WO2019202227A1

WO2019202227A1 - Authentication of the passenger of a vehicle

Info

Publication number: WO2019202227A1
Application number: PCT/FR2019/050724
Authority: WO
Inventors: Gregory Blokkeel; Sandrine Delenne; Benoit PORTE PROUST
Original assignee: Psa Automobiles Sa
Priority date: 2018-04-20
Filing date: 2019-03-28
Publication date: 2019-10-24
Also published as: FR3080481A1; EP3782134A1; FR3080481B1

Abstract

The invention concerns a method for authenticating a passenger of a vehicle (508), the method comprising the steps of displaying, by the vehicle, a graphical authentication code (QR1, QR2, QR3, QR4) and, when a piece of authentication data is received by the vehicle, the piece of authentication data being obtained from a reading of said graphical authentication code by a user terminal of the passenger, of transmitting an authentication validation message to the driver.

Description

Vehicle Passenger Authentication

The present invention belongs to the field of opening vehicles. It relates in particular to a passenger authentication method for controlling the opening of a door of a vehicle to this passenger.

It is particularly advantageous for managing the mutual identification of a transport vehicle with driver, VTC, with a passenger.

"Vehicle" means any type of vehicle such as a motor vehicle, a moped, a motorcycle, a wheelbarrow, a rail vehicle, etc. Passenger means any person transported or wishing to be transported by the vehicle. A VTC customer, a carpool passenger, a family member of the vehicle owner are examples of passengers.

New modes of mobility include passenger transport by conventional passenger vehicles. Thus, with car sharing, a person can be transported by the vehicle of an individual. For the VTC, the driver is a professional but the vehicle remains a classic passenger vehicle. In all these situations, it may be difficult for the passenger to identify the vehicle to be transported and for the driver to identify the passenger to be transported.

Today there are devices to facilitate the mutual identification of drivers and passengers:

A. the driver may exit the vehicle and display a sign with the name of the next passenger so that the passenger can recognize his name;

B. setting a rendezvous point through an application installed on a passenger terminal. The rendezvous point is then displayed by a map, the position of the vehicle is geo-localized and the number of its license plate is indicated.

These devices are imperfect. Solution A. requires the driver to exit, which can be dangerous (especially when the rendezvous point is on an area where stopping is prohibited) and wastes the driver.

Solution B. is also dangerous because the passenger, in the vast majority of cases, sets a rendezvous point where the vehicle is not allowed to stop (no-go zone, zebras, sidewalks, disabled or firefighters, bus lanes, etc.). However, as it is difficult for the passenger to identify the vehicle among the traffic, the vehicle is forced to stop quite precisely in the danger zone to be identified by the passenger. It is difficult to identify the vehicle solely by the license plate, this is especially true for VTCs, which are generally very similar to other dark sedans, and even more so at night and when passengers do not see the vehicle than aside.

Finally, with the devices A and B, and especially with the device B, a security problem arises. Indeed, the probability that a bad passenger, not necessarily well-intentioned, enters the vehicle exists and, conversely, it is also possible for a passenger to enter the wrong vehicle. Cases of driver aggression or vehicle theft are unfortunately common.

The present invention improves the situation.

For this purpose, a first aspect of the invention relates to a method for authenticating a passenger of a vehicle, the method comprising the steps of:

- display by the vehicle of a graphic authentication code;

when authentication data is received by the vehicle, the authentication data being obtained from a reading of said authentication graphic code by a user terminal of the passenger, transmission of an authentication validation message to the driver. The display of a graphic authentication code by the vehicle and the information given to the driver of the validation of this graphic code in particular has two technical effects, which combine.

On the one hand, identification by the passenger of the vehicle is largely facilitated. The display of the graphic authentication code makes possible the discrimination of vehicles accepting passengers, typically VTCs, and other vehicles. In addition, between the vehicles in the vicinity of the passenger, a scan performed by the passenger with his user terminal (using a camera / camera of the user terminal) quickly and efficiently indicates which vehicle is the correct one. As is detailed below with reference to Figure 1, the scan is for example to browse the camera / camera area (for example the road where the vehicles are located) in which vehicles display their graphic codes authentication.

