EP3855403A1 - Uwb monitoring system for monitoring the presence of a user - Google Patents

Abstract

The invention relates to a UWB monitoring system (100) for monitoring a spatial area (102). The UWB monitoring system (100) comprises a plurality of localization sensors for determining position data of a mobile, portable UWB token (112, 112 ') within the spatial area (102). The position data are determined using a transit time measurement of (107) UWB signals between the localization sensors and the UWB token (112, 112 '). The UWB monitoring system (100) is configured to monitor the presence of the UWB token (112, 112 ') at a user assigned to the UWB token (112, 112'). The monitoring comprises: • repeated determination of the position data of the UWB token (112, 112 '), • sending an authentication request to the authentication device (138, 140) to check the presence of the UWB token (112, 112') at the assigned user , • Receiving an authentication confirmation of the authentication of the user from the authentication device (138, 140), the authentication confirmation confirming a successful validation of the recorded authentication data of the user, which indicates the presence of the UWB token (112, 112 ') on the user, wherein Successful validation requires that the position data of the UWB token (112, 112 ') are within a detection range relative to the known position data of the authentication device (138, 140) during authentication and that there is sufficient agreement between the detected authentication data and the reference value.

Description

The invention relates to a UWB monitoring system and a method for controlling a UWB monitoring system.

Monitoring systems use modern sensors to collect detailed, diverse and extensive data for monitoring purposes, for example of spatial areas. Access cards or key cards, for example, are used for monitoring access to buildings. Although these access cards or key cards can be assigned to individual users, their use can lead to problems if, for example, they are exchanged or stolen for purposes of deception.

The invention is based on the object of creating a UWB monitoring system for improved monitoring of people within a spatial area.

The object on which the invention is based is achieved in each case with the features of the independent patent claims. Embodiments of the invention are specified in the dependent claims.

Embodiments include a UWB monitoring system for monitoring a spatial area. The UWB monitoring system comprises a plurality of UWB sensors which are arranged distributed in the spatial area. The UWB sensors are configured for communication via UWB. The communication includes transmitting the sensed sensor data.

The plurality of UWB sensors comprises a plurality of localization sensors for determining position data of a mobile, portable UWB token within the spatial area. The position data is determined using a transit time measurement of UWB signals between the localization sensors and the UWB token.

The UWB monitoring system is configured to monitor the presence of the UWB token at a user assigned to the UWB token. The UWB monitoring system comprises an authentication device with an authentication sensor for the local acquisition of authentication data for authenticating the user of the UWB token. The authentication device has access to a reference value for the authentication data of the user for validating the authentication data recorded. Successful validation of the authentication data recorded indicates the presence of the UWB token on the user.

• wiederholtes Bestimmen der Positionsdaten des UWB-Tokens innerhalb des räumlichen Bereiches unter Verwendung der Lokalisierungssensoren,
• Senden einer Authentifizierungsanfrage an die Authentifizierungsvorrichtung zum Prüfen der Anwesenheit des UWB-Tokens an dem zugeordneten Nutzer, wobei die Positionsdaten der Authentifizierungsvorrichtung innerhalb des räumlichen Bereiches bekannt sind,
• Empfangen einer Authentifizierungsbestätigung des Authentifizierens des Nutzers von der Authentifizierungsvorrichtung, wobei die Authentifizierungsbestätigung ein erfolgreiches Validieren der erfassten Authentifizierungsdaten des Nutzers bestätigt, welches die Anwesenheit des UWB-Tokens an dem Nutzer anzeigt, wobei das erfolgreiche Validieren voraussetzt, dass sich die Positionsdaten des UWB-Tokens während des Authentifizierens innerhalb eines Erfassungsbereichs relative zu den bekannten Positionsdaten der Authentifizierungsvorrichtung befinden und eine ausreichende Übereinstimmung der erfassten Authentifizierungsdaten mit dem Referenzwert vorliegt.

Monitoring the presence of the UWB token on the assigned user includes:

• repeated determination of the position data of the UWB token within the spatial area using the localization sensors,
• Sending an authentication request to the authentication device to check the presence of the UWB token on the assigned user, the position data of the authentication device being known within the spatial area,
• Receiving an authentication confirmation of the authentication of the user from the authentication device, wherein the authentication confirmation confirms a successful validation of the recorded authentication data of the user, which indicates the presence of the UWB token to the user, the successful validation presupposing that the position data of the UWB token are within a detection range relative to the known position data of the authentication device during authentication and that the detected authentication data match the reference value is present.

Embodiments can have the advantage that it can be ensured that the mobile portable UWB token is actually carried by the assigned user. This can prevent a user from separating from his UWB token for purposes of deception, i.e. swapping it, leaving it lying around or handing it over to another person, for example. In particular, if central processing and / or storage of personal data is to be avoided, monitoring the position of UWB tokens enables the whereabouts of the assigned users to be monitored without the user's personal data having to be processed and / or stored centrally. Such indirect monitoring of the whereabouts, however, presupposes the presence of the UWB tokens used at the respectively assigned user, so that the position of the assigned user can be equated with the position of the UWB token within the spatial area. This correspondence can be ensured by means of the authentication, during which the position data of the UWB token are located within a detection range of the authentication data relative to the known position data of the authentication device during the authentication. If, during successful authentication, the UWB token is in a detection area from which the authentication data is recorded, it follows that the UWB token is located in the detection area together with the successfully authenticated user. In other words, the presence of the UWB token on the assigned user can be checked in this way.

According to embodiments, the spatial area is, for example, a restricted-access spatial area, for example a restricted-access security area. The restricted-access spatial area is, for example, delimited from the surroundings and, as intended, can only be entered via one or more entrances or exits. For example, the restricted-access spatial area is an indoor area.

UWB ("Ultra Wideband") refers to the wireless transmission of electromagnetic pulse-shaped signals over a plurality of parallel radio channels with low transmission powers, for example up to a maximum of 1 mW. Here, for example, frequency ranges with a bandwidth of at least 500 MHz and / or of at least 20% of the arithmetic mean of the lower and upper limit frequency of the frequency band used.

UWB is based on the generation of pulses with the shortest possible pulse duration, which is why the spectrum emitted or received via the UWB antenna is larger or broader, the shorter the pulse duration, in accordance with the laws of Fourier transformation.

The product of the temporal and spectral width of the pulse is constant. The entire transmission power of a few milliwatts or less is distributed over such a large frequency range that no interference is to be expected for the radio operation of narrowband transmission methods. It is therefore difficult or impossible to see that a transmission with UWB is taking place at all. To a narrowband receiver, a UWB signal appears much more like noise. This enables communication that can hardly be located and which can be used in the same frequency range as conventional transmission methods.

UWB does not use a fixed carrier frequency which is modulated. Rather, data transmission takes place, for example, based on pulse phase modulation or pulse position modulation (“pulse position modulation” / PPM) using a plurality of individual pulses. Modulation of the polarity and / or amplitude of the pulses offers a further possibility for data transmission using UWB. If the times of the individual pulses differ sufficiently, several UWB transmission channels can be operated in the same spatial area without mutual interference.

The transmission capacity increases with increasing bandwidth, which means that UWB systems can, for example, provide useful bit rates up to the GBit / s range. The ranges of UWB transmissions can range from a few meters to a hundred meters, for example.

The UWB technology also enables a radar method to be implemented using UWB radar sensors. As with UWB data transmission, an electromagnetic alternating field with a large bandwidth is generated, the field strengths of which are small. Depending on the nature of objects in the range of the electromagnetic alternating field, this will deform the alternating field. The resulting field can be detected by a UWB sensor. With knowledge of both the initial field and the resulting field, conclusions can be drawn about the cause of the detected deformation and consequently about the type and geometry of the object or objects in the range of propagation of the electromagnetic alternating field.

UWB radar sensors work, for example, on frequencies between 30 MHz and 12.4 GHz. Depending on the application, resolutions from centimeters to a few millimeters can be achieved with working bandwidths of 5 GHz.

In a radar process, short pulses are sent out and compared with the pulse patterns reflected by the object or objects. This allows geometric parameters such as distance, thickness, length, position, body shape, movement and / or speed to be determined. Objects can also be detected through clothing and walls. The properties of the propagation medium for the electromagnetic fields are assumed to be known.

UWB can prevent tracking of mobile devices, since devices communicating via UWB, such as UWB tokens, cannot be located without knowledge of the UWB coding used. Furthermore, the relatively short range of UWB ensures that remote tracking and / or eavesdropping can be effectively prevented. In addition, the UWB coding offers independent, instantaneous encryption of the transmitted data, which is thus protected against eavesdropping. In addition, due to its wide frequency band, UWB is highly resistant to interference signals ("jamming"). Due to these special technical properties, which are advantageous for security applications, a monitoring system can be implemented using UWB, which can guarantee a high level of protection of the processes as well as the sensor data contained or used, but in particular also in connection with personal sensor data of those involved. In particular, a high level of security for data transmission can be ensured by means of UWB.

Since UWB technology also allows higher data rates, it can be particularly advantageous for the transmission of sensor data in the form of video data, sound data and or other extensive sensory measurement values.

A UWB token is understood to mean a hardware token in the form of a mobile portable electronic device which is configured for wireless communication by means of UWB. A UWB token can also be configured to determine position data on the basis of a transit time measurement and triangulation of UWB signals, which it receives from localization sensors of the UWB monitoring system. For example, the UWB token can be designed as a document, in particular a value or security document. A “document” is understood to mean paper-based and / or plastic-based documents, such as electronic identification documents, in particular passports, identity cards, visas and driver's licenses, vehicle documents, vehicle documents, company ID cards, health cards or other ID documents as well also chip cards, means of payment, in particular banknotes, bank cards and credit cards, waybills or other proof of authorization. In a memory of such a document, for example, one or more attributes of a user or object assigned to the document are stored.

