Method, device and storage medium for remotely controlling a motor vehicle

Abstract

The invention relates to a method for remotely controlling a motor vehicle, the method comprising the following steps: receiving a motor vehicle setting signal, the motor vehicle setting signal representing a motor vehicle setting of a motor vehicle, the motor vehicle wanting to enter a restricted geographical area; receiving an entry condition signal, the entry condition signal representing an entry condition, the entry condition having to be satisfied before the motor vehicle is allowed to enter the area; checking based on the motor vehicle setting whether the entry condition is satisfied for the motor vehicle; generating a remote control signal for remotely controlling the motor vehicle based on the result of checking whether the entry condition is satisfied; and outputting the generated remote control signal. The invention further relates to an apparatus, a computer program and a machine-readable storage medium.

Description

[0001] Technology Region

[0002] The invention relates to a method for remotely controlling a motor vehicle. The invention also relates to a device, a computer program and a machine-readable storage medium. Background Art

[0003] Currently, there are legal regulations that motor vehicles are no longer allowed to drive into cities or certain areas of cities under certain circumstances. The reason is, for example, emission regulations.

[0004] Such prohibitions are implemented, for example, by signs which signal that driving into a certain area or into a city is prohibited for motor vehicles. If necessary, there may be police control to monitor such prohibitions.

[0005] Patent document DE 10 2007 053 406 B3 discloses a method and a device for carrying out adaptation and diagnosis in an emission-related control device in a vehicle.

[0006] The published patent application DE 10 2010 003 502 A1 discloses a method for operating a vehicle that can be operated in an emission-free manner.

[0007] The published patent application DE 10 2014 006 319 A1 discloses a system for evaluating and / or optimizing the operating behavior of a vehicle. Summary of the invention

[0008] The object on which the present invention is based should be seen as providing an efficient concept which makes it possible to effectively monitor or control whether a motor vehicle can enter a restricted geographical area for which entry conditions apply.

[0009] This object is achieved by means of the content of the present invention. Advantageous embodiments of the present invention are the content of the individual preferred embodiments.

[0010] According to a first aspect, there is provided a method for remotely controlling a motor vehicle, the method comprising the following steps:

[0011] receiving a vehicle setting signal representing a vehicle setting of a vehicle that intends to enter a restricted geographic area;

[0012] receiving an entry condition signal, wherein the entry condition signal represents an entry condition, and the entry condition must be met before the motor vehicle is allowed to enter the area;

[0013] Checking, based on the motor vehicle setting, whether the entry condition is satisfied for the motor vehicle;

[0014] generating a remote control signal for remotely controlling the motor vehicle based on a result of checking whether the entry condition is satisfied, and

[0015] Outputs the generated remote control signal.

[0016] According to a second aspect, a device is provided, which is configured to carry out all steps of the method according to the first aspect.

[0017] According to a third aspect, there is provided a computer program comprising instructions which, when said computer program is executed by a computer, for example by an apparatus according to the second aspect, arranges the computer to carry out the method according to the first aspect.

[0018] According to a fourth aspect, there is provided a machine-readable storage medium on which is stored the computer program according to the third aspect.

[0019] The invention is based on and includes the recognition that the above-mentioned object can be achieved by using remote monitoring of the motor vehicle, in the event that the motor vehicle setting results in an entry condition not being met for the motor vehicle, which is particularly also carried out while the motor vehicle is in motion. This means in particular that the motor vehicle is remotely monitored or controlled when the entry condition is not met for the motor vehicle.

[0020] This, for example, leads to the following technical advantages: it is possible to effectively monitor or control whether a motor vehicle can enter the area or not. In particular, it is possible to effectively prevent, for example, a motor vehicle from entering the area.

[0021] This results in, inter alia, the technical advantage of providing a concept which allows efficient implementation of the remote exercise of the right to enter a motor vehicle into a restricted geographical area, for which entry conditions apply.

[0022] According to one specific embodiment, the remote control signal comprises a control signal for controlling a transverse guidance and / or a longitudinal guidance of the motor vehicle, so that during remote control of the motor vehicle, the transverse guidance and / or the longitudinal guidance of the motor vehicle is remotely controlled based on the remote control signal.

[0023] According to one specific embodiment, the remote control signal comprises a control signal for controlling a transverse guidance and a longitudinal guidance of the motor vehicle, so that during the remote control of the motor vehicle, the transverse guidance and the longitudinal guidance of the motor vehicle are remotely controlled based on the remote control signal.

