WO2003094711A1

WO2003094711A1 - Monitoring system for an individual and components thereof

Info

Publication number: WO2003094711A1
Application number: PCT/EP2003/004946
Authority: WO
Inventors: Henry Arthur Muglia
Original assignee: Henry Arthur Muglia
Priority date: 2002-05-13
Filing date: 2003-05-12
Publication date: 2003-11-20
Also published as: AU2003240623A1; DE10221201A1

Abstract

The invention relates to a monitoring system for an individual and to components thereof. The invention particularly relates to a data transmission device (100) for a monitoring system serving to monitor an individual, comprising at least one sensor (10) for recording at least one parameter of the monitored individual, a storage device (114) for storing the values of the at least one parameter that are recorded by the at least one sensor (10), and an evaluating device (113) for evaluating the values of the at least one parameter that are recorded by the at least one sensor (10). The aim of the invention is to provide a monitoring system for an individual, which can continuously measure parameters of the monitored individual that are recorded by sensors and which can evaluate, in almost real time and with the calculating capacity and the efficiency of a computing center, the compiled values of the parameters regardless of the whereabouts of the monitored individual. To this end, the data transmission device (100) comprises a data interface (101) via which it is connected to a telephone network, and the evaluating device (113) is configured for establishing a connection to a data center (200, 200', 200'') when the trend of the values of the at least one parameter that are recorded by the at least one sensor (10) indicates a likelihood that a specified first threshold value will be exceeded and/or when the values of the at least one parameter that are recorded by the at least one sensor (10) exceed a specified first threshold value.

Description

Personal surveillance system and its components

The present invention relates to a personal surveillance system according to the preamble of claim 1 and its components. The components of the personal monitoring system include, in particular, sensors for the continuous monitoring of personal parameters of the monitored person and data transmission devices for the transmission of personal data, in particular for the transmission of medical data.

There is a need for personal monitoring systems with continuous sensors for monitoring at least one biometric parameter, which help the sensor carrier directly in critical situations.

In the prior art, for example, person monitoring systems with continuous sensors are known which initiate suitable measures based on certain values of biometric parameters.

For example, Minimed and Disetronic are developing insulin pumps with sugar sensors in patients with a malfunction of the pancreas in the abdominal cavity be implanted. The insulin pumps take over the function of the pancreas. The sensor combined with the insulin pump determines the sugar level of the fluid in the abdominal cavity, which is a measure of the blood sugar level. The disadvantage of these devices is that the patient does not know whether the device is working because no data is released that inform the patient about the functions of the implants. Therefore, for example, the patient will not perceive high loads due to excessive food intake because the insulin pump compensates for the loads caused by the insulin pump. In addition, if the device fails, critical situations can result in shock or death of the patient. In addition, these devices have the disadvantage that the patient does not usually change the bad lifestyle that led to the disease. As a result, most patients develop secondary diseases, such as the heart, over time.

Medtronic also offers pacemakers, for example. In this personal monitoring system, too, biometric parameters are monitored by a sensor and, if necessary, pulses are generated to regulate cardiac activity. As with the implanted insulin pumps, the disadvantage of the known pacemakers is that the patient does not receive any continuous data from the implant which inform him of a high load or technical data of the implant.

Other known systems are mentioned in the article "Assistant Doctor Dr. Handy" in the German magazine Stern from April 23, 2002. The systems mentioned there all have the disadvantage that they either cannot carry out extensive real-time analysis on site or can only be used locally. There is therefore a need for personal surveillance systems with continuous sensors that perform a complete evaluation of the data with a high computing power and intervene automatically in an emergency.

In the journal Bild der Wissenschaft, issue 1, 2002, a personal monitoring system according to the preamble of claim 1 is proposed on pages 91 to 93 as a future development of an electronic swimming trainer, which measures, collects and evaluates physical and physiological data on the body of the person being monitored. Based on the evaluation, the monitored person could be warned of excessive physical exertion. In addition, it is proposed that the system be used for elderly or handicapped people, whereby a built-in altimeter, which can determine the height above the ground with an accuracy of around ten centimeters, could detect a fall and sound an alarm in an emergency.

This system has the disadvantage that the evaluation can only recognize an emergency because of the limited performance of the evaluation device for very specific cases. However, in order to be able to evaluate and assess the data recorded by the permanent sensor for many foreseeable and not necessarily foreseeable situations, the computing and storage capacity of a mainframe system of a data center is required. There is therefore a need for the values of the monitored parameter or parameters monitored by the sensor to be sent to a data center for evaluation, which evaluates the situation and, if necessary, initiates auxiliary measures.

Various systems are known which offer a permanent or occasional data connection for personal surveillance systems to a data center. For example, DARPA systems are currently being developed for military use, in which soldiers are equipped with sensors to record their position and physical condition. The sensors are constantly connected to the data center of the operations center. A communication network is set up for each application, which is limited in time and space to the area of application.

Furthermore, personal monitoring systems with a data connection according to the 802.11 standard (WIFI) are used in hospitals, in which the sensors worn by patients with certain indications are connected to the internal network of the hospital and continuously transmit the measured values to the computer center of the hospital.

All of these personal surveillance systems have the disadvantage that the data transmission between the sensor and the data center only works in a temporally or locally restricted area. Therefore, these personal surveillance systems no longer fulfill their function when the monitored person leaves the area in which data transmission is possible.

In principle, the recorded data could be sent to a data center via a dedicated line. This solution, however, is much ^'too expensive to use. A leased line in the close range in Germany, for example, costs more than EUR 1000.00 per month.

The invention is therefore based on the object of specifying a person monitoring system which can continuously measure the parameters of the person being monitored by sensors and can evaluate the collected values of the parameters with the computing capacity and performance of a data center approximately in real time, regardless of the location of the person being monitored. Furthermore, the The invention has for its object to provide components for such a personal surveillance system.

The object of the invention is achieved with a data transmission device for a personal surveillance system according to claim 1. Advantageous embodiments of the invention are specified in the dependent claims.

According to one aspect of the invention, a data transmission device according to the invention for a person monitoring system comprises at least one sensor for detecting at least one parameter relevant for the person being monitored, a memory device for storing the values of the at least one parameter detected by the at least one sensor, and an evaluation device for evaluating the data from values of the at least one parameter detected by the at least one sensor, the data transmission device having a data interface for connection to a telephone network, and the evaluation device being designed such that it effects the establishment of a connection to a data center if the trend the values of the at least one parameter detected by the at least one sensor indicate that a certain first threshold value is expected to be exceeded and / or if the values of the at least one sensor detected by the at least one sensor a parameter exceed a certain first threshold value.

This data transmission device according to the invention has the advantage that the evaluation of the continuously recorded values of the sensor can be carried out by a large computer system even without a permanent connection of the sensor to the large computer system. Since, in particular, a personal electronic file or medical record can be kept or integrated in the large-scale computer system, this data transmission device according to the invention makes it reliable and reliable individual evaluation of the sensor values possible.

According to a preferred embodiment of the invention, the data transmission device comprises a mobile radio telephone. This has the advantage that the manufacturing costs of the data transmission device according to the invention can be kept relatively low through the use of bulk articles.

According to one embodiment of the invention, the data transmission device comprises a signal device for providing a warning signal to the monitored person, the evaluation device being designed in such a way that it activates the signal device when the trend of the values of the at least one parameter detected by the at least one sensor exceeds the likely exceedance of a certain second threshold value and / or if the values of the at least one parameter detected by the at least one sensor exceed a certain second threshold value. This embodiment has the advantage that the sensor carrier can react on the basis of the warning signal in order to keep the sensor values or the trend of the values in a non-critical range. For example, the warning signal can include a message for the sensor carrier to behave in a certain way. For example, in the case of a diabetic, the message may include the request to inject a certain amount of insulin, if necessary, or to eat a certain amount of bread units, to exercise something, or to rest. In the case of a cardiac patient, the message can include, for example, the request to take medication with a certain dosage or to rest, if necessary. The message with an instruction has the advantage that the sensor carrier can react to certain values of the sensor without having to know what the values mean. Furthermore, the exact specification of quantities and / or doses has the advantage that the adjustment of the values to non-critical values is not overridden, because it is carried out according to the parameters set by the knowledgeable staff (eg doctor).