A UWB sensor is understood to be a sensor or anchor that is configured to transmit recorded data, e.g. sensor data, by means of UWB. Furthermore, a UWB sensor, such as a UWB radar sensor or a UWB localization sensor, can be configured to acquire sensor data by means of UWB. Alternatively, a UWB sensor can configure the sensor data by means of a UWB-independent method, for example an optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based method. According to embodiments, the UWB sensors are configured for data transmission exclusively by means of UWB. According to embodiments, one or more of the UWB sensors can additionally be configured to transmit captured data by means of a wired data connection. According to embodiments, some of the UWB sensors of the UWB monitoring system are configured to transmit captured data by means of a wired data connection. According to embodiments, all of the UWB sensors of the UWB monitoring system are configured to transmit captured data by means of a wired data connection.

Sensor data is understood to mean data recorded by means of one of the UWB sensors, i.e. for example optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based data. The sensor data are transmitted from the capturing UWB sensors within the UWB monitoring system by means of UWB. According to embodiments, one or more of the UWB sensors can additionally be configured to transmit captured data by means of a wired data connection. The sensor data can also be data that were recorded by the UWB sensors by means of UWB. For example, the sensor data are sensor data from a UWB radar sensor or a UWB localization sensor.

According to embodiments, monitoring the presence of the UWB token at the assigned user further comprises, upon receipt of the authentication confirmation, identifying the position of the UWB token as the position of the user assigned to the UWB token. Embodiments can have the advantage that, in the event of a successful validation, the UWB token can be used to reliably determine the position of the user assigned to the UWB token.

According to embodiments, the predefined detection area is a predefined distance area from the known position data of the authentication device. If authentication data is entered or specific biometric data is recorded, such as fingerprint data, retinal data, iris data, vein data, nail bed pattern data, the user must be within a predefined distance range from the authentication device. Such a predefined distance range can be, for example, a distance range which is less than or equal to an arm's length of the user or which corresponds to a predefined distance range within which the user must be in order to acquire the biometric data.

According to embodiments, the predefined detection area is a detection area of the authentication data that is determined using the detected authentication data. For example, a position of the authenticated person relative to the authentication device and thus a detection area of the authentication data can be determined from image data.

According to embodiments, the authentication device to which the authentication request is sent is selected from a plurality of authentication devices of the UWB monitoring system. Embodiments can have the advantage that authentication devices can be distributed at strategically advantageous positions within the spatial area and the presence of the UWB token on the assigned user can be checked at each of these.

According to embodiments, the selection of the authentication device is based on one or more of the following criteria: a distance between the position data of the UWB token and the position data of the selected authentication device falls below a predefined first maximum distance, the selected authentication device has one of all authentication devices of the plurality of authentication devices smallest distance to the position data of the UWB token, the selected authentication device has the smallest distance from all authentication devices of the plurality of authentication devices to a future path of the UWB token through the spatial area extrapolated from the previously determined position data of the UWB token. Embodiments can have the advantage that an authentication device that is currently or the future path of the UWB token can be used for the authentication for the UWB token and thus its user. This means that little or no detours are necessary for the user of the UWB token for authentication.

According to embodiments, an authentication request is sent to the UWB token. Embodiments can have the advantage that the UWB token and thus the user of the UWB token can thus be informed about the need for authentication on the selected authentication device. For example, the UWB token comprises a display device on which the authentication request is displayed. According to embodiments, the authentication request includes data identifying the selected authentication device. In addition, the UWB token can, for example, output a message, such as a light or sound signal, which informs the user of the need for authentication.

According to embodiments, a notification signal is output as an authentication request by the selected authentication device. This information signal can be, for example, a light or sound signal. Embodiments can have the advantage that the user of the UWB token can be made aware of the need for authentication by the authentication device. In addition, the information signal can make it easier for the user to identify the selected authentication device.

According to embodiments, the authentication device is a stationary authentication device arranged in the spatial area. Embodiments can have the advantage that authentication devices can be distributed at strategically advantageous positions within the spatial area and the presence of the UWB token on the assigned user can be checked at each of these. According to embodiments, mobile authentication devices can also be used. Their position can be determined, for example, by means of a UWB transit time measurement. Mobile authentication devices can have the advantage that their distribution can be more easily adapted to changed authentication requirements.

According to embodiments, an authentication request is sent to the authentication device if a distance between the position data of the UWB token and the position data of the authentication device falls below a predefined second maximum distance. Embodiments can have the advantage that an authentication is initiated automatically as soon as the user approaches an authentication device, in particular a stationary authentication device, with the UWB token. For example, a stationary authentication device is arranged on an access control device, such as a door, barrier, lock or the like, within the spatial area. According to embodiments, granting access by the access control device, for example opening the door, barrier, lock, may require the receipt of the authentication confirmation by the UWB monitoring system.

According to embodiments, an authentication request is sent to the authentication device at predefined fixed intervals, at random intervals, randomly, upon detection of an exceptional event, upon reaching certain positions within the spatial area by the UWB token, upon detection of unusual behavior by the user of the UWB token. According to embodiments, an authentication request is sent as a function of the position of the UWB token within the spatial area. For example, the spatial area can be divided into a plurality of spatial sections to which different security levels are assigned. If the position of the UWB token is, for example, in a spatial section with a higher security level, more authentications can be imitated than in a spatial section with a lower security level. The increase in the number of authentications can be implemented, for example, by shortening the intervals between the sending of authentication requests, increasing the probability of random sending of authentication requests and / or shortening the distances between positions within the spatial area that are reached by the UWB token an authentication request is sent.

Furthermore, using the determined position data of the UWB token, for example, a movement pattern of the UWB token can be determined. If this movement pattern shows abnormalities, an authentication request can be sent. To detect abnormalities in movement patterns, the movement patterns of a plurality of UWB tokens can be used as input data for a movement pattern classification module with a machine learning algorithm. For this training data, it can be specified that these are normal movement patterns without abnormalities. If movement patterns are entered as input data into the movement pattern classification module trained in this way, the movement pattern classification module recognizes if there are any abnormalities in relation to training movement patterns. The trained movement pattern classification module outputs, for example, a binary classification result: there are no abnormalities or there is one abnormality. If, for example, the classification result indicates the presence of anomalies, an authentication request is sent; if the classification result, for example, does not indicate the presence of anomalies, no authentication request is sent.

According to embodiments, the UWB token comprises the authentication device. The authentication sensor is, for example, a sensor of the UWB token. It is the known position data of the authentication device For example, the specific position data of the UWB token. Embodiments can have the advantage that no additional stationary authentication devices are necessary, the acquired authentication data are only processed locally by the UWB token, ie remain in the control of the assigned user, and authentication is made possible anywhere and always within the monitored spatial area.

According to embodiments, the reference value is stored in a memory of the UWB token. Embodiments can have the advantage that the reference value is only stored locally on the UWB token and thus remains in the control of the assigned user. For example, the reference value is stored in a protected memory area of the memory of the mobile portable UWB token. A “protected memory area” is understood here to mean an area of an electronic memory to which access, for example read access or write access, is only possible via a processor coupled to the memory. The processor coupled to the memory enables access to the protected memory area, for example, only if a condition required for this is met. This condition can be, for example, a cryptographic condition, in particular a successful authentication and / or a successful authorization check. For example, access to certain cryptographic programs and / or service applications is restricted.

According to embodiments, the reference value is stored in encrypted form in the memory of the UWB token. According to embodiments, the encrypted reference value is decrypted in order to validate the acquired authentication data. According to embodiments, the acquired authentication data is encrypted for validation using the encrypted reference value. According to embodiments, the reference value is stored in a memory of the UWB monitoring system. For example, the reference value is stored in a protected memory area of the memory of the UWB monitoring system, for example a control module of the UWB monitoring system. According to embodiments, the reference value is stored in encrypted form in the memory of the UWB monitoring system. According to embodiments, the encrypted reference value is decrypted in order to validate the acquired authentication data. According to embodiments, the acquired authentication data is encrypted for validation using the encrypted reference value.

According to embodiments, the transit time measurement of UWB signals between the localization sensors and the UWB token is carried out by the UWB token, and the determination of the position data includes receiving the position data from the UWB token. According to embodiments, determining the position data includes acquiring sensor data in the spatial area using the localization sensors in the course of the transit time measurement. The sensor data recorded by the localization sensors are used to determine the position data. Embodiments can have the advantage that the localization sensors can determine the position data efficiently.

According to embodiments, monitoring the presence of the UWB token at the assigned user further includes outputting an alarm signal upon unsuccessful validation of the authentication data. Embodiments can have the advantage that a possible attempt at deception can be effectively pointed out. According to embodiments, unsuccessful validation of the authentication data is indicated by failure to provide authentication confirmation. According to embodiments, unsuccessful validation of the authentication data is indicated by receiving an error message from the authentication device.

According to embodiments, the authentication data comprise biometric data of the user, which are recorded using a biometric sensor. Biometric data can include, for example: DNA data, fingerprint data, body geometry data / anthropometry data such as face, hand, ear geometry data, hand line structure data, vein structure data such as hand vein structure data, iris data, retinal data, voice recognition data, nail bed pattern, tooth pattern data.

According to embodiments, the authentication data comprise behavior-based data of the user. Behavior-based data are data that are based on an intrinsic behavior of the user and can include, for example: movement patterns, gait patterns, arm, hand, finger movement patterns, lip movement patterns. Using behavior-based data to authenticate the user can have the advantage that the user can continue his usual behavior that is characteristic of him for the purpose of authentication without requiring additional actions that are atypical for him. In particular, the user does not have to interrupt his usual behavior.

To acquire the behavior-based data, a sensor for acquiring behavior-based data is used. The behavior-based data is, for example, movement data that is recorded using an authentication sensor configured as a movement sensor. The motion sensor can for example comprise an acceleration sensor. A movement can be calculated, for example, by integration using measured acceleration values that are recorded by the acceleration sensor. The motion sensor can also, for example, its position in space and / or Detect changes in the situation. For example, the motion sensor includes a gyroscope. The movement data detected by the movement sensor are, for example, acceleration, inclination and / or position data.

The recorded movement data is, for example, data on movements of the UWB token, which are caused by the fact that the user carries the UWB token with him, for example on his body. Due to the characteristic movements of the user, the UWB token is moved along in a way that is characteristic of the user. This is the case even if the user is not actively interacting with the UWB token, e.g. not using a user interface of the UWB token, such as a key, a keyboard, a touch screen, a microphone.

