DE102019214221A1 - Device and method for authorizing the use of a vehicle - Google Patents

Abstract

The present invention relates to a device for a vehicle (40) and a method for authorizing use of the vehicle (40), having: an input interface for receiving a reference authorization signal from an external server; a detection unit for detecting an authorization signal output by a mobile device; an evaluation unit for comparing the authorization signal with the reference authorization signal and for generating a control command for using the vehicle based on the comparison; an output interface (24) for outputting the control command to a control unit (26) of the vehicle in order to enable use of the vehicle. The present invention also relates to a system (10), a mobile device (16) and a method for generating an authorization signal for using the vehicle (40).

Description

The present invention relates to a mobile device for authorizing the use of a vehicle, a device for a vehicle, a system and a method for keyless opening of a vehicle.

Modern vehicles (cars, vans, trucks, motorcycles, etc.) include a large number of systems that include electronic components and allow electronic and automated control of individual vehicle functions. Examples of this are the contactless opening of the vehicle with a vehicle key. In the simple variant, a release button on the key is pressed to open the vehicle over a distance of a few meters. In a further variant, the vehicle key can remain passive with the user. The user opens the vehicle by touching the door handles or by moving in front of ultrasonic sensors.

Since the vehicles also have electrical communication components, it is also possible to open the vehicle from an external central server, which is usually available from the manufacturer of the vehicle or from an authorized third-party provider. A control sequence can be sent directly from the server to the vehicle via a wireless network, for example the Internet or a cellular network such as GSM, 4G, LTE, 5G, etc. For this purpose, a vehicle user can call a central point and ask a service employee to send an opening command from the server to the vehicle. Alternatively, he can request an opening command to the vehicle from the server via a mobile device using an application. In both cases, proof of authorization is usually required.

In addition, systems are known, in particular in the case of rental vehicles or rental vehicles, which have a detection device in the vehicle. A user can log in using a chip card provided by the vehicle rental company.

However, many of these systems can be attacked or manipulated relatively easily, for example by so-called relay attacks, in which the communication between the key and the vehicle or the chip card and the vehicle are compromised. This also applies to vehicles that can be unlocked and opened using an application on a mobile phone.

The DE 10 2017 216 029 A1 therefore proposes to set up a parallel ultrasonic connection in addition to a radio connection between a portable electronic device and the vehicle. In this way, there are two communication paths between the mobile device and the vehicle that are more difficult to compromise. However, the system has the disadvantage that if the mobile device is generally influenced, these two communication paths can also be influenced. In addition, any user of the mobile device can gain access to the vehicle.

The WO 2015/176826 A1 describes a mobile device for opening a vehicle, the mobile electronic device receiving access authorization from a central platform. In addition, the electronic device receives proof of legitimation from the central platform if there is general authorization to access the vehicle. Proof of legitimation can be stored via online access to the server. To open a vehicle, the mobile device transmits the proof of identification and the access authorization to the vehicle so that it can be opened. In this way, by checking the proof of legitimation in the mobile device, it is excluded that any user of the mobile device can open the vehicle. However, it is disadvantageous that the same transmission path is used from the central platform to the mobile device. As soon as the mobile device itself is compromised or the transmission path between mobile device and vehicle is compromised and influenced, communication is insecure. Third parties can manipulate the opening of the vehicle by accessing the communication channel.

The WO 2011/053357 A1 also proposes an access system for a vehicle in which a vehicle reservation is made via a mobile electronic device.

After a verification of an existing authentication, access to the vehicle takes place. The mobile device is authenticated via a network from a central platform. The access and the reservation request are transmitted from the mobile device via a wireless communication link. However, this is susceptible to being accessed and influenced by third parties.

There is thus the challenge of proposing an improved system for authorizing the use of a vehicle which, in particular, ensures secure and reliable authentication and secure access to the vehicle.

• einem Sender zum Senden eines drahtlosen Anforderungssignals an einen externen Server zur Anforderung eines Autorisierungssignals;
• einem Empfänger zum Empfangen eines Autorisierungssignals von dem externen Server;
• einer Ausgabeeinheit zur Ausgabe des empfangenen Autorisierungssignals an das Fahrzeug.

To achieve this object, the invention relates in a first aspect to a mobile device for authorizing the use of a vehicle, with:

• a transmitter for sending a wireless request signal to an external server for requesting an authorization signal;
• a receiver for receiving an authorization signal from the external server;
• an output unit for outputting the received authorization signal to the vehicle.

