EP3256994A1

EP3256994A1 - System for identifying a user of a rental car

Info

Publication number: EP3256994A1
Application number: EP16701035.4A
Authority: EP
Inventors: Alexander P. Sator
Original assignee: Sapfi Kapital Management GmbH
Current assignee: Sapfi Kapital Management GmbH
Priority date: 2015-02-13
Filing date: 2016-01-20
Publication date: 2017-12-20
Also published as: WO2016128191A1

Abstract

The invention relates to a system for identifying a user of a vehicle of a rental car or car sharing service, comprising means for determining user identification information, means for comparing said user identification information to first entries in an identification database and for determining a first correspondence between said user identification information and one of the first entries in said identification database, means for enabling, upon determining said first correspondence, at least one operating function of said vehicle, wherein said means for determining user identification information comprise mean for sensing a biometrical value of the user.

Description

System for identifying a user of a rental car

FIELD OF THE INVENTION

The present invention relates to a system and a method for identifying a user of a vehicle of a rental car or car sharing service.

Rental car or car sharing services provide a plurality of vehicles to a plurality of users. The users of this kind of services are usually registered with a respective rental car or car sharing service provider. During registration, the user is required to provide certain user information about himself, such as the user's name, age, an identification of the driver's licence or similar identification information. Once registered, the user is assigned, by the service provider, a respective service identification number. This service identification number may be temporary and only valid for a single use, for example in case of a rental car service, or permanent and valid for as long as the user remains registered with the service, for example in case of a car sharing service.

The basic idea of these rental car or car sharing services is that different users are not bound to using only one respective vehicle assigned to respective user, but may select from a plurality of vehicles. Such a selection may be based on different parameters, such as a location of a user or an application of a vehicle (transport of goods, transportation of passengers, etc). BACKGROUND OF THE INVENTION

In conventional rental car or car sharing services, a user applies for usage of a respective vehicle either locally at the service provider or via the Internet or other means of (distance) communication. The user is hereby requested by the service provider to identify oneself, for example by providing the name and service identification number. Such an identification of a user is needed, because the provider of a rental car or car sharing service wishes be informed which user is using which vehicle at which time and at which location for security, insurance and billing reasons, equally.

Nowadays, the provision and accessing of a vehicle by the user is often not performed locally at the service provider. However, also in these cases the service provider has to receive identification information about the user applying for (and using) a respective vehicle. Conventionally, such identification is performed by means of an identification (ID- ) card provided to the user upon registration. These ID-cards usually employ technologies such as radio frequency identification (RFID). The ID-card is hereby read by a respective reading means accommodated in the vehicle. The reading result is then communicated to and processed by an identification system, which is preferably provided within the vehicle management system. Said identification system may then determine whether the user is permitted to use the vehicle or not.

Alternatively or additionally, identification of a user may be achieved by requesting the user to enter a key, such as a personal identification number (PIN) into a respective terminal at the vehicle. This PIN is processed by the identification system in a similar manner as described above, in order to identify the user requesting access to the respective vehicle.

An example of such a conventional user identification method is disclosed in US patent US 8768565 B2. In particular, the patent discloses an access and management system and method of a vehicle of a rental car or car sharing service which utilises barcodes, QR codes, NFC/RFID, GPS and a mobile application which is coupled with a wireless network to enable the users to bypass the reservation desk and pickup and drop off reserved vehicles of the rental car or car sharing service at the service provider using a mobile phone, tablet or laptop. In accordance with this patent, the QR code, RFID or NFC communication with the mobile application allows for identification of the vehicle by a mobile application, which, if authorised, can access the vehicle via a temporary access code issued by remote servers. The drawback of such a use of an ID-card or a PIN is that these identification means may be misused by passing them on to a third person that is not registered with the rental car or car sharing service. Such a misuse puts the service provider at a great risk, as he has no longer any control whether or not the vehicle driver corresponds to the registered user. This might for example lead to situation, in which the vehicle driver not corresponding to the respective user causes an accident with the vehicle of the car sharing or rental car service or is discovered driving without a driver's licence.

GENERAL OVERVIEW

It is therefore an object of the invention to provide a system and a method for identifying a user of a vehicle of a rental car or car sharing service that decreases the risk of misuse and allows for a more efficient and secure identification of the user.

This object is achieved by a system for identifying a user of a vehicle of a rental car or car sharing service, comprising means for determining user identification information, means for comparing said user identification information to first entries in an identification data- base and for determining a first correspondence between said user identification information and one of the first entries in said identification database and means for enabling, upon determining said first correspondence, at least one operating function of said vehicle. The system in accordance with the invention is hereby characterized in that said means for determining user identification information comprise means for sensing a biometrical value of the user.