[0024] This results in, for example, the following technical advantage: the motor vehicle can be effectively remotely controlled. In particular, this results in the following technical advantage: the motor vehicle can be effectively remotely monitored.

[0025] In the case where the remote control signal includes a control signal for controlling a lateral guidance or a longitudinal guidance of a motor vehicle, it is provided according to one embodiment that the corresponding other guidance, i.e. the longitudinal guidance or the lateral guidance, is either manually controlled by the driver (which can then be referred to in particular as auxiliary guidance) or is at least partially automatically controlled in order to at least partially automatically guide the motor vehicle.

[0026] Assisted guidance means that the driver of the motor vehicle continuously either guides the vehicle transversely or longitudinally. The corresponding other driving task (i.e. the control of the longitudinal guidance or the control of the transverse guidance of the motor vehicle) is automatically performed remotely. This means that during the assisted guidance of the motor vehicle, either the transverse guidance or the longitudinal guidance is automatically controlled remotely.

[0027] The expression “at least partially automatically guided” includes one or more of the following situations: partially automatically guided, highly automatically guided, fully automatically guided.

[0028] Partially automated guidance means that the longitudinal and lateral guidance of the motor vehicle is automatically remotely controlled in certain situations (e.g. driving on the motorway, driving in a parking lot, overtaking an object, driving in a lane defined by lane markings) and / or for a certain period of time. The driver of the motor vehicle does not have to manually control the longitudinal and lateral guidance of the motor vehicle himself. However, the driver must constantly monitor the automatic remote control of the longitudinal and lateral guidance in order to be able to intervene manually if necessary. The driver must be ready to take over the complete guidance of the motor vehicle at any time.

[0029] Highly automated guidance means that the longitudinal guidance and lateral guidance of the motor vehicle are automatically remotely controlled for a certain period of time under certain circumstances (e.g. driving on a motorway, driving in a parking lot, overtaking an object, driving in a lane defined by lane markings). The driver of the motor vehicle does not have to manually control the longitudinal guidance and lateral guidance of the motor vehicle himself. The driver does not have to constantly monitor the automatic remote control of the longitudinal guidance and lateral guidance in order to be able to intervene manually when necessary. When necessary, a takeover request is automatically output to the driver, in particular with sufficient time margin, in order for him to take over control of the longitudinal guidance and lateral guidance. That is, the driver must potentially be able to take over control of the longitudinal guidance and lateral guidance. The limits of the automated remote control of the lateral guidance and longitudinal guidance are automatically identified. In highly automated guidance, it is not possible to automatically achieve the state of minimum risk in every initial situation.

[0030] Fully automated guidance means that the longitudinal and lateral guidance of the motor vehicle is automatically remotely controlled in certain situations (e.g. driving on a motorway, driving in a parking lot, overtaking an object, driving in a lane defined by lane markings). The driver of the motor vehicle does not have to manually control the longitudinal and lateral guidance of the motor vehicle himself. The driver does not have to monitor the automatic remote control of the longitudinal and lateral guidance in order to be able to intervene manually if necessary. Before the automatic remote control of the lateral and longitudinal guidance ends, a request is automatically made to the driver to take over the driving task (control of the lateral and longitudinal guidance of the motor vehicle), in particular with sufficient time margin. If the driver does not take over the driving task, a return to the state with the lowest risk is automatic. The limits of the automatic control of the lateral and longitudinal guidance are automatically detected. In all situations, a return to the system state with the lowest risk is possible automatically.

[0031] According to one embodiment, if the result indicates that the entry condition is not met, a control signal is generated so that when the transverse guidance and / or longitudinal guidance of the motor vehicle is remotely controlled, based on the generated remote control signal, the motor vehicle does not enter the area or enters the area and stops in a predetermined area within the area.

[0032] This results in, for example, the following technical advantage: a motor vehicle can be effectively prevented from entering the area. In particular, this results in the following technical advantage: it can be effectively ensured that a motor vehicle only drives as far as a predetermined area within the area.

[0033] According to one specific embodiment, it is provided that if the result indicates that the entry condition is not met, adapted motor vehicle settings are determined based on the entry condition and the motor vehicle settings in such a way that a check on whether the entry condition is met based on the adapted motor vehicle settings indicates that the entry condition is met, wherein the remote control signal includes an adaptation signal representing the adapted motor vehicle settings in order to remotely adapt the motor vehicle settings of the motor vehicle based on the adapted motor vehicle settings.