• einer Eingangsschnittstelle zum Empfangen eines Referenz-Autorisierungssignals eines externen Servers;
• einer Erfassungseinheit zum Erfassen eines von einem Mobilgerät ausgegebenen Autorisierungssignals;
• einer Auswerteeinheit zum Abgleichen des Autorisierungssignals mit dem Referenz-Autorisierungssignal und zum Erzeugen eines Steuerbefehls zur Nutzung des Fahrzeugs basierend auf dem Abgleich;
• einer Ausgangsschnittstelle zum Ausgeben des Steuerbefehls an ein Steuergerät des Fahrzeugs, um eine Nutzung des Fahrzeugs zu ermöglichen.

In a further aspect, the present invention relates to a device for a vehicle for authorizing use of the vehicle, with:

• an input interface for receiving a reference authorization signal from an external server;
• a detection unit for detecting an authorization signal output by a mobile device;
• an evaluation unit for comparing the authorization signal with the reference authorization signal and for generating a control command for using the vehicle based on the comparison;
• an output interface for outputting the control command to a control unit of the vehicle in order to enable use of the vehicle.

• einer Empfangseinheit zum Empfangen eines Anforderungssignals von einem Mobilgerät;
• einer Generierungseinheit zum Erzeugen eines Autorisierungssignals für die Nutzung des Fahrzeugs und zum Erzeugen eines Referenz-Autorisierungssignals;
• einer Sendeeinheit zum Übermitteln des Autorisierungssignals an das Mobilgerät, das das Anforderungssignal gesendet hat, und zum Übermitteln des Referenz-Autorisierungssignals an das Fahrzeug.

In a further aspect, the present invention relates to a central computer or server for generating an authorization signal for using a vehicle, with:

• a receiving unit for receiving a request signal from a mobile device;
• a generation unit for generating an authorization signal for the use of the vehicle and for generating a reference authorization signal;
• a transmission unit for transmitting the authorization signal to the mobile device that sent the request signal, and for transmitting the reference authorization signal to the vehicle.

Furthermore, one aspect of the present invention relates to a system for authorizing use of the vehicle with a mobile device, a device and a server as described above.

Another aspect is directed to a vehicle with a device as described above.

• Senden eines drahtlosen Anforderungssignals von einem Mobilgerät an einen externen Server zur Anforderung eines Autorisierungssignals;
• Empfangen eines Autorisierungssignals von dem externen Server;
• Ausgeben des empfangenen Autorisierungssignals von dem Mobilgerät an das Fahrzeug;
• Empfangen eines Referenz-Autorisierungssignals mittels einer Vorrichtung von einem externen Server;
• Erfassen eines von dem Mobilgerät ausgegebenen Autorisierungssignals;
• Abgleichen des Autorisierungssignals mit dem Referenz-Autorisierungssignal;
• Erzeugen eines Steuerbefehls zur Nutzung des Fahrzeugs basierend auf dem Abgleich; und
• Ausgeben des Steuerbefehls an ein Steuergerät des Fahrzeugs, um eine Nutzung des Fahrzeugs zu ermöglichen.

In a further aspect, the invention relates to a method for authorizing use of the vehicle with the following steps:

• Sending a wireless request signal from a mobile device to an external server to request an authorization signal;
• Receiving an authorization signal from the external server;
• Outputting the received authorization signal from the mobile device to the vehicle;
• Receiving a reference authorization signal by means of a device from an external server;
• Detecting an authorization signal output by the mobile device;
• Matching the authorization signal with the reference authorization signal;
• Generating a control command for using the vehicle based on the comparison; and
• Outputting the control command to a control unit of the vehicle in order to enable use of the vehicle.

• Empfangen eines Anforderungssignals von einem Mobilgerät;
• Erzeugen eines Autorisierungssignals für die Nutzung des Fahrzeugs;
• Erzeugen eines Referenz-Autorisierungssignals;
• Übermitteln des Autorisierungssignals an das Mobilgerät, das das Anforderungssignal gesendet hat; und
• Übermitteln des Referenz-Autorisierungssignals an das Fahrzeug.

Furthermore, one aspect of the present invention relates to a method for generating an authorization signal for using a vehicle, with the following steps:

• Receiving a request signal from a mobile device;
• Generating an authorization signal for the use of the vehicle;
• Generating a reference authorization signal;
• Transmitting the authorization signal to the mobile device that sent the request signal; and
• Transmitting the reference authorization signal to the vehicle.