According to embodiments, the UWB token comprises a classification module which is configured to recognize one or more generic movement patterns using movement data. The movement patterns can be, for example, gross and / or fine motor movements of the UWB token, as are characteristic of an individual user using the UWB token, such as being carried along and / or on the body. For example, the classification module is pre-trained for recognizing the generic movement patterns using training data sets with movement data from a user cohort.

According to embodiments, the user is registered as a user of the UWB token in the course of a learning phase. According to embodiments, the learning phase comprises the acquisition of movement data of the user by an authentication sensor in the form of a movement sensor of the UWB token and extraction of one or more reference values characteristic of the user to be registered.

• Erfassen von Bewegungsdaten durch einen Authentifizierungssensor in Form eines Bewegungssensors des UWB-Tokens,
• Eingeben der erfassten Bewegungsdaten in das Klassifikationsmodul,
• Generieren eines Klassifikationsergebnisses durch das Klassifikationsmodul, ob der aktuelle Nutzer ein in dem UWB-Token registrierte Nutzer ist,
• Erzeugen eines Authentifizierungssignals, falls das Klassifikationsergebnis ein Prüfungskriterium erfüllt, wobei das Authentifizierungssignal eine erfolgreiche Authentifizierung des aktuellen Nutzers signalisiert.

According to embodiments, behavior-based authentication of a user using the UWB token comprises the following steps:

• Acquisition of movement data by an authentication sensor in the form of a movement sensor of the UWB token,
• Entering the recorded movement data into the classification module,
• The classification module generates a classification result as to whether the current user is a user registered in the UWB token,
• Generating an authentication signal if the classification result meets a test criterion, the authentication signal signaling successful authentication of the current user.

The test criterion can include, for example, that there is a sufficiently high level of correspondence between the recorded movement data and one or more reference values stored for the registered user. Furthermore, the test criterion can include that the recorded movement data and / or the one or more reference values used do not exceed a maximum age.

• Speichern des Klassifikationsergebnisses in dem Speicher des UWB-Tokens.

According to embodiments, the aforementioned steps of acquiring the movement data, entering the movement data and generating the classification result are carried out repeatedly one after the other. Furthermore, in addition to the step of generating the classification results, the following step is carried out:

• Storing the classification result in the memory of the UWB token.

• auf eine Authentifizierungsanfrage hin, Zugreifen auf den Speicher des UWB-Tokens zum Auslesen des gespeicherten Klassifikationsergebnisses, beispielsweise des zuletzt gespeicherten Klassifikationsergebnisses,
• Auslesen und Auswerten des Klassifikationsergebnisses gemäß dem Prüfungskriterium.

The generation of an authentication signal includes, for example:

• in response to an authentication request, accessing the memory of the UWB token to read out the stored classification result, for example the most recently stored classification result,
• Reading out and evaluating the classification result according to the test criterion.

According to embodiments, if the user is successfully authenticated, recorded movement data can be used to adapt and / or improve the reference values stored for the corresponding user.

According to embodiments, a visual sensor, such as a camera, of a stationary authentication device is used for a behavior-based authentication of the user. This visual sensor can be configured to capture visual data from movements of the user. The stationary authentication device comprises, for example, a classification module which is configured to recognize one or more generic movement patterns using the captured visual data. For example, the classification module is pre-trained for recognizing the generic movement patterns using training data sets with visual data of movements of a user cohort. The authentication by the classification module of the authentication device using the captured visual data can take place in the same way as described above for the case of authentication by the classification module of the UWB token by means of movement data.

Learning can take place in the course of a learning phase when a user to be registered enters the monitored spatial area or a spatial entrance area in front of the monitored spatial area. The learning includes, for example, the acquisition of movement data of the user by an authentication sensor in the form of a visual sensor of an authentication device of the UWB monitoring system and extraction of one or more reference values characteristic of the user to be registered. In the course of learning, for example, the user can be assigned a user ID, such as a synonym.

According to embodiments, the authentication data include a personal password of the user. The password can be, for example, an alphanumeric string.

According to embodiments, the authentication data comprise signed data of one or more further electronic devices assigned to the user, in particular mobile portable electronic devices. The corresponding electronic devices are, for example, smart devices that the user carries with them, such as smartphones, smartwatches, smart glasses, phablets, tablets, smart bands, smart key chains, smart cards, etc. These electronic devices send a range-limited signal which signaled their presence. For example, the signal includes an ID of the corresponding electronic device. For example, the signal is signed with a cryptographic signature key of the corresponding electronic device. The signal can be, for example, a Bluetooth or a UWB signal. If a UWB signal is used, the plurality of electronic devices is a plurality of UWB tokens. For the user to be successfully authenticated, it may be necessary for them to carry a certain number of electronic devices assigned to them. An electronic device may be stolen, but the higher the number of electronic devices required for successful authentication, the lower the likelihood that they will be carried by a user other than the registered user, for example as a result of theft.

According to embodiments, the UWB token verifies access authorizations to and / or residence authorizations in the spatial area of the user assigned to the UWB token. According to embodiments, successful proof of access authorizations and / or residence authorizations requires receipt of the authentication confirmation.

Embodiments can have the advantage that, by means of the UWB tokens, not only movements of the carriers within a restricted-access spatial area can be tracked, but it can also be checked whether access authorizations and / or residence permits to or in the restricted-access spatial area and / or specific ones spatial sections of the same is present. Based on this, it can be recognized whether a carrier of a UWB token is authorized to access the restricted area spatial area and / or a spatial section thereof. For example, access barriers, such as doors to the restricted-access spatial area and / or a spatial section thereof, can automatically open when a carrier of a UWB token with valid access authorizations approaches the access barrier. According to embodiments, different access authorizations may be necessary for different spatial sections of the restricted-access spatial area.

According to embodiments, access authorizations and / or residence authorizations are verified by possession of the UWB token. Afterwards, access authorizations and / or residence authorizations are evidenced by authorization certificates. An authorization certificate is a digital certificate which assigns an access authorization and / or residence authorization to a UWB token and / or a user of the corresponding UWB token. For example, an authorization certificate defines access authorizations and / or residence authorizations, comprises a public cryptographic key of an asymmetric cryptographic key pair assigned to the UWB token, a token ID, information on the issuer of the authorization certificate and / or a digital signature of an issuer. The issuer can be, for example, an external instance, a decentralized or centralized control module of the UWB monitoring system or another UWB token which itself has the granted access authorizations and / or residence authorizations. Access authorizations and / or residence authorizations can be established, for example, using the authorization certificate in conjunction with a signature of the UWB token using a private cryptographic key of the asymmetric cryptographic key pair assigned to the UWB token. Using the public cryptographic key provided by the authorization certificate, the signature can be checked and consequently the possession of the private cryptographic key on the part of the UWB token can be verified. The authorization certificate defines, for example, access authorizations and / or residence authorizations granted by the issuer of the authorization certificate for the owner of the private cryptographic key. According to embodiments, the access authorizations and / or residence authorizations are limited in time. For example, a time limit is defined by an expiration date and / or an expiration time of the authorization certificate.

According to embodiments, the plurality of UWB sensors comprises, in addition to the localization sensors, one or more additional UWB sensors which are configured to acquire sensor data. According to embodiments, the one or more additional UWB sensors include sensors for acquiring optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data. Embodiments can have the advantage that a large number of different sensor data can be recorded using the corresponding sensors and thus a large number of different situations or circumstances within the spatial area can be recognized. The UWB sensors include, for example, one or more UWB radar sensors, glass breakage sensors, impact sound sensors, gas sensors, motion detectors, video sensors, infrared sensors, temperature sensors and / or smoke sensors.

• auf ein Erfassen von Sensordaten durch einen Sensor eines der zusätzlichen UWB-Sensoren, welche indikativ für eine Anwesenheit einer Person in einem Erfassungsbereich des Sensors sind, Prüfen, ob Positionsdaten eines UWB-Tokens innerhalb des Erfassungsbereich des Sensors bestimmbar sind,
• falls keine Positionsdaten eines UWB-Tokens innerhalb des Erfassungsbereich des Sensors bestimmbar sind, Ausgeben eines Alarmsignals.

In accordance with embodiments, the UWB monitoring system is further configured to:

• for the detection of sensor data by a sensor of one of the additional UWB sensors, which are indicative of the presence of a person in a detection area of the sensor, checking whether position data of a UWB token can be determined within the detection area of the sensor,
• if no position data of a UWB token can be determined within the detection range of the sensor, an alarm signal is output.

Embodiments can have the advantage that the UWB monitoring system can be used to identify whether a person is staying and / or moving within the monitored spatial area who is not carrying a UWB token. If a person or references to a person without a UWB token are detected, an alarm signal is issued. If position data of a UWB token can be determined within the detection range of the sensor, ie the person carries a UWB token, the person can be authenticated according to one of the preceding embodiments and / or, for example, it can be checked whether the UWB token has a Can prove access authorization to and / or a residence permit in the spatial area.

The position data of the UWB tokens are recorded, for example, by means of the localization sensors. Sensor data which are indicative of the presence of a person can be acquired, for example, using UWB radar, high frequency radiation, microwave radiation, Doppler radar, laser, ultrasound, infrasound, infrared radiation, vibration measurements or gas concentration measurements. If a person is in the detection range of a sensor, reflects, scatters or interrupts the radiation or waves emitted by the sensor, such as UWB radar, high-frequency radiation, microwave radiation, Doppler radar, laser beams, ultrasound, or generates measurable radiation, waves or other influences, such as infrared radiation, vibrations, e.g. impact sound, infrasound or gas concentration changes, e.g. an increase in the carbon dioxide concentration.

• Filtern der erfassten Sensordaten unter Verwendung eines Anonymisierungsfilters, wobei der Anonymisierungsfilter dazu konfiguriert ist, die personenbezogenen Sensordaten zu anonymisieren,
• Auswerten der erfassten Sensordaten zum Detektieren eines Ausnahmeereignisses,
• auf das Detektieren des Ausnahmeereignisses hin, zeitlich begrenzten Aussetzen des Anonymisierens der personenbezogene Sensordaten.