In accordance with the invention, the system for identifying a user of a vehicle may preferably be provided as part of the vehicle management system of the respective vehicle. Alternatively or additionally, the system, or parts thereof, may be provided by an external device communicatively connected with said vehicle management system. As such, the system, or parts thereof, may also be located at a remote server of the service provider or in a terminal device provided to the user.

An identification database may be a hardware component comprising storage means provided within the vehicle of the rental car or car sharing service. When a user is registered with a rental car or car sharing service provider, a user provides certain user identi- fication information. This information is stored as a first entry that corresponds to the respective user identification information in an identification database. Thus, the identification database comprises the first entries corresponding to user identification informa- tion of a plurality of users that are permitted to use the service. In order to achieve regular updates of these first entries the identification database may be communicatively connected to a respective update means, such as a remote server, at the service provider. This connection is preferably a wireless connection. The identification database may then either be regularly updated via the connection after pre-defined time intervals or updated each time a user requests an access to a respective vehicle. This identification database may be comprised in the system for identifying the user or it may be communicatively connected to it. As such, the identification database may be comprised in the vehicle management system of the vehicle or it may be an external entity either located in the vehicle or at a remote location, for example at the service provider.

The means for comparing the user identification information to first entries in the identification database and for determining a first correspondence may preferably be a processing module comprised in the identification database. Alternatively, the means for compar- ing and determining may be an entity external to the identification database and communicatively connected to it.

These means for comparing and determining are configured to compare the determined user identification information with the first entries in the identification database. Subsequently, the means for comparing and determining determine whether one of the first entries corresponds to the determined user identification information or not. If one of the first entries corresponds to the user identification information, the means for comparing and determining provide a respective first correspondence to the system and allow the system to identify said user. This user identification then verifies the user's permission to use the vehicle of the rental car or car sharing service. On the other hand, if the means for comparing and determining do not find a first correspondence between one of the first entries and the user identification information, no such first correspondence is provided to the system. Therefore, a verification of the user's permission may not be obtained.

In accordance with the invention, the system further comprises means for enabling at least one operating function of the vehicle if the first correspondence is determined, i.e. if the user is permitted to use the service. Operating functions of the vehicle may include a deactivation of the vehicle's alarms, unlocking of the vehicle's doors, a starting of the vehicle's engine or similar measures. Multiple operating functions may be enabled one after another after determination of the first correspondence. Alternatively, more than one operating function may be enabled simultaneously. A first operating function may be enabled in response a first user identification process and a second operating function may be enabled in response to a second user identification process. Further operating functions may be enabled simultaneously, one after another or in response to further user identification processes.

In accordance with the invention, the means for determining user identification information comprise means for sensing a biometrical value of the user. A biometrical value of the user may be the pattern of one or both irises of a user, a fingerprint of a user, a user's voice or similar biometric figures unique to a respective individual. The means for sensing a biometrical value of the user preferably comprise a sensor for sensing a user's fingerprint and/or a sensor for capturing images of one or both of the irises of a user's eyes and/or a sensor for recognising a user's voice.

Upon registration of a user at the rental car or car sharing service, a certain biometrical value is obtained and added to the user identification information. The user identification information is then provided as a respective one of the plurality of first entries to the identification database. Accordingly, the user identification information and the first entries in the identification database each comprise the respective biometrical value. In order to identify the user, the respectively provided biometrical value is sensed by the means for sensing said biometrical value during an identification process. The sensed biometrical value of the user is then compared with the biometrical values provided in the plurality of first entries in the identification database and a first correspondence may be determined.

Since biometrical values are unique for each individual, this identification is capable of uniquely and unambiguously identifying the user, thereby improving the efficiency and security of the user identification and decreasing the risk of misuse. The means for sensing a biometrical value may be the sole means for determining user identification information. Alternatively, the means for sensing a biometrical value may be provided in addition to further, conventional means for determining user identification information, such as a terminal for entering a PIN or a card reader for reading an ID-card employing RFID. Such a combination of different means for determining user identifica- tion information might help to improve security of the identification process even more.

In a further embodiment of the system, the means for sensing a biometrical value of the user comprise at least one fingerprint sensor. In this case, the user provides his finger- print upon registration with the rental car or car sharing service and this fingerprint is added to the user identification information and to the respective first entry of the user identification database.

This arrangement has the advantage that fingerprint measurements are already well- known in some everyday applications, for example in cases of providing user information to certain institutions, particular service providers or even for usage of a user's smart phone. Therefore, the use of this identification measure is generally more easily accepted by users than for example iris recognition.