Another aspect of the invention relates to a computer program product with program code for performing the steps of the method when the program code is executed on a computer, as well as a storage medium on which a computer program is stored which, when executed on a computer, executes the the method described therein.

Preferred embodiments of the invention are described in the dependent claims. It goes without saying that the features mentioned above and those yet to be explained below can be used not only in the respectively specified combination, but also in other combinations or on their own, without departing from the scope of the present invention. In particular, the procedures and the Computer program product for the device and the system for authorizing a use of the vehicle and the vehicle itself can be designed in accordance with the configurations described in the dependent claims.

The device according to the invention for a vehicle for authorizing the use of the vehicle has the advantage that, in addition to the presence of an authorization signal that is transmitted by a mobile device, there must also be a corresponding reference authorization code or reference authorization signal received from an external server becomes. Here, the reference authorization signal and the authorization signal must correspond or agree with one another. This agreement is verified in a comparison. Only then is a control command for using the vehicle generated, i.e. only if the comparison is positive. It is advantageous here that the device for the vehicle, which is usually installed in the vehicle, receives the reference authorization signal via a different channel or path than the authorization signal. The reference authorization signal is sent from an external server to the device in the vehicle. Sending is preferably carried out via a mobile network, for example a mobile radio network or via mobile Internet. Other mobile networks such as satellite signals, radio signals, GSM, LTE, 4G, 5G signals are possible.

The authorization signal is transmitted directly via the mobile device. Communication takes place between the device and the mobile device. In principle, several or different transmission paths are conceivable here. For example, the authorization signal could take place via near field communication (NFC), via Bluetooth, WLAN or ultrasound or the like. Transmissions on certain designated frequencies are also possible.

Since the transmission of the reference authorization signal and the authorization signal takes place in two different and independent ways, compromising the transmission of the signals is not possible or is almost impossible. An attack by unauthorized persons and third parties is much more difficult. The system is therefore significantly more secure than known systems. As a result, unauthorized persons cannot compromise the transmission because two different and independent transmission paths are used.

The security can be further increased if the data transmission between the external central server and the vehicle and / or the transmission from the mobile device to the vehicle are encrypted. Common encryption methods can be used for this. It is also conceivable that a token or secret key (e.g. software key) is stored in the vehicle. These elements can be integrated in the vehicle in the form of software or hardware-coded. When communicating over the Internet, common encryption methods such as HTTPS encryption and secure communication channels can be used.

The device according to the invention has the further advantage that authorized use of the vehicle is made possible even without the vehicle key. If an authorized user does not have a key, for example because he has forgotten or lost it, he is still able to use his vehicle. Instead of the vehicle key, the authorization code is used, which is generated by a server and then transmitted to a mobile device. The vehicle key can thus be replaced by means of the communication between the mobile device and the device installed in the vehicle. The device and the system, which includes the device, the mobile device and the server, are therefore suitable, in particular, for rental vehicles or rental vehicles in which different users are provided with a mostly time-limited option of use. Since the authorization signal is a digital signal that is not tied to a physical object, the authorization to use the vehicle can be distributed among different people without having to exchange a physical vehicle key between the individual users.

The server according to the invention has the advantage that it generates both an authorization signal and a corresponding reference authorization signal and transmits both signals independently of one another to two different units. On the one hand, the reference authorization signal is transmitted directly to the vehicle or the device in the vehicle. The device can be integrated into a component or control unit provided in the vehicle or into a control device. The reference authorization signal is used to compare and confirm the authorization signal. On the other hand, the authorization signal itself is transmitted to the mobile device that sent the request to generate such an authorization signal. This ensures that the authorization code is only transmitted to the requesting mobile device and on a second path.

The authorization signal is preferably a vehicle-specific code. It is preferably individual and unique. A new request to issue an authorization signal will generate a new and also unique authorization signal. The authorization signal can be encrypted or be coded. It can comprise different sectors in order to transmit further information in addition to the pure authorization information, for example a time stamp or information from the requesting mobile device or information about the vehicle for which the specific authorization signal was generated.

The authorization signal is preferably provided with a time-limited period of validity. The use of the authorization signal is then limited in time, so that authorization to use or open the signal can only take place within a predefined, fixed period of time. The time-limited period of validity can depend on the type of authorization or the use of the vehicle. If the use of the vehicle is restricted, for example, to opening the vehicle, the period of validity for the authorization code can be significantly shorter than in the case of use that includes driving the vehicle. It is also possible for the authorization signal to provide and permit multiple opening of the vehicle.

In a preferred embodiment, the authorization signal and the reference authorization signal are identical. The identity can be determined by a simple comparison. The authorization signal and reference authorization signal are preferably different. They can preferably be encrypted. Very preferably, the reference authorization signal cannot be generated from the authorization signal. The same applies in reverse. If one of the signals has been intercepted or compromised, it is not possible to generate the corresponding signal. This increases the security of the signal transmission. The authorization signal and reference authorization signal also preferably correspond to one another. For example, they can contain the same information; however, the form of representation can be different. This can already be necessary because the transmission paths between the authorization signal and the reference authorization signal differ from one another. For example, it can be possible that the reference authorization signal is only completed or has to be completed by a further addition in order to enable a comparison with the authorization signal. The addition for completion can be stored in the vehicle, for example in a control unit, a memory unit or in a programmable module or chip, for example also hardware-coded.

In a preferred embodiment of the mobile device according to the invention, this is designed to receive authorization signals which have a time-limited validity. The authorization signal is preferably output by the output unit within its time-limited validity and transmitted to the vehicle in order to prove the authorization of use.

In a preferred embodiment of the mobile device, the transmitter is designed to send an authorization signal to the server. The authorization signal serves as proof of the authorization that an authorization signal may be requested. Without the presence of an authorization signal and a positive check of the authorization signal in the server, the creation of an authorization signal in the server can be refused. The authorization signal can take different forms. For example, it could be an individual code, for example a combination of numbers, a current photo of a registered user taken with a camera of the mobile device, or a similar authorization feature.

The server preferably comprises a receiving unit, which is preferably designed to receive an authorization signal from the mobile device. In a preferred embodiment, the server has a checking unit which decides whether a valid authorization signal is present. This decision is made on the basis of the authorization signal. The generation of the authorization signal and / or the reference authorization signal by means of the generation unit of the server preferably depends on the outcome of the check. The signals are only generated if there is a valid authorization signal.

In a preferred embodiment of the server, a verification code is stored. The server preferably comprises a memory unit in which the verification code is deposited and stored. The verification code is used to check the validity of the authorization signal. The verification code can be, for example, a user account created by an authorized user and the data stored therein. The verification code can be based on all or some of this data. It is conceivable that an encrypted code, for example a hash code, is generated from the stored data, which serves as a verification code and is used to check the validity of the authorization signal. The authorization signal itself can also be based on data entered by the user, for example address, place of birth, date of birth or similar personal data. The authorization signal can be generated from some or all of this data. For example, it can be in the form of an encrypted signal. It can also include video signals, image signals or audio signals.

In a preferred embodiment of the mobile device, the output unit is a screen, to display the received authorization signal. An image based on the authorization signal can also be displayed on the screen. For example, the image can be a QR code or some other code that contains authorization information. The authorization signal can be in the form of a video signal or an image signal. For example, the authorization signal can be an image sequence that includes several images, or a switching sequence in which the screen is switched light and dark and the information is stored in the switching frequency or the switching cycle or is modulated to the corresponding switching frequencies or cycles. Alternatively and also preferably, the output unit of the mobile device can be a loudspeaker via which audio signals are output. The authorization signal or a signal based on the authorization signal is preferably in the form of an audio signal; these can be tones or tone sequences, for example.

In a preferred embodiment of the device, the detection unit of the device is designed accordingly. The acquisition unit is preferably a camera in order to acquire an authorization signal displayed on the screen of the mobile device or a video signal or image based on the authorization signal. For this purpose, one of the cameras installed in the vehicle is preferably used, for example a camera for recognizing the surroundings, such as is used, for example, in parking assistance systems or systems for autonomous driving or driver assistance systems (ADAS).

Alternatively and also preferred is a device in which the detection unit comprises a microphone in order to detect an authorization signal stored as an audio signal or tone sequence.

In a preferred embodiment of the device, the input interface for receiving the reference authorization signal and the acquisition unit for acquiring the authorization signal from the mobile device can be integrated in a common component.

The input interface of the device according to the invention preferably comprises security mechanisms in order to prevent unauthorized penetration of other signals. Known security mechanisms can be used here, for example a firewall, stored security keys and a key management function, and similar known components. The input interface can be integrated in a microprocessor or a programmable logic module. The logic module can have a secure boot function, a secure flash / update and other security mechanisms. Such a microprocessor or programmable module can enable secure internal and external communication, in particular secure wireless communication. For example, a token or a similar security key in the form of software or hardware implementation can also be included in the module. The same applies to the acquisition unit, which can also be present as a microprocessor or programmable memory module. Appropriate security mechanisms can also be provided here. For example, the detection unit can include the camera. The data recorded by the camera can be transmitted to a memory module or to a control unit via secure internal vehicle communication. The control device, for example a professional artificial intelligence chip, can also include a firewall or a key management system. Keys or similar security mechanisms can be stored in a secure flash / update. Hardware security modules can be present in order to implement hardware-coded security measures. The communication between the detection unit, in particular the camera, and the control module or a control unit can take place via a CAN bus, a LIN bus or similar bus connections or internal communication connections or an Internet connection.

In a preferred embodiment, the evaluation unit for comparing the authorization signal with the reference authorization signal is also designed as a microprocessor or programmable memory module. The evaluation unit can be a system-on-chip or it can be integrated into other modules or control devices. The control command is preferably generated in the evaluation unit on the basis of the authorization signal. Different possible uses of the vehicle can be provided depending on the authorization signal.

Use of the vehicle may include unlocking any or all of the doors. However, further use can also be stored, for example starting the engine, switching on the electrical and electronic devices and components, repeatedly locking and opening the vehicle and similar or other vehicle functions. A time-limited or time-limited use is just as possible as a numerical limitation of the use, so that, for example, the engine can only be started once or several times.

• 1 eine schematische Darstellung eines Systems gemäß einem Aspekt der vorliegenden Erfindung;
• 2 eine schematische Darstellung eines Systems gemäß einem weiteren Aspekt der vorliegenden Erfindung;
• 3 eine schematische Darstellung der Vorrichtung gemäß einem Aspekt der vorliegenden Erfindung;
• 4 ein Ablaufdiagramm des Verfahrens zur Autorisierung einer Nutzung gemäß der Erfindung; und
• 5 ein Ablaufdiagramm des Verfahrens zum Erzeugen eines Autorisierungssignals gemäß der Erfindung.

The invention is described and explained in more detail below using a few selected exemplary embodiments in connection with the accompanying drawings. Show it:

• 1 a schematic representation of a system according to an aspect of the present invention;
• 2 a schematic representation of a system according to a further aspect of the present invention;
• 3 a schematic representation of the device according to one aspect of the present invention;
• 4th a flowchart of the method for authorizing a use according to the invention; and
• 5 a flowchart of the method for generating an authorization signal according to the invention.

1 shows a system according to the invention 10 with a device 12th to authorize the use of a vehicle, a server 14th and a mobile device 16 .

The device according to the invention 12th has an input interface 18th for receiving a reference authorization signal from the external server 14th . The device 12th further comprises a detection unit 20th to select one from the mobile device 16 to detect issued authorization code or an authorization signal. In one evaluation unit 22nd the detected authorization signal is compared with the received reference authorization signal. In the event of a positive adjustment, i.e. when the two signals correspond to one another, the evaluation unit 22nd a control command for using the vehicle is generated based on the comparison. The control command is sent via an output interface 24 to a control unit 26th of the vehicle to enable use of the vehicle. The control unit 26th can for example be a control device that initiates and controls the unlocking of a door of the vehicle.

The registration unit 20th can have different configurations to the authorization signal from the mobile device 16 capture. For example, the detection unit can be a camera built into the vehicle.

The server according to the invention 14th comprises a receiving unit 28 to receive a request signal from the mobile device 16 to recieve. The request signal is used to generate an authorization signal for the use of a vehicle by the mobile device 16 requested. If there is a request signal, a generation unit 30th an authorization signal for the use of a vehicle is generated. The generation unit 30th generates a reference authorization signal corresponding to the authorization signal. The authorization signal and reference authorization signal preferably form a common pair. A transmitter unit 32 transmits the authorization signal to the mobile device 16 that sent the request signal. The transmission unit continues to transmit 32 the reference authorization signal to the device 12th of the vehicle. The transmitter unit 32 can be a communication unit and consist of several elements, for example because a different unit or different elements can be provided for the transmission to the mobile device than for the transmission of the reference authorization signal to the vehicle. The generation unit is preferred 30th designed to provide the reference authorization signal and / or the authorization signal with a time limit. Thus, both or one of the two signals have a time-limited validity. Other restrictions are possible.

The mobile device 16 includes a transmitter 34 to send a request signal to the server 14th to be transmitted so that the server is requested to generate an authorization signal for the use of the vehicle. By means of a recipient 36 of the mobile device 16 becomes an authorization signal from the external server 14th receive. Channel 34 and recipient 36 can be integrated in a common communication unit. An output unit 38 of the mobile device 16 is used to output the received authorization signal to the vehicle. The mobile device 16 can be, for example, a mobile phone or smartphone that has a screen. The output unit 38 can then be, for example, the screen on which the authorization signal is displayed and thus output.

2 shows the inventive system according to another aspect of the invention. 2 shows a vehicle 40 with the device according to the invention 12th that in a central unit 42 is integrated. The central device 42 includes further control devices, for example a vehicle control unit 44 and an Artificial Intelligence unit that acts as an AI unit 46 is designated.

The vehicle 40 includes a camera on its front 48 , which supplies sensor data for autonomous driving functions. Additional cameras can be installed in the vehicle 40 also be installed, for example behind the windscreen in the area of the rear-view mirror, at the rear of the vehicle or on the exterior mirrors. These are used for parking functions.

The camera 48 can be part of the registration unit 20th or be linked to it, so that the sensor data of the camera 48 to the registration unit 20th reach. For example, as a smartphone 50 trained mobile device 16 puts on its display (screen 51 ) represents a received authorization signal in the form of a QR code. A user holds now the screen 51 of the smartphone 50 in front of the camera 48 that captures the image and the image data to the capture unit 20th the device 12th transmitted. In this way, there is a direct visual transmission of the authorization signal in the form of the QR code to the vehicle 40 instead of. As an alternative to the QR code, the smartphone 50 also play other images or sequences of image sequences that contain the authorization signal.

If necessary, the vehicle can 40 are in a "sleep mode" in which the cameras are switched to inactive. A user must then first bring the vehicle from sleep mode into standby or active mode in which the camera 48 Receives images and to the registration unit 20th forwards. For example, the vehicle can be “woken up” by the user at the vehicle 40 wobbles. It is also possible that the vehicle 40 exits sleep mode as soon as a reference authorization signal from the server 14th to the vehicle 40 is transmitted (external wake-up). It is possible that the activity state in which the cameras 48 work is limited in time to save electricity and energy.

The server 14th includes next to the receiving unit 28 , the transmitter unit 32 and the generation unit 30th also a review unit 52 , in which an authorization signal, for example from the mobile device 16 can be transmitted is checked for validity. The server preferably comprises 14th a storage unit 54 , in which a verification code can be stored, which is used to check the validity of the authorization code. The authorization code is obtained from the smartphone 50 to the verification unit 52 transmitted and preferably by means of the receiving unit 28 receive. The authorization code is used to prove that a user is authorized to request an authorization code. A comparison or comparison of the authorization code with that in the memory unit can be carried out 54 stored verification code. For example, the verification code can be an account created by a user in which various data of a user are stored. The authorization code can include part of this data in order to prove the authorization of the user. It is also conceivable that bidirectional communication between the server 14th and the smartphone 50 takes place, with random parts of the information stored as a verification code in the storage unit 54 are stored, requested by the user and transmitted in the form of an authorization code. This makes the system more secure as a whole, since a further check takes place.

It can be provided that for the generation and transmission of the request signal to the server 14th an application on the smartphone 50 is used. The application can send the authorization code. This application and / or the smartphone itself can be protected and locked so that unlocking can only take place after the user has been authenticated.

The embodiment of the system 10 according to 2 preferably comprises an external central computer 56 which can be operated, for example, by a third party provider. It is possible that a user has to create a user account whose data is in a memory 58 in the central computer 56 get saved. This can be a prerequisite for using the vehicle 40 is possible regardless of the physical key. The user account can also be used for billing purposes. The data or a verification code can be obtained from the central computer and its communication unit 60 to the server 14th be transmitted. In this case it could be on the storage unit 54 in the server 14th be waived. The server 14th requests a verification code directly from the central computer 56 if an authorization code is to be transmitted and verified. In this way, a billing system for the keyless use of the vehicle can be easily implemented. The billing can take place depending on whether only opening the vehicle 40 is desired or driving the vehicle 40 . The central computer 56 can also update software for the application on the smartphone 50 as well as other network services such as configurations, billing, management functions, security queries and data protection functions.

3 shows a particular embodiment of the device according to the invention 12th that are in the central unit 42 is embedded. The device 12th is part of a vehicle communication unit 62 that via a communication interface 64 has to allow the vehicle to communicate with the server 14th , the central computer 56 or to enable other external computer units and communication units.

The vehicle communication unit 62 can provide preferred security mechanisms, for example hardware security modules, a firewall, key management for encrypted communication and secure flash updates. This ensures secure communication with the outside world, but also within the vehicle 40 possible.

The vehicle communication unit 62 is with the vehicle control unit 44 and the AI unit 46 connected. The AI unit 46 controls via a CAN bus connection 66 and / or an Ethernet connection 68 several sensors and components for an autonomous or semi-autonomous one Driving function or a driver assistance system (Advanced Driver Assistance System, ADAS). For example, a radar control unit 70 controlled or a camera control unit 72 that with the camera 48 of the vehicle 40 communicates.

The vehicle control unit 44 controls different actuator controls or actuators, for example a brake control unit 74 , an engine control unit 76 , a steering control unit 78 and a door opening controller 80 . These control units are connected via a CAN bus 66 and / or via an Ethernet connection 68 controlled. The connections are preferably secured so that they cannot be compromised from the outside. Depending on the authorization signal, the device according to the invention can 12th a signal to the vehicle control unit 44 send this to the door opening control 80 controls to the doors of the vehicle 40 to unlock or open. If the authorization signal also allows the engine to be started and the vehicle to be steered as well as the vehicle to be driven away, the corresponding engine control unit is activated 76 , the steering control unit 78 and the brake control unit 74 controlled.

In the 4th a method according to the invention for authorizing use of the vehicle is shown schematically. Use of the vehicle 40 can be opening the doors or moving and driving away with the vehicle 40 include. The method comprises the steps of sending S10 a wireless authorization signal from a mobile device 16 to a server 14th for requesting an authorization signal, receiving S12 an authorization signal from the server 14th , of outputting S14 the received authorization signal from the mobile device 16 to the vehicle 40 , of receiving S16 a reference authorization signal by means of a device 12th from the server 14th , S18 acquiring one from the mobile device 16 output authorization signal, the comparison S20 of the authorization signal with the reference authorization signal, the generation S22 of a control command for using the vehicle based on the comparison and the output S24 of the control command to a control unit 26th of the vehicle 40 to use the vehicle 40 to enable. The output of the control command to a control unit 26th can for example be an output to the vehicle control unit 44 which in turn send the control command or a modified control command to, for example, the door opening control 80 forwards.

In the 5 is a schematic of a method according to the invention for generating an authorization signal for using a vehicle 40 shown. The method comprises the steps of receiving S40 an authorization signal from a mobile device 16 , the generation S42 of an authorization signal for the use of the vehicle 40 , generating S44 a reference authorization signal, transmitting S46 the authorization signal to the mobile device 16 that sent the request signal and transmitting S48 the authorization signal to the vehicle 40 .

The individual steps of the procedures according to the 4th and 5 do not need to be performed in the order listed. Some steps can be done in a different order. The methods can be implemented, for example, as software that is executed on a vehicle control device, a vehicle central computer, an electronic control unit or an electronic control unit. Individual steps are carried out on different devices, but within the same system.

The invention has been comprehensively described and explained with reference to the drawings and the description. The description and explanation are to be understood as examples and not restrictive. The invention is not limited to the disclosed embodiments. Other embodiments or variations will become apparent to those skilled in the art after using the present invention and after carefully analyzing the drawings, the disclosure and the following claims.

In the claims, the words “comprising” and “having” do not exclude the presence of further elements or steps. The undefined article “a” or “an” does not exclude the presence of a plural. A single element or a single unit can perform the functions of several of the units mentioned in the patent claims. An element, a unit, an interface, a device and a system can be implemented partially or completely in hardware and / or in software. The mere mention of some measures in several different dependent patent claims should not be understood to mean that a combination of these measures cannot also be used advantageously. A computer program can be stored / distributed on a non-volatile data carrier, for example on an optical memory or on a semiconductor drive (SSD). A computer program can be distributed together with hardware and / or as part of hardware, for example by means of the Internet or by means of wired or wireless communication systems. Reference signs in the patent claims are not to be understood as restrictive.

List of reference symbols

10

system

12th

contraption

14th

server

16

Mobile device

18th

Input interface

20th

Registration unit

22nd

Evaluation unit

24

Output interface

26th

Control unit

28

Receiving unit

30th

Generation unit

32

Sending unit

34

Channel

36

receiver

38

Output unit

40

vehicle

42

Central device

44

Vehicle control unit

46

AI unit

48

camera

50

Smartphone

51

screen

52

Verification unit

54

Storage unit

56

Central computer

58

Storage

60

Communication unit

62

Vehicle communication unit

64

Communication interface

66

CAN bus connection

68

Ethernet connection

70

Radar control unit

72

Camera control unit

74

Brake control unit

76

Engine control unit

78

Steering control unit

80

Door opening control

QUOTES INCLUDED IN THE DESCRIPTION

This list of the documents listed by the applicant was generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Patent literature cited

• DE 102017216029 A1 [0006]
• WO 2015/176826 A1 [0007]
• WO 2011/053357 A1 [0008]

Claims (15)

Mobile device (16) for authorizing the use of a vehicle (40), with: a transmitter (34) for sending a wireless request signal to an external server (14) for requesting an authorization signal; a receiver (36) for receiving an authorization signal from the external server (14); an output unit (38) for outputting the received authorization signal to the vehicle (40). Mobile device (16) Claim 1 wherein the output unit (38) comprises a screen (51) for displaying the authorization signal or an image based on the authorization signal or comprises a loudspeaker for outputting the authorization signal or a tone sequence based on the authorization signal. Mobile device (16) according to one of the preceding claims, wherein the received authorization signal has a time-limited validity and the output unit (38) outputs the authorization signal within the time-limited validity. Mobile device (16) according to one of the preceding claims, wherein the transmitter (34) is designed to send an authorization signal to the server (14) to prove the authorization to request an authorization signal. Device (12) for a vehicle (40) for authorizing use of the vehicle (40), with: an input interface (18) for receiving a reference authorization signal from an external server (14); a detection unit (20) for detecting an authorization signal output by a mobile device (16); an evaluation unit (22) for comparing the authorization signal with the reference authorization signal and for generating a control command for using the vehicle (40) based on the comparison; an output interface (24) for outputting the control command to a control device (26) of the vehicle (40) in order to enable use of the vehicle (40). Device (12) after Claim 5 wherein the detection unit (20) is a camera (48) in order to detect an authorization signal displayed on a screen (51) or is a microphone in order to detect a tone sequence based on the authorization signal. Server (14) for generating an authorization signal for the use of a vehicle (40), with: a receiving unit (28) for receiving a request signal from a mobile device (16); a generation unit (30) for generating an authorization signal for the use of the vehicle (40) and for generating a reference authorization signal; a transmission unit (32) for transmitting the authorization signal to the mobile device (16) which sent the request signal, and for transmitting the reference authorization signal to the vehicle (40). Server (14) Claim 7 , wherein the authorization signal and / or the reference authorization signal have a time-limited validity. Server (14) Claim 7 or 8th , wherein the receiving unit (28) is designed to receive an authorization signal from the mobile device (16); and the server (14) comprises a checking unit (52) which is designed to decide, based on the authorization signal, whether a valid authorization signal is present, the generation of the authorization signal and the reference authorization signal in the generation unit (30) as a function the review takes place. Server (14) Claim 9 wherein the server (14) comprises a memory unit (54) in which a verification code is stored which is used to check the validity of the authorization signal. System (10) for authorizing use of the vehicle (40) with a mobile device (16) according to one of the Claims 1 to 4th , with a device (12) according to one of the Claims 5 to 6th and with a server (14) according to one of the Claims 7 to 10 . Vehicle (40) with a device (12) according to one of the Claims 5 or 6th . A method for authorizing use of a vehicle (40), comprising the following steps: sending a wireless request signal from a mobile device (16) to an external server (14) for requesting an authorization signal; Receiving an authorization signal from the external server (14); Outputting the received authorization signal from the mobile device (16) to the vehicle (40); Receiving a reference authorization signal by means of a device (12) from an external server (14); Detecting an authorization signal output by the mobile device (16); Matching the authorization signal with the reference authorization signal; Generating a control command for using the vehicle (40) based on the comparison; and Outputting the control command to a control device (26) of the vehicle (40) in order to enable use of the vehicle (40). Method for generating an authorization signal for the use of a vehicle (40), comprising the following steps: Receiving a request signal from a mobile device (16); Generating an authorization signal for the use of the vehicle (40); Generating a reference authorization signal; Transmitting the authorization signal to the mobile device (16) that sent the request signal; and Transmitting the reference authorization signal to the vehicle (40). Computer program product with program code for performing the steps of the method according to Claim 13 or 14th when the program code is executed on a computer.

Images