the digital rights management system comprises a communication device which is designed to communicate with a plurality of electronic keys. The respective electronic keys of the plurality of electronic keys each have a respective identifier. Furthermore, the communication device is designed to receive the respective identifier of the respective electronic key from each electronic key of the plurality of electronic keys. The digital rights management system further comprises a processor which is designed to compare each of the received respective identifiers with a respective reference identifier in order to obtain a respective comparison result. Furthermore, the processor is designed to determine an overall comparison result on the basis of the respective comparison results. In the event of a positive overall comparison result, the processor is also designed to change the assignment of the vehicle to the person stored in the memory. By using the electronic key, it can be achieved that an unauthorized change in the assignment of the vehicle to the person can be avoided.

The digital rights management system can be integrated in the vehicle, for example in an on-board computer of the vehicle, or can be formed by a backend of a manufacturer of the vehicle. Here, the backend can be formed by a central computer or computer cluster operated by the manufacturer of the vehicle, which digitally manages rights to the vehicle, for example using a database. Furthermore, the assignment of the vehicle to the person can be stored in a memory of the digital rights management system, for example in the form of a database entry. User-dependent usage authorizations for functions of the vehicle can also be managed in the digital rights management system. For example, a first user is assigned a usage authorization for locking / unlocking a door lock of the vehicle and a usage authorization for starting an engine of the vehicle, while a second user is only assigned a usage authorization for locking / unlocking the door lock of the vehicle. Here, the user-dependent usage authorizations can be managed by a person to whom the vehicle is assigned.

The vehicle may be a land vehicle such as a passenger car, a truck or a motorcycle, a rail vehicle such as a train or a tram, an aircraft such as a helicopter or an airplane, or a water vehicle such as a ship or a boat. Furthermore, the vehicle can have a locking / unlocking device which can be locked / unlocked by means of an electronic key. For example, the vehicle has a door lock.

The electronic keys of the majority of the electronic keys can be vehicle keys, in particular radio keys, of the vehicle, by means of which a locking / unlocking device, such as a door lock, of the vehicle can be locked / unlocked. For example, the majority of the electronic keys are 2, 3, 4, 5, 6, 7, 8, 9 or 10.

The communication device can be designed for wireless communication with the plurality of electronic keys. Here, the communication device can have a receiver device for receiving a high-frequency signal emitted by the respective electronic key and which represents the respective identifier. For this purpose, the receiver device can have an antenna for receiving the transmitted high-frequency signal. Furthermore, the receiver device can have a filter, for example a bandpass filter, in order to suppress undesired frequency ranges in the received radio-frequency signal and to obtain a filtered radio-frequency signal. The receiver device can also have a demodulator in order to recover a modulation signal from the filtered high-frequency signal. Furthermore, the receiver device can have a processor or an analog / digital converter for extracting the respective identifier from the recovered modulation signal. For example, the communication device for communication in the ISM band, in particular in the range of 433MHz, for communication via near field communication (NFC), for communication via radio frequency identification (RFID), for communication in accordance with a Bluetooth protocol, for communication in accordance with a Wireless Local Area Network (WLAN) protocol and / or for communication via mobile radio.

Furthermore, the communication device can be designed for wired communication with the plurality of electronic keys. For this purpose, the communication device can have a contact for receiving an electronic signal, which represents the respective identifier, and is output via a contact of a respective contact-related communication interface of the respective electronic key. Furthermore, the communication device can have a processor or an analog / digital converter for extracting the respective identifier from the received electronic signal. For example, the communication device is integrated in an ignition lock or a door lock of the vehicle.

The respective identifier of the respective electronic key can be a key number, an identification number, an alphanumeric code, a digital code or a digital key. Furthermore, the respective identifier can uniquely identify the respective electronic key.

The respective reference identifier can be a reference key number, a reference identification number, an alphanumeric reference code, a digital reference code or a digital reference key. Furthermore, the respective reference identifier can be pre-stored in the memory in a cryptographically secured manner.

The processor can be a central processing unit (CPU) of the vehicle or the central computer or computer cluster that forms the backend. Furthermore, the processor can be designed to carry out a comparison to ensure that the respective identifier sent matches the respective reference identifier, in order to compare the respective identifier sent with the respective reference identifier. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise the respective comparison result can be negative.