In this embodiment according to the invention, the signaling device of the data transmission device can comprise the loudspeaker or loudspeakers and / or the display of a mobile radio element and / or motor vehicle, or the respectively suitable output devices and formats of the work environment, the home environment or another environment , This has the advantage that the functionality of existing elements can be used. The loudspeakers and / or the display of the motor vehicle can preferably also be used to generate a clearer or louder signal. In addition, the driver of the motor vehicle can receive the message and, if necessary, be asked to stop.

The first threshold value is preferably higher than the second threshold value or the second threshold value is closer to the normal value than the first threshold value.

In one embodiment of the invention, the data transmission device has a timer device, and the evaluation device is designed such that it effects the establishment of a connection to the data center at certain times and / or if a certain time has passed since the last connection to the data center. In this way, for example, the values of ^• sensor can be sent periodically to the data center, so that for example a long-term monitoring can be performed. In this way, for example in the case of chronically ill sensor carriers, the intervals between visits to the doctor can be considerably extended. A diabetic usually needs to be around once a month or every 2 months consult the doctor in charge. Long-term monitoring makes it possible for the attending physician to receive the data from the data center and to order his patient only when needed. A case of need may exist, for example, if the parameters of the sensor carrier have changed or have changed significantly. If no need arises in the meantime, the intervals between two visits to the doctor can be extended to 1 year or 2 years, for example.

In one embodiment of the invention, the data transmission device comprises an emergency call device, the evaluation device being designed in such a way that it activates the emergency call device when the trend of the values of the at least one parameter detected by the at least one sensor indicates the likely exceeding of a certain third threshold value and / or if the values of the at least one parameter last detected by the at least one sensor exceed a certain third threshold value. In this way, the outside world can be made aware that the sensor carrier needs help.

The third threshold value is preferably higher than the first threshold value, or the first threshold value is closer to the normal value than the third threshold value. This has the advantage that the emergency call device does not trigger a false alarm too often, because the sensor carrier will, as a rule, prevent or weaken a further increase in the values due to its specific behavior, if or before the values exceed the first threshold value. The emergency call device is thus activated only when the sensor carrier no longer behaves appropriately for the situation or this change in behavior cannot prevent an increase in the values. The probability of a real emergency is therefore significantly higher, which is why the emergency call is much more serious or can be taken very seriously (information value of the signal).

The emergency call device is preferably designed such that, when activated, it sends an emergency call to the data center and / or makes an emergency call to the immediate surroundings (for example acoustic and / or visual alarm output or sending short messages to the environment via, for example, the Bluetooth standard) ,

Alternatively or additionally, the emergency call can be loaded onto a mobile device (e.g. cell phone) with a Bluetooth function. As soon as this mobile device has network contact, the emergency call will be forwarded to an emergency medical service and / or the national data center. The Bluetooth device fulfills a relay function, so to speak. In areas without a direct network connection, the emergency call can reach the outside via any mobile Bluetooth relay (e.g. mobile device or vehicle Bluetooth LAN), i.e. are transmitted to the country's mobile network or landline network or communications network, and in this way reach the data center processing the sensor data and thereby the national rescue network.

According to a development of the invention, instructions may be stored and / or stored by the data center in the storage device which are output together with the emergency call to persons and / or equipment in the immediate vicinity ^'. In this way, any persons in the vicinity of the sensor carrier can be made aware of the emergency and can be provided with targeted help instructions. In the case of a diabetic, these auxiliary instructions can include, for example, the administration of an insulin syringe or a sugar-containing food. Preferably, the emergency call device can optically send the emergency call and / or the instructions to the immediate environment by radio, for example via the data transmission device of the sensor and / or the data transmission device according to any widespread standards, such as the Bluetooth or WIFI standard, for example via a display or Light signal and / or acoustically transmitted, for example, via a loudspeaker as an alarm signal.

According to a preferred embodiment of the invention, the emergency call device can transmit the emergency call and / or the instructions to the immediate surroundings in the language of the monitored person, in the language of the location, and / or in at least one "world language or in succession in two or more of these languages In this way, the widest possible group of people can be addressed, and the likelihood that the people surrounding the sensor carrier will understand the emergency call is very high, because people who may be accompanying the sensor carrier are likely to understand its language, people present or passing by are likely to be familiar with the national language and many People speak a world language.

According to one embodiment of the invention, the measuring device is connected to a data transmission device for transmitting the detected values to the evaluation device, and the evaluation device is connected to a corresponding data transmission device for receiving the values transmitted by the data transmission device connected to the measuring device. This has the advantage that the measuring device can be integrated into a sensor which is of relatively small design because part of the functions of the data transmission device can be outsourced.

For example, the evaluation device and the interface device (input and output) can require a lot of energy and / or space in comparison to the measuring device. In particular, part of the energy supply can be outsourced. In addition, part of the memory device or devices can be outsourced. Furthermore, the data interface for connection to a telephone network can be outsourced. Advantageously, it makes sense to use the already existing components of a mobile radio telephone, a computer, a motor vehicle or similar devices, which can take over a large part of one, more or all of the functions to be outsourced with corresponding adaptations, without the external dimensions of the existing devices being changed significantly have to.

The data transmission device connected to the measuring device preferably comprises a Bluetooth module and the data transmission device connected to the evaluation device comprise a Bluetooth module.

The article "Introduction to the Chances and Requirements of Telematics Applications in Health Care" by A. Jäckel, A. Schollmayer and J. Dudeck, Telemedizin Journal, Issue 1/2000, ISSN 1438-8588 provides an outlook on the possibilities of introducing information - and communication technology in healthcare. It is also mentioned that high security requirements are placed on the protection of patient-related data. High security requirements are also placed on personal data.

The known personal surveillance systems which transmit data from one location to another have no or at least only relatively simple protective mechanisms for securing the data to be transmitted against unauthorized access by third parties.

An intelligent undershirt is featured on page 17 of the magazine "Illustrierte Wissenschaft" No. 5, May 2000 that monitors, among other things, the heart's rhythm, blood pressure and pulse of the wearer. The information flows to a small computer that is attached to the belt. From there, the data is forwarded to the responsible doctor via the Internet when the wearer connects the small computer to the Internet in a known manner. In this way, the doctor can use the undershirt to monitor asthma and heart patients, for example.

This prior art has the disadvantage that the data transmission from the small computer to the doctor takes place relatively unprotected, so that third parties can access the data with reasonable effort and costs.

It is therefore also an object of the invention to provide a personal surveillance system and its components which protect the data to be transmitted from one location to another and the data stored in one location safely and reliably.

This object is achieved with a data transmission device according to claim 15. Advantageous embodiments of the invention are specified in the dependent claims.

In a personal monitoring system in which data is transmitted between the measuring device and the evaluation device, the data transmission must be reliably protected. Since pure software encryption can only be decrypted regularly as a function of the necessary computing effort, the encryption device provided according to the invention for hardware and software encryption of the transmitted data creates an additional hurdle that can only be overcome with considerable effort. In order to decode the hardware encryption by software, the required computing effort increases many times over. In principle, a third party could also do that Analyze hardware encryption in a known manner by disassembling and recording the circuit layer by layer and / or by analyzing a sufficient amount of encrypted data to analyze the individual keys used and the general encryption algorithm. The effort involved is very considerable and can only be carried out by specialist companies. Therefore, according to the invention, the threshold for third parties to access the transmitted data is set so high that it can no longer be overcome with sufficient ease to justify the effort involved.

The encryption devices preferably each comprise a cryptography chip. For the reasons stated, these special chips offer extremely high protection against unauthorized access.

Since the system offers real-time services that can be vital in an emergency, the system as a whole and all components must be certified by medical technology. Companies that could decrypt the cryptography chip in principle also have no economic interest in decrypting the cryptography chip because no economic exploitation is possible.

According to the invention, the encryption devices can each comprise a private key.

In an embodiment of the invention, the data interface is advantageously connected to the data transmission device in such a way that the data comprising the acquired values are transmitted in encrypted form to a national data center and / or a further data transmission device when the evaluation device initiates the transmission. ^• Due to the hardware encryption of the transmitted data, it is very high Data security guaranteed. Therefore, the tap security precautions of the transmission itself do not have to be high or none. Requirements are made. For example, the encrypted data can be transmitted over the telephone network or the Internet or in another known manner.