[0034] This results, for example, in the following technical advantages: the vehicle settings can be adapted effectively over a long distance. In particular, this results in the following technical advantages: the vehicle is placed in a state in which it meets the entry conditions based on the adapted vehicle settings. Thus, for example, the vehicle can enter the area. This means, in particular, that after the vehicle settings have been adapted, entry of the vehicle into the area is enabled based on the adapted vehicle settings.

[0035] In one embodiment, it is provided that the remote control signal comprises a control signal for controlling the transverse and / or longitudinal guidance of the motor vehicle in the event of an adaptation of the motor vehicle settings being blocked or in the event of an unauthorized reverse adaptation of the adapted motor vehicle settings (ie in the event of an unauthorized rollback).

[0036] According to one specific embodiment, it is provided that a surroundings signal is received which represents the surroundings of the motor vehicle, wherein a remote control signal, in particular a control signal, is generated based on the surroundings.

[0037] This results in, for example, the technical advantage that remote control signals, in particular control signals, can be generated efficiently. In particular, this results in the technical advantage that the surroundings of the motor vehicle can be effectively taken into account when generating remote control signals, in particular control signals.

[0038] According to one embodiment, it is provided that a check is made based on the surroundings of the motor vehicle: whether the current traffic situation allows remote control of the motor vehicle. In particular, it is provided that a control signal is generated or output based on the result of the check whether the current traffic situation allows remote control.

[0039] For example, when the current traffic status does not allow remote control, the remote control of the motor vehicle is abandoned.

[0040] This can result in the technical advantage, for example, that other road users in the vicinity of the motor vehicle are not endangered or injured.

[0041] According to one embodiment, a safety condition signal is received, the safety condition signal representing at least one safety condition that must be met before remote control of the motor vehicle is allowed, wherein a check is performed to determine whether the at least one safety condition is met, wherein a remote control signal is generated based on a result of the check to determine whether the at least one safety condition is met.

[0042] This results in, for example, the following technical advantage: the remote control signal can be generated efficiently. In particular, this results in the following technical advantage: it can be effectively ensured that the remote control of the motor vehicle meets certain prerequisites, in particular safety conditions. Therefore, in particular, the following technical advantage results: the remote control of the motor vehicle can only be carried out safely when the safety conditions are met.

[0043] According to one embodiment, the at least one safety condition is an element selected from the following group of safety conditions: at least a safety integrity level (English: "Safety Integrity Level" SIL or "Automotive Safety Integrity Level" ASIL) of the motor vehicle and a predetermined safety integrity level of an infrastructure for remotely controlling the motor vehicle, in particular including communication lines and / or communication components (such as communication interfaces), in particular with respect to a predetermined safety integrity level of the overall system in the motor vehicle and in the infrastructure and in particular predetermined safety integrity levels of individual parts such as components, algorithms, interfaces, etc.; a maximum waiting time for communication between the motor vehicle and a remote control device for remotely controlling the motor vehicle based on remote control signals; a predetermined computer protection level of a device for implementing the steps of the method according to the first aspect; predetermined components and / or algorithms and / or communication possibilities for implementing the steps of the method according to the first aspect; predetermined components and / or algorithms and / or communication possibilities for implementing the steps of the method according to the first aspect There is redundancy and / or diversity in terms of aspects; there is a predetermined availability statement which states the availability of predetermined components and / or algorithms and / or communication possibilities; there are predetermined quality standards for predetermined components and / or algorithms and / or communication possibilities; there is a plan, which includes measures for reducing faults and / or measures in the event of failure of predetermined components and / or algorithms and / or communication possibilities and / or measures for fault analysis and / or measures in the event of misinterpretation; there is one or more fallback scenarios; there are predetermined functions; there are predetermined traffic conditions; there is predetermined weather; the maximum possible time for executing or implementing one or more steps of the method according to the first aspect respectively; there is a check result that the elements or functions used to implement the method according to the first aspect are currently functioning without faults.

[0044] The communication line is, for example, a communication line between the device according to the second aspect and a motor vehicle. The communication line comprises, for example, one or more communication channels.

[0045] In one embodiment, the component for implementing the method according to the first aspect is an element selected from the following component group: an environmental sensor, a motor vehicle, an infrastructure, a remote control device, a device according to the second aspect, a motor vehicle system, in particular a drive system, a clutch system, a brake system, a driver assistance system, a communication interface of the motor vehicle or the infrastructure, a processor of the device according to the second aspect, an input end, and an output end.