According to embodiments, the recorded sensor data comprise personal sensor data and the UWB monitoring system is configured for

• Filtering the captured sensor data using an anonymization filter, the anonymization filter being configured to anonymize the personal sensor data,
• Evaluation of the recorded sensor data to detect an exceptional event,
• upon the detection of the exceptional event, temporary suspension of the anonymization of the personal sensor data.

Embodiments can have the advantage that it can be ensured that personal sensor data, insofar as they are recorded by the UWB sensors, are not made available as a result of the anonymization or are only made available in such a form that no conclusions can be drawn about the identity of the persons to which the personal data relates. According to embodiments, the anonymization includes, in particular, changing personal sensor data in such a way that individual information about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person or only with a disproportionately large amount of time, costs and manpower. The change includes, for example, a redesign of the content of recorded person-related sensor data through to the deletion of the same. In this case, deletion denotes, for example, making personal sensor data unrecognizable up to and including complete removal of the corresponding personal sensor data from a memory for storing acquired sensor data. The memory can be, for example, a local or a central memory of the UWB monitoring system.

According to embodiments, the authentication data is personal sensor data. Personal sensor data denote sensor data which enable a person to be identified or can be assigned to a person to whom the personal sensor data are related. In particular, personal sensor data are, for example, individual items of information about personal or factual circumstances of a specific or identifiable natural person recorded by means of one of the UWB sensors. For example, the person-related sensor data include visual sensor data, such as video and / or photo data, on the basis of which a person can be recognized. This is particularly the case when a person's face can be recognized on the basis of the video and / or photo data.

An anonymization filter is configured to selectively anonymize personal data. For example, the anonymization filter can be configured to include sensor data from certain UWB sensors or a certain type of UWB sensors of the UWB monitoring system are recorded, to be anonymized. These are, for example, video and / or image data that are recorded using a surveillance camera and on which individual persons can be identified.

An exception event denotes an anomaly in the recorded sensor data, i.e. a data constellation which is not to be expected under predefined operating conditions. In particular, the anomaly can be an emergency situation, such as a fire or unauthorized entry into and / or movement within the spatial area.

According to embodiments, an exception event includes unsuccessful authentication. Unsuccessful authentication indicates that a UWB token is not being carried by the user assigned to it. For example, the assigned user tries to move within the spatial area without the UWB token or the UWB token is carried by an unassigned user who has gained or wants to gain unauthorized access to the spatial area. By suspending anonymization, it can be recorded who is actually carrying the UWB token and / or where the assigned user is staying.

According to embodiments, the suspension of anonymization is limited to person-related sensor data that are recorded by UWB sensors that have a predefined reference to the detected exception event. For example, there is a predefined reference that the UWB sensors, for whose personal sensor data anonymization is suspended, are assigned to the same spatial section of the spatial area as the UWB sensor or sensors in whose recorded sensor data the exceptional event is detected. Embodiments can have the advantage that the suspension of anonymization is not only limited in time, but also spatially. As a result, unnecessary suspension of anonymization, for example for personal data that has nothing to do with the exceptional event, can be avoided. According to embodiments, the predefined reference additionally or alternatively consists in the fact that UWB sensors, for whose personal sensor data anonymization is suspended, are assigned to predefined spatial sections of the spatial area. The corresponding spatial sections are, for example, entrances and exits to an area with restricted access. In the event of a possible unauthorized intrusion into the restricted-access spatial area or in the event of a possible emergency, such as a fire alarm, it may be advantageous to record whether the restricted-access spatial area is entered and / or left or whoever tries to enter the restricted-access spatial area and / or to leave. According to embodiments, the anonymization of all person-related sensor data recorded by the UWB monitoring system is temporarily suspended. Embodiments can have the advantage that it can be ensured that no personal sensor data relevant and / or necessary for handling and / or rectification of the exceptional event are missing due to the anonymization.

According to embodiments, the anonymization by the anonymization filter includes deleting at least part of the personal sensor data. The temporary suspension of anonymization includes storing the personal sensor data, which are recorded within a limited time window.

Embodiments can have the advantage that in the event of a deletion, i.e. a complete removal of personal sensor data from local and / or central memories of the UWB monitoring system, it can be ensured that no one can gain access to this data. However, if an exceptional event occurs, personal sensor data, such as video and / or image data, are stored for a limited time only for this special case. According to embodiments, the stored data are provided for the purpose of data analysis, in particular for the purpose of identifying persons to whom the stored personal sensor data are related.

According to embodiments, the storage is a time-limited storage. For example, the stored personal sensor data are deleted again after their evaluation and / or upon termination of the exceptional situation. According to embodiments, the storage is permanent storage.

According to embodiments, the limited time window begins with the detection of the exception event. According to embodiments, the limited time window ends when a predetermined period of time has elapsed or the detection of the exceptional event ends.

Embodiments can have the advantage that the storage of the personal sensor data remains limited in time to a time window which is related to the detected exception event. For example, it can be assumed that only personal sensor data recorded in this time window are relevant in the context of the detected exceptional event. According to embodiments, the limited time window ends, for example, when the exceptional event is no longer detected or is no longer detectable. In the event of a possible fire as an exceptional event, the exceptional event can be detected, for example, in the form of a detection of smoke by a UWB sensor of the monitoring system designed as a smoke alarm. If the exceptional event is no longer detected, ie no more smoke is detected, the suspension of anonymization is ended, for example. According to embodiments, at the end of the predetermined period of time it is checked whether the exceptional event can still be detected and / or whether further requirements are met. If the exceptional event can no longer be detected and if the other requirements are met, the suspension of anonymization is ended. Otherwise, the suspension is repeated or continued again for the predetermined period of time. Further prerequisites include, for example, logging a confirmation in the UWB monitoring system that the exception event was checked and that no further measures are necessary or that all necessary measures have been taken. Alternatively or additionally, the further prerequisites can include, for example, logging a confirmation in the UWB monitoring system that the suspension of anonymization is not and / or no longer necessary. The predetermined period of time can have a length of seconds and / or minutes, for example.

According to embodiments, the deletion of the personal sensor data takes place in each case by the UWB sensor that detects the personal sensor data to be deleted. According to embodiments, the storage of the person-related sensor data in each case comprises a transmission of the person-related sensor data by the UWB sensor recording the person-related sensor data to be stored at least partially and / or completely by means of UWB to a storage module of the UWB monitoring system. According to embodiments, the storage of the person-related sensor data in each case comprises a transmission of the person-related sensor data by the UWB sensor, which records the person-related sensor data to be stored, at least partially and / or completely by means of a wired data connection to a storage module of the UWB monitoring system.

Embodiments can have the advantage that, in the event of direct deletion by the capturing UWB sensor, it can be ensured that the personal sensor data to be deleted within the monitoring system do not go beyond the capturing UWB sensor. This effectively prevents someone from gaining access to the personal sensor data in an unauthorized manner. Embodiments can furthermore have the advantage that the personal sensor data stored in the memory module can be used, if necessary, to handle and / or remedy the exceptional event. For example, the stored personal sensor data can be analyzed to determine which People are involved and / or could be involved in the exceptional event. The memory module can be a local memory module of a plurality of memory modules distributed decentrally via the UWB monitoring system or a central memory module of the UWB monitoring system.

According to embodiments, the anonymization by the anonymization filter comprises an encryption of at least part of the personal sensor data. According to embodiments, the time-limited suspension of the anonymization comprises a time-limited provision of the corresponding person-related sensor data in unencrypted form.

Embodiments can have the advantage that by encrypting the person-related sensor data, access to the person-related sensor data can be effectively prevented. On the other hand, in the event of an exceptional event, access to already recorded personal sensor data can be made possible by means of decryption. For example, the personal sensor data is only made available for a limited time in decrypted form.

According to embodiments, the encryption of the personal sensor data takes place in each case by the UWB sensor that records the personal sensor data to be encrypted.

Embodiments can have the advantage that the personal sensor data are encrypted directly when they are recorded and, in the UWB monitoring system, are only further processed in encrypted form. An encryption can take place, for example, with a public cryptographic key of an asymmetric key pair, so that it can be decrypted by an owner of the associated secret cryptographic key of the corresponding asymmetric key pair. The corresponding owner is, for example, a central or decentralized control module of the UWB monitoring system. The secret cryptographic keys are stored, for example, in a protected memory area of a memory module which is assigned to the corresponding control module. According to embodiments, the control module provides all UWB sensors or at least all UWB sensors configured to acquire personal sensor data with a uniform public cryptographic key for encryption. According to embodiments, the control module provides all UWB sensors or at least all UWB sensors configured to acquire personal sensor data with an individual public cryptographic key assigned to the corresponding UWB sensors for encryption. According to embodiments, the control module the UWB sensors or at least the UWB sensors configured to acquire person-related sensor data are provided in groups with an individual, uniform public cryptographic key assigned to the corresponding group for encryption. The groups can be divided so that they each include UWB sensors which are assigned to the same spatial section of the spatial area, which are the same type of UWB sensor or which are configured to record the same type of person-related sensor data.

According to embodiments, the provision of the person-related sensor data in unencrypted form comprises a suspension of the encryption of the person-related sensor data, which are recorded within a limited time window. Embodiments can have the advantage that the effort for decrypting the corresponding person-related sensor data can be avoided and these person-related sensor data also remain unencrypted. According to embodiments, providing the person-related sensor data in unencrypted form includes decrypting encrypted person-related sensor data that are recorded within the limited time window. Embodiments can have the advantage that the personal sensor data are stored exclusively in encrypted form even in the event of an exceptional event. Provision of the personal sensor data in unencrypted form can thus be effectively limited in time.

According to embodiments, the limited time window begins a predetermined period of time before the detection of the exception event or with the detection of the exception event. According to embodiments, the limited time window ends when a predetermined period of time has elapsed after the detection of the exception event or when the detection of the exception event ends.

Embodiments can have the advantage that the provision of the personal sensor data in unencrypted form remains limited in time to a time window that is related to the detected exception event. For example, it can be assumed that only personal sensor data recorded in this time window are relevant in the context of the detected exceptional event. According to embodiments, the limited time window ends, for example, when the exceptional event is no longer detected or can no longer be detected. In the event of a possible fire as an exceptional event, the exceptional event can be detected, for example, in the form of a detection of smoke by a UWB sensor of the monitoring system designed as a smoke alarm. If the exceptional event is no longer detected, that is to say no more smoke is detected, the suspension of encryption is ended, for example. According to embodiments, it is checked at the end of the predetermined period of time whether the Exceptional event is still detectable and / or whether further requirements are met. If the exceptional event can no longer be detected and if the other requirements are met, the suspension of the encryption is ended. Otherwise, the suspension is repeated or continued again for the predetermined period of time. Further prerequisites include, for example, logging a confirmation in the UWB monitoring system that the exception event was checked and that no further measures are necessary or that all necessary measures have been taken. Alternatively or additionally, the further prerequisites can include, for example, logging a confirmation in the UWB monitoring system that the suspension of the encryption is not and / or no longer necessary. The predetermined period of time can have a length of seconds and / or minutes, for example. A start of the limited time window a predetermined period of time before the detection of the exceptional event can have the advantage that relevant person-related sensor data that were recorded in advance of the exceptional event can also be provided in unencrypted form.

• Empfangen einer Anfrage zum Freigeben von erfassten Sensordaten,
• Prüfen eines von der Anfrage umfassten Berechtigungsnachweises zum Zugriff auf die angefragte Sensordaten,
• auf eine erfolgreiche Prüfung des Berechtigungsnachweises hin, Freigeben des Zugriffs auf die angefragten Sensordaten.

In accordance with embodiments, the UWB monitoring system is further configured for

• Receiving a request to release captured sensor data,
• Checking a verification of authorization included in the request for access to the requested sensor data,
• upon successful verification of the authorization, release of access to the requested sensor data.

Embodiments can have the advantage that recorded sensor data, in particular personal sensor data, are only made available to persons who are authorized to do so. A release of sensor data, such as data on the position and / or other data, takes place, for example, according to an authorization profile of the inquirer. Thus, an effective data protection layer can be integrated into the UWB monitoring system. Proof of authorization can be provided, for example, in the form of an authorization certificate. According to embodiments, the request is received and checked, for example, by a decentralized or centralized control module of the UWB monitoring system. In the event of a successful check, for example, the release is also carried out by the corresponding control module. For example, the requested sensor data are sent in response to the request to the sender of the request or are displayed on a display device of the UWB monitoring system. The requested sensor data is transmitted, for example, in encrypted form; in particular, it can be done using end-to-end encryption.

According to embodiments, the recorded sensor data are divided into categories and the checking of the authorization verification includes checking whether the authorization verification authorizes access to sensor data of the category to which the requested sensor data is assigned.

Embodiments may have the advantage that entitlements can be granted by category, so that credentials can be restricted to one or more of the categories.

According to embodiments, the recorded personal sensor data are divided into categories and the anonymization is suspended, for example depending on the type of the detected exceptional event, selectively only for one or more selected categories.

According to embodiments, the access authorization of the credentials is extended for a limited time to the detection of the exception event. An extension of the credentials means that, with a given credential, more categories may be viewed in the event that an exceptional event is detected than if no exceptional event is detected. According to embodiments, the scope of the extension depends on the type of exception event detected. According to embodiments, if an exception event is detected, the access authorization for all valid credentials for access to at least one category of sensor data is extended to all categories of sensor data for a limited period of time.

Embodiments can have the advantage that, for example, depending on the sensitivity of the sensor data, different credentials are required for access to the corresponding sensor data and it is thus possible to control who is granted access rights to the recorded sensor data of the UWB monitoring system and to what extent. In this way, the data release can be adapted to the current dangerous situation, for example by means of the authorization profile of the inquirer.

According to embodiments, the acquired sensor data are each assigned original IDs. A prerequisite for the successful verification of the authorization verification includes a valid confirmation of the authorization verification for access to the requested sensor data by one or more entities assigned to the original IDs of the requested sensor data.

Embodiments can have the advantage that an authorization by one or more entities assigned to the origin IDs, i.e. the origin, of the requested sensor data is necessary for access to the acquired sensor data. According to embodiments, the original IDs each identify the UWB sensor that recorded the corresponding sensor data and / or the UWB token that was sensed by the corresponding sensor data. According to embodiments, the corresponding entities are each the corresponding UWB sensors, UWB tokens or users or administrators who are assigned to the corresponding UWB sensors or UWB tokens.

For example, each localized position, i.e. recorded sensor data for the localization of UWB tokens, is impressed with secure information from the UWB token, so that the origin and owner of the corresponding sensor data are always known. In this case, inquiries regarding a position or data of a UWB token must, for example, always first be approved by the UWB token concerned or a carrier and / or representative of the same.

According to embodiments, if the requested sensor data is released, the type, time, location, recipient and / or use of the released sensor data are logged.

Embodiments can have the advantage that, on the basis of the corresponding protocols, it can be precisely traced what happens to the recorded sensor data, in particular who has access to them. According to embodiments, the logging takes place in a blockchain. A blockchain can have the advantage that it provides a forgery-proof storage structure for storing the data to be logged.

According to embodiments, the UWB monitoring system comprises one or more pre-trained machine learning modules, which are each trained to recognize exceptional events on the basis of anomalies in the recorded sensor data. Embodiments can have the advantage that an automated detection of exception events is made possible.

According to embodiments, the plurality of UWB sensors comprises a plurality of localization sensors which are configured to determine the position of UWB tokens within the spatial area. The position is determined using transit time measurements of UWB signals between UWB tokens and / or location sensors.

Embodiments can have the advantage that the UWB tokens can be used to effectively monitor where authorized persons are within the spatial area. For example, each person who enters the spatial area, such as a restricted-access spatial area, receives a corresponding UWB token. If data relating to an assignment of a token ID to a specific person is not saved or is saved cryptographically, e.g. in encrypted form, the monitoring of the UWB token enables anonymous monitoring of the carriers of the UWB tokens. For example, a necessary prerequisite for decrypting the data for assignment is the detection of an exception event.

UWB tokens are localized, for example, by means of triangulation using at least two or three localization sensors in the form of UWB antennas. The triangulation signals can be sent by the UWB token and / or by the UWB antennas. The triangulation signals can be evaluated by the UWB token and / or the UWB antennas and / or an evaluation module of the monitoring system.

According to embodiments, the UWB monitoring system sends an activation code. The UWB tokens are activated upon receipt of the activation code when entering a transmission range of the UWB monitoring system and deactivated upon failure to receive the activation code when the transmission range of the UWB monitoring system is left.

Embodiments can have the advantage that the UWB token only actively sends signals using UWB within the spatial area or within the transmission range of the UWB monitoring system and is therefore detectable at all.

According to embodiments, the activation of the UWB tokens includes activating the sending of UWB signals by the respective UWB token, in particular activating the sending of UWB signals to the monitoring system. Activation makes the corresponding UWB token visible to the surveillance system. According to embodiments, the deactivation of the UWB tokens includes deactivating the sending of UWB signals by the respective UWB token, in particular deactivating the sending of UWB signals to the monitoring system. Deactivating this makes the corresponding UWB token invisible to the surveillance system.

According to embodiments, the detection of the exception event comprises recording a number of people in the spatial area, for example an access-restricted spatial area, using the UWB sensors, which are at least locally from the The number of persons with access rights recorded using the UWB tokens in the spatial area differs.

Embodiments can have the advantage that attempts to gain access to the restricted-access spatial area or sections thereof without access authorization and / or attempts to monitor movement by the UWB monitoring system within the restricted-access spatial area can be effectively detected.

According to embodiments, each of the UWB tokens is assigned to a user. One or more reference values for person-related sensor data for authenticating the assigned user are stored in each of the UWB tokens. The proof of an access authorization and / or residence authorization using one of the UWB tokens comprises a confirmation of the authentication of the user assigned to the corresponding UWB token by the UWB token. The authentication by the UWB token includes a local validation of personal sensor data by the UWB token using the one or more reference values stored in the UWB token.

If one or more UWB sensors, such as impact sound sensors, motion detectors, light barriers or gas detectors, detect the presence of a person in a spatial section of the spatial area in which no UWB token is detected, this is an indication of an attempt at unauthorized entry. Likewise, differences in the movement patterns of UWB tokens and detected persons can indicate unauthorized activities, for example if a UWB token is resting in one place while movements of a person are detected on the basis of the recorded sensor data.

According to embodiments, an exception event includes, for example, the detection of a number of persons who at least locally exceeds the number of persons with access authorization or the recorded UWB tokens.

According to embodiments, the detection of the exception event comprises detecting a UWB token in a spatial section of the spatial area, for example an access-restricted spatial area for which the corresponding UWB token has no access authorization.

According to embodiments, the detection of the exceptional event comprises the acquisition of non-personal sensor data which exceed a predefined threshold value.

Embodiments can have the advantage in particular that emergency situations can be effectively detected, such as a fire using a UWB sensor configured as a smoke alarm or a break-in using a UWB sensor configured as a broken glass. For example, increased physical activity and a simultaneous rise in temperature can initially be interpreted as an unclear exceptional event or even a dangerous situation.

According to embodiments, the UWB monitoring system comprises a digital radio network with a mesh topology, which is configured to transmit the acquired sensor data using UWB.

Embodiments can have the advantage that captured sensor data can be effectively transmitted via the UWB monitoring system. Furthermore, a mesh topology offers a high level of failure safety, since data transmission via alternative routes is still possible in the event of failure of individual components of the mesh topology. In addition, if a sub-area of the mesh topology fails, operation with the remaining part of the mesh topology can be maintained.

According to embodiments can have the advantage that in the UWB-based radio network with a mesh topology position data for several and / or all network nodes, i.e. UWB sensors and / or UWB tokens, can be provided or determined. Position data can be determined, for example, using a triangulation method based on transit time measurements of UWB signals. The position data can be relative and / or absolute position data. In order to determine absolute position data, position data must be known at least one or more stationary reference points. Embodiments can have the advantage that a position-based routing method can be used for targeted forwarding of data in the UWB-based radio network with mesh topology in order to use the position data determined by UWB to find a shortest or otherwise best path between a source node and a To determine target nodes within the radio network.

According to embodiments, one or more of the UWB sensors are configured as UWB transceivers for forwarding UWB transmission signals. According to embodiments, the UWB monitoring system comprises, in addition to the UWB sensors, one or more UWB transceivers which are configured to forward the UWB transmission signals.

Embodiments can have the advantage that forwarding of data by means of UWB can be implemented in an effective manner using the UWB sensors and / or additional UWB transceivers.

Embodiments also include a method for controlling a UWB monitoring system for monitoring a spatial area. The UWB monitoring system comprises a plurality of UWB sensors which are arranged distributed in the spatial area. The UWB sensors are configured for communication via UWB. The communication includes transmitting the sensed sensor data.

The plurality of UWB sensors comprises a plurality of localization sensors for determining position data of a mobile, portable UWB token within the spatial area. The position data is determined using a transit time measurement of UWB signals between the localization sensors and the UWB token.

The UWB monitoring system is configured to monitor the presence of the UWB token at a user assigned to the UWB token. The UWB monitoring system comprises an authentication device with an authentication sensor for the local acquisition of authentication data for authenticating the user of the UWB token. The authentication device has access to a reference value for the authentication data of the user for validating the authentication data recorded. Successful validation of the authentication data recorded indicates the presence of the UWB token on the user.

• wiederholtes Bestimmen der Positionsdaten des UWB-Tokens innerhalb des räumlichen Bereiches unter Verwendung der Lokalisierungssensoren,
• Senden einer Authentifizierungsanfrage an die Authentifizierungsvorrichtung zum Prüfen der Anwesenheit des UWB-Tokens an dem zugeordneten Nutzer, wobei die Positionsdaten der Authentifizierungsvorrichtung innerhalb des räumlichen Bereiches bekannt sind,
• Empfangen einer Authentifizierungsbestätigung des Authentifizierens des Nutzers von der Authentifizierungsvorrichtung, wobei die Authentifizierungsbestätigung ein erfolgreiches Validieren der erfassten Authentifizierungsdaten des Nutzers bestätigt, welches die Anwesenheit des UWB-Tokens an dem Nutzer anzeigt, wobei das erfolgreiche Validieren voraussetzt, dass sich die Positionsdaten des UWB-Tokens während des Authentifizierens innerhalb eines Erfassungsbereichs relative zu den bekannten Positionsdaten der Authentifizierungsvorrichtung befinden und eine ausreichende Übereinstimmung der erfassten Authentifizierungsdaten mit dem Referenzwert vorliegt.

The method for controlling the UWB monitoring system to monitor the presence of the UWB token at the assigned user comprises:

• repeated determination of the position data of the UWB token within the spatial area using the localization sensors,
• Sending an authentication request to the authentication device to check the presence of the UWB token on the assigned user, the position data of the authentication device being known within the spatial area,
• Receiving an authentication confirmation of the authentication of the user from the authentication device, the authentication confirmation confirming a successful validation of the recorded authentication data of the user, which indicates the presence of the UWB token to the user, the successful validation assuming that the position data of the UWB token is during authentication within a coverage area relative to the known position data of the authentication device are located and there is sufficient correspondence between the detected authentication data and the reference value.

According to embodiments, the method for controlling the UWB monitoring system is configured to control each of the previously described embodiments of the UWB monitoring system.

• Erfassen von Sensordaten in dem räumlichen Bereich unter Verwendung der UWB-Sensoren, wobei die erfassten Sensordaten personenbezogene Sensordaten umfassen,
• Filtern der erfassten Sensordaten unter Verwendung eines Anonymisierungsfilters, wobei der Anonymisierungsfilter dazu konfiguriert ist, die personenbezogenen Sensordaten zu anonymisieren,
• Auswerten der erfassten Sensordaten zum Detektieren eines Ausnahmeereignisses,
• auf das Detektieren des Ausnahmeereignisses hin, zeitlich begrenzten Aussetzen des Anonymisierens der personenbezogene Sensordaten.

According to embodiments, the method for controlling the UWB monitoring system for monitoring the presence of the UWB token at the assigned user further comprises:

• Acquisition of sensor data in the spatial area using the UWB sensors, the acquired sensor data including personal sensor data,
• Filtering the captured sensor data using an anonymization filter, the anonymization filter being configured to anonymize the personal sensor data,
• Evaluation of the recorded sensor data to detect an exceptional event,
• upon the detection of the exceptional event, temporary suspension of the anonymization of the personal sensor data.

Figur 1

ein schematisches Diagramm eines exemplarischen UWB-Überwachungssystems,

Figur 2

ein schematisches Diagramm eines exemplarischen UWB-Überwachungssystems,

Figur 3

ein schematisches Diagramm eines exemplarischen UWB-Überwachungssystems,

Figur 4

ein schematisches Diagramm eines exemplarischen UWB-Sensors,

Figur 5

ein schematisches Diagramm eines exemplarischen UWB-Tokens,

Figur 6

ein schematisches Diagramm eines exemplarischen UWB-Tokens,

Figur 7

ein schematisches Diagramm einer exemplarischen Authentifizierungsvorrichtung,

Figur 8

ein Flussdiagramm eines exemplarischen Verfahrens zum Steuern eines UWB-Überwachungssystems,

Figur 9

ein Flussdiagramm eines exemplarischen Verfahrens zum Steuern eines UWB-Überwachungssystems,

Figur 10

ein Flussdiagramm eines exemplarischen Verfahrens zum Steuern eines UWB-Überwachungssystems und

Figur 11

ein Flussdiagramm eines exemplarischen Verfahrens zum Steuern eines UWB-Überwachungssystems.

In the following, embodiments of the invention are explained in more detail with reference to the drawings. Show it:

Figure 1

a schematic diagram of an exemplary UWB monitoring system,

Figure 2

a schematic diagram of an exemplary UWB monitoring system,

Figure 3

a schematic diagram of an exemplary UWB monitoring system,

Figure 4

a schematic diagram of an exemplary UWB sensor,

Figure 5

a schematic diagram of an exemplary UWB token,

Figure 6

a schematic diagram of an exemplary UWB token,

Figure 7

a schematic diagram of an exemplary authentication device;

Figure 8

a flow diagram of an exemplary method for controlling a UWB monitoring system,

Figure 9

a flow diagram of an exemplary method for controlling a UWB monitoring system,

Figure 10

FIG. 6 is a flow diagram of an exemplary method for controlling a UWB monitoring system; and FIG

Figure 11

FIG. 3 is a flow diagram of an exemplary method for controlling a UWB monitoring system.

Elements of the following embodiments that correspond to one another are identified by the same reference symbols.

Figure 1 shows an exemplary UWB monitoring system 100 for monitoring a spatial area 102, for example a restricted-access spatial area. If the spatial area 102 is a restricted-access spatial area, this restricted-access spatial area is, for example, delimited from the surroundings and, as intended, can only be entered via one or more entrances or exits 104. For example, the spatial area is an indoor area or interior area within a building. As an alternative or in addition, the spatial area can also include an outdoor area or outside area outside of a building. For example, this outdoor area can be a restricted-access area that is fenced off. A fence can for example comprise a fence, a wall and / or a hedge. A restricted-access spatial area 102 can, for example, be divided into a plurality of spatial sections 106, which themselves can only be entered via one or more entrances or exits 108 as intended.

The UWB monitoring system 100 comprises a plurality of UWB sensors 110 distributed over the spatial area 102. The UWB sensors 110 are for capturing sensor data such as position data, movement data, image data, sound data, vibration data, temperature data, structural data, gas concentration data, Particle concentration data etc. configured. Furthermore, the UWB sensors 110 are for transmitting the detected sensor data by means of UWB, that is to say via one provided by the UWB monitoring system 100 UWB network configured. Here, the UWB sensors 110 can be configured as UWB transceivers for forwarding UWB transmission signals within the monitoring system 100. Furthermore, in addition to the UWB sensors 110, the UWB monitoring system 100 can comprise one or more UWB transceivers 111, which are configured to forward the UWB transmission signals. The UWB network implemented by the monitoring system 100 is, for example, a digital radio network with a mesh topology, which is configured to transmit the detected sensor data using UWB. For example, sensor data is transmitted within the UWB-based radio network with mesh topology using a position-based routing method. According to embodiments, data transmission from UWB sensors 110 takes place exclusively by means of UWB. According to embodiments, one or more of the UWB sensors 110 are additionally configured for an at least partially and / or completely wired transmission of the sensed sensor data. According to embodiments, all UWB sensors 110 are additionally configured for an at least partially and / or completely wired transmission of the sensed sensor data. For example, UWB radar functionality can also be integrated and / or implemented for the detection of people who do not have a UWB token.

The UWB sensors 110 include, for example, anonymization filters that are configured to filter the sensed sensor data. In the course of the filtering, personal sensor data is anonymized. Personal sensor data include, for example, image data on which people can be identified. The filtered sensor data are transmitted to a control module 116 via the UWB network, for example. The control module 116 can be a central control module or a decentralized control module. The control module 116 is configured, for example, to evaluate the sensor data captured by the UWB sensors 110 in order to detect exceptional events, such as a dangerous situation or unauthorized access to the spatial area 102 limited exposure.

The control module 116 is further configured, for example, to receive requests for captured sensor data, to check credentials for access to the corresponding sensor data and, in the event of a successful check, to grant access to the requested sensor data. If an exceptional event is detected, for example, access to personal sensor data is also granted, the anonymization of which is temporarily suspended. The credentials can be based, for example, on authorization certificates and / or authorization profiles of the inquirers, which define the access authorizations of the inquirers. In an authorization profile assigned to a user and / or UWB token, for example, all are and / or UWB token assigned access authorizations are stored. According to embodiments, the scope of the granted access authorization can depend, for example, on whether an exceptional situation is detected.

The monitoring system 100 can furthermore be configured to locate UWB tokens 112 ′ within the spatial area 102 using UWB sensors. For this purpose, UBW localization signals 107 are used, for example, which are sent from the UWB antennas 110 to the corresponding UWB tokens 112 'and vice versa. The relative positions of the UBW tokens 112 'to the permanently installed UWB antennas 110 and thus the positions of the UBW tokens 112' in the spatial area 102 can be determined precisely using the transit time differences of the transmitted signals, for example by means of triangulation. Since the transmitted UBW localization signals 107 can hardly be distinguished from background noise without knowledge of the UWB coding used and are thus effectively obfuscated, attempts at unauthorized localization of the UWB tokens 112 'in the course of unauthorized spying attempts can be effectively prevented. This is additionally supported by the relatively short range of the UWB signals, which effectively counter spying attempts from a distance. The UWB tokens 112 'identify, for example, users or carriers with access authorization to the spatial area 102 if this is a restricted-access spatial area. Furthermore, the UWB tokens 112 ′ can define carrier-specific access authorizations if different access authorizations are necessary for individual spatial sections of the spatial area 102. The UWB token 112 'can thus be used to determine where persons with access authorization are located. If persons are detected to whom no UWB token 112 'can be assigned, this is an indication of an attempt at unauthorized intrusion, which is detected, for example, as an exceptional event.

The UWB tokens 112 'are also configured as authentication devices and comprise an authentication sensor for detecting authentication data of the user of the UWB token 112'. The user of the UWB token 112 'can be authenticated on the basis of the acquired authentication data. In the case of successful authentication, the user of the UWB token 112 'is the user assigned to the UWB token 112'. The position data of the UWB token 112 'can therefore be used as the position data of the corresponding user. In the event of unsuccessful authentication, the user of the UWB token 112 'is not the assigned user. There is therefore an attempt at manipulation which can be effectively recognized in this way.

Figure 2 FIG. 10 shows an alternative embodiment of the monitoring system 100 from FIG Figure 1 , which additionally comprises stationary authentication devices 140. The stationary authentication devices 140 are arranged, for example, distributed over the spatial area 102 at strategically relevant and / or advantageous positions. For example, the stationary authentication devices 140 are arranged at entrances or exits 108, via which the individual and / or security-critical spatial sections 106 of the spatial area 102 can be entered or exited. For example, the UWB tokens 112, in contrast to the UWB tokens 112 ', comprise Figure 1 no authentication devices.

Figure 3 shows an exemplary UWB monitoring system 100 for monitoring a spatial area 102. The UWB monitoring system shown largely corresponds to that Figure 1 UWB monitoring system shown, however, communication within the UWB monitoring system 100 takes place in a wired manner using a LAN network. According to embodiments, the use of UWB and LAN can also be combined with one another. For example, both are used simultaneously or UWB communication is implemented as failure protection in the event of a failure of the LAN network. The UWB monitoring system 100 comprises a plurality of UWB sensors 110 distributed over the spatial area 102. The UWB sensors 110 are for capturing sensor data such as position data, movement data, image data, sound data, vibration data, temperature data, structural data, gas concentration data, Particle concentration data etc. configured. The UWB sensors 110 are connected to a local wired network with a control module 116 for controlling the operation of the UWB monitoring system 100 by means of LAN connections 115 for the transmission of sensed sensor data. The control module 116 is configured to control the UWB monitoring system 100. Some UWB sensors of the plurality of UWB sensors 110 include a control module with an emergency function. The emergency function comprises control functions at least for the local operation of part of the UWB monitoring system 100 using a UWB mesh network. According to embodiments, for example, only the UWB sensors 110 with control module can be connected to the local wired network by means of LAN connections 115. In this case, the further UWB sensors 110 can be connected to the control module 116 via the UWB sensors 110 with control module, for example by means of UWB connections.

The monitoring system 100 can furthermore be configured to locate UWB tokens 112 ′ within the spatial area 102 using the UWB sensors 110. For this purpose, UBW localization signals 107 are used, for example, which are sent from UWB sensors 110 configured as localization sensors to the corresponding UWB tokens 112 'and vice versa. The relative positions of the UBW tokens 112 'to the UWB antennas of the permanently installed UWB sensors 110, and thus the positions of the UBW tokens 112' in the spatial area 102, can be precisely determined by means of triangulation, for example. The local wired network can have any network topology.

The UWB tokens 112 'can be configured as authentication devices. As an alternative and / or in addition, stationary authentication devices can be provided, for example in the case of the UWB monitoring system 110 of FIG Figure 2 .

Figure 4 shows an exemplary UBW sensor 110. This UBW sensor 110 comprises a processor 120 which executes program instructions that are stored, for example, in a memory 124 of the UBW sensor 110, and controls the UBW sensor 110 in accordance with the program instructions. The UBW sensor 110 further comprises a sensor element 122 which is configured, for example, to acquire optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data. The sensed sensor data can for example include person-related sensor data as a function of the sensor element 122 used. If the UWB sensor 110 is configured to capture person-related sensor data, the UWB sensor 110 furthermore comprises an anonymization filter for anonymizing the person-related sensor data, otherwise not. The anonymization can include, for example, deleting the recorded personal sensor data from the memory 124. Furthermore, the anonymization can include, for example, an encryption of the recorded personal sensor data. Finally, the UWB sensor 110 comprises a UWB antenna 126 for sending and receiving data by means of UWB. According to embodiments, the UWB sensor 110 can, for example, additionally include a communication interface for wired data transmission.

Figure 5 FIG. 11 shows an exemplary UBW token 112 that includes a processor 130, a memory 132, and a UWB antenna 134. The processor 130 is configured to control the UBW token 112 by executing program instructions which are stored in the memory 132, for example. A token ID can also be stored in the memory 132. The UBW token 112 is configured to send and receive UWB signals via the UWB antenna 134. For example, the UBW token 112 sends UWB signals which include a time stamp and / or the token ID. Using these UWB signals from UBW token 112 or UWB signals from UWB antennas or UWB sensors 110 of UWB monitoring system 100, UBW token 112 can be localized and / or identified by UWB monitoring system 100.

Figure 6 shows an exemplary UBW token 112 ', which corresponds to the UBW token 112 of FIG. In addition, the UBW token 112 'comprises a user interface 136 by means of which the user can interact with the UBW token 112'. The user interface 136 comprises, for example, an input device and an output device, for example a keyboard and a display or a touch display. Furthermore, the UBW token 112 'comprises an authentication device 138 which comprises a sensor element 139 for capturing authentication data of the user.

Figure 7 FIG. 11 shows an exemplary stationary authentication device 140 comprising a processor 142 and a memory 144. Program instructions are stored in the memory 144, the execution of which by the processor 142 causes the latter to carry out an authentication of a user. For this purpose, the stationary authentication device 140 comprises, for example, a user interface 146 by means of which the user can interact with the stationary authentication device 140. The user interface 146 comprises, for example, an input device and an output device, for example a keyboard and a display or a touch display. The stationary authentication device 140 further comprises a sensor element 147 for detecting authentication data of the user. In the event of a successful validation of the authentication data detected by means of the sensor element 147, the authentication device 140 creates an authentication confirmation and sends it via a communication interface 148.

Figure 8 Figure 11 shows an exemplary method for controlling a UWB monitoring system. In block 400, position data of the UWB token within the spatial area are determined using the localization sensors. For this purpose, a transit time measurement of UWB signals between the localization sensors and the UWB token is carried out, from which a current position of the UWB token can be determined, for example by means of triangulation and knowledge of the positions of the localization sensors. This determination of the position data of the UWB token can take place repeatedly, for example continuously, and movements of the UWB token through the spatial area 102 can be tracked. In block 402, an authentication request is sent to the authentication device for checking the presence of the UWB token at the assigned user. For example, the UWB token comprises the authentication device and the authentication request is sent to the UWB token. In block 404, upon successful authentication of the user of the UWB token, an authentication confirmation is received from the authentication device. This authentication confirmation confirms successful validation of the recorded authentication data of the user, which confirms the presence of the UWB token displays to the user. Here, a successful validation assumes that there is sufficient agreement between the recorded authentication data and the reference value

Figure 9 Figure 11 shows an exemplary method for controlling a UWB monitoring system. In block 410, position data of the UWB token within the spatial area are determined using the location sensors. In block 412, for example based on the determined position data, a stationary authentication device for authenticating the user of the UWB token is selected. The selected authentication device is, for example, an authentication device in the vicinity of the UWB token or on a path of the UWB token extrapolated from the position data of the UWB token. The selection of the authentication device is based, for example, on one or more of the following criteria: a distance between the position data of the UWB token and the position data of the selected authentication device falls below a predefined first maximum distance, the selected authentication device has the smallest distance from all authentication devices of the plurality of authentication devices to the position data of the UWB token, the selected authentication device has the smallest distance from all authentication devices of the plurality of authentication devices to a future path of the UWB token through the spatial area extrapolated from the previously determined position data of the UWB token.

At block 414, an authentication request is sent to the UWB token to authenticate. For example, the authentication request identifies the selected authentication device on which the user of the UWB token is to be authenticated. In block 416, an authentication request is sent to the selected authentication device for checking the presence of the UWB token at the assigned user. For example, the UWB token comprises the authentication device and the authentication request is sent to the UWB token. In block 418, upon successful authentication of the user of the UWB token, an authentication confirmation is received from the authentication device. This authentication confirmation confirms successful validation of the recorded authentication data of the user, which indicates the presence of the UWB token on the user. In this case, a successful validation assumes that the position data of the UWB token are within a detection area relative to the known position data of the authentication device during authentication and that there is sufficient agreement between the detected authentication data and the reference value

Figure 10 Figure 11 shows an exemplary method for controlling a UWB monitoring system. In block 200, sensor data are recorded in a spatial area by UWB sensors of the UWB monitoring system. The recorded sensor data can include personal sensor data. In block 202, the acquired sensor data is filtered using anonymization filters of the UWB sensors. Personal sensor data are anonymized. Such an anonymization includes, for example, deleting or encrypting the sensor data to be anonymized. In block 204, the recorded and filtered sensor data are evaluated to detect an exceptional event. This is done, for example, by a central or decentralized control module of the UWB monitoring system. In block 206, upon detection of an exceptional event, a time-limited suspension of the anonymization of the person-related sensor data, for example by the control module.