In one embodiment of the invention, the evaluation device is connected to the data transmission device in such a way that the data comprising the acquired values can be transmitted to another data transmission device in unencrypted form if the evaluation device initiates the unencrypted transmission. The evaluation device can, for example, initiate the unencrypted transmission of the last values recorded by the measuring device if there is an emergency and there is no guarantee that the recipient can also decrypt the data. For example, the unencrypted transmission can take place in combination with the sending of an emergency call.

According to one embodiment of the invention, the data transmission device can have an encryption device for hardware and software encryption of the data to be transmitted. This embodiment also includes, for example, data transmission devices in which the measuring device and the evaluation device are integrated in one device. This eliminates the need to encrypt the data between the measuring device and the evaluation device. However, the data for transmission to a national center or another data transmission device, for example, should always be encrypted if possible. For this purpose, according to the invention, the data to be transmitted are encrypted in terms of hardware and software. The encryption device advantageously comprises a cryptography chip. Furthermore, the encryption device can comprise a private key.

According to one embodiment, the data transmission device is designed in such a way that the data comprising the acquired values are transmitted in encrypted form to a national data center and / or a further data transmission device when the evaluation device initiates the transmission.

According to one embodiment of the invention, a mobile component of the system has a short-range connection device (bluetooth connection in the PAN (Personal Area Network) and / or LAN (Local Area Network)), which includes these additional encryption and analysis functions for sensitive data and provides connections for all transmissions of non-sensitive data without the additional encryption. The short-range connection device is, so to speak, designed in such a way that it corresponds to a conventional connection device for the transmission of non-sensitive data (for example with conventional bluetooth specifications).

For the transmission of the data in an emergency, the data transmission device can also be designed in such a way that the data comprising the acquired values is transmitted to another data transmission device unencrypted when the evaluation device initiates the unencrypted transmission. Preferably, the unencrypted transmission is only initiated if there is no recipient for the data to be transmitted who can decrypt the encrypted data.

In the data transmission device according to the invention, the evaluation device can be used to monitor people from certain social groups (seniors, children, women, etc.) or of people with certain diseases, in particular heart disease (cardiac activity), astmatics (respiratory activity), pregnant women (condition mother and child), hypertension patients

(Blood pressure), diabetics (blood sugar level) and allergy sufferers

(Allergens in the environment).

In a person monitoring system in which the measuring device is provided in separate devices by the evaluation device, a component of the person monitoring system according to the invention is a sensor having the measuring device. According to one embodiment of the invention, the sensor according to the invention for a person monitoring system for monitoring at least one parameter of the person being monitored comprises a measuring device for detecting values of the at least one parameter, and a data transmission device for transmitting the detected values of the at least one parameter between the data transmission device of the sensor and one corresponding data transmission device which is connected to an evaluation device, the sensor having an encryption device for hardware and software encryption of the values detected by the measuring device. As explained above, according to the invention the threshold for unauthorized decryption is set so high that it is not economically interesting to decrypt the data transmitted by the data transmission device of the sensor.

The encryption device preferably comprises a cryptography chip and / or a private key.

According to one embodiment of the invention, the data transmission device according to the invention comprises a mobile radio telephone. The monitored person should advantageously keep the mobile radio telephone switched on at all times, on the one hand because the data center may want to send messages to the person, which are as direct as possible from the person to the person Should be noted, and on the other hand to alert the data center as immediately as possible in the event of an emergency.

Devices are currently being offered that allow a third party to query the identification number (IP number, i.e. Internet presence number) of a passing mobile device that is switched on. Using the IP number determined in this way, the third party can then automatically send a short message to the mobile radio device in order to inform the user of a specific offer in its vicinity. Such devices can be installed, for example, in the windows of shops or restaurants. Such short messages will be undesirable for most users of a personal surveillance system because they have to distinguish these short messages from important short messages of the data center assigned to them. It is also tedious and time consuming to delete advertising messages. A particular disadvantage of these short advertising messages currently also consists in the fact that the mobile network operators partially or completely impose the short message charges on the recipient of the short messages. Therefore, in addition to the unwanted work, it can be costly to keep your mobile device on all the time.

The invention is therefore also based on the object of specifying a mobile radio device which can reliably prevent or restrict the sending of short advertising messages to the mobile radio device, even if the mobile radio device is constantly switched on and its identification number can be queried by third parties of potential short message senders.

This object of the invention is achieved with a mobile radio device according to claim 29. Advantageous embodiments of the invention are specified in the dependent claims. This embodiment of the invention has the advantage that with the introduction of "public" markings (first identification numbers) and "private" markings (second identification numbers) of the mobile radio devices, services of the mobile radio network operators can be realized (and marketed) in the future, which, on the one hand, will continue to be the usual SMS - Support forms of communication (private and business) and, on the other hand, enable users to not receive unwanted SMS (spam) on their mobile device.

According to one embodiment of the invention, the mobile radio device for operation in a mobile radio network comprises a transmitting device which is assigned an identification number for identification in relation to the mobile radio network, and a receiving device for receiving short messages, the receiving device for receiving short messages being assigned a second identification number , which differs from the identification number assigned to the transmitting device.

In one embodiment of the invention, the receiving device and the transmitting device have common hardware components, and the two devices and their functions are distinguished by the identification numbers assigned to them. A device is basically split into two virtual devices.

Since the mobile device reports to the mobile network with the first identification number, and the mobile device can only receive short messages from third parties who are aware of the second identification number required for this, the above-mentioned devices for automatically sending short advertising messages to randomly passing mobile devices can no longer receive them Send the mobile device (line device) continuously ("push"). Therefore, the mobile device is leading No unsolicited and possibly even costly advertising short messages are sent to the person if they have not requested the news by time, place or topic ("pull").

This embodiment of the invention is particularly advantageous for people who carry a mobile radio device with them, which must be constantly ready for reception and transmission or switched on, as is typically the case with wearers of permanent sensors with automatic (self-activating) alarm functionality.

This embodiment of the invention (at least two IP addresses for a mobile radio device for the safe assignment of the different services and classification of incoming connections) enables, for example, a separation

private and desired communication.

Commercial and desired communication, typically location-based SMS messages, for which the respective recipient actually has an interest and which he requests (and possibly also pays for) from the network operator's server.

Commercial and unwanted communication (spam), typically also location-based SMS messages that are not forwarded to the recipient in this system and are not invoiced.

According to a preferred embodiment of the invention, the sending device for sending short messages is assigned the second identification number or a third identification number. The assignment of a third identification number, which differs from the first and second, has the advantage that third parties by intercepting or accidentally receiving a short message have no knowledge of the second identification number required for sending short messages. The sender identification is, so to speak, different from the recipient identification.

The mobile radio device according to the invention is advantageously encompassed by one of the above-described embodiments of a data transmission device according to the invention.

The sending device for sending encrypted data can be assigned the second identification number, the third identification number or a fourth identification number. Furthermore, the receiving device for receiving encrypted data can be assigned the second identification number, the third identification number, the fourth identification number or a fifth identification number. Any other identification numbers can be provided according to the invention.

The data transmission device or the mobile radio device should be designed in such a way that from a certain residual energy value the data transmission device or the mobile radio device is operated in such a way that it no longer tries to log into the network when it is no longer in contact with the network and / or requires it. When trying to log into the network when there is no contact with the radio network, the mobile radio device usually sets the highest transmission power and consumes a relatively large amount of energy. Otherwise the remaining energy would otherwise be consumed quickly and would no longer be available for the evaluation device.

The invention is therefore also based on the object of specifying a data transmission device or a mobile radio device that ensures local functionality for a certain time even without a network connection. This object of the invention is achieved with a data transmission device or a mobile radio device according to claim 34. Advantageous embodiments of the invention are specified in the dependent claims.

According to the invention, an energy reserve is provided in the data transmission device or the mobile radio device, which ensures the functionality of the evaluation device. This embodiment has the advantage that the remaining amount of energy available for the on-site functionality of the data transmission device or of the mobile radio device is used and is not consumed in the event of unsuccessful login attempts.

Furthermore, in this way it can be ensured over a longer period of time that sufficient energy is available for logging in and issuing an alarm message.

According to one embodiment of the invention, the energy reserve device can comprise the energy store of the data transmission device or the mobile radio device and can be designed such that the transmission function of the data transmission device or the mobile radio device is switched off when the amount of energy falls below a certain amount. In this way it is ensured that the available amount of residual energy is available almost exclusively for the on-site functionality and that the device or the device functions as required.