If the respective reference identifier is pre-stored in a cryptographically secure manner, the processor can also compare the emitted respective identifier with the respective reference identifier using a cryptographic function. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise the respective comparison result can be negative.

In some embodiments, the overall comparison result is positive if all of the comparison results are positive. Furthermore, in some exemplary embodiments, the overall comparison result is positive if the majority of the respective comparison results is positive.

The person can be a natural person or a legal person. For example, the person is a holder, in particular a legal holder, of the vehicle, an owner of the vehicle, an owner of the vehicle, a buyer of the vehicle or a seller of the vehicle.

In some embodiments, the majority of the electronic keys include all of the electronic keys registered on the vehicle. This increases the security of the method, since the assignment of the vehicle to the person is only changed when all electronic keys registered on the vehicle are provided. In some embodiments, the plurality of electronic keys can consist of all electronic keys registered on the vehicle. This can save costs, since only the electronic keys already registered on the vehicle are used to carry out the method.

In some embodiments, the digital rights management system includes a display device for displaying a request to provide the plurality of electronic keys. This makes it easier to use the digital rights management system. The display device can be a screen, in particular a screen integrated in the vehicle, a liquid crystal display (LCD), a light-emitting diode (LED), an LED screen or a lamp on a dashboard of the vehicle.

In some exemplary embodiments, the digital rights management system comprises a human-machine interface for entering a personal identification of the person. As a result, the person to whom the assignment of the vehicle is changed can be determined efficiently. The human-machine interface can be an input device, such as a keyboard or a touch-sensitive screen. Furthermore, the person identifier can be a name of the person, a user name assigned to the person or an identifier of the person in the digital rights management system.

In some exemplary embodiments, the communication device is further configured to send out a request to send out the respective identifier of the respective electronic key to the electronic keys of the plurality of electronic keys.

It can thereby be achieved that user interaction for sending out the respective identifier of the respective electronic key can be dispensed with. Here, the communication device can further comprise a transmitter device with a processor, which is designed to generate a signal that represents the request and to output the generated signal. Furthermore, the transmitter device can have a modulator which is designed to modulate the output signal onto a high-frequency carrier signal in order to obtain a high-frequency signal. The transmitter device can also have an amplifier for amplifying the high-frequency signal and an antenna for transmitting the amplified high-frequency signal. For example, the transmitter device for communication in the ISM band, in particular in the range of 433MHz, for communication via near-field communication (NFC), for communication via radio frequency identification (RFID), for communication in accordance with a Bluetooth protocol, for communication in accordance with a Wireless Local Area Network (WLAN) protocol and / or for communication via mobile radio.

In some exemplary embodiments, the digital rights management system comprises a position detection device for detecting a position of an electronic key of the plurality of the electronic keys relative to the vehicle, the processor being designed to determine the overall comparison result on the basis of the respective comparison results and the detected position. This can increase the security of the digital rights management system.

The position detection device can be designed to detect a signal strength value of a wireless communication signal. For example, the position detection device detects a signal strength value of a wireless communication signal emitted by the electronic key when the identifier of the electronic key is emitted. Furthermore, the position of the electronic key relative to the vehicle can indicate whether the electronic key is arranged in an interior of the vehicle or in an external environment of the vehicle.

In some embodiments, the overall comparison result is positive if all of the respective comparison results are positive and the electronic key is located in an interior of the vehicle. Furthermore, in some exemplary embodiments, the overall comparison result is positive if the majority of the respective comparison results is positive and the electronic key is located in an interior of the vehicle.

• 1 ein Ablaufdiagramm eines Verfahrens zum digitalen Rechtemanagement für ein Fahrzeug gemäß einem Ausführungsbeispiel;
• 2 eine Anordnung mit einem digitalen Rechtemanagementsystem für das Fahrzeug gemäß einem Ausführungsbeispiel und einer Mehrzahl von elektronischen Schlüsseln;
• 3 eine Anordnung mit dem Fahrzeug, einem digitalen Rechtemanagementsystem für das Fahrzeug gemäß einem Ausführungsbeispiel und der Mehrzahl der elektronischen Schlüssel;
• 4 eine Anordnung mit einer Datenverarbeitungsvorrichtung, einem digitalen Rechtemanagementsystem für das Fahrzeug gemäß einem Ausführungsbeispiel und der Mehrzahl der elektronischen Schlüssel; und
• 5 eine schematische Darstellung einer Datenbank, in welcher Fahrzeuge Personen zugeordnet sind.