On the other hand, safety is greatly improved for both the passenger and the driver. Electronic verification of the identity of the passenger and the identity of the vehicle prevents intrusions, aggression or theft due to misidentification / authentication.

As is detailed below, different levels of security are provided by the various embodiments of the present invention and depend in particular on the presence or absence of a remote authentication device (secure server). Indeed, the authentication data can be received by the vehicle directly from the user terminal or from the remote authentication device.

In a minimal embodiment, the reception of the authentication data generated by a user terminal that has been able to correctly read the authentication graphic code and generate a correct authentication data is sufficient to authenticate the passenger. Conversely, the readability of the graphic authentication code by the user terminal is sufficient to authenticate the vehicle.

The technical effect of facilitated visual identification is combined with the increased safety technical effect to improve the overall efficiency of the mutual identification between the vehicle and the passenger. Indeed, the display of the graphic authentication code by the vehicle identifies the vehicle and secures the authentication of this vehicle (and the passenger for the driver) in a single step, which significantly improves the efficiency of the passenger recovery process.

In one embodiment, the method further comprises, after the step of transmitting the message, at least one of the following steps: opening of at least one door of the vehicle, display by the vehicle of information of passenger authentication validation, the display being configured to be visible from outside the vehicle, transmission to the user terminal of the passenger authentication validation information.

The automated door opening reduces the interaction required of the passenger and / or the driver to a minimum and makes possible a second identification of the vehicle by the passenger (which visually or audibly detects the opening of the vehicle). Passenger authentication validation information (via display or transmission) simplifies identification. Indeed, at the display of the validation, the passenger can respectively visually check (leaving the eye screen) the presence of the vehicle. The display by the vehicle (projection of a green light for example) also simplifies the identification of this vehicle. In another embodiment, the method further comprises, before the opening step, displaying by the vehicle of the validation and / or transmission information to the user terminal of the validation information, the step of:

- issuing an authentication confirmation request to the driver; and wherein the door is open, the validation information is displayed and / or the validation information is transmitted if the driver has confirmed the authentication.

Confirmation by the driver further increases the safety of the process, the driver can visually verify that the passenger whose authentication has been validated by the system is the one who comes near his vehicle. In one embodiment, the graphic authentication code is specific to each passenger authentication, that is to say that a different authentication graphic code corresponds to each transmission of the validation message. In this embodiment, the authentication data is further obtained from a user identifier included on said user terminal and specific to the passenger.

In another embodiment, the display of the authentication graphic code is at least one of the following elements: display of the authentication graphic code on at least a part of at least one glazed surface of the vehicle. Thus, the display integrates discreetly without distorting the overall appearance of the vehicle;

o display of the graphic authentication code on at least a part of the vehicle body. Thus, the graphic code is clearly visible, in particular by far;

o display of the graphic authentication code by a lighting device of the vehicle. Thus, the graphic code is particularly visible when the light conditions are degraded, for example at night; o projection of the graphic authentication code on a surface included in the immediate environment of the vehicle. Thus, the graphic code is clearly visible and can be scanned more easily because it is present on a flat surface such as a sidewalk or a road. "Immediate environment" is defined as an area close to the vehicle, for example a floor area located less than 10 meters from the vehicle, a vertical wall located less than 2 meters from the vehicle, etc. ;

o holographic projection of the graphic authentication code. A visible and distinctive visual effect is thus made possible.

In one embodiment, the graphic authentication code is at least one of the following elements: a one-dimensional graphic code, a two-dimensional graphic code, a QR code type two-dimensional graphic code or a code three-dimensional graph. A second aspect of the invention relates to a method for authenticating a passenger of a vehicle, the method comprising the steps, implemented by a passenger user terminal, of:

reading of a graphic authentication code displayed by the vehicle;

generating an authorization code specific to the read authentication graphical code;

- Transmission to a remote authentication device of said authorization code, for generating an authentication data to the vehicle and able to trigger the transmission by the vehicle of an authentication validation message.

A third aspect of the invention is directed to a computer program comprising instructions for implementing the method according to the first aspect of the invention or according to the second aspect of the invention, when these instructions are executed by a processor.