According to one embodiment of the invention, the energy reserve device can comprise the energy store of the data transmission device or the mobile radio device and can be designed such that, if the energy transmission device or the mobile radio device falls below a certain amount, the time intervals between two attempts to log into a mobile radio network, preferably as enlarged by at least a factor of 10, more preferably by at least a factor of 100. This version also has the advantage that the on-site functionality is maintained much longer because of the lower energy consumption.

According to one embodiment of the invention, the energy reserve device can comprise the energy store of the data transmission device or the mobile radio device and can be designed such that when the amount of energy falls below a certain amount, the data transmission device or the mobile radio device stops trying to log into a mobile radio network. With this version, the on-site functionality is maintained even longer.

According to one embodiment of the invention, the energy reserve device can comprise the energy store of the data transmission device or the mobile radio device and can be designed such that when an emergency is ascertained, an attempt is made to log into a mobile radio network. Preferably, an emergency call is previously ^'made to the environment. If the attempt to log on is unsuccessful, an emergency call is made locally to the surroundings, whereby the time intervals between two emergency calls can be extended with decreasing energy.

According to one embodiment of the invention, the energy reserve device can be designed in such a way that it provides the data transmission device or the mobile radio device with energy for sending an emergency call. The emergency call can be made locally to the environment and / or via the mobile network.

In one embodiment of the invention, the data transmission device or the mobile radio device can be found when the In the event of an emergency, try again to log into the mobile network.

The invention also includes a mobile radio network for operating a plurality of mobile radio devices, which are preferably designed as described above, at least some and preferably all mobile radio devices being assigned at least two identification numbers. The identification numbers assigned to the mobile radio devices for receiving short messages should preferably differ from the identification numbers assigned to the mobile radio devices for identification with respect to the mobile radio network. For example, a first identification number assigned to a mobile radio device can be used to dial into the mobile radio network and receive calls, while a second identification number assigned to the mobile radio device is used to receive short messages. If short messages are sent to the first identification number, they are already filtered out in the mobile radio network and are not forwarded to the mobile radio device. For example, such short messages can be blocked on a server of the mobile radio network.

The present invention also includes a personal surveillance system with at least one of the above-described data transmission devices according to the invention and / or at least one of the above-described sensors according to the invention and / or at least one of the above-described mobile radio devices and / or at least one of the above-described mobile radio networks.

According to an embodiment of the invention, the functionality of the personal surveillance system is essentially location-independent (works in many countries). Furthermore, it offers its functions around the clock to both users and third parties in the near area and towards the regional / national infrastructure (health care in general and specific to the rescue system). The sensitive data of the sensor carrier is preferably shielded continuously from the sensor to the national center against access by unauthorized third parties (PAN: connection sensor to data transmission device; LAN and WAN: encrypted transmission to the national center and hardware firewall in the data transmission device).

Since a perfect mobile radio connection of mobile devices is practically not possible, the components according to the invention have minimal functionality even without the need for a data connection to the national center.

According to one embodiment of the invention, the personal surveillance system has at least one national data center that is assigned to a country. A plurality of national data centers are preferably provided, each of which is assigned to a country or a group of countries which cooperate at least for this purpose.

Since each country wants to have its own sovereignty over personal data in its own country, personal surveillance systems with at least one national data center face problems when a monitored person leaves the territory of one country and enters the territory of another country. In principle, the monitored person could be given a data transmission device according to the invention for each individual country. However, this solution is very expensive and uncomfortable for the monitored person.

The invention is therefore also based on the object of specifying a personal surveillance system which also works across national borders. This object of the invention is achieved with a personal monitoring system according to claim 45. Advantageous embodiments of the invention are specified in the dependent claims.

According to the invention, a higher-level, independent data center is provided which is trustworthy and preferably has mirrored the data from the national data centers. The data game configuration has the additional advantage that the data is saved again. The data in both memories are preferably changed syschron or almost syschron.

According to an embodiment of the invention, the individual national data centers cannot usually exchange data directly with one another, but rather have to exchange the data via the higher-level independent data center. The higher-level independent data center can check whether the national data center is authorized to receive data from another data center in some cases. For example, it may be authorized if it is normally responsible for monitoring the person whose data is being queried and if this person is in the area of the other national data center. A national data center could also request the superordinate data center to send certain current data of a person who is monitored in the area assigned to them to the national data center which is normally responsible for the monitoring of this person.

In the event that the higher-level independent data center fails and / or is temporarily disturbed, the direct data exchange between the individual national data centers could be authorized. An additional requirement for the authorization of the data exchange could be that the one national center is normally responsible for the monitored person and that the monitored person is located in the area of the other national data center or has recently found it.

According to one embodiment, the higher-level independent data center is designed in such a way that the respective national data centers in the higher-level independent data center may only access the data assigned to them. According to one embodiment, the higher-level independent data center is designed such that it can intervene for a national data center in the event of a failure and / or a temporary disruption.

According to an embodiment of the invention, at least one and preferably each national data center is assigned at least one other national data center, which is designed such that it intervenes for a national data center assigned to it in the event of failure and / or a temporary fault, and either mirrored data of this data center leads or receives them from the parent independent data center.

The personal surveillance system according to the invention can advantageously be combined with the system offered under the Internet domain "Phonetracker.de". This system checks whether the mobile phone is within certain radio cells at certain times. A report to a third party always occurs when deviations from the target behavior are found. The third party can be the national center in the personal surveillance system according to the invention. Via a short message control, the system enables the environment to be listened to in order to carry out a situation analysis of the monitored person. Furthermore, these services offer localization in the radio cell by evaluating the signals from neighboring cells. Furthermore, the personal surveillance system according to the invention or its components can advantageously be combined with the system offered under the Internet domain "schutzengel.de". The system disclosed therein relates to a modified rechargeable battery for a mobile radio device, which comprises a delay sensor which is known from the automotive industry and which automatically initiates an emergency call in the event of a car accident. In the system according to the invention, this emergency call can be supplemented with data specific to the person being monitored. For example, the emergency call may include a message that a diabetic is involved in the car accident and is in high sugar so that glucose should not be administered to him even though he is in a state of shock.

Special synergy effects arise when the personal monitoring system combines several different sensors and monitors them in common national data centers. Examples of the different types of sensors are

1. "Senior": sensors for old people who do not yet want to go to a retirement home or nursing home. For example, you can still take care of yourself, but you need a feeling of security that they will be helped if necessary. By means of the system according to the invention, at least some of the seniors can be cared for longer at home or take care of themselves, because if necessary an alarm is triggered automatically and location-dependent.

2. "Junior": sensors for vulnerable children or women. A particularly suitable example is given in the present applicant's German patent application No. 102 12 141.9, the entire disclosure of which is intended to be incorporated by reference. 3. "Cardio": sensors for cardiac patients. These sensors are available from Philips, for example.

4. "Asthma": sensors for asthmatics. For example, there are acoustic sensors for warning the sensor carrier of impending or current crises.

5. "Gluco": sensors for diabetics. A particularly suitable example is given in the present applicant's German patent application No. 102 12 140.0, the entire disclosure of which is to be incorporated by reference here.

6. "Allergens": sensors for allergy sufferers. So far, there have been developments in the field of artificial noses for the detection of explosives and drugs. The application for allergies is being considered.

7. "Tensio": sensors for people with high blood pressure. There are currently sensors that determine blood pressure using pulse oximetry or acoustic methods.

8. "Gravid": sensors for pregnancy monitoring (heart of mother and embryo, Philips etc.).

9. "Crash": Sensors for accident monitoring that are connected via a LAN (Local Area Network) network (e.g. Bluetooth in the vehicle) or PAN (Personal Area Network) network (e.g. crash sensor in the mobile device from schutzengel.de) the data, services and / or functions of the other sensors can be linked.

The national data centers can offer location-independent services in real time and around the clock in an embodiment of the invention. For example, they can maintain or integrate a complete electronic patient record. The The national data center can output information based on the knowledge of the sensor carrier profile and the personal data (real-time information). Lifestyle management in real time is therefore possible.

The national data center can be set up, for example, as an automatic computer-controlled data center, which in an emergency automatically forwards the relevant data and possibly the location of the monitored person to a suitable emergency service.