Some exemplary embodiments of the present invention are explained in more detail below with reference to the accompanying figures. Show it:

• 1 a flowchart of a method for digital rights management for a vehicle according to an embodiment;
• 2nd an arrangement with a digital rights management system for the vehicle according to an embodiment and a plurality of electronic keys;
• 3rd an arrangement with the vehicle, a digital rights management system for the vehicle according to an embodiment and the plurality of electronic keys;
• 4th an arrangement with a data processing device, a digital rights management system for the vehicle according to an embodiment and the plurality of electronic keys; and
• 5 a schematic representation of a database in which vehicles are assigned to people.

Various embodiments will now be described in more detail with reference to the accompanying drawings, in which some embodiments are shown. In the figures, the thickness dimensions of lines, layers and / or regions may be exaggerated for the sake of clarity.

In the following description of the attached figures, which show exemplary embodiments, the same reference numerals designate the same or comparable components. Furthermore, summarizing reference numerals are used for components and objects which occur several times in an exemplary embodiment or in a drawing, but which are described together with regard to one or more features. Components or objects that are described with the same or summarizing reference numerals can be designed in the same way with regard to individual, several or all features, for example their dimensions, but possibly also different, unless the description does not explicitly or implicitly state otherwise.

Although exemplary embodiments can be modified and modified in various ways, exemplary embodiments are shown in the figures as examples and are described in detail herein. However, it should be made clear that not it is intended to limit exemplary embodiments to the particular forms disclosed, but rather that exemplary embodiments are intended to cover all functional and / or structural modifications, equivalents and alternatives which are within the scope of the invention. The same reference numerals designate the same or similar elements throughout the description of the figures.

Note that an element referred to as “connected” or “coupled” to another element may be directly connected or coupled to the other element, or there may be intermediate elements. On the other hand, if an element is referred to as “directly connected” or “directly coupled” to another element, there are no elements in between. Other terms used to describe the relationship between elements should be interpreted in a similar way (e.g., "between" versus "directly between", "adjacent" versus "directly adjacent", etc.).

The terminology used herein is used only to describe certain embodiments and is not intended to limit the embodiments. As used herein, the singular forms "one", "one", "one" and "the", "the", "that" should also include the plural forms, unless the context clearly indicates otherwise. It should also be clarified that the expressions such as e.g. “Includes”, “including”, “has” and / or “having”, “comprises” and / or “comprising” as used herein, indicates the presence of the features mentioned, integers, steps, workflows, elements and / or components , but do not exclude the presence or addition of one or more characteristics, integers, steps, workflows, elements, components and / or groups thereof.

Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as one of ordinary skill in the art to which the exemplary embodiments belong. It should also be clarified that expressions, e.g. those defined in commonly used dictionaries are to be interpreted as having the meaning that is consistent with their meaning in the context of the relevant art and are not to be interpreted in an idealized or overly formal sense as long as not herein is expressly defined.

1 shows a flow chart of a method 100 for digital rights management for a vehicle according to an embodiment. The procedure 100 can be carried out after a sale of the vehicle by a buyer of the vehicle in order to change an assignment of the vehicle to a seller of the vehicle in the digital rights management system. The digital rights management system can be an element of the vehicle. For this purpose, the vehicle can have a central processing unit (CPU) and a memory, the digital rights management system being stored in the memory in the form of a database and being managed by the CPU. In this case, an assignment of the vehicle to a person can be represented in the digital rights management system by a database entry which comprises a vehicle identification of the vehicle and a person identification of the person.