[0046] In one embodiment, the functions for implementing the method according to the first aspect are elements selected from the following functional group: remote control functions, communication functions between a motor vehicle and an infrastructure or a remote control device, analysis and evaluation functions of environmental sensor data of environmental sensors, planning functions, in particular driving planning functions, traffic analysis functions, and emission analysis functions.

[0047] The computer protection level defines, in particular, the following: an activated firewall and / or a valid encryption certificate for encrypting communications between the motor vehicle and the infrastructure or the remote control and / or an activated anti-virus program with current virus signatures and / or the presence of protection for the computer, in particular a device according to the second aspect or the remote control, in particular mechanical protection, in particular anti-intrusion protection and / or the presence of the possibility to check whether signals, in particular remote control signals or ambient signals, have been transmitted correctly, i.e. without error.

[0048] The algorithm for example comprises a computer program according to the third aspect.

[0049] By checking in particular the presence of redundancy and / or diversity in predetermined components and / or algorithms and / or communication options, for example the following technical advantage results: in the event of failure of corresponding components, such as computers or corresponding algorithms or corresponding communication options, the safety function can nevertheless still be implemented.

[0050] In order to ensure that the result is correct, according to one embodiment, the results can be calculated multiple times, for example, and the corresponding results can be compared with each other. For example, only if the results are consistent, it is determined that the result is correct. If the number of times is an odd number, it can be provided, for example, that the result corresponding to the highest number of identical results is determined to be correct.

[0051] Only when it can be determined that the result is correct is a remote control signal generated, for example.

[0052] In one specific embodiment, it is provided that the remote control signal is generated only when at least one safety condition is met.

[0053] In one specific embodiment, it is provided that the check as to whether at least one safety condition is met is carried out before and / or after and / or during one or more predetermined method steps.

[0054] In particular, this results in the following technical advantage: it can be effectively ensured that certain prerequisites, in the present case safety conditions, for remote control of a motor vehicle are met before and / or after and / or during the implementation of the corresponding method steps. Therefore, in particular, the following technical advantage results: remote control of a motor vehicle can only be carried out safely when the safety conditions are met.

[0055] In one embodiment, it is provided that after the remote control signal is output, the remote control of the motor vehicle is checked based on the output remote control signal in order to detect a fault, wherein, if a fault is detected, the remote control is interrupted or an emergency remote control signal is generated and output for remotely controlling the motor vehicle in an emergency.

[0056] According to one embodiment, the emergency remote control signal comprises an emergency control signal for remotely controlling the transverse guidance and / or longitudinal guidance of the motor vehicle. The emergency control signal is, for example, such that when the transverse guidance and / or longitudinal guidance of the motor vehicle is remotely controlled, the motor vehicle is transferred to a safe state based on the emergency control signal, in particular stopped.

[0057] The statements made in connection with remote control signals, in particular control signals, apply analogously to emergency remote control signals, in particular emergency control signals, and vice versa.

[0058] According to one embodiment, the entry condition specifies a maximum harmful substance emission limit value, and the harmful substance emissions of the motor vehicle must not exceed the maximum harmful substance emission limit value in order to allow the motor vehicle to enter the said area, wherein the check on whether the entry condition is met includes a check on whether the harmful substance emissions of the motor vehicle exceed the maximum harmful substance emission limit value.

[0059] This results in the technical advantage, for example, that only motor vehicles whose pollutant emissions do not exceed a maximum pollutant emission limit value can drive into the area.

[0060] For example, according to one specific embodiment, it is provided that the pollutant emissions of the motor vehicle are ascertained based on motor vehicle settings and / or from a database. The ascertainment of the pollutant emissions can include, in particular, an estimation of the pollutant emissions.

[0061] The maximum pollutant emission limit value can be zero, for example. This means in particular that for the region, motor vehicles in the region are permitted to have zero pollutant emissions. This can usually only be achieved with motor vehicles that include an electric drive, wherein for this purpose the motor vehicle is driven exclusively with the electric drive. In particular, it is provided that the internal combustion engine of the motor vehicle is switched off, currently remotely, before the motor vehicle enters the region.

[0062] According to one specific embodiment, the motor vehicle setting includes one or more elements selected from the following motor vehicle setting parameter group: internal combustion engine settings of an internal combustion engine of the motor vehicle, in particular injection parameters, operating states of an electric motor of the motor vehicle.

[0063] This results in, for example, the technical advantage that particularly suitable motor vehicle setting parameters are used.