An embodiment of the personal surveillance system according to the invention also has the advantage that it has on-site functionality and continues to function even without a connection between the data transmission device and the national center.

In some versions of the personal monitoring system according to the invention, the individual parameters (threshold values, time spans, etc.) can be set, for example, by the attending physician during the initial adaptation. The national center and / or the doctor can, on the basis of the experience gained, from the values of the measuring device obtained once a week, for example, and the behavior of the monitored person, if appropriate, apply newly adjusted parameters. It is possible to react to the environmental parameters (climate, location, work, leisure, vacation, etc.) in real time.

The invention can also be used for plausibility checks when billing health insurance benefits. For example, it can be verified that the person being monitored is actually near the treating physician. This information can be used, for example, to confirm when visiting a doctor that the patient with the health insurance card is actually at the doctor or just was. This confirmation can, for example, be a necessary prerequisite for the release of the billing of the doctor's services.

If the person monitoring system according to the invention is connected to at least one duration sensor for monitoring at least one specific parameter of the patient, a plausibility check of the values of the parameter or parameters can also be carried out.

In an emergency verified, for example, by a continuous sensor, the data stored in the national data center can be released for the rescue service or attending doctor by other "personal keys" of the person being monitored, such as biometric data (retina, fingerprint, face shape, etc.) or personal Items (credit card, watch, wallet, etc.)

The person monitoring system according to the invention can be extended to any group of people. The national data center can keep electronic files of people who are identified, for example, by a personal key (e.g. RFID). In the event of an accident, the ambulance service can then request certain data from the person involved in the system and take it into account in the care.

Alternatively, the data can be released to all doctors in the event of an emergency verified by the data center.

The invention is described below with reference to the embodiment shown in the figures.

1 shows a schematic block diagram of an embodiment of an encryption system according to the invention. The following reference symbols are used in the description of the exemplary embodiment:

10 sensor

11 measuring device

12 encryption device (cryptography chip)

13 data transmission device (Bluetooth module)

21 Data transmission 11-12

22 Data transfer 12 - 13

23 Data transmission 13-111

24 Data transmission 111-112

25 Data transmission 112-113

26 Data transfer 113-114

27 Data transmission 111-113

28 Data transmission 111-101

29 Data transfer 113 - 104 30 Data transfer 113 - 103 31 Data transfer 101 - 104 32 Data transfer 101 - 103 33 Data transfer 101 - 102 34 Data transfer 102 - 200 35 Data transfer 102 - 210 36 Data transfer 200 - 300 36 'Data transfer 200' - 300 36 "data transfer 200 "- 300

100 data transmission device (sensor carrier) 100A evaluation part

10OB data transmission part

101 Data interface 102 antenna

103 display

104 speakers

111 data transmission device (Bluetooth module)

112 decryption device (cryptography chip)

113 evaluation device 114 storage device 120 hardware firewall

200 data center (national center) 200 'data center (national center)

200 "data center (National Center)

210 data transmission device (hospital staff, doctor, specialist dealer, rescue center)

300 international center

1 comprises a sensor 10 according to the invention, a data transmission device 100 according to the invention and data centers 200, 200 ', 200 "according to the invention and an international center 300. Furthermore, the data transmission center from FIG. 1 according to the invention comprises a data transmission device 210 according to the invention Doctor who is assigned to hospital staff, a rescue worker or a specialist dealer.

The sensor 10 has a measuring device 11, which generates personal data of the sensor carrier or the monitored person in a known manner from a measuring signal, not shown. For example, the measuring device 11 can generate one or more medical parameters, such as, for example, the heart rhythm, blood pressure, pulse, breathing activity, blood sugar level, etc. Furthermore, the measuring device can, for example, generate the position and acceleration of the sensor carrier in order to possibly do this Falling or falling over of the sensor carrier, for example in the case of seniors or children. The generated personal data are transmitted to an encryption device 12, as shown by arrow 21. The encryption device 12 is preferably a cryptography chip in which a private key is stored in software. The provision of a hardware encryption component in the form of a cryptography chip sets the threshold very high, which an unauthorized third party has to overcome in order to access the sensor data without authorization. In addition to the knowledge of the architecture of the cryptography chip, the private key of the sensor carrier must also be known to the unauthorized third party in order to be able to decrypt the data.

The encryption ^device 12 forwards the encrypted data to a data transmission device 13, which transmits the encrypted data to the data transmission device 100. The data transmission device 13 can be a Bluetooth module, for example, which is known to the person skilled in the art.

The structure of the sensor 10 ensures that only encrypted data can leave the sensor 10. Since the data is encrypted with a cryptography chip, a very high level of data security is also guaranteed.

The data transmission device 100 is divided by a hardware firewall 120 into an evaluation part 100A, which is shown in FIG. 1 to the left of the hardware firewall 120, and a data transmission part 100B, which is shown in FIG. 1 to the right of the hardware firewall 120 ,

The evaluation part 100A has a data transmission device 111 which corresponds to the data transmission device 13 of the sensor 10 and which can likewise be a Bluetooth module. The transmission of the data between the data transmission devices 13 and 111 is shown by arrow 23. The data transmission device 111 forwards the data to an encryption device 112, as shown by arrow 24.

The encryption device 112 forwards the decrypted data to an evaluation device 113, such as represented by arrow 25. The evaluation device 113 stores the data in a storage device 114, as shown by arrow 26. The evaluation device 113 analyzes the acquired personal data and initiates suitable measures if certain threshold values or certain trends are exceeded.

The data transmission part 100B comprises a data interface 101, which can exchange data with the data transmission device 111, as shown by arrow 28. The data transmission device 111 can only forward data to the data interface 101 if it is authorized to do so by the evaluation device 113.

The data transmission part 100B furthermore has an antenna 102 in order to exchange data with a further data transmission device 210, as shown with arrow 35, or with a national center 200, as shown with arrow 34. The data transmission can take place in a manner known to the person skilled in the art, for example via a mobile radio network. The data interface 101 sends and receives data from the antenna 102, as shown by arrow 33. The data interface 101 can furthermore display data on the display 103, as indicated by arrow 32. Furthermore, the data interface 101 can output the data via a loudspeaker 104, as shown by arrow 31.

The evaluation device 113 can use the display 103 for displaying messages, as shown by arrow 30. The evaluation device 113 can also address the loudspeaker 104, as shown by arrow 29.

The evaluation device 113 has complete control as to whether and when personal data are transferred from the evaluation part 100A through the hardware firewall 120 to the data transmission part 100B. The evaluation device 113 further decides whether the data is sent encrypted or decrypted to the data transmission part 10OB. Only in an emergency does the evaluation device 113 transmit unencrypted data to the data transmission device 111, as represented by arrow 27, which are then forwarded to the data interface 101 according to arrow 28. This structure ensures that no data normally get to the data interface 101.

If the evaluation device 113 determines that a person authorized to receive the personal data wishes access to the personal data, the evaluation device 113 allows the encrypted personal data to reach the data interface 101 and, for example, to be transmitted to the data transmission device 210. The data transmission device 210 can have a structure which essentially corresponds to that of the data transmission device 100, in such a way that an encryption device is provided, and that the decrypted data can be shown on a display but cannot be forwarded unencrypted into the mobile radio network. The evaluation device 113 can furthermore allow the personal data to be forwarded in encrypted form to a data center 200, for example in the event of a change that exceeds a specific threshold value, or at regular intervals. A corresponding encryption device (not shown) is provided in the data center. The decrypted data is processed and stored in the data center. If certain threshold values are exceeded or if certain patterns of development of the received data are available, the data center can automatically initiate suitable measures to help the sensor carrier or to have it saved.

The central storage of personal data is a sovereign task and is subject to strict data protection regulations. Hence it is likely that individual or all states do not want their citizens' personal data to be stored in a data center outside their territory and to be accessible there. In order to take this point of view into account, the present invention proposes to provide a national data center 200, 200 ', 200 "in each country which cannot regularly exchange data directly with one another. The exchange of data for certain sensor carriers is only intended to be via an international trust Data center 300 can take place, as shown by arrows 36, 36 ', 36 ". So that the national data center 200 can receive data from a sensor carrier assigned to another national data center 200 ′, the sensor carrier should be in the territory of the national center 200. The proof of the location can be verified, for example, by the sensor carrier having dialed into the national mobile radio network of the national center 200 with its data transmission device 100. In this way it is ensured that only individual data sets of sensor carriers which are also located in the territory of the national center can be requested by the national center. As a further security feature, it can be required, for example, that the requesting person is in possession of a data transmission device 210 which is only used by a certain group of people (doctors, hospital staff, emergency services, etc.). As a further security measure, it can be provided, for example, that the evaluation device 113 of the sensor carrier, the data of which is to be queried, has determined certain personal data which indicate, for example, an emergency. Alternatively or additionally, it can be provided as a prerequisite for the transmission of the data that the detected value of a biometric parameter of the sensor carrier exceeds a certain threshold value. The data transmission device 100 can be, for example, a commercially available mobile radio telephone, which is expanded by the evaluation part 100A with a hardware extension. The evaluation part 100A can use certain functions of the mobile radio telephone. In order to set the data security of personal data as high as possible, however, the memory 114 should not be the memory of the mobile radio telephone in order to ensure that the memory 114 cannot be accessed by the software of the mobile radio telephone. In addition, it must be ensured that the evaluation device 113 cannot be manipulated by changing or updating the mobile radio telephone. In the exemplary embodiment of the data transmission device according to the invention, these requirements are met by the hardware expansion of the evaluation part 100A and the associated hardware firewall 120.

There should be certain authorization requirements for programming the evaluation device 113 such that only certain groups of people, such as, for example, specialists (basic setting), specialist dealers (repair and / or exchange) or the like, who are preferably owners of a data transmission device 210, are authorized to use the evaluation device 113 to program. The same group of people and / or another group of people, such as specialist dealers, can furthermore be authorized to program the private key of the encryption device 112 of the data transmission device 100 or of the encryption device 12 of the sensor 10.

In the exemplary embodiment shown, the sensor 10 is physically separated from the data transmission device 100 and a data connection is established by the data transmission devices 13 or 111. This structure has the advantage that the sensor can be made relatively small and only the necessary functions, such as the acquisition, encryption and transmission of the data includes. The further functions can be outsourced to the data transmission device 100. The computing device 113, the memory 114, the input and output of optical and acoustic signals, and the antenna for further data transmission can be provided there. These functions require significantly larger hardware and have higher energy requirements. The associated space requirement can be accommodated more easily in the data transmission device 100. The data transmission device 100 can be a mobile radio telephone, for example. Alternatively, the data transmission device 100 can also be a personal computer, a telephone, a cable set box, or any other electronic device. The house electronics, the car electronics or the workplace electronics can be used as the data transmission device 100.

The operation of the exemplary embodiment of the personal surveillance system according to the invention is described below:

A. NORMAL CASE

The normal case is when the values of the personal parameter (s) are within certain limits that mean a normal situation for the sensor carrier.

Normally, authorized persons can request certain personal data from the sensor carrier from the national center 200. The requesting person can have a data transmission device 210 as proof authorization. In addition, she can regularly register as an authorized person (treating doctor, etc.) with regard to this sensor carrier in the national center. Certain groups of people can be assigned different authorization levels that determine which data is available be put. For example, a hospital can have the highest authorization level. This could be provided with the complete medical record or the complete data necessary for the treatment. For example, a lower authorization level can have a doctor who works in a specific area. The doctor would be provided with all the data necessary for his specialty as well as certain data from neighboring areas. (The next lower authorization level could be, for example, police officers and paramedics, to whom only the data necessary for the current assistance is made available.)

To obtain the personal data, it may preferably be necessary for the sensor carrier to be in the vicinity of the person requesting data. For example, the existence of the data connection between the data transmission device 100 and the sensor 10 may be required as proof. Alternatively or additionally, the presence of a personal RFID (Radio Field Integrated Device) may be required. RFID's are known to the person skilled in the art and are available, for example, as stickers which can be affixed to the check card, the watch or other personal items. If electronic medical records are to be kept for all insured persons of the health insurance companies in the future, for example in the national center, people who do not wear a permanent sensor can also be cost-effectively integrated into the system according to the invention using RFID technology. In this way, the system can be used, for example, to check the billing of medical services of a clinic or a doctor by carrying out plausibility checks. B. CRITICAL CASE

A critical case exists when the evaluation device determines that the personal data exceed a certain threshold value. In this case, the evaluation device 113 can try to inform the sensor carrier to take certain behavioral measures so that the personal data fall below the threshold value again. For this purpose, the evaluation device 113 can address the loudspeaker 104 or the display 103 of the transmission device 100, for example. If, for example, the evaluation device 113 detects an impending overload in a cardiac patient, the cardiac patient is asked to sit on a suitcase. The evaluation device can request a diabetic in the presence of an excess sugar. To inject insulin. If there is a hypoglycemia, the evaluation device can advise the diabetic to eat something. In the case of an asthma sufferer, the evaluation device can recognize at an early stage that an attack is imminent and inform the asthma sufferer that he should inhale. This functionality is advantageous compared to the prior art, because until now it has only been known to continuously display the personal data, so that the wearer must constantly monitor this value if he wants to take suitable measures in good time. As an alternative or in addition, the system can also be coupled directly to effectors (pharmaceutical administration, heart control, etc.).

C. EMERGENCY

The evaluation device recognizes that there is an emergency if the sensor carrier does not acknowledge receipt of the warning messages within a certain period of time (button, acoustic, etc.). This function corresponds in principle to a dead man's switch known to the person skilled in the art. In addition, there may also be an emergency if the sensor carrier does not behave according to the warnings and / or if the personal data remain above the determined threshold value and show no tendency to return to the normal range and / or if the system user is spending on the system did not respond as intended or did not confirm it.

In an emergency, the evaluation device 113 causes the encrypted personal data to be sent to the national center 200. If the sensor carrier is not in the territory of the national center assigned to it, the national center of the territory in which the sensor carrier is located requests the corresponding national center, with the interposition of the international center, to transmit the sensor carrier's private key and any necessary data , The authorization of the national data center to receive the private key and possibly the relevant data can be proven in that the encrypted data transmitted with the request indicate to the national center assigned to the sensor carrier that an emergency actually exists. With the interposition of the international data center, the national data center assigned to the sensor carrier transmits the private key of the sensor carrier and, if appropriate, other relevant data available to the national data center in whose territory the sensor carrier is located. The national data center can thus evaluate the sensor data and initiate suitable emergency measures.

At the same time, the evaluation device 113 can cause the data transmission device to transmit the message directly to the environment that there is an emergency. For example, you can call for help acoustically. In addition, the data transmission device can acoustically request those present to take certain measures. to correct the critical condition of the sensor carrier. At the same time, the evaluation device 113 _. Show corresponding messages on the display 103. So that the data transmission device can make itself known in the respective environment, the data transmission device calls for help in the respective national language. The corresponding data can, for example, be loaded into the memory 114 of the data transmission device 100 when a border is detected and can be made available, for example, by the corresponding national data center.

Alternatively or additionally, the corresponding data can be preinstalled in the memory.

According to one embodiment, the data transmission device can alternately call for help in the language of the sensor carrier and / or in English and / or the national language.

B '. CRITICAL CASE IN MOTOR VEHICLE

If the sensor carrier is in a motor vehicle, the following aspects can also be taken into account.

If the evaluation device detects a critical case, it can request the sensor carrier to stop the motor vehicle and to take the appropriate measures. The data transmission device 100 can be integrated into the car electronics or address the car electronics in order to indicate the impending danger to the sensor carrier, for example via the radio or a suitable dashboard display. This embodiment of the invention has the advantage that it is possible to inform sensor carriers who drive a motor vehicle in real time while driving without distracting the attention of the sensor carrier from traffic ("combox" by Funkwerk). Therefore there is the invention, the possibility of largely lifting certain occupational restrictions of some groups of chronically ill patients for sensor carriers. This could make early retirement unnecessary and relieve the social system (eg EU guidelines on diabetic syringes for trucks and other machines).

Furthermore, in the critical case, as stated above, the evaluation device 113 will request the sensor carrier to take certain measures.

C. EMERGENCY IN THE VEHICLE

In an emergency, the evaluation device 113 can use the permanently installed mobile radio telephone devices of the motor vehicle to send the emergency call, which have a significantly higher transmission power (usually an external antenna and 5 watts). Furthermore, the evaluation device 113 may switch on the hazard warning lights and the horn of the vehicle. In addition, the evaluation device 113 may intervene in the engine control of the motor vehicle and bring the vehicle to a controlled stop. In addition, the evaluation device 113 can communicate the position of the vehicle to the national center if it has a navigation system. The position of the car can usually be determined very precisely. In particular, the GPS system can be determined much more precisely than the position of a mobile radio telephone in the operator network.

As soon as a sensor carrier gets into a suitably equipped vehicle, it is stored in the motor vehicle electronics that a sensor carrier sits in the car. It stores this encrypted in its' memory. According to one embodiment of the invention, the data transmission device 100 has a release switch with which it is possible to send basic data to a corresponding one in unencrypted form To transmit data transmission device of the motor vehicle. These basic data can include, for example, a personal identification number and the basic finding of the sensor carrier.

Future motor vehicle sensors will generally contain sensor systems that enable the motor vehicle to make an emergency call in order to report the accident to a control center in the event of an accident. When executing the invention, the possibly previously stored data from sensor carriers, their basic findings and, if applicable, personal data of the sensor carrier caused by the accident or causing the accident can also be transmitted. This makes the accident report of the motor vehicle for the alarmed emergency services considerably more meaningful and possibly life-saving measures can be initiated in advance. For example, in an accident in which a pregnant woman is involved with a pregnancy sensor, a mobile incubator could be brought.

In the event of an accident, the emergency doctor can receive data with information about the occupants of the accident vehicle, including certain findings. Therefore, the emergency doctor can take the right measures if necessary. For example, the emergency doctor will give a diabetic who is in the hypoglycemia a glucose infusion and at the same time administer the required amount of insulin to process the glucose. In the event of hypoglycaemia, a glucose infusion, which could otherwise be injected into a shocked state, would be harmful or fatal. For example, the administration of circulatory agents that endanger the life of heart patients could be prevented.

The doctor can query the sensor and receive relevant data immediately. For example, he can check blood sugar levels check with a diabetic for information about whether a glucose solution should be used. If the report of the accident is directed to the national center by the motor vehicle or the data transmission device, the national center can inform the emergency doctor which specific and / or unusual measures should be taken for certain persons. For example, the electronic medical record or the relevant parts of it could also be made available to the emergency doctor.

C '' EMERGENCY AT HOME

If the sensor carrier is at home, the house electronics can preferably take over the function of the data transmission device 100. A much stronger antenna or landline connection can be used in the house to establish the data connection to the national data center. For example, the data transmission device can be taken over in the mobile radio telephone, the personal computer, the fixed network telephone, a cable network box, another electrical device, a Bluetooth network, etc. As a result, the sensor carrier is protected twice, on the one hand by the mobile network and on the other hand by the fixed network.

C "'EMERGENCY AT WORK

At work, for example, a plug-in card can be provided in the computer of the sensor carrier, which is part of the data transmission device 100. The screen and the speakers of the computer can be used as the output device for the warnings. This results, for example, in triple protection of the sensor carrier because the connection to the national data center can be established via the mobile radio network, the fixed network and / or the computer network. Furthermore, the connection can also be made via a wireless company network can be established. For example, the corporate wireless network could be a Bluetooth network, part of the 3rd generation Internet, or the like.

According to one embodiment of the invention, the connection between the evaluation device 113 and the national center can also be established via a Bluetooth network. Since many Bluetooth modules are mobile, the data does not reach the national data center immediately, but at least with a delay via the mobile radio network, as soon as a Bluetooth module with the emergency data comes close to a data transmission device 100 which has a data connection to the national one Data center can build.

A Bluetooth amplifier is relatively cheap (range up to approx. 150m). A mobile radio amplifier or the establishment of a network cell, however, costs a lot. In order to establish a connection, for example, in the underground car park or in areas where cell phone use is prohibited, prevented by jamming stations or undesirable (opera, restaurant, lecture), the cell phone can, in such a case, alternatively via a Bluetooth-capable device in accordance with an embodiment of the invention connect to the cellular or wired phone network and call for help.

In the person surveillance system according to the invention, a national center can also be used for other countries. For example, any person from abroad can participate in the system. They only have the disadvantage that the. Connection costs from abroad are regularly more expensive than connection costs from within Germany. When dialing the national center from abroad, the position of the person may not be so precisely determined, especially if this function for the national center is not possible from the mobile network of this state is supported. However, some implementations, functions and / or advantages of the invention do not need this function.

In order to determine the position precisely and / or to inform the national center called, the data transmission device of the invention can be equipped, for example, with a GPS (Global Positioning System).

In the construction phase of the system, the personal surveillance system according to the invention will probably initially only be implemented with a national center and in particular without an international center. The national center can be used by people from all countries as described. As soon as further national centers are set up, the international center should preferably be set up in order to keep the connection costs down and to take advantage of the other national centers (location of the sensor carrier, special services and knowledge for the country, etc.)

Claims

Expectations

1. Data transmission device (100) for a personal surveillance system with

at least one sensor (10) for detecting at least one parameter of the monitored person,

a storage device (114) for storing the values of the at least one parameter detected by the at least one sensor (10), and

an evaluation device (113) for evaluating the values of the at least one parameter detected by the at least one sensor (10),

characterized in that the data transmission device (100) has a data interface (101) for connection to a telephone network, and the evaluation device (113) is designed such that it establishes a connection with a data center (200, 200 ', 200' ') if the trend of the values of the at least one parameter detected by the at least one sensor (10) indicates that a certain first threshold value is likely to be exceeded and / or if the values of the at least one parameter detected by the at least one sensor (10) show one certain first threshold.

2. Data transmission device (100) according to claim 1, characterized in that the data transmission device comprises a mobile radio telephone.

3. Data transmission device (100) according to one of the preceding claims, characterized in that the data transmission device is a signal device for providing a warning signal to the person being monitored, the evaluation device (113) being designed such that it activates the signal device when the trend in the values of the at least one parameter detected by the at least one sensor (10) indicates that a certain second is likely to be exceeded Displays the threshold value and / or if the values of the at least one parameter detected by the at least one sensor (10) exceed a certain second threshold value.

4. Data transmission device (100) according to claim 3, characterized in that the signal device comprises the one or more loudspeakers (104) and / or the display (103) of a mobile radio telephone or motor vehicle.

5. Data transmission device (100) according to claim 3 or 4, characterized in that the first threshold value is higher than the second threshold value, or that the second threshold value is closer to the normal value than the first threshold value.

6. Data transmission device (100) according to one of the preceding claims, characterized in that the data transmission device (100) has a timer device and the evaluation device (113) is designed such that it establishes a connection to the data center (200, 200 ', 200' ') if a certain time has passed since the last connection to the data center (200, 200', 200 '').

7. Data transmission device (100) according to one of the preceding claims, characterized in that the data transmission device comprises an emergency call device, the evaluation device (113) being designed such that it activates the emergency call device, if the trend of the values of the at least one parameter detected by the at least one sensor (10) indicates that a certain third threshold value is likely to be exceeded and / or if the values of the at least one parameter last detected by the at least one sensor (10) show a certain third threshold value exceed.

8. Data transmission device (100) according to claim 7, characterized in that the third threshold value is higher than the first threshold value, or that the first threshold value is closer to the normal value than the third threshold value.

9. Data transmission device (100) according to claim 7 or 8, characterized in that the emergency call device is designed such that when activated it sends an emergency call to the data center (200, 200 ', 200' ') and / or an emergency call the immediate surroundings.

10. Data transmission device (100) according to any one of claims 7 to 9, characterized in that instructions are stored in the storage device (114) and / or from the data center (200, 200 ', 200' '), which are stored together with the Emergency call can be transmitted to the immediate area.

11. Data transmission device (100) according to any one of claims 7 to 10, characterized in that the emergency call device, the emergency call and / or the instructions to the immediate environment by radio (data transmission device 111; Bluetooth; WIFI), optically

(Display 103) and / or acoustically (loudspeaker 104).

12. Data transmission device (100) according to one of claims 7 to 11, characterized in that the emergency call device, the emergency call and / or the instructions to the immediate environment in the language of the monitored person, in the language of the location, and / or in at least one World language or transmits successively in two or more of these languages.

13. Data transmission device (100) according to one of the preceding claims, characterized in that the measuring device (11) is connected to a data transmission device (13) for transmitting the detected values to the evaluation device (113), and in that the evaluation device (113) is connected to a corresponding data transmission device (111) for receiving the values transmitted by the data transmission device (13) connected to the measuring device (11).