According to a further embodiment, the identification database is a central identification database and said identification database communicates with a plurality of vehicles over a first plurality of bi-directional communication paths, wherein the system further comprises means for providing vehicle identification information indicative of an identity of a respective vehicle of said plurality of vehicles, means for associating said user identification information and the vehicle identification information with one another, means for comparing said vehicle identification information to second entries in said identification database and for determining a second correspondence between said vehicle identification information and one of the second entries in said identification database and means for enabling, upon determining the second correspondence, at least one operating function of the vehicle that is indicated by said vehicle identification information. In this embodiment the identification database is implemented as a central identification database associated with the rental car or car sharing service provider. This central identification database is configured to communicate with a plurality of vehicles belonging to said service provider via a first plurality of bi-directional communication paths to mutually exchange data. In this context, a communication with a vehicle is to be understood as a communication with the vehicle management system and/or the system for identifying a user as provided within the vehicle.

The central identification database has the advantage that the service provider does not need to regularly update a plurality of databases distributed over a plurality of locations and/or a plurality of vehicles in order to keep the database up-to-date in case of changes in the first entries. Rather, the service provider may periodically update the single central identification database. If a user requests to access and use one of the vehicles belonging to the plurality of vehicles of the rental car or car sharing service, i.e. the "vehicle network", a communication is established via one of the first plurality of bi-directional communication paths. The first plurality of bi-directional communication paths are preferably provided as wireless connections.

In this embodiment the user identification information provided from a vehicle to the central information database is associated with the respective one of the vehicles available in the vehicle network in order to check whether this vehicle may be used (or is damaged or otherwise unavailable). In order to achieve such an association, the system further comprises means for providing vehicle identification information and means for associating said vehicle identification information with the user identification information. These means are preferably implemented as part of the vehicle management system.

The vehicle identification information may be provided as a vehicle name, a vehicle code or as the vehicle identification number (VIN) that is an individual number provided for each vehicle during the manufacturing process. The vehicle identification information identifies each vehicle uniquely and unambiguously. The user identification information and the vehicle identification information associated with one another are communicated via one of the first plurality of bi-directional communication paths together. The central identification database comprises second entries that correspond to the vehicle identifica- tion information.

At the central identification database, the user identification information is compared to the first entries and the vehicle identification information is compared to the second entries. Subsequently, a respective first correspondence for the user identification information and a second correspondence for the vehicle identification information may be determined. In case a first correspondence and second correspondence are determined, the second correspondence is used to identify the vehicle. The first correspondence is then provided over a selected one of the first plurality of bi-directional communication paths to the vehicle that is indicated by the second correspondence, whereby at least one respective function of said vehicle may be enabled. In case a first and/or second corre- spondence is not determined, the at least one vehicle function is not enabled and the user may not use the requested vehicle.

The vehicle identification information may also comprise further information such as the vehicle's status with respect to particular damages. In such a case, if the vehicle status changes, the vehicle identification information does not correspond to the respective one of the second entries in the central identification database any longer. This implementation has the further advantage that it is possible for a rental car or car sharing service provider to prevent further use of a damaged vehicle before the vehicle has been checked by the service provider and the central identification database has been updated accordingly.

In an even further embodiment, the system further comprises means for comparing the user identification information to permission entries of a permission database and for determining a third correspondence between said user identification information and one of the entries in the permission database and means for disabling, if said third correspondence can not be determined, the at least one enabled operating function of the vehicle.

In this embodiment a permission database is provided comprising respective permission entries. The permission database may be provided as a hardware device comprising storage means accommodated in the vehicle and communicatively connected to the vehicle management system and/or the system for identifying a user of the service. Alternatively, the vehicle management system may comprise the permission database. The permission entries of a permission database are preferably provided by a competent authority, such as the competent driver's licence authority.

If the permission database is accommodated in the vehicle, the permission database is further communicatively connected to the respective competent authority for periodically or instantly updating the permission entries. Respective first permission entries correspond to the user identification information or a subset of information thereof. Preferably, these first permission entries contain information regarding a respective user's capability of driving a car, such as the validity of the user's driver's licence. In accordance with this embodiment, the user identification information is not only communicated to the identification database, but also to the permission database. At the permission database the user identification information is compared to first permission entries and a third correspondence between the user identification information and one of the entries in the permission database may be determined. In case the third correspon- dence is determined - e.g. it is determined that the user has a valid drivers licence - the third correspondence is communicated to the system for identifying the user. The system then maintains the at least one previously enabled operating function of the vehicle. However, if a third correspondence cannot be determined, the system is notified that the third correspondence could not be found. In this case, the system disables the at least one enabled operating function of the vehicle.

This embodiment has the further advantage that in addition to verifying a user's permission to use a vehicle of the rental car or car sharing service from a service provider's point of view a second parameter is checked in order to determine a user's capability to drive the vehicle. This cross-checking of two parameters (service permission and authorisation) significantly improves security of the rental car or car sharing service.

The previous embodiment may be improved such that the permission database is a central permission database, wherein said central permission database communicates with said plurality of vehicles over a second plurality of bi-directional communication paths.