[0064] The operating state of an electric motor indicates, for example, whether the electric motor is switched on or switched off. The operating state of an electric motor of a motor vehicle indicates, for example, whether the electric motor drives the motor vehicle or not.

[0065] According to one embodiment, if the result indicates that the entry condition is not met, an operating restriction for limiting the operation of the motor vehicle is determined based on the entry condition so that a check on whether the entry condition is met based on the operating restriction indicates that the entry condition is met, wherein the remote control signal includes a restriction signal representing the operating restriction so that the operation of the motor vehicle can be remotely restricted based on the operating restriction.

[0066] This results in, for example, the technical advantage that the operation of the motor vehicle can be effectively limited remotely.

[0067] In particular, this results in the following technical advantage: after the operating restriction, the motor vehicle meets the entry condition, so that entry of the motor vehicle into the area can subsequently be released.

[0068] According to one specific embodiment, it is provided that the operating limit indicates a maximum vehicle speed and / or a maximum vehicle acceleration.

[0069] This results in, for example, the technical advantage that the emission of pollutants from a motor vehicle can be effectively limited, since lower motor vehicle speeds and lower motor vehicle accelerations generally also result in lower emission of pollutants from the motor vehicle in an effective manner.

[0070] According to one embodiment, it is provided that, in addition to the step of generating a remote control signal and the step of outputting a remote control signal, one or more method steps are performed inside the motor vehicle and / or wherein one or more method steps are performed outside the motor vehicle, in particular in an infrastructure, preferably in a cloud infrastructure.

[0071] This results in, for example, the technical advantage that the corresponding method steps can be carried out in an effectively redundant manner, which can further increase safety in an advantageous manner.

[0072] According to one specific embodiment, it is provided that one or more method steps are recorded, in particular in a blockchain.

[0073] This results in, for example, the following technical advantage: After the method has been executed or carried out, a subsequent analysis of the method can also be carried out based on the record. Recording in a blockchain has, in particular, the following technical advantage: the record is tamper-proof and forgery-proof.

[0074] A blockchain (English: Block Chain, German: Blockkette) is in particular a list of continuously expandable data sets (called "blocks") that are linked to one another by means of one or more cryptographic methods. In this case, each block contains in particular a cryptographically secure hash value (distributed value) of the previous block, in particular a timestamp and in particular a transaction date.

[0075] According to one specific embodiment, the method according to the first aspect is a computer-implemented method.

[0076] According to one specific embodiment, it is provided that the method according to the first aspect is carried out or executed by means of the device according to the second aspect.

[0077] Device features are derived analogously from corresponding method features and vice versa. This means in particular that the technical functions of the device according to the second aspect are derived analogously from the corresponding technical functionality of the method according to the first aspect and vice versa.

[0078] The expression "at least one" especially means "one or more".

[0079] The expression "also" means in particular "and / or". BRIEF DESCRIPTION OF THE DRAWINGS

[0080] Exemplary embodiments of the invention are shown in the drawings and explained in detail in the following description. The drawings show:

[0081] Figure 1 Flowchart of a method for remotely controlling a motor vehicle,

[0082] Figure 2 equipment, and

[0083] Figure 3 A machine-readable storage medium. DETAILED DESCRIPTION

[0084] Figure 1 A flow chart showing a method for remotely controlling a motor vehicle, the method comprising the following steps:

[0085] Receiving 101 a vehicle setting signal, the vehicle setting signal representing a vehicle setting of a vehicle, the vehicle to be driven into a restricted geographical area,

[0086] A driving-in condition signal is received 103 , the driving-in condition signal representing a driving-in condition which must be satisfied before the motor vehicle is allowed to drive into the area.

[0087] Based on the motor vehicle settings, a check 105 is performed to determine whether the entry condition is met for the motor vehicle.

[0088] Based on the result of checking whether the entry condition is satisfied, a remote control signal is generated 107 for remotely controlling the motor vehicle,

[0089] Output 109 generates the remote control signal.

[0090] The result of check 105 indicates, for example, whether the entry condition is met or not met.

[0091] In one specific embodiment, it is provided that the remote control signal is generated only if the result indicates that the entry condition is not met.

[0092] In one specific embodiment, it is provided that the remote control signal is generated only if the result indicates that the entry condition is not met and if at least one safety condition is met.

[0093] According to one specific embodiment, it is provided that when the motor vehicle reaches the boundary of the geographical area, a step is carried out which checks, based on the motor vehicle settings, whether entry conditions are met for the motor vehicle.

