DE102022210717A1 - Method for a vehicle, computer program, device and vehicle - Google Patents

Abstract

A method for a vehicle, a computer program, a device and a vehicle are proposed. The method includes receiving confidential data from a user of the vehicle, encrypting the data using an encryption technique intended for encrypting data within the vehicle and providing the encrypted data.

Description

The present invention relates to a method for a vehicle, a computer program, a device and a vehicle. In particular, but not exclusively, embodiments of the present invention relate to a method for encrypting data.

Future vehicles will increasingly be equipped with computer technology and sensors to automatically monitor and analyze occupants and the environment. Wireless (5G, WIFI, WLAN, etc.) and wired (e.g. charging cables for electric vehicles) connections can be used for data transmission. The data can then be used in the vehicle or in the cloud (e.g. an external security office, headquarters, service) for overall monitoring.

EN 10 2019 131 118 A1 proposes a system and method for evaluating the operation of vehicle environmental sensing systems. A computer system is in wireless communication with a plurality of vehicles, each of the vehicles equipped with suitable environmental sensors. Environmental reports are sent from the autonomous vehicles to the computer system using a V2X (vehicle to anything) protocol or the like, and concern such things as worn line markings, obstacles on the roadway, and other conditions. The computer system is configured to evaluate the environmental reports received for accuracy. A comparison is made with similar environmental reports, and if there are few or no such reports for the location, an indication is reported to the vehicle that the vehicle's sensors may have a problem. The evaluation may be presented with a certain degree of confidence taking into account various factors, such as frequency of vehicles passing the location, weather, time of day, etc.

EN 10 2016 213 682 B3 proposes a method for securing a property or residential area using vehicles. The vehicle consists of a processor, at least one sensor connected to the processor, a short-range communication device and/or a long-range device, wherein the short-range communication device and/or the long-range device are designed to communicate with at least one first server with a first database. Steps are provided for detecting an activation signal which indicates that the first vehicle is on the property or in the residential area, capturing image data and/or sensor data which are triggered by an object on the property or in the residential area and within the field of view of the at least one sensor, carrying out an object classification based on the image data and/or sensor data to determine an object class of the object, wherein the object class is one of the object classes of at least (i) person and (ii) vehicle. The underlying task here is to improve the quality of monitoring a building or property by communicating vehicles with little additional circuitry effort.

EP 3 015 335 A1 proposes a system for a vehicle comprising a sensor configured to sense information associated with the environment and/or condition of the vehicle. The sensor is configured to output a sensor signal based on the sensed information. The vehicle comprises a processor configured to receive the sensor signal, determine haptic feedback for the system to be displayed based on the sensor signal, and output a haptic control signal. The vehicle further comprises a haptic output device configured to receive the haptic control signal from the processor and generate the haptic output signal.

In addition, more and more electronic personal data is being generated. Such data can be stored using a cloud solution or in local systems and storage media. However, particularly confidential data often cannot be adequately protected against unauthorized access.

There is therefore a need to provide improved encryption for confidential data. This need is addressed by the method, the computer program, the device and the vehicle according to the independent claims.

Embodiments are based on the core idea that encryption techniques that are provided in vehicles for critical, internal vehicle data, for example, are used to encrypt user data. The duration of data storage can depend on various criteria, for example a data class, legal requirements, whether a car-sharing vehicle or a private vehicle is used, personal settings, etc. In addition, data can also be released intentionally, e.g. for authentication. Furthermore, the communication channels provided by the vehicle can also be used here, for example radio connections that are used for software. re-updates (e.g. for “over the air” updates) and/or encrypted connections to different participants (government participants, personal contacts, fleet communications, etc.).

Embodiments relate to a method for a vehicle. The method includes receiving confidential data from a user of the vehicle, encrypting the data using an encryption technology intended for encrypting data within the vehicle, and providing the encrypted data. This allows the vehicle technology to be used to secure user data and provide a digital safe for the user. Compared to local data storage on user devices or cloud storage, the method with the (high-end) technology installed in the vehicle (and possibly regular updates) can increase the protection of data against data theft or loss and reduce the costs for high-quality data storage. In addition to the hardware and software, the vehicle's connection technology can also be used, which is used, for example, for connections to a cloud (e.g. direct vehicle connections or connections via mobile devices).

In one embodiment, the data is encrypted based on a hardware encryption method, a software encryption method, or a combination of the hardware encryption method and the software encryption method. This allows the confidential data to be stored and managed securely, depending on the availability of the encryption techniques.

In one embodiment, the method further comprises receiving an indication of a security relevance of the data and determining an encryption depth based on the security relevance. The data is encrypted with the determined encryption depth. The data can therefore be classified into security levels depending on confidentiality, for example by a user input or an automatic (e.g. rule-based) classification. Data with a low security relevance can, for example, be encrypted more weakly than data with a high security relevance, which can enable a saving of processor power in the vehicle.

In one embodiment, the method further comprises linking the data to at least one of one or more biometric markers of the user (e.g. Face ID (facial identification) or a fingerprint) and/or a password. Providing the data comprises releasing the encrypted data by means of authentication based on the at least one of the user's biometric marker and the password. The method can thus improve authorization control for access to the data.

In one embodiment, the method further comprises determining the biometric marker using an environmental sensor of the vehicle. Existing sensors in/on the vehicle can thus be used to support authorization control. This can avoid the need for additional sensors and thus save resources. For example, interior sensors can also be used here. It is conceivable that the user is only at the vehicle and not in the vehicle for data processing. Especially with buses, several people can connect to the bus that enters a secure company premises and thus the identification is completed without stopping, everyone identifies themselves at the (digital) turnstile and gets back on the same bus behind the entrance.

In one embodiment, providing the data includes backing up the data in a data storage device in the vehicle. This allows the data to be better protected against data loss. A time period for which the data is retained (duration of data storage) can be defined, for example, by law or individually.

In one embodiment, the data storage comprises network-attached storage. The method can thus reduce the effort required to share the data on one or more user devices.

Embodiments relate to a computer program for carrying out a method according to the invention when the computer program runs on a computer, a processor, or a programmable hardware component. Distributed computing technology, for example with partial cloud integration, can also be used.

Embodiments relate to a device for a vehicle. The device comprises an interface circuit that is designed to receive confidential data from a user of the vehicle. The device further comprises a processing circuit that is designed to encrypt the data using an encryption method provided for encrypting data within the vehicle and to provide the encrypted data. As a result, the vehicle technology can be used to secure user data and provide a digital safe for the user. Compared to local data storage on user devices or cloud storage, the device with the (high-end) technology installed in the vehicle can increase the protection of data against data theft or loss and reduce the costs of high-quality data storage. In addition, data backup can be made independent of a cloud and a connection to it. This means that a data backup option can be maintained, especially in crisis situations with infrastructure failures.

Embodiments relate to a vehicle comprising a device according to the invention. The vehicle can use the vehicle technology installed in the vehicle to secure user data and thus provide a digital safe for the user.

• 1 ein Flussdiagramm eines Beispiels eines Verfahrens für ein Fahrzeug;
• 2 ein Blockdiagramm eines Beispiels einer Vorrichtung für ein Fahrzeug; und
• 3 ein Blockdiagramm eines Beispiels eines Fahrzeugs.

Examples of embodiments are explained in more detail below with reference to the accompanying figures. They show:

• 1 a flowchart of an example of a method for a vehicle;
• 2 a block diagram of an example of a device for a vehicle; and
• 3 a block diagram of an example vehicle.

Various embodiments will now be described in more detail with reference to the accompanying drawings, in which some embodiments are illustrated. In the figures, the thickness dimensions of lines, layers and/or regions may be exaggerated for clarity.

1 shows a flowchart of an example of a method 100 for a vehicle. The method 100 can be carried out, for example, by a processor installed in the vehicle.

The method 100 includes receiving 110 confidential data of a user of the vehicle. For example, a communication interface of the vehicle can establish a wireless (e.g. 5G (from English "5th Generation", WIFI (from English "Wireless Fidelity"), WLAN (from English "Wireless Local Area Network")) or wired data connection (e.g. via a charger) to a user terminal (e.g. smartphone or laptop) of the user and the user terminal can transmit the confidential data to the communication interface via the data connection.

The data can, for example, be transferred locally to the interface (wirelessly) from a user’s mobile device when the user gets into the vehicle.

The data may have been classified as confidential, for example, by a user input. Alternatively, the method 100 may include an automated classification of the data, through which the data has been classified as confidential. Confidential data may include secret, personal or person-specific information of the user, for example a digital birth certificate of the user. The confidential data may be data linked to a digital identity of the user and originate from a digital wallet (cyberwallet) of the user.

The method 100 further includes encrypting 120 the data using an encryption technique intended for encrypting data within the vehicle. The encryption can be carried out, for example, by a vehicle processor (e.g. in a central control unit of the vehicle). The encryption technique can be intended, for example, to encrypt sensor data, status data or control data of the vehicle. The encryption technique can be any technique for implementing encryption, e.g. encryption by digital signature, asymmetric encryption, symmetric encryption.

The method 100 further includes providing 130 the encrypted data.

The method 100 can make it possible to use the vehicle technology to secure user data and to provide a digital safe for the user. In comparison to local data storage on user devices or cloud storage, the method 100 with the (high-end) technology installed in the vehicle can increase the protection of the data against data theft or loss and reduce the costs for high-quality data storage. In addition, the method 100 can enable the data to be stored "offline" if Internet access to the cloud server (for example via mobile communications) is not available.

In one embodiment, the data is encrypted based on a hardware encryption method, a software encryption method, or a combination of the hardware encryption method and the software encryption method. This allows the confidential data to be stored and managed securely, depending on the availability of the encryption techniques.

A hardware encryption method can be understood as any encryption method in which a hardware component (encryption hardware) encrypts data. The hardware encryption method can For example, enable encryption within a drive or storage medium (self-encryption).

For example, the hardware encryption method can enable trusted encryption in a trusted execution environment of a vehicle processor. The hardware encryption method can reduce processor utilization, increase encryption speed, or increase encryption depth. In addition, the hardware encryption method can protect data from key tampering and unauthorized code.

A software encryption method can be understood as any encryption method in which software encrypts data. With the software encryption method, encryption can be carried out, for example, using processor resources shared (with other functions). The software encryption method can provide simple and inexpensive encryption. A combination of hardware and software encryption can provide additional protection of the data.

In one embodiment, the method 100 further comprises receiving an indication of a security relevance of the data and determining an encryption depth based on the security relevance. The data is encrypted with the determined encryption depth. The data can therefore be divided into security levels depending on confidentiality, for example by a user input or an automatic (e.g. rule-based) classification. For example, the classification can change when crossing a border, as shown by the European Union's General Data Protection Regulation. For example, data with low security relevance can be encrypted more weakly than data with high security relevance, which can enable a saving of processor power in the vehicle.

The encryption depth can be a measure of the number of possible keys of the encryption method (i.e. the size of the key space) or a measure of the number of elementary operations required to break the encryption.

In one embodiment, the method 100 further comprises linking the data to at least one of one (or more) biometric markers of the user and a password. Providing the data comprises releasing the encrypted data by means of authentication based on the at least one of the user's biometric marker and the password. The biometric marker and/or the password can, for example, be determined/queried in order to grant access to the data. The method 100 can thus improve authorization control for access to the data.

In one embodiment, the method 100 further comprises determining the biometric marker using an environmental sensor of the vehicle. The biometric marker can be determined, for example, using facial recognition by a camera of the vehicle. Existing sensors in the vehicle can thus be used to support authorization control. This can avoid the need for additional sensors and thus save resources.

The vehicle can thus serve as a personal data safe, which can also be used for identification purposes. For example, a digital birth certificate can be transmitted via a wireless connection to a user's mobile device or wearable. The vehicle's perception of the environment can allow data to be released using personal characteristics. This means that data can also be transmitted to crisis teams, such as an emergency doctor.

In one embodiment, providing 130 the data includes backing up the data in a data storage device of the vehicle. This allows the data to be better protected against data loss.

The data backup can be carried out when a certain condition occurs, at the user's request, or at certain (e.g. regular) time intervals. The data backup can be based on various backup strategies. For example, the data can be regularly synchronized with a user terminal or different versions of the data can be recorded. The method 100 thus enables the data to be kept in parallel, which can be used, for example, for data recovery or for mirroring the data in another user terminal of the user. The method 100 can also contribute to long-term data backup of the data.

In one embodiment, the data storage comprises a network-attached storage. The method can thus reduce the effort required to share the data on one or more user devices. In addition, the method 100 can thus make the confidential data available to the user without a cloud connection. The vehicle can, for example, form a shared computer network with the user's home network or another shared home network and make the data available in the shared network.

Further embodiments relate to a computer program for carrying out a method according to the invention, for example method 100, when the computer program runs on a computer, a processor, or a programmable hardware component.

2 shows a block diagram of an example of a device 200 for a vehicle. The device 200 comprises an interface circuit 210 which is designed to receive confidential data from a user of the vehicle. The device 200 further comprises a processing circuit 220 which is designed to encrypt the data using an encryption method provided for encrypting data within the vehicle and to provide the encrypted data. As a result, the vehicle technology can be used to secure user data and provide a digital safe for the user. Compared to local data storage on user devices or cloud storage, the device 200 with the (high-end) technology installed in the vehicle can increase the protection of the data against data theft or loss and reduce the costs for high-quality data storage. For example, data can be distributed if manipulation is detected (cloud, other vehicles, mobile devices) and, if necessary, the vehicle can move away from the location autonomously or emit a corresponding signal. If the specific data owner is not nearby, a wireless connection to the mobile device can be established. In order to prevent manipulation, it can be provided that a mobile device can only read a data type, a data type, etc., but the data itself is stored in the vehicle.

Further details and aspects of the device 200 are mentioned in connection with the above-described embodiments of a method according to the invention, such as method 100. The 2 The embodiment of the device 200 shown may comprise one or more optional additional features corresponding to one or more aspects that are related to the proposed technique or one or more of the above (e.g. with reference to 1 ) described embodiments.

The device 200 according to the invention may be a local computing device, such as a central computer of the vehicle, with one or more processors and one or more storage devices, or may be a distributed computing system (e.g., a cloud computing system with one or more processors or one or more storage devices distributed at different locations, for example, at a local client and/or one or more remote server farms and/or data centers).

The inventive device 200 may include any circuit or combination of circuits. In one embodiment, the device 200 may include one or more processors, which may be of any type. As used herein, processor may mean any type of processing circuit, such as, but not limited to, a microprocessor, a microcontroller, a complex instruction set microprocessor (CISC), a reduced instruction set microprocessor (RISC), a very long instruction word (VLIW) microprocessor, a graphics processor, a digital signal processor (DSP), a multi-core processor, a field programmable gate array (FPGA), or any other type of processor or processing circuit. Other types of circuits that may be included in the device 200 may be a custom-built circuit, an application specific integrated circuit (ASIC), or the like, such as one or more circuits (e.g., a communications circuit) for use with wireless devices.

The device 200 may include one or more storage devices, which may include one or more storage elements suitable for the particular application, such as main memory in the form of read-only memory (RAM), one or more hard drives, and/or one or more disk drives handling removable media such as CDs, flash memory cards, DVDs, and the like. The device 200 may also include a display device, one or more speakers, and a keyboard and/or controller, which may include a mouse, trackball, touch screen, voice recognition device, or any other device that allows a system user to enter information into and receive information from the device 200.

Some or all of the method steps may be performed by (or using) a hardware device, such as a processor, a microprocessor, a programmable computer, or an electronic circuit. In some embodiments, one or more of the key method steps may be performed by such a device.

Depending on particular implementation requirements, embodiments of the invention may be implemented in hardware or software. The implementation may be performed with a non-volatile storage medium such as a digital storage medium such as a floppy disk, a DVD, a Blu-Ray, a CD, a ROM, a PROM and EPROM, an EEPROM or a FLASH memory, on which electronically readable control signals are stored that cooperate (or can cooperate) with a programmable computer system to perform the respective method. Therefore, the digital storage medium may be computer readable.

Some embodiments according to the invention comprise a data carrier with electronically readable control signals that can interact with a programmable computer system so that one of the methods described herein is carried out.

In general, embodiments of the present invention can be implemented as a computer program product with a program code, wherein the program code is effective for carrying out one of the methods when the computer program product is running on a computer. The program code can be stored, for example, on a machine-readable carrier.

Further embodiments include the computer program for carrying out one of the methods described herein, which is stored on a machine-readable medium. In other words, an embodiment of the present invention is therefore a computer program with a program code for carrying out one of the methods described herein when the computer program runs on a computer.

Another embodiment of the present invention is a storage medium (or a data carrier or a computer-readable medium) comprising a computer program stored thereon for carrying out any of the methods described herein when executed by a processor. The data carrier, digital storage medium or recorded medium is typically tangible and/or non-transitory. Another embodiment of the present invention is an apparatus as described herein comprising a processor and the storage medium.

A further embodiment of the invention is a data stream or a signal sequence that represents the computer program for carrying out one of the methods described herein. The data stream or the signal sequence can, for example, be configured to be transmitted via a data communication connection, for example via the Internet.

Another embodiment includes a processing means, for example a computer or a programmable logic device, configured or adapted to perform any of the methods described herein.

A further embodiment comprises a computer on which the computer program for carrying out one of the methods described herein is installed.

A further embodiment according to the invention comprises a device or system configured to transmit (e.g. electronically or optically) a computer program for carrying out one of the methods described herein to a recipient. The recipient may, for example, be a computer, a mobile device, a storage device or the like. The device or system may, for example, comprise a file server for transmitting the computer program to the recipient.

In some embodiments, a programmable logic device (e.g., a field programmable gate array, FPGA) may be used to perform some or all of the functionality of the methods described herein. In some embodiments, a field programmable gate array may cooperate with a microprocessor to perform any of the methods described herein.

3 shows a block diagram of an example of a vehicle 300 comprising a device 310 according to the invention. The vehicle 300 can provide the vehicle technology installed in the vehicle 300 for securing user data and thus a digital safe for the user.

List of reference symbols

100

Proceedings

110-130

Process steps

200

contraption

210

Interface circuit

220

Processing circuit

300

vehicle

310

contraption

QUOTES INCLUDED IN THE DESCRIPTION

This list of documents listed by the applicant was generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions.

Cited patent literature

• DE 102019131118 A1 [0003]
• DE 102016213682 B3 [0004]
• EP 3015335 A1 [0005]

Claims (10)

Method (100) for a vehicle, comprising: Receiving (110) confidential data of a user of the vehicle; Encrypting (120) the data using an encryption technique intended for encryption of vehicle-internal data; and Providing (130) the encrypted data. Procedure (100) according to Claim 1 , where the data is encrypted based on a hardware encryption method, a software encryption method, or a combination of the hardware encryption method and the software encryption method. Method (100) according to one of the preceding claims, further comprising: receiving an indication of a security relevance of the data; and determining an encryption depth based on the security relevance, wherein the data is encrypted with the determined encryption depth. Method (100) according to one of the preceding claims, further comprising linking the data to at least one of a biometric marker of the user and a password, wherein providing (130) the data comprises releasing the encrypted data by means of authentication based on the at least one of the biometric marker of the user and the password. Procedure (100) according to Claim 4 , further comprising determining the biometric marker by means of an environmental sensor of the vehicle. Method (100) according to one of the preceding claims, wherein providing (130) the data comprises performing a data backup of the data in a data storage device of the vehicle. Procedure (100) according to Claim 6 , where the data storage comprises network-attached storage. Computer program for carrying out a method according to one of the preceding claims, when the computer program runs on a computer, a processor, or a programmable hardware component. Device (200) for a vehicle, comprising: an interface circuit (210) designed to receive confidential data of a user of the vehicle; and a processing circuit (220) designed to: encrypt the data using an encryption method provided for encrypting data within the vehicle; and provide the encrypted data. Vehicle (300) comprising a device (310) according to Claim 9 .

Images