Preferably, the central permission database is located on a remote location, for example directly at the competent authority. If a user requests access and use of a particular vehicle, the respective user identification information is provided to the central permission database via one of the second plurality of bi-directional communication paths. At the central permission database the user identification information is compared to the permission entries and a third correspondence is determined or is not determined. The result of this comparison and determination is then provided to the vehicle via the second plurality of bi-directional communication paths. Based on said result and the respective user identification information the at least one enabled operating function of the vehicle is either maintained or disabled.

This embodiment has the advantage that the competent authority may directly and constantly update the permission entries in the permission database thereby providing an efficient and up-to-date permission database without any necessity a complex update procedure for each vehicle within a plurality of vehicles individually.

In a further embodiment the system comprises means for tracking at least one usage parameter, means for associating the at least one usage parameter with said user identification information and means for logging, in a service database, the at least one usage parameter. In accordance with this embodiment, the system tracks at least one usage parameter for a respective user. The usage parameter preferably comprises the time of use, the time span for which the vehicle was used, the kind of transportation route, for example whether it is a country road or a motorway, the location where the vehicle is used, for example in a city, suburban or interurban, the speed of the vehicle and possible speeding by the user, or similar information. Preferably, the tracking may be performed by using a transmitter accommodated in the vehicle. This transmitter preferably utilises conventional tracking means such as the Global Positioning System (GPS). The means for tracking are preferably activated when the means for enabling at least one operating function of the vehicle enable the at least one operating function of the vehicle. Alternatively, the means for tracking may be activated when the first, second and/or third correspondence are communicated to the means for enabling at least one operating function of the vehicle.

The tracked usage parameters are associated with the user identification information of the particular user and provided to a service database. Subsequently, they are logged in the service database. A service database in accordance with this embodiment is provided by the rental car or car sharing service provider. It may be an additional database or it may be integrated with the identification database provided by the service provider. The database may be a storage device inside the vehicle. In such a case the service provider preferably accesses the database periodically in order to obtain the usage parameters logged thereon.

The system according to the previous embodiment may be improved such that it com- prises means for determining, on the basis of the at least one usage parameter, payment information and for associating said payment information with the user identification information that is associated with the at least one usage parameter.

In accordance with this improvement, the system is configured for determining payment information for a respective user on the basis of the usage parameters and of providing this payment information associated with the user identification information to the service provider. This embodiment has the further advantage of allowing for an individualised billing for each user of the rental car or car sharing service, depending exactly on where, when, how and for which purposes the user has used the vehicle.

The system according to the previous embodiment may be further improved such that the service database is a central service database and the central service database communicates with the plurality of vehicles over a third plurality of communication paths. The central service database is preferably located at a remote location, for example at the service provider. This central database is configured to communicate with each of the plurality of vehicles of a service provider, or a subset thereof, via a respective one of a third plurality of bi-directional communication paths. The central service database may be integrated with the central identification database or it may be a separate entity.

This embodiment has the advantage that only a single central service database has to be accessed to obtain the plurality of usage parameters for a plurality of respective users. In this kind of arrangement, the service provider may therefore quickly and easily access a complete set of information without having to read out a database at each of the plurality of vehicles.

In a further embodiment the at least one fingerprint sensor is implemented in a terminal device, whereby the terminal device communicates with a selected one of the plurality of vehicles over a respective bi-directional terminal communication path.

The previous embodiment may be improved such that parts of the system for identifying a user of a rental car or a car sharing service are accommodated within a terminal device, such as a remote control provided by the service provider to the user upon registration or a smart phone comprising a fingerprint sensor. In this arrangement, the fingerprint of a user is determined by the terminal device. The fingerprint sensor within the terminal device may be used in addition to a fingerprint sensor accommodated in the vehicle or as an alternative to it.

Preferably, the terminal device provides the sensed fingerprint as user identification information, or a part thereof, to the identification database for comparison and determination of the first correspondence. This communication is established by a bi-directional terminal communication path. The advantage of this embodiment may be a faster access to the vehicle by the user, since the user has not necessarily to be close to the vehicle to initiate the first steps for accessing it.

According to one particular implementation of this embodiment, the at least one fingerprint sensor is implemented in a smart phone. In this case, the bi-directional terminal communication path is provided by a specifically tailored smart phone application that establishes a connection between the vehicle, i.e. the vehicle management system, and the smart phone. The application may also be used to inform the users about the availability of the vehicles of the service and provide further information about each specific vehicle, such as possible damages, tidiness, the fuel level or similar information. Further to that, the application may also provide the user with user-specific information such as monthly costs, costs for a respective use or possible refunds.