14. Data transmission device (100) according to claim 13, characterized in that the data transmission device (13) comprise a Bluetooth module and the data transmission device (111) comprise a Bluetooth module.

15. Data transmission device (100) according to one of the preceding claims or according to the preamble of claim 1 or according to one of claims 2 to 14 depending on the preamble of claim 1, characterized in that the measuring device (11) with the evaluation device (113) are connected to one another via a pair of data transmission devices (13, 111), and that between the measuring device (11) and the one data transmission device (13) and between the other data transmission device (111) and the evaluation device in each case an encryption Device (12, 112) for hardware and software encryption of the data to be transmitted is provided.

16. Data transmission device (100) according to claim 15, characterized in that the encryption devices (12, 112) each comprise a cryptography chip.

17. Data transmission device (100) according to one of claims 15 to 16, characterized in that the encryption devices (12, 112) each comprise a private key.

18. Data transmission device (100) according to one of claims 15 to 17, characterized in that the data interface (101) is connected to the data transmission device (111) in such a way that the data comprising the detected values is sent to a national data center (200, 200 ', 200' ') and / or a further data transmission device are transmitted in encrypted form when the evaluation device (113) initiates the transmission.

19. Data transmission device (100) according to one of claims 15 to 18, characterized in that the evaluation device (113) is connected to the data transmission device (111) in such a way that the data comprising the acquired values is sent to a national data center (200, 200 ', 200' ') and / or a further data transmission device are transmitted unencrypted if the evaluation device (113) initiates the unencrypted transmission.

20. Data transmission device (100) according to one of claims 1 to 14 or according to the preamble of claim 1 or according to one of claims 2 to 14 in Dependence on the preamble of claim 1, characterized in that the data transmission device (100) has an encryption device (112) for hardware and software encryption of the data to be transmitted.

21. Data transmission device (100) according to claim 20, characterized in that the encryption device (112) comprises a cryptography chip.

22. Data transmission device (100) according to one of claims 20 to 21, characterized in that the encryption device (112) comprises a private key.

23. Data transmission device (100) according to one of claims 20 to 22, characterized in that the data transmission device (100) is designed such that the data comprising the detected values to a national data center (200, 200 ', 200' ') and / or a further data transmission device are transmitted in encrypted form when the evaluation device (113) initiates the transmission.

24. Data transmission device (100) according to one of claims 20 to 23, characterized in that the data transmission device (100) is designed in such a way that the data comprising the detected values to a national data center (200, 200 ', 200' ') and / or a further data transmission device are transmitted unencrypted when the evaluation device (113) initiates the unencrypted transmission.

25. Data transmission device (100) according to one of the preceding claims, characterized in that the evaluation device (113) for monitoring People from certain social groups (seniors, children, women etc.) or from people with certain diseases, in particular cardiac patients (cardiac activity), astmatics (breathing activity), pregnant women (mother and child condition), hypertension patients (blood pressure), diabetics (blood sugar levels) and Allergy sufferers (allergens in the area) is designed.

26. Sensor (10) for a personal monitoring system for monitoring at least one personal parameter

a measuring device (11) for detecting values of the at least one parameter, and

a data transmission device (13) for transmitting the detected values of the at least one parameter between the data transmission device (13) of the sensor (10) and a corresponding data transmission device (111), which is connected to an evaluation device (113),

characterized in that the sensor (10) has an encryption device (12) for hardware and software encryption of the values detected by the measuring device (11).

27. Sensor (10) according to claim 20, characterized in that the encryption device (12) comprises a cryptography chip.

28. Sensor (10) according to claim 20 or 21, characterized in that the encryption device

(12) includes a private key.

29. Mobile radio device for operation in a mobile radio network with a transmitting device which has an identification nu is assigned to the mobile network for identification, and a receiving device for receiving short messages, characterized in that the receiving device for receiving short messages is assigned a second identification number that differs from the identification number assigned to the sending device.

30. Mobile radio device according to claim 29, characterized in that the transmitting device for sending short messages is assigned the second identification number or a third identification number.

31. Mobile radio device according to claim 29 or 30, characterized in that the mobile radio device is comprised by a data transmission device according to one of claims 1 to 28.

32. Mobile radio device according to claim 31, characterized in that the transmitting device for sending encrypted data is assigned the second identification number, the third identification number or a fourth identification number.

33. Mobile radio device according to claim 31 or 32, characterized in that the receiving device for receiving encrypted data is assigned the second identification number, the third identification number, the fourth identification number or a fifth identification number.

34. Data transmission device (100) or mobile radio device according to one of the preceding claims or the preamble of claim 1, characterized in that the data transmission device (.100) or the mobile radio device has an energy reserve device which is designed such that it the evaluation device ' Provides energy for the evaluation of the data received from the measuring device.

35. Data transmission device (100) or mobile radio device according to claim 34, characterized in that the energy reserve device comprises the energy store of the data transmission device (100) or the mobile radio device and is designed such that the transmission function of the data transmission device (100) or the mobile radio device falls below a certain amount of energy is turned off.

36. Data transmission device (100) or mobile radio device according to claim 34 or 35, characterized in that the energy reserve device comprises the energy storage device of the data transmission device (100) or the mobile radio device and is designed such that the data transmission device (100) or the mobile radio device falls short of a certain amount of energy the time intervals between two attempts to log into a mobile radio network are preferably increased by at least a factor of 10, more preferably by at least a factor of 100.

37. Data transmission device (100) or mobile radio device according to one of claims 34 to 36, characterized in that the energy reserve device comprises the energy store of the data transmission device (100) or of the mobile radio device and is designed such that the data transmission device (100) or the mobile device aborts the attempts to log into a .mobile network (continuous operation of the transmission function with high or highest performance).

38. Data transmission device (100) or mobile radio device according to one of claims 34 to 37, characterized in that the energy reserve device comprises the energy store of the data transmission device (100) or of the mobile radio device and is designed such that an attempt is made when an emergency is ascertained log into a mobile network.

39. data transmission device (100) or mobile radio device according to one of claims 34 to 38, characterized in that the energy reserve device is designed such that it provides the data transmission device (100) or the mobile radio device with energy for sending an emergency call.

40. Mobile network for the operation of several mobile devices, in particular according to one of claims 29 to 39, characterized in that at least some and preferably all mobile devices are assigned at least two identification numbers.

41. Mobile radio network according to claim 40, characterized in that the identification numbers assigned to the mobile radio devices for receiving short messages differ from the identification numbers assigned to the mobile radio devices for identification with respect to the mobile radio network.

42. Mobile radio network according to claim 40 or 41, characterized in that the mobile radio network is designed such that short messages sent to a mobile radio device for identification in relation to the mobile radio network identification number are not sent from the mobile radio network to the mobile radio device or without cost calculation for the recipient of the Short message can be sent to the mobile radio.

43. Personal surveillance system with at least one data transmission device (100) according to one of claims 1 to 25 and / or at least one sensor according to one of claims 26 to 28 and / or at least one mobile radio device according to one of claims 30 to 39 and / or at least one mobile radio network one of claims 40 to 42.

44. Personal surveillance system according to claim 43 with at least one national data center (200, 200 ', 200' ') which is assigned to a country.

45. Personal surveillance system according to claim 43 or 44 with a plurality of national data centers (200, 200 ', 200' '), each of which is assigned to a country.

46. Personal surveillance system according to one of claims 43 to 45, in which a superordinate independent data center (300) is provided which is trustworthy and preferably the data of the national data centers

(200, 200 ', 200' ').

47. Personal surveillance system according to claim 46, in which the superordinate independent data center (300) is designed such that the respective national data centers (200, 200 ', 200' ') in the superordinate independent data center (300) only access the data assigned to them allowed to.

48. Personal surveillance system according to one of claims 46 to 47, in which the superordinate independent data center (300) is designed such that it is in the event of a failure and / or a temporary malfunction of a national data center (200, 200 ', 200'') for this jumps in.

9. Personal surveillance system according to one of claims 46 to 48, in which a national data center (200, 200 ', 200' ') in the event of failure and / or a temporary disturbance of a national data center (200, 200', 200 '') assigned to it steps in for this and either has its own played data or receives it from the higher-level independent data center (300).