Figure 11 Figure 11 shows an exemplary method for controlling a UWB monitoring system. In block 300, the UWB monitoring system, for example a control module of the UWB monitoring system, receives a request for the release of detected sensor data. In block 302, for example by the control module, a verification of authorization included in the request for access to the requested sensor data is checked. The authorization verification can be, for example, an authorization certificate or an identifier of a stored authorization profile of the inquirer. In block 304, if the authorization verification has been checked successfully, access to the requested sensor data is enabled. For example, the requested sensor data are sent to the inquirer or displayed on a local display device of the monitoring system.

List of reference symbols

100

UWB monitoring system

102

spatial area

104

Entry / exit

106

spatial section

108

Entry / exit

107

UWB localization signal

110

UWB sensor

111

UWB transceiver

112

UWB token

114

UWB connection

115

LAN connection

116

Control module

120

processor

122

Sensor element

123

filter

124

Storage

126

UWB antenna

130

processor

132

Storage

134

UWB antenna

136

User interface

138

Authentication device

139

Authentication sensor

140

stationary authentication device

142

processor

144

Storage

146

User interface

147

Authentication sensor

148

Communication interface

Claims (15)

UWB monitoring system (100) for monitoring a spatial area (102), the UWB monitoring system (100) comprising a plurality of UWB sensors (110) which are arranged distributed in the spatial area (102), the UWB- Sensors (110) are configured for communication by means of UWB, the communication comprising a transmission of the sensed sensor data,
wherein the plurality of UWB sensors (110) comprises a plurality of localization sensors for determining position data of a mobile portable UWB token (112, 112 ') within the spatial area (102), the determination of the position data using a transit time measurement of UWB Signals (107) between the localization sensors and the UWB token (112, 112 '),
wherein the UWB monitoring system (100) is configured to monitor the presence of the UWB token (112, 112 ') at a user assigned to the UWB token (112, 112'), wherein the UWB monitoring system (100) includes an authentication device ( 138, 140) with an authentication sensor (139, 147) for the local acquisition of authentication data for authenticating the user of the UWB token (112, 112 '), the authentication device (138, 140) having access to a reference value for the authentication data of the user has to validate the acquired authentication data, a successful validation of the acquired authentication data indicating the presence of the UWB token (112, 112 ') on the user,
wherein monitoring the presence of the UWB token (112, 112 ') at the associated user comprises: • repeated determination of the position data of the UWB token (112, 112 ') within the spatial area (102) using the localization sensors, • Sending an authentication request to the authentication device (138, 140) to check the presence of the UWB token (112, 112 ') at the assigned user, the position data of the authentication device (138, 140) within the spatial area (102) being known , • Receiving an authentication confirmation of the authentication of the user from the authentication device (138, 140), wherein the authentication confirmation confirms a successful validation of the captured authentication data of the user, which indicates the presence of the UWB token (112, 112 ') on the user, wherein the Successful validation requires that the position data of the UWB token (112, 112 ') are located within a detection range relative to the known position data of the authentication device (138, 140) during authentication and that there is sufficient agreement between the detected authentication data and the reference value. UWB monitoring system (100) according to one of the preceding claims, wherein the predefined detection area is a predefined distance range from the known position data of the authentication device (138, 140) or wherein the predefined detection area is one using the detected authentication data specific coverage of authentication data. UWB monitoring system (100) according to one of the preceding claims, wherein the authentication device (138) to which the authentication request is sent is selected from a plurality of authentication devices of the UWB monitoring system (100). UWB monitoring system (100) according to claim 3, wherein the selection of the authentication device (138) is based on one or more of the following criteria: a distance between the position data of the UWB token (112) and the position data of the selected authentication device (138) is less than one predefined first maximum distance, the selected authentication device (138) has the smallest distance from all authentication devices of the plurality of authentication devices to the position data of the UWB token (112), the selected authentication device (138) has the smallest of all authentication devices of the plurality of authentication devices Distance to a future path of the UWB token (112) through the spatial area (102) extrapolated from the previously determined position data of the UWB token (112), and / or
wherein an authentication request is sent to the UWB token (112, 112 ') or wherein a notification signal is output as an authentication request from the selected authentication device (140). UWB monitoring system (100) according to one of the preceding claims, wherein the authentication device (140) is a stationary authentication device arranged in the spatial area (102), wherein an authentication request is sent to the authentication device (140) in particular if a distance between the position data of the UWB token (112) and the position data of the authentication device (140) falls below a predefined second maximum distance, or
wherein the UWB token (112 ') comprises the authentication device (138), the authentication sensor (147) being a sensor of the UWB token (112'), the known position data of the authentication device (138) being the specific position data of the UWB token (112 ') is concerned. UWB monitoring system (100) according to one of the preceding claims, wherein the reference value is stored in a memory of the UWB token (112 '). UWB monitoring system (100) according to one of the preceding claims, wherein the transit time measurement of UWB signals (107) between the localization sensors and the UWB token (112, 112 ') is carried out by the UWB token (112, 112') and determining the position data comprises receiving the position data from the UWB token (112, 112 '), or
wherein the determination of the position data comprises a recording of sensor data in the spatial area (102) using the localization sensors in the course of the transit time measurement, the sensor data recorded by the localization sensors being used to determine the position data. UWB monitoring system (100) according to one of the preceding claims, wherein monitoring the presence of the UWB token (112, 112 ') at the assigned user further comprises: upon unsuccessful validation of the authentication data, outputting an alarm signal, and / or
wherein unsuccessful validation of the authentication data is indicated by failure to provide authentication confirmation and / or by receiving an error message from the authentication device (138, 140), and / or
wherein the authentication data comprises one or more of the following data: biometric data of the user, behavior-based data of the user, a personal password of the user, signed data of one or more other electronic devices assigned to the user. UWB monitoring system (100) according to one of the preceding claims, wherein the UWB token (112, 112 ') provides access authorizations to and / or residence authorizations in the spatial area (102) of the user assigned to the UWB token (112, 112') be detected,
whereby a successful proof of access authorizations and / or residence authorizations requires in particular the receipt of the authentication confirmation. UWB monitoring system (100) according to one of the preceding claims, wherein the plurality of UWB sensors (110) comprises, in addition to the localization sensors, one or more additional UWB sensors which are configured to acquire sensor data. UWB monitoring system (100) according to claim 10, wherein the one or more additional UWB sensors comprise sensors (122) for capturing optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data, and / or
wherein the UWB monitoring system (100) is further configured to: • on the detection of sensor data by a sensor (122) of one of the additional UWB sensors, which are indicative of the presence of a person in a detection area of the sensor (122), checking whether position data of a UWB token (112, 112 ') can be determined within the detection range of the sensor (122), • if no position data of a UWB token (112, 112 ') can be determined within the detection range of the sensor (122), an alarm signal is output. UWB monitoring system (100) according to one of the preceding claims, wherein the detected sensor data comprise personal sensor data and the UWB monitoring system (100) is configured for • Filtering the recorded sensor data using an anonymization filter (123), the anonymization filter (123) being configured to anonymize the personal sensor data, • Evaluation of the recorded sensor data to detect an exceptional event, • on the detection of the exceptional event, temporary suspension of the anonymization of the personal sensor data. UWB monitoring system (100) according to claim 12, wherein the authentication data is personal sensor data and / or wherein the anonymization by the anonymization filter (123) comprises deleting at least a part of the personal sensor data, with the temporary suspension of the anonymization Storing the personal sensor data, which is recorded within a limited time window,
wherein the limited time window begins in particular with the detection of the exceptional event and ends when a predetermined period of time has elapsed or the detection of the exceptional event ends,
the personal sensor data being deleted, in particular, by the UWB sensor capturing the personal sensor data to be deleted, the personal sensor data being stored in particular by the personal sensor data being transmitted by the UWB sensor capturing the personal sensor data to be stored to a memory module by means of UWB of the UWB monitoring system (100). UWB monitoring system (100) according to one of claims 12 to 13, wherein the anonymization by the anonymization filter (123) is an encryption of at least one Part of the personal sensor data, the time-limited suspension of anonymization comprising a time-limited provision of the corresponding personal sensor data in unencrypted form, and / or
wherein the UWB monitoring system (100) is further configured to • Receiving a request to release captured sensor data, • Checking of a credential included in the request for access to the requested sensor data, • Upon successful verification of the authorization, release of access to the requested sensor data. A method for controlling a UWB monitoring system (100) for monitoring a spatial area (102), the UWB monitoring system (100) comprising a plurality of UWB sensors (110) which are distributed in the spatial area (102), wherein the UWB sensors (110) are configured for communication by means of UWB, wherein the communication comprises transmitting the sensed sensor data,
wherein the plurality of UWB sensors comprises a plurality of localization sensors for determining position data of a mobile portable UWB token (112, 112 ') within the spatial area (102), wherein the determination of the position data using a transit time measurement of UWB signals ( 107) takes place between the localization sensors and the UWB token (112, 112 '),
wherein the UWB monitoring system (100) is configured to monitor the presence of the UWB token (112, 112 ') at a user assigned to the UWB token (112, 112'), wherein the UWB monitoring system (100) includes an authentication device ( 138, 140) with an authentication sensor (139, 147) for the local acquisition of authentication data for authenticating the user of the UWB token (112, 112 '), the authentication device (138, 140) having access to a reference value for the authentication data of the user has to validate the acquired authentication data, a successful validation of the acquired authentication data indicating the presence of the UWB token (112, 112 ') on the user,
wherein the method of controlling the UWB monitoring system (100) to monitor the presence of the UWB token (112, 112 ') at the assigned user comprises: • repeated determination of the position data of the UWB token (112, 112 ') within the spatial area (102) using the localization sensors, • Sending an authentication request to the authentication device (138, 140) to check the presence of the UWB token (112, 112 ') at the assigned user, the position data of the authentication device (138, 140) within the spatial area (102) being known , • Receiving an authentication confirmation of authenticating the user from the authentication device (138, 140), wherein the authentication confirmation a successful validation of the detected authentication data of the user confirms, which indicates the presence of the UWB token (112, 112 ') to the user, wherein the successful validation requires that the position data of the UWB token (112, 112') during the Authentication are located within a detection area relative to the known position data of the authentication device (138, 140) and there is sufficient agreement between the detected authentication data and the reference value.

Images