The terminal device in accordance with the previous embodiment may be improved such that it further comprises at least one of the means for determining user identification information, the means for comparing the user identification information to first entries in an identification database and/or the means for determining a first correspondence between the user identification information and one of the first entries in said identification database. In accordance with this improvement, further functionalities of the system are transferred to the terminal device. In this case, in order to properly operate the terminal device has to be configured to communicate with the identification database. This communication may be achieved via the bi-directional terminal communication path between the terminal device and the vehicle. If the information database is a central database, the terminal device may be configured to communicate with said central identification database via the bi-directional terminal communication path as well. This may be achieved by using the vehicle as an intermediate communication client. Alternatively or additionally, an additional bi-directional communication path between the terminal device and the central identification database may be provided. In one particular implementation when a smart phone is used as the terminal device, the application providing the communication with the vehicle may also be used to provide a bi-directional communication path between the central identification database and/or the service provider, either via the vehicle as intermediary client or via a direct communication path established between the smart phone an the central identification database. Such a direct communication path may for example be established via the Internet.

In a further embodiment the bi-directional terminal communication path is implemented by at least one of a wireless connection or a cable connection. Thus, the terminal device may be communicatively connected to the vehicle via a wireless connection, such as an infrared connection, a Bluetooth connection or an Internet connection, or via a cable that is connected to a connector of the terminal device and the vehicle, respectively. A possible connector at the vehicle site is a USB-connector. In an even further embodiment the user identification information comprises at least one of a user's name, a user's service identification number, a user's age or a user's driver's license number. Thus, the user identification information may, in addition to the biometri- cal value, further comprise various further identification information related to that particu- lar user. The user identification information may comprise a multitude of the above cited elements or only one or a subset thereof. In accordance with this aspect, the user identification information may be tailored to each service provider's requirements.

In a further embodiment the at least one function of the vehicle comprises at least one of a deactivation of a vehicles alarms, an opening of the vehicle's doors or a starting of the vehicle's engine. In accordance with this embodiment, the plurality of functions of the vehicle that may be enabled or disabled in response to the comparison of the user identification information with the first entries and the permission entries and the determination of a respective first and third correspondence may include at least one of the deactivation of a vehicle's alarms, an opening of its doors or a starting of its engine. Similarly, it may include any of these functions.

In an even further embodiment the vehicle identification information comprises at least a vehicle identification number (VIN) of the vehicle.

In a further embodiment, the usage parameter comprises at least one of a roadway or a vehicle speed. As a further aspect of the present invention, a method for identifying a user of a vehicle of a rental car service or of a car sharing service is provided, the method comprising the steps of:

^■ determining user identification information by means of a biometrical value;

^■ comparing said user identification information to first entries in an identification da- tabase;

^■ determining a first correspondence between said user identification information and one of the first entries in said identification database; and

^■ upon determining said first correspondence, enabling at least one operating function of said vehicle. This method may be improved such that the identification database is a central identification and the method further comprises the steps of:

• providing a first plurality of bi-directional communication paths between said identification database and a plurality of vehicles;

• providing vehicle identification information indicative of an identity of a respective vehicle of the plurality of vehicles;

• associating said user identification information and said vehicle identification information with one another;

• comparing said vehicle identification information to second entries in said identification database;

• determining a second correspondence between said vehicle identification information and one of the second entries in said identification database; and

• upon determining the second correspondence, enabling at least one operating function of the vehicle that is indicated by said vehicle identification information.

According to a further embodiment, the method comprises the steps of:

• comparing said user identification information to entries of a permission database;

• determining a third correspondence between said user identification information and one of the entries in said permission database; and

• if said third correspondence can not be determined disabling said at least one enabled operating function of the vehicle.

In an even further embodiment, the method comprises the steps of

• tracking at least one usage parameter; • associating the at least one usage parameter with said user identification information;

• logging, in a service database, the at least one usage parameter;

• on the basis of the at least one usage parameter determining payment information; and

• associating said payment information with the user identification information that is associated with the at least one usage parameter.

As an even further aspect, the present invention relates to a computer program product that, when executed by processing means of a processing device, prompts said processing device to execute the steps of the method according to any or all of the preferred embodiments of the invention.

The invention further relates to an application to be executed by processing means of a terminal device which, when executed by said processing means of a terminal device, prompts said terminal device to execute at least one of the steps of the method according to any or all of the preferred embodiments of the invention.

The above embodiments are to be understood exemplary and not limiting. The concept of the invention will become apparent on the basis of the attached drawings and the description thereof.

DETAILED DESCRIPTION

Figure 1 : Schematic diagram of a system for identifying a user of a vehicle of a rental car or car sharing service in accordance with a first exemplary embodiment.

Figure 2: Flowchart of the method for identifying a user of a vehicle of a rental car or a car sharing service in accordance with the first exemplary embodiment.

Figure 3: Schematic diagram of a system for identifying a user of a vehicle of a rental car or car sharing service in accordance with a second exemplary embodiment. Figure 4: Flowchart of the method for identifying a user of a vehicle of a rental car or a car sharing service in accordance with the second exemplary embodiment.

Figure 5: Schematic diagram of a modification of the system for identifying a user of a vehicle of a rental car or car sharing service in accordance with the second exemplary embodiment.

Figure 1 shows an first exemplary embodiment of the system 1 for identifying a user of a vehicle 20 of a rental car or car sharing service. In this particular embodiment, the system 1 is partially located inside vehicle 20 - as part of the vehicle management system - and partially in a central identification and service database 30 which is located at a remote location. Vehicle 20 comprises a terminal 10, comprising a fingerprint sensor 101. Terminal 10 is arranged on the outside of vehicle 20. A user that requests access and use of vehicle 20 may place a finger on fingerprint sensor 101 of terminal 10. Fingerprint sensor 101 then measures the fingerprint of the user.

Fingerprint sensor 101 is communicatively connected to a storage and processing mod- ule 202 accommodated in a hardware component inside vehicle 20. Fingerprint sensor 101 provides the measured fingerprint of a user to storage and processing module 202 via signal line 106.

Further, storage and processing module 202 stores the unique vehicle identification number VIN of the respective vehicle 20. Storage and processing module 202 provides the VIN of the vehicle 20 and associates the VIN of the vehicle 20 with the measured and received fingerprint of the user.

Central identification and service database 30 is divided into a central identification database 310, comprising first entry module 301 and second entry module 302 and a central service database 320, comprising logging module 303. Storage and processing module 202 is communicatively connected to central identification database 310 via signal line 206. Signal line 206 is provided to access both, first entry module 301 and second entry module 302. First entry module 301 comprises the first entries corresponding to the respective fingerprint of each user. Second entry module 302 comprises the second entries corresponding to the VINs of the plurality of vehicles. First entry module 301 compares the fingerprint measured by fingerprint sensor 101 to the plurality of first entries and determines that the user identified by the fingerprint is one of the registered users by determining that first entry belonging to that particular user in first entry module 301 of the identification database 310. Second entry module 302 compares the VIN provided by storage and processing module 202 of vehicle 20 to the second entries and determines whether vehicle 20 identified by the VIN is one of the regis- tered vehicles in second entry module 302 of identification database 310.

If an entry for both, the fingerprint and the VIN can be found, this positive result is output to that vehicle 20 that is indicated by the VIN. The positive determination result is then communicated to vehicle 20 via signal line 207. Signal line 207 further communicates this result to operation enable module 204. If an entry is not found for the fingerprint and/or the VIN, this negative result is also output to vehicle 20 as indicated by the VIN. The negative determination result is communicated via signal line 207 and signal line 108 to terminal 10. In response to this, terminal 10 provides an indication signal that an access has been denied.

Operation enable module 204 then enables at least one operation of vehicle 20. For example, operation enable module 204 enables an unlocking of the vehicle's 20 doors and a starting of the vehicle's 20 engine. The user of vehicle 20 may then start the engine of the vehicle 20 and drive to his or her destination.

Fingerprint sensor 101 is further communicatively connected, via signal line 107, with tracking module 203 accommodated inside vehicle 20. Tracking module 203 is configured for storing the measured fingerprint of the user. When operation enable module 204 is effected to enable the at least one operation of vehicle 20, this effecting is communicated to tracking module 203 via signal line 209. Upon receiving the information that at least one of the operation functions of vehicle 20 has been activated, tracking module 203 begins tracking the usage parameters. Tracking module 203 associates the tracked usage parameter with the stored fingerprint and communicates the usage parameters associated with the user's fingerprint to logging module 303 in central service database 320 via signal line 210. Logging module 303 then logs the respective usage parameters in an internal storage.

Logging module 303 further processes the usage parameters and determines, on the basis of these usage parameters, payment information, such as costs for the usage. Logging module 303 then associates this payment information with the fingerprint, i.e. the user identification information and stores the payment information associated with the user identification information in a respective storage within central service database 320. The service provider may thus obtain the usage parameters and the payment information in association with a fingerprint identifying the respective user directly from central service database 320. Figure 2 shows a flow chart of the process steps performed in the first exemplary embodiment. At step S100 the fingerprint of the user is measured by fingerprint sensor 101. At step S200 the VIN of vehicle 20 is provided and at step S300 the fingerprint and the VIN are associated with one another. At step S400 the fingerprint is compared to the first entries in central identification database 310 and the VIN is compared to the second entries in central identification database 310. At step S500 it is determined whether the fingerprint corresponds to one of the first entries and the VIN corresponds to one of the second entries. If this is case, at least one operating function is enabled at step S600. Upon enabling, the usage parameters are tracked and logged - in association with the fingerprint (and possibly further user identification information) - in central service data- base 320 at step S700. If it is determined that the fingerprint does not correspond to one of the first entries and/or the VIN does not correspond to one of the second entries in central identification database 310, at step S800 the user is informed that vehicle 20 is not available to said user.

Figure 3 shows an exemplary second embodiment of system 11 for identifying a user of a vehicle 20 of a rental car or car sharing service. This second embodiment largely corresponds to the first embodiment and like components are numbered in accordance with the first embodiment. In this second embodiment, the system 11 further communicates with a central permission database 40 located at a remote location from vehicle 20. In addition to the processes as described herein above in relation to the first embodiment, the fingerprint measured by fingerprint sensor 101 is also provided to a permission entry module 401 within central permission database 40 via signal line 211.

Permission entry module 401 comprises the permission entries comprising, among further information, a plurality of fingerprints for user identification. Upon receipt of the fingerprint from fingerprint sensor 101 the permission module 401 compares the meas- ured fingerprint with the stored permission entry and determines if the fingerprint corresponds to a fingerprint within one of the permission entries.

If this is not the case, permission module 401 communicates this negative result to vehicle 20 via signal line 212. The negative result communicated via signal line 212 is re- ceived by operation disable module 205. Upon receipt of the negative result, operation disable module 205 disables at least one enabled operation of vehicle 20. For example, disable module 205 disables the starting operation for the vehicle's 20 engine, such that the vehicle 20 may not be started by the user. If the comparison and determination performed by permission module 401 finds a correspondence between the fingerprint and one of the permission entries, permission module 401 does not communicate with disable module 205 and, thus, no operating function of vehicle 20 is disabled and the user may continue accessing the vehicle 20.

Figure 4 shows a flow chart of the process steps in accordance with the second exem- plary embodiment. Steps S100 to S800 are performed as described herein above. Further to that, the fingerprint determined in step S100 is compared to the permission entries in central permission database 40. in step S900. In step S1000 it is determined whether or not the fingerprint corresponds to a fingerprint comprised in one of the permission entries in the central permission database 40. If this is the case, no further measures are taken. If this is not the case a the at least one operating function enabled in step S600 is disabled in step S1100 and the user is informed about the unavailability of vehicle 20 to said user at step S800.

Figure 5 shows a system 111 for identifying a user of a vehicle 20 of a rental car or car sharing service in accordance with a modification of the second exemplary embodiment. In this modification, fingerprint sensor 101 is provided by a smart phone 100. The procedures as described herein above in relation to the first and second embodiment apply accordingly.

Smart phone 100 is hereby communicatively und bi-directionally connected to the vehicle 20 via signal lines 106, 107 and 108. These signal lines form a wireless bi-directional communication path, established by means of an application provided by the service provider. In this embodiment, vehicle 20 further acts as an intermediary communication client for communication between smart phone 100 and the central identification and service database 30 comprising central identification database 310 and central service database 320 and for communication between smart phone 100 and the permission database 40. This means that smart phone 100 communicates only with vehicle 20 (via the application). Any further communication is performed by the vehicle 20 and routed from smart phone 100 through the vehicle 20 to identification database 310, service database 320 and permission database 40. Likewise any communication coming from each of the databases is routed through vehicle 20 to smart phone 100.

Claims

1. System (1 , 1 1 , 1 1 1 ) for identifying a user of a vehicle (20) of a rental car or car sharing service, comprising: means (10, 101 ) for determining user identification information (10, 101 ); means (301 ) for comparing said user identification information to first entries in an identification database (30, 310) and for determining a first correspondence between said user identification information and one of the first entries in said identification database (30, 310); means (204) for enabling, upon determining said first correspondence, at least one operating function of said vehicle; characterized in that said means (10, 101 ) for determining user identification information comprise means (101 ) for sensing a biometrical value of the user.

2. System (1 , 1 1 , 1 1 1 ) according to claim 1 , wherein the means (101 ) for sensing a biometrical value of the user comprise at least one fingerprint sensor.

3. System (1 , 1 1 , 1 1 1 ) according to claim 1 or 2, wherein said identification database (30, 310) is a central identification database (30, 310) and wherein the central identification database (30, 310) communicates with a plurality of vehicles (20) over a first plurality of bi-directional communication paths (206, 207), further comprising: means (202) for providing vehicle identification information indicative of an identity of a respective vehicle (20) of said plurality of vehicles (20); means (202) for associating said user identification information and said vehicle identification information with one another; means (302) for comparing said vehicle identification information to second entries in said identification database (30, 310) and for determining a second cor- respondence between said vehicle identification information and one of the second entries in said identification database (30, 310); means (204) for enabling, upon determining the second correspondence, at least one operating function of the vehicle (20) that is indicated by said vehicle identification information.