[0094] This means, in particular, that a checking step is carried out in response to reaching a region boundary or a district boundary.

[0095] If the result of the check whether the entry condition is met for the motor vehicle indicates that the entry condition is not met for the motor vehicle, one or more actions are performed, in particular interventions in the driving operation of the motor vehicle. In general, the motor vehicle is remotely controlled.

[0096] According to one specific embodiment, a boundary surroundings signal is received, which represents the boundary surroundings of the boundary of the geographical area.

[0097] According to one specific embodiment, it is provided that the boundary surroundings signal is processed in order to detect an incoming motor vehicle that wishes to enter the geographical area.

[0098] When an incoming motor vehicle is detected, according to one embodiment, a step of checking whether the entry condition is satisfied for the motor vehicle is implemented. According to one embodiment, when an incoming motor vehicle is detected that wants to enter the geographical area, a step of receiving a motor vehicle setting signal or an entry condition signal is implemented.

[0099] According to one specific embodiment, it is provided that a position signal is received which represents the position of a motor vehicle which wishes to enter the geographical area.

[0100] According to one specific embodiment, it is provided that upon detection of an incoming motor vehicle intending to enter the geographical area, a step of receiving a motor vehicle setting signal or an entry condition signal is carried out.

[0101] According to one specific embodiment, it is provided that a position signal is received which represents the position of a motor vehicle which wishes to enter the geographical area.

[0102] For example, a motor vehicle sends a position signal, thereby making it possible, for example, to effectively detect the motor vehicle in an advantageous manner.

[0103] Figure 2 Device 201 is shown.

[0104] The device 201 is configured to carry out all steps of the method according to the first aspect.

[0105] Device 201 comprises an input 203 which is configured to receive a motor vehicle setting signal and an entry condition signal.

[0106] The device 201 further comprises a processor 205, which is configured to check whether the entry condition is satisfied for the vehicle based on the vehicle setting. The processor 205 is further configured to generate a remote control signal for remotely controlling the vehicle based on the result of checking whether the entry condition is satisfied.

[0107] The device 201 further comprises an output terminal 207, which is configured to output the generated remote control signal.

[0108] For example, according to one specific embodiment, outputting the generated remote control signal includes sending the remote control signal to the motor vehicle via a communication network, in particular via a wireless communication network.

[0109] According to one specific embodiment, the method according to the first aspect comprises remotely controlling the motor vehicle based on the generated remote control signal.

[0110] In general, the received signals are received by means of the input 203. That is, the input 203 is provided in particular for receiving the corresponding signals.

[0111] In general, the signals outputted are outputted by means of the output 207. That is, the output 207 is provided, in particular, for outputting the corresponding signals.

[0112] According to one specific embodiment, a plurality of processors are provided instead of the one processor 205 .

[0113] According to one specific embodiment, it is provided that processor 205 is configured to carry out the generation steps and the checking steps described above and / or below.

[0114] In one specific embodiment, it is provided that, in addition to the step of generating the remote control signal and the step of outputting the remote control signal, one or more method steps are performed inside the motor vehicle and / or wherein one or more method steps are performed outside the motor vehicle, in particular in an infrastructure, preferably in a cloud infrastructure.

[0115] Device 201 is, for example, part of an infrastructure, in particular a cloud infrastructure, or part of a motor vehicle.

[0116] For redundant execution of the respective method steps, provision may be made according to one specific embodiment to provide a plurality of devices 201 , so that, for example, both the motor vehicle and an infrastructure, in particular a cloud infrastructure, include devices 201 .

[0117] Figure 3 A machine-readable storage medium 301 is shown.

[0118] On a machine-readable storage medium 301 there is stored a computer program 303 , which comprises instructions which, when executed by a computer, arrange the computer to carry out the method according to the first aspect.

[0119] According to one specific embodiment, device 201 comprises a remote control device which is configured to remotely control the motor vehicle based on the generated remote control signal.

[0120] According to one specific embodiment, an infrastructure or an infrastructure system is provided, which for example comprises the device according to the second aspect.

[0121] For example, it is provided that the infrastructure monitors the geographical area and in particular monitors motor vehicles that want to enter the geographical area. For such monitoring, according to one embodiment, one or more environmental sensors are provided, which are spatially distributed on the boundaries of the geographical area.