The buyer can carry out the procedure 100 Initiate by selecting a corresponding menu item in a vehicle menu displayed on a screen of the vehicle. The procedure 100 includes providing 120 a plurality of electronic keys, each of the electronic keys having a respective identifier. For this purpose, the buyer can arrange the electronic keys in an interior of the vehicle. For example, the buyer places the electronic keys on a center console of the vehicle.

The method also includes 100 sending out 130 the respective identifier by each of the electronic keys. The buyer can send out 130 initiate by operating an actuator of each electronic key. For example, the buyer presses a key to open the vehicle or a key to lock / unlock a door lock of the vehicle for each electronic key. It can also send out 130 by querying the respective identifier of the electronic key by the vehicle. For example, the vehicle sends a request to send using a communication device 130 the respective identifier to the electronic key.

The procedure also includes 100 a comparison 140 the respective identifier sent out with a respective reference identifier in order to obtain a respective comparison result for each of the respective identifier sent out. Comparing 140 can be performed using the vehicle's CPU. Furthermore, the comparison can 140 a comparison to ensure that the respective identifier sent matches the respective reference identifier. If the respective identifier and the respective reference identifier match, the respective comparison result can be positive. Otherwise the respective comparison result can be negative. In some exemplary embodiments, the respective comparison result can be displayed to the buyer be, for example by means of the screen of the vehicle.

The process also includes 100 a determining 150 an overall comparison result based on the respective comparison results. The determining 150 can be performed using the vehicle's CPU. If all the respective comparison results are positive, the overall comparison result can be positive. In some exemplary embodiments, the overall comparison result can be displayed to the buyer, for example by means of the screen of the vehicle.

The procedure 100 also includes changing in the event of a positive overall comparison result 180 the assignment of the vehicle to the person in the digital rights management system. The changing 180 can be carried out by changing the person identification in the database entry, which represents the assignment of the vehicle to the person. For example, the personal identification of the seller is replaced by the personal identification of the buyer in the database entry.

The procedure 100 may also include optional steps that are performed in the 1 are shown as dashed blocks. In some embodiments, the method includes 100 optionally an advertisement 110 a request to provide the plurality of electronic keys. The display 110 the request can be made using the vehicle's screen. It can also be displayed here which electronic keys are to be provided by the buyer. For example, it is displayed that all electronic keys registered on the vehicle or only certain electronic keys are to be provided.

In some embodiments, the method includes 100 furthermore optionally a detection 160 the personal identifier of the person. The capture 160 can be carried out by means of a human-machine interface of the vehicle. For example, the screen of the vehicle is designed as a touch-sensitive screen and the human-machine interface is formed by the touch-sensitive screen.

In some embodiments, the method includes 100 also optionally send out 170 the recorded person identification to the digital rights management system. To send 170 According to the detected person identification, the human-machine interface can be connected to the CPU of the vehicle for communication purposes.

In some embodiments, the method includes 100 furthermore optionally in the case of a negative overall comparison result, a refusal 190 access to the digital rights management system. The buyer can refuse this on the screen of the vehicle 190 of access are displayed. For example, the screen displays a message that access was denied because an incorrect electronic key was provided.

2nd shows an arrangement with a digital rights management system 200 for the vehicle according to an embodiment and a plurality of electronic keys 240 . The digital rights management system 200 includes a memory 210 , in which the assignment of the vehicle to the person is stored, for example in the form of the database entry described above. The digital rights management system also includes 200 a communication device 220 which are used for wireless communication with the majority of electronic keys 240 is trained. For this purpose, the communication device 220 an antenna 221 on. The digital rights management system also includes 200 a processor 230 .

The procedure 100 can be done using the digital rights management system 200 be performed. In the 2nd are two electronic keys 240 mapped, which each have a respective identifier, and which in the method step 120 to be provided. In addition, the communication device 220 be trained in the process step 130 sent respective identifiers of the electronic keys 240 to recieve.

Comparing can further 140 and determining 150 by means of the processor 230 be performed. The processor 230 is also designed, in the case of a positive overall comparison result, in the memory 210 change stored assignment of the vehicle to the person.

3rd shows an arrangement with the vehicle 300 , a digital rights management system 200 for the vehicle 300 according to an embodiment and the plurality of electronic keys 240 . In the 3rd are two electronic keys 240 mapped, which is in an interior of the vehicle 300 are arranged. The vehicle 300 has a display device 310 , for example a screen, and a human-machine interface 320 , for example touch-sensitive input elements. Furthermore, the digital rights management system 200 the memory 210 , the communication device 220 and the processor 230 on. Here is Communication device 220 in the vehicle 300 arranged throughout the store 210 and the processor 230 outside the vehicle 300 are arranged. For example, the memory 210 and the processor 230 through a backend of a manufacturer of the vehicle 300 provided. Furthermore, the communication device 220 and the processor 230 over a cellular connection 330 , such as a mobile radio connection in accordance with a Universal Mobile Telecommunications System (UMTS) standard or a Long Term Evolution (LTE) standard. Here, the communication device 220 be formed, the respective identifiers received via the mobile radio connection 330 to the processor 230 send out. In an alternative embodiment, the memory 210 and the processor 230 in the vehicle 300 be integrated. Furthermore, the method 100 using the in the 3rd shown arrangement can be performed.

The procedure 100 as well as the digital rights management system 200 can with a sale of the vehicle 300 be used. Here is in the digital rights management system 200 the vehicle 300 a previous holder, for example the seller, of the vehicle 300 assigned. The new owner, for example the buyer, of the vehicle 300 can using the procedure 100 the assignment of the vehicle 300 change to the previous holder.

According to one embodiment, the new holder of the vehicle 300 an implementation of the procedure 100 by means of the display device 310 and the human-machine interface 320 initiate. For example, the new holder selects a menu item in one using the display device 310 shown vehicle menu, the new holder reports via a by means of the display device 310 login mask shown or the new owner sets a setting of the vehicle 300 to a factory setting. The new holder can then be moved using the display device 310 a request to provide or present everyone on the vehicle 300 registered electronic key 240 are displayed. The new holder can also use the number of electronic keys 240 displayed on the vehicle 300 are registered. This enables the new owner to see whether he is buying or handing over the vehicle 300 all electronic keys 240 of the previous holder. To send out 130 the respective identifier of the respective electronic key 240 to initiate, the new holder can, according to a first alternative, successively for all electronic keys 240 an actuator, such as a button to open the vehicle 300 or a button for locking / unlocking a door lock of the vehicle 300 , actuate. According to a second alternative, the communication device can do this 220 or the vehicle 300 a request to send 130 the respective identifier of the respective electronic key 240 to the electronic keys 240 send out. It can also be determined whether the electronic key 240 in an interior of the vehicle 300 are located. The respective identifiers and the respective reference identifiers can then be processed by the processor 230 are compared with one another in order to obtain the respective comparison results. Furthermore, by means of the processor 230 the overall comparison result can be determined. If the overall comparison result is positive or the communication with all electronic keys was successful, the vehicle can be assigned 300 be changed to the previous holder. To change 180 the assignment of the vehicle 300 can assign the vehicle 300 to be deleted from the previous holder. Can also be changed 180 the assignment of the vehicle 300 the vehicle 300 be assigned to the new holder. It can be achieved that the procedure 100 only run when everyone is on the vehicle 200 registered electronic key 240 to be provided.

According to a further exemplary embodiment, the vehicle is before the sale 300 in the digital rights system 200 assigned to the seller. For example, the seller is the owner of the vehicle 300 registered and can use rights or rights to the vehicle 300 manage and / or delete. The seller has a total of five electronic keys 240 , for example vehicle keys, for the vehicle 300 . The buyer purchases the vehicle 300 and receives all five electronic keys upon purchase 240 of the seller. Using the procedure 100 the buyer can assign the vehicle 300 to the seller in the digital rights management system 200 change. For example, the buyer changes the owner of the vehicle 300 and, if necessary, deletes existing usage authorizations for the vehicle 300 . The procedure 100 can on the vehicle 300 can be initiated or requested, for example by means of the display device 310 and the human-machine interface 320 . Subsequently, on a means of the display device 310 User interface shown a prompt or message that all five electronic keys are displayed 240 are to be provided or submitted to the assignment of the vehicle 300 or change the holder. Now the vehicle can 300 or the communication device 220 try one after the other with all five electronic keys 240 to communicate, for example by performing of process steps 130 to 150 . If this has happened successfully or the overall comparison result is positive, the buyer can assign the vehicle 300 or the owner of the vehicle 300 in the digital rights management system 200 to change. After that, the buyer as a new owner can have full access to the vehicle 300 have and manage the usage rights.

4th shows an arrangement with a data processing device 400 , a digital rights management system 200 for the vehicle 300 according to an embodiment and the plurality of electronic keys 240 . In contrast to that in the 3rd arrangement shown are the display device 310 , for example a screen, the human-machine interface 320 , for example a keyboard, and the communication device 220 not in the vehicle 300 arranged but in the data processing device 400 integrated. Furthermore, the communication device 220 and the processor 230 over a data connection 410 , for example a Local Area Network (LAN) connection, a Wide Area Network (WAN) connection or an Internet connection, connected by communication. Here, the communication device 220 be formed, the respective identifiers received via the data connection 410 to the processor 230 send out. The data processing device 400 can be provided by an authority or body responsible for road traffic. Furthermore, the method 100 using the in the 4th shown arrangement by the buyer of the vehicle 300 carried out by the authority or body responsible for road traffic.

5 shows a schematic representation of a database 500 in which vehicles 300 People are assigned. Database 500 can through the digital rights management system 200 provided and / or managed digitally. For example, the database is in memory 210 saved.

Database 500 has a first table 510 in which data about the persons can be stored. Here, 510 person IDs of the persons can be stored in the left column of the first table. Furthermore, names of the persons can be stored in the middle column of the first table 510, while addresses of the persons 510 can be stored in the right column of the first table.

The database also points 500 a second table 520 on which data about the vehicles 300 can be saved. 520 vehicle identifiers of the vehicles can be found in the left column of the second table 300 get saved. Furthermore, 520 vehicle types of the vehicles can be found in the middle column of the second table 300 520 are stored in the right column of the second table 520 official license plates of the vehicles 300 can be saved.

Database 500 also has a third table 530 in which the vehicles 300 are assigned to the people. The vehicle identifiers of the vehicles can be found in the left column of the third table 530 300 are stored while in the right column of the third table 530 the personal identifications of the persons can be stored. Here, the vehicle 300 whose vehicle identification is stored in one line can be assigned to the person whose person identification is stored in the same line.

In some embodiments, can be changed 180 the assignment of the vehicle 300 For the person, the associated person ID in the right column of the third table 530 is replaced by a further person ID stored in the left column of the first table 510. For example, when the vehicle is sold 300 the personal ID of the previous owner is replaced by the personal ID of the new owner.

In some embodiments, a vehicle owner can use the method 100 in a memory of the vehicle 300 and in the digital rights management system 200 , which is provided for example by a backend, as the owner of the vehicle 300 Enter in order to receive rights that allow you to manage these rights and to assign user rights or authorizations. Here, the owner of the vehicle concerned 300 identify as such in order to gain unauthorized access, for example to the digital rights management system 300 to avoid for third parties. If the vehicle 300 Now the ownership changes, the buyer of the vehicle mentioned 300 who then became the new owner of this vehicle 300 is, have the ability to consider yourself the owner of the vehicle 300 to be entered.

In some embodiments, the method 100 authentication, for example of the person, is carried out and already in the vehicle 300 technology used as standard.

In some embodiments, the communication device 220 or the digital rights management system 200 particularly easy in vehicles 300 , like newer vehicles, can be integrated because communication with an electronic key 240 , such as a key or vehicle key, is already possible. This can the query of the electronic key 240 be implemented. Furthermore, used car buyers can be sure that the seller has all registered electronic keys 240 has given up.

In some embodiments, the method 100 and / or the digital rights management system 200 in all vehicles 300 with electronic keys 240 how digital keys, and / or mobile online services with connected rights management are used.

In some embodiments, the person can perform the method 100 on the vehicle 300 or on the digital rights management system 200 be authenticated.

In an alternative, the change 180 the assignment of the vehicle 300 be carried out without the use of safety precautions. Here, a user, for example the vehicle 300 or the digital rights management system 200 , after the purchase, for example of the vehicle 300 without asking the owner of the vehicle 300 change. For this purpose, the user selects an option in the user menu, for example a vehicle menu of the vehicle 300 , on and can then register as a holder. With this option, authentication before access can be omitted and anyone could easily register as a holder.

Another alternative can be to perform the change 180 the assignment of the vehicle 300 just an electronic key 240 or keys, especially for authentication, can be used. After selecting the function, the user can only use one electronic key 240 present to be able to register as a holder. Again, the vehicle can automatically use the electronic key 240 communicate or the user can press a specific key on the electronic key 240 actuate. This can be compared to changing 180 the assignment of the vehicle 300 without electronic key 240 a security can be increased. With the variant that all electronic keys 240 when the holder changes, it can be a lot more difficult for potential attackers to gain access to this feature.

In a further alternative, the method can be used 100 Furthermore, digital rights management for objects are provided which have a locking / unlocking device, the locking / unlocking device using an electronic key 240 can be locked / unlocked. For example, the object is a house or an apartment and the locking / unlocking device is an electronic door lock of a door of the house or apartment.

The above-described embodiments are merely illustrative of the principles of the present invention. It is to be understood that modifications and variations in the arrangements and details described herein will be apparent to those skilled in the art. Therefore, it is intended that the invention be limited only by the scope of the following claims and not by the specific details presented with the description and explanation of the embodiments herein.

Reference list

100

Procedure

110

Show

120

Provide

130

Send out

140

to compare

150

Determine

160

Capture

170

Send out

180

Change

190

Deny

200

digital rights management system

210

Storage

220

Communication device

221

antenna

230

processor

240

electronic key

300

vehicle

310

Display device

320

Human-machine interface

330

Cellular connection

400

Data processing device

410

Data Connection

500

Database

510

first table

520

second table

530

third table

Claims (8)

Method (100) for digital rights management for a vehicle (300), with: Providing (120) a plurality of electronic keys (240), the respective electronic keys (240) of the plurality of electronic keys (240) each having a respective identifier; Sending (130) the respective identifier of the respective electronic key (240) by the respective electronic key (240) for each electronic key (240) of the plurality of electronic keys (240); Comparing (140) the respective identifier sent with a respective reference identifier to obtain a respective comparison result for each of the respective identifiers sent; Determining (150) an overall comparison result based on the respective comparison results; and in the event of a positive overall comparison result, changing (180) an assignment of the vehicle (300) to a person in a digital rights management system (200); wherein the transmission (130) of the respective identifier of the respective electronic key (240) is carried out by the respective electronic key (240) in response to an actuation of an actuating device of the respective electronic key (240). Method (100) according to Claim 1 wherein the plurality of electronic keys (240) include all of the electronic keys (240) registered on the vehicle (300). Method (100) according to one of the preceding claims, with displays (110) of a request to provide the plurality of electronic keys (240). Method (100) according to one of the preceding claims, with detecting (160) a person identification of the person. Method (100) according to Claim 4 , with sending (170) the recorded person identification to the digital rights management system (200). Method (100) according to one of the preceding claims, with deletion of an assignment of the vehicle (300) to a further person in the digital rights management system (200). Method (100) according to one of the preceding claims, with administration of a usage authorization for a vehicle function of the vehicle (300) in the digital rights management system (200). Digital rights management system (200) for a vehicle (300), with: a memory (210) in which an association of the vehicle (300) with a person is stored; a plurality of electronic keys (240), the respective electronic keys (240) of the plurality of electronic keys (240) each having a respective identifier, and wherein the respective electronic keys (240) are formed, the respective identifier in response to an actuation send an actuating device of the respective electronic key (240); a communication device (220), which is designed to communicate with the plurality of electronic keys (240), the communication device (220) being designed, the respective identifier of the respective electronic key (240) of each electronic key (240) of the plurality of receive electronic keys (240); and a processor (230) configured to compare each of the received respective identifiers with a respective reference identifier in order to obtain a respective comparison result, to determine an overall comparison result based on the respective comparison results and, in the case of a positive overall comparison result, stored in the memory (210) stored assignment of the vehicle (300) to change the person.

Images