System (1 , 1 1 , 1 1 1 ) according to one of the foregoing claims, further comprising: means (401 ) for comparing said user identification information to permission entries of a permission database (40) and for determining a third correspondence between said user identification information and one of the permission entries in the permission database (40); means (205) for disabling, if said third correspondence can not be determined, the at least one enabled operating function of the vehicle (20).

System (1 , 1 1 , 1 1 1 ) according to claim 4, wherein said permission database (40) is a central permission database (40) and said central permission database (40) communicates with said plurality of vehicles (20) over a second plurality of bidirectional communication paths (21 1 , 212).

System (1 , 1 1 , 1 1 1 ) according to one of the foregoing claims, further comprising: means (203) for tracking at least one usage parameter; means (203) for associating the at least one usage parameter with said user identification information; means (303) for logging, in a service database (30, 320), the at least one usage parameter.

System (1 , 1 1 , 1 1 1 ) according to claim 6, further comprising: means (303) for determining, on the basis of the at least one usage parameter, payment information and for associating said payment information with the user identification information that is associated with the at least one usage parameter.

8. System (1, 11, 111) according to claim 6 or 7, wherein said service database (30, 320) is a central service database (30, 320) and the central service database (30, 320) communicates with the plurality of vehicles (20) over a third plurality of communication paths (210).

System (1 , 11, 111) according to claims 2 to 8, wherein the at least one fingerprint sensor is implemented in a terminal device (100) and said terminal device (100) communicates with a selected one of the plurality of vehicles (20) over a respective bi-directional terminal communication path (106, 107, 108).

System (1, 11, 111) according to claim 9, wherein said terminal device (100) further comprises at least one of the means (10, 101) for determining user identification information, the means (301) for comparing the user identification information to first entries in an identification database (30, 310) and/or the means (301) for determining a first correspondence between the user identification information and one of the first entries in said identification database (30, 310).

System (1 , 11, 111) according to claim 9 or 10, wherein said bi-directional terminal communication path (106, 107, 108) is implemented by at least one of a wireless connection or a cable connection.

System (1, 11, 111) according to one of the foregoing claims, wherein said user identification information comprises at least one of a user's name, a user's service identification number, a user's age or a user's driver's license number.

System (1, 11, 111) according to one of the foregoing claims, wherein the at least one function of the vehicle (20) comprises at least one of a deactivation of a vehicle's (20) alarms, an opening of the vehicle's (20) doors or a starting of the vehicle's (20) engine.

System (1 , 11, 111) according to claims 3 to 13, wherein said vehicle identification information comprises at least a vehicle identification number (VIN) of the vehicle (20).

15. System (1, 11, 111) according to claims 6 to 14, wherein said usage parameter comprises at least one of a roadway or a vehicle speed.

Method for identifying a user of a vehicle (20) of a rental car or car sharing service, the method comprising the steps of determining user identification information by means of a biometrical value; comparing said user identification information to first entries in an identification database (30, 310); determining a first correspondence between said user identification information and one of the first entries in said identification database (30, 310); and upon determining said first correspondence, enabling at least one operating function of said vehicle (20).

Method according to claim 16, wherein said identification database (30, 310)is a central identification database (30, 310), further comprising the steps of providing a first plurality of bi-directional communication paths (206, 207) between said identification database (30, 310) and a plurality of vehicles (20); providing vehicle identification information indicative of an identity of a respective vehicle (20) of the plurality of vehicles (20); associating said user identification information and said vehicle identification information with one another; comparing said vehicle identification information to second entries in said identification database (30, 310); determining a second correspondence between said vehicle identification information and one of the second entries in said identification database (30, 310); and upon determining the second correspondence, enabling at least one operating function of the vehicle (20) that is indicated by said vehicle identification information.

18. Method according to claims 16 or 17, further comprising the steps of comparing said user identification information to entries of a permission database (40); determining a third correspondence between said user identification information and one of the entries in said permission database (40); and if said third correspondence can not be determined disabling said at least one enabled operating function of the vehicle (20).

19. Method according to claims 16 to 18, further comprising the steps of tracking at least one usage parameter; associating the at least one usage parameter with said user identification information; logging, in a service database (30, 320), the at least one usage parameter; on the basis of the at least one usage parameter determining payment information; and associating said payment information with the user identification information that is associated with the at least one usage parameter.

20. Computer program product that, when executed by processing means of a processing device, prompts said processing device to execute the steps of the method according to any of claims 16 - 19.

21. Application to be executed by processing means of a terminal device (100) which, when executed by said processing means of a terminal device (100), prompts said terminal device to execute at least one of the steps of the method according to claims 16 - 19.