[0122] The environmental sensor is, for example, one of the following environmental sensors: a radar sensor, a lidar sensor, a video sensor, an ultrasonic sensor, a magnetic field sensor, and an infrared sensor.

[0123] According to one embodiment, the infrastructure system is an emission infrastructure system. Such a system monitors in particular compliance with emission limits within the geographical area.

[0124] Below, an exemplary scenario is described in which the scheme described here is used:

[0125] According to one embodiment, the motor vehicle is approaching the border of a restricted geographical area, for which there is an entry condition. This means that in order to allow the motor vehicle to enter the area, the entry condition must be met for the motor vehicle.

[0126] According to one specific embodiment, the motor vehicle is communicatively connected to an infrastructure, in particular to an emissions infrastructure system, or in particular automatically to a system or infrastructure located in front of the region.

[0127] According to one specific embodiment, the motor vehicle transmits a signal, in particular a position signal, and can be detected therefrom.

[0128] According to one specific embodiment, the motor vehicle is detected, in particular, via the infrastructure, for example by means of a visual method, such as sign recognition.

[0129] According to one specific embodiment, the requirements (entry conditions) and the motor vehicle or the motor vehicle settings of the motor vehicle are evaluated, in particular by the infrastructure.

[0130] For this purpose, for example, vehicle settings can be transmitted by the motor vehicle and / or called up by the motor vehicle.

[0131] This means, in particular, that a request signal is generated and output, which represents a request to the motor vehicle for motor vehicle settings.

[0132] According to one specific embodiment, it is provided that the vehicle settings are compared with data from a cloud system in order to prevent misuse. The data from a cloud system (which can also be referred to as a cloud infrastructure) include, for example, vehicle data and / or vehicle settings that can be adjusted or adapted.

[0133] According to one specific embodiment, it is provided that a check is performed to determine whether a driving condition is met for the motor vehicle, wherein the check is performed or carried out based on motor vehicle settings.

[0134] If the result of the check indicates that the entry condition is not met, then according to one embodiment, one or more of the following actions are performed or implemented:

[0135] According to one specific embodiment, the vehicle setting is changed in such a way that it is adapted to the entry condition. In other words, according to one specific embodiment, the vehicle setting is adapted in such a way that a check of whether the entry condition is met based on the adapted vehicle setting shows that the entry condition is met.

[0136] An adaptation or change of vehicle settings may include, for example, switching a hybrid vehicle to purely electric drive.

[0137] According to one embodiment, the adaptation or change includes adjusting or adapting the internal combustion engine settings of the internal combustion engine of the motor vehicle so that the internal combustion engine settings only allow certain or prescribed emissions of harmful substances, i.e., meet the entry conditions. For example, the injection parameters are adapted. For example, a maximum speed is predefined for the motor vehicle. For example, a maximum acceleration is predefined for the motor vehicle.

[0138] According to one specific embodiment, this action includes preventing the motor vehicle from entering the area. This is caused in particular by generating and outputting corresponding control signals for at least partially automated control of the transverse and longitudinal guidance of the motor vehicle.

[0139] For example, only the motor vehicle is still allowed to drive to a parking lot or a side area in the area. This is achieved in particular by generating and outputting corresponding control signals for at least partially automatically controlling the transverse guidance and / or longitudinal guidance of the motor vehicle.

[0140] According to one specific embodiment, it is checked whether the current traffic situation permits an intervention, ie, in particular a remote control, in order, for example, to prevent other road users from getting injured in the vicinity of the motor vehicle.

[0141] According to one specific embodiment, it is provided that the process, ie the method, in other words the method steps, are recorded in a forgery-proof and traceable manner, for example in a blockchain.

[0142] According to one specific embodiment, it is provided that the driver of the motor vehicle is informed that an intervention has been or is being made in the driving operation of the motor vehicle, ie the motor vehicle has been or is being remotely controlled.

[0143] This means in particular that a notification signal is generated and output, which represents the corresponding notification. For example, the notification signal is output to a man-machine interface of the motor vehicle, so that the driver is informed of the intervention or remote control by means of the man-machine interface based on the notification signal.

[0144] According to one specific embodiment, it is provided that the intervention or remote control of the motor vehicle is reported to the competent authority so that the competent authority can, for example, take further steps.

[0145] According to one embodiment, the prerequisite for remote control or intervention is that the remote control is safe. In the sense of this description, "safe" especially means safe and secure. Although these two English concepts are usually translated as safe, they have partially different meanings in English.