A fourth aspect of the invention relates to a data processing device for the authentication of a passenger of a vehicle, the device being connected to the vehicle and comprising at least one memory and at least one processor configured to perform the operations of :

- Generating a display instruction by the vehicle of an authentication graphic code;

when authentication data is received by the vehicle, the authentication data being obtained from a reading of said authentication graphic code by a user terminal of the passenger, transmission of an authentication validation message to the driver.

A fifth aspect of the invention is a vehicle capable of authenticating a passenger of the vehicle, the vehicle comprising:

the data processing device according to the fourth aspect of the invention;

a device for displaying the graphic authentication code. Other characteristics and advantages of the invention will appear on examining the detailed description below, and the attached drawings in which: FIG. 1 illustrates an application context of the invention; FIG. 2 illustrates a method of authenticating a passenger of a vehicle according to the invention; Figure 3 illustrates a processing device, according to one embodiment of the invention.

The invention is described below in its non-limiting application to the case of a VTC retrieving a passenger. Other applications such as a passenger seeking his driver for a carpool, a bus seeking a passenger, etc. are also possible.

Figure 1 illustrates the context of implementation of the invention. In this figure, the passenger terminal UE of a passenger reads a QR4 authentication graphic code displayed by a vehicle 508.

Typically, in this situation, the passenger is on a sidewalk and searches for the VTC corresponding to the race he has previously ordered via an application present on his user terminal UE. The UE user terminal is typically a smartphone, for smartphone in French.

To do this, the user activates a function of his smartphone, typically proposed by the application that allowed him to control the race, identification of the VTC. In particular, and as shown in FIG. 1, the lens of the camera (also generally acting as a camera) is activated. The acquired images are processed to detect graphic authentication codes. To do this, the user has the lens go through a near field of view (scan operation). It typically scan the road on which vehicles are present. In FIG. 1, the QR4 authentication graphic code passes into the objective field of the UE and is thus detected. The authentication steps described below with reference to FIG. 2 are then implemented.

The authentication graphic code can be displayed in different ways by the vehicle 508. Thus, in FIG. 1, a QR1 authentication graphic code is displayed on the vehicle body (cover), a QR2 authentication graphic code is displayed on the vehicle body (front left door), a QR3 graphic authentication code is projected on the ground by a projector integrated in the left front mirror of the vehicle 508, a QR4 authentication graphic code is shown on the left rear window The display techniques, for example via LED screens, light-emitting diodes, or projection of graphic authentication codes are well known.

The display is dynamic, i.e. the authentication graphic code can be modified, typically numerically. For example, during a new race, the driver initiates a new recovery process and a new code is displayed. In FIG. 1, the authentication graphic codes are two-dimensional graphic codes of the QR code type, for Quick Response in English or rapid response in French. Other types of codes such as one-bar codes (barcodes), two or three dimensions are also conceivable.

Figure 2 illustrates the method according to the invention, in one embodiment.

In a first step, a graphic authentication code is displayed by the vehicle. As explained above with reference to Figure 1, this code can be displayed in different ways QR1, QR2, QR3 and / or QR4 by the vehicle. For the sake of simplicity, it is considered in the following that only the QR4 code is displayed. The QR4 code is generated from an authentication key. The vehicle 508 can itself generate the QR4 code from an authentication key stored, typically in a secure manner, by the vehicle 508. The generation of the QR4 code can also be subcontracted to a remote device, such as the SRV server. These and other methods of generation secure authentication of a graphic code are well known to those skilled in the computer security specialist.

In another less secure embodiment, the QR4 code is chosen from among several possible or even drawn by the driver, without using an authentication key. The display instruction of the authentication graphic code can be generated by any device of the vehicle 508, such as the device D described hereinafter with reference to FIG. 3. This instruction can also be generated by any connected device, by a local area network or an extended network, to the vehicle 508. Typically, a user terminal of the driver connected to an electronic system of the vehicle, in particular controlling the display of the authentication graphic code, may be at the origin of the instruction d display of the graphical authentication code.

The QR4 code is then scanned (arrow RD), as was described above with reference to Figure 1, by the passenger terminal UE UE.

In a minimal embodiment, shown in dashed lines in FIG. 2, a step S1B for generating a valid authentication data item is then implemented by the terminal UE. The data Valid can be generated only from the QR4 code read, from this QR4 code and an identification code stored on the UE terminal or from the QR4 code, the identification code and a verification code received from a secure remote device, such as the SRV server, following an exchange between the terminal UE and the server SRV. These methods, and others, of secure generation of authentication data are well known to those skilled in the art of computer security.

In this minimal embodiment, the authentication data Valid is then transmitted from the terminal UE to the vehicle 508. When this authentication data Valid is received by the vehicle, an authentication validation message is then sent. The transmission of this message is configured to be perceived by a driver of the vehicle.

The message consists of at least one of the following: - display by a man-machine interface of the vehicle. For example, one of the driver's visible screens displays the message "authenticated passenger". In another example, a green light representing a passenger is lit;

- Display by a device connected to at least one local network of the vehicle. For example, the user terminal (typically a smartphone) of the driver connected by a wireless link to an electronic network of the vehicle, itself possibly connected via an antenna to a wide area network (4G, 5G, etc.). In one embodiment, the driver's user terminal is positioned in the passenger compartment so as to be visible to the driver and is directly connected to a wide area network; - sound broadcasting of the message by at least one loudspeaker of the vehicle;

- vibration of at least one element of the vehicle in contact with the driver. For example, the driver's seat may vibrate.

In a more secure embodiment, a QR code specific authorization code is generated by the UE terminal after the QR4 code has been read by the UE terminal. In particular, the code Cod (RD, id) is generated from the QR4 code and a user identifier id of the passenger. The ID id is, in a secure manner, specific to the passenger, thanks to methods well known to those skilled in the computer security specialist.

In one embodiment, the graphic authentication code is specific to each passenger authentication, that is to say that a different authentication graphic code corresponds to each transmission of the validation message.

In other embodiments, the authorization code is generated from other data, such as a secure vehicle identifier 508, a public and / or private authentication key, a passenger biometric data, etc. .

The authorization code Cod (RD, id) is then transmitted to a remote authentication device SRV. From the authorization code, a valid authentication data is generated by the SRV device. Other elements, well known to those skilled in the art of computer security, can complete the elements required to generate the Valid data, such as secure user data stored on a secure user database, for example. The authentication data Valid is then transmitted to the vehicle 508 for issuing the authentication validation message, in the same way as for the minimal embodiment.

After the step of issuing the authentication validation message, at least one of the following steps is implemented:

- Opening at least one door of the vehicle;

- display by the vehicle of a passenger authentication validation information, the display being configured to be visible from outside the vehicle;

- Passing to the user terminal of the passenger authentication validation information.

These steps can be implemented successively or simultaneously. The display by the vehicle of information is at least one of the following: o display of authentication validation information on at least a portion of at least one glass surface of the vehicle. The glass surface (s) can for example be backlit in green;

o displaying authentication validation information on at least a portion of the vehicle body. The at least part of the body of the vehicle can for example be backlit in green;

o Display of the authentication validation information by a vehicle lighting device. For example, a green backlit logo indicating VTC may be lit;

o projection of the authentication validation information on a surface included in the immediate environment of the vehicle. An indication "it is me" can for example be projected on the ground near the vehicle;

o holographic projection of authentication validation information.

Before the opening step, display by the vehicle of the validation information and / or transmission to the user terminal of the validation information, a step of issuing an authentication confirmation request to destination of the driver is implemented. The door is then opened, the validation information is then displayed and / or the validation information is then transmitted if the driver has confirmed the authentication.

For example, an authentication confirmation request is displayed by the vehicle's man-machine interface or by the driver's user terminal. The driver then has the opportunity to turn around to check if the person authenticated by the system corresponds to the person at his doors. Once this visual verification is done, it has the possibility of opening the door (s), displaying and / or transmitting the validation information.

FIG. 3 represents an exemplary device D of the vehicle 508. This device D can be used as a centralized device in charge of at least certain steps of the method carried out by the vehicle, according to the invention. The display and message transmission steps are implemented by dedicated devices detailed above with reference to FIGS. 1 and 2. As detailed above with reference to FIG. 2, the steps of the method carried out by FIG. vehicle, according to the invention, can be performed by the single device D but also be performed for some or all by other devices located at other locations in the vehicle and / or connected to the vehicle by a wired connection or not , such as a user terminal of the driver positioned in the cockpit so as to be visible to the driver.

This device D can take the form of a housing comprising printed circuits, any type of computer or a smartphone.

The architecture of the device D, here described in connection with the steps performed by the vehicle, can also be selected for the user terminal UE.

The device D comprises a random access memory 1 for storing instructions for the implementation by a processor 2 of at least one step of the method as described above. The device also comprises a mass memory 3 for storing data intended to be stored after the implementation of the method. The RAM 1 and / or the mass memory 3 store, for example, the history of the passenger authentication. The device D may further comprise a digital signal processor (DSP) 4. This DSP 4 receives the data from the sensors to format, demodulate and amplify, in a manner known per se, these data.

The device also comprises an input interface 5 for receiving data implemented by the method according to the invention, such as the authentication data, and / or received by an antenna of the vehicle and an output interface 6 for the transmission. transmitting the data implemented by the method, such as an instruction for displaying the authentication validation message.

The present invention is not limited to the embodiments described above as examples; it extends to other variants.

Thus, embodiments described above have been described where specific exchanges of data are used to ensure the security of the method according to the invention. The invention is not limited to these exchanges, and may involve other exchanges to further strengthen the robustness of the system against computer attacks. For example, a secure embodiment involving a remote authentication device has been described. Other devices, and thus other data exchanges, are also conceivable (use of a smart card, for smart card in French, use of biometric sensors, use of a second remote authentication device, etc.). . In addition, examples of embodiments in which the user terminal of the passenger and / or the driver were smartphones have been described above. The invention is not limited to the use of these smartphones and the user terminal may be a touch pad, a laptop, a personal assistant or any type of connected object (watch, glasses, coffee maker, etc.).

Claims

claims

A method of authenticating a passenger of a vehicle (508), the method comprising the steps of:

- display by the vehicle of an authentication graphic code (QR1, QR2, QR3,

QR4);

when an authentication datum (Valid) is received by the vehicle, the authentication datum being obtained from a read (RD) of said graphic authentication code by a user terminal of the passenger, transmission of a authentication validation message to the driver.

The method of claim 1, further comprising, after the step of transmitting the message, at least one of the following steps:

- Opening at least one door of the vehicle;

3. Method according to claim 2, further comprising, before the opening step, display by the vehicle of the validation information and / or transmission to the user terminal of the validation information, the step from:

4. Method according to one of the preceding claims, wherein the graphic authentication code is specific to each passenger authentication, that is to say that a different authentication graphic code corresponds to each transmission of the message of validation and,

wherein the authentication data is further obtained from a user identifier included on said user terminal and specific to the passenger.

5. Method according to one of the preceding claims, wherein the display of the authentication graphic code is at least one of the following elements:

o display of the authentication graphic code on at least a portion of at least one glazed surface of the vehicle;

o display of the authentication graphic code on at least a portion of the body of the vehicle;

o display of the graphic authentication code by a lighting device of the vehicle;

o projection of the authentication graphic code on a surface included in the immediate environment of the vehicle;

o holographic projection of the graphic authentication code.

6. Method according to one of the preceding claims, wherein the authentication graphic code is at least one of the following elements:

o a one-dimensional graphic code;

o a two-dimensional graphic code;

o a two-dimensional graphic code of the QR code type;

O a three-dimensional graphic code.

7. A method of authenticating a passenger of a vehicle, the method comprising the steps, implemented by a passenger user terminal, of:

reading of a graphic authentication code displayed by the vehicle;

generating an authorization code specific to the read authentication graphical code; - Transmission to a remote authentication device of said authorization code, for generating an authentication data to the vehicle and able to trigger the transmission by the vehicle of an authentication validation message.

8. Computer program comprising instructions for implementing the method according to any one of the preceding claims, when these instructions are executed by a processor (2).

9. Device (D) for processing data for the authentication of a passenger of a vehicle (508), the device being connected to the vehicle and comprising at least one memory (1, 3) and at least one processor (2 ) configured to perform the operations of:

10. Vehicle (508) capable of authenticating a passenger of the vehicle, the vehicle comprising:

the data processing device according to claim 9;

a device for displaying the graphic authentication code.