[0146] The term “safe” refers in particular to the subject of accidents and accident avoidance. A “safe” remote control in particular causes the probability of an accident or a collision to be less than or equal to a predetermined probability threshold value.

[0147] The term “secure” relates in particular to the subject of computer protection or protection against hackers, i.e. how securely a (computer) infrastructure and / or a communication infrastructure, in particular a communication line between a motor vehicle and a remote control device for remotely controlling the motor vehicle, is protected against unauthorized access by third parties (“hackers”) or against data manipulation.

[0148] This means that a “secure” remote control is based in particular on appropriate and adequate computer protection or protection against hackers.

[0149] For example, according to one embodiment, it is checked whether the entirety of the motor vehicle and the infrastructure involved in the method according to the first aspect, including the communication between the infrastructure and the motor vehicle, is currently safe for the scenario described here "intervention in the motor vehicle for critical actions". This means, in particular, that the motor vehicle and / or the local infrastructure and / or the global infrastructure and / or the communication are checked accordingly. In particular, the remote control signal is generated based on the result of the check.

[0150] This means in particular that before an intervention in the driving operation is carried out, ie before the motor vehicle is remotely controlled, the components used in carrying out the method according to the first aspect are tested for safety, ie whether they meet certain safety conditions.

[0151] Important or relevant criteria are, for example, one or more of the safety conditions described above.

[0152] According to one specific embodiment, it is provided that, on the one hand, the entire system (motor vehicle, infrastructure, communication line, cloud . . . ) is checked with respect to safety conditions.

[0153] According to one specific embodiment, it is provided that the individual components are also checked with respect to whether safety conditions are met. This is done in particular before the remote control of the motor vehicle.

[0154] In this context, in one specific embodiment, one or more testing steps are carried out inside the motor vehicle and / or outside the motor vehicle, in particular in an infrastructure facility.

[0155] According to one embodiment, it is provided that the one or more checking steps are checked subsequently, ie at a later point in time, for example regularly. For example, the one or more checking steps are checked subsequently at a predetermined frequency, for example every 100 ms.

[0156] According to one specific embodiment, such a check is performed, for example, before and / or after and / or during one or more predetermined method steps, ie, whether at least one safety condition is satisfied.

[0157] According to one specific embodiment, the test is carried out or executed in the event of a problem.

Claims

1. A method for remotely controlling a motor vehicle, the method comprising the following steps: receiving a vehicle setting signal, the vehicle setting signal representing a vehicle setting of a vehicle that intends to enter a restricted geographic area, receiving an entry condition signal, the entry condition signal representing an entry condition that must be met in order to allow the motor vehicle to enter the area, Based on the motor vehicle setting, a check is made as to whether the entry condition is satisfied for the motor vehicle. generating a remote control signal for remotely controlling the motor vehicle based on a result of checking whether the entry condition is satisfied, and Output the generated remote control signal, wherein, if the result indicates that the entry condition is not met, an adapted motor vehicle setting is determined based on the entry condition and the motor vehicle setting, so that a check on whether the entry condition is met based on the adapted motor vehicle setting indicates that the entry condition is met, wherein the remote control signal includes an adaptation signal representing the adapted motor vehicle setting in order to remotely adapt the motor vehicle setting of a motor vehicle based on the adapted motor vehicle setting so that the motor vehicle can enter the area, The adaptation of the vehicle settings includes at least one of the following: switching the hybrid vehicle to pure electric drive, setting the internal combustion engine to meet the driving conditions for harmful substance emissions or the maximum speed or maximum acceleration of the vehicle, Therein, an ambient environment signal is received, the ambient environment signal represents the ambient environment of the motor vehicle, the ambient environment includes a current traffic condition, and the remote control signal is generated based on the ambient environment.

2. The method according to claim 1, wherein: The remote control signal comprises a control signal for controlling a lateral guidance and / or a longitudinal guidance of the motor vehicle, so that the lateral guidance and / or the longitudinal guidance of the motor vehicle is remotely controlled when the motor vehicle is remotely controlled based on the remote control signal.

3. The method according to claim 2, wherein: If the result indicates that the entry condition is not met, the control signal is generated such that when the transverse guidance and / or longitudinal guidance of the motor vehicle is remotely controlled based on the generated remote control signal, the motor vehicle does not enter the area or enters the area and stops in a predetermined area within the area.

4. The method according to any one of claims 1 to 3, wherein: A safety condition signal is received, the safety condition signal representing at least one safety condition which must be satisfied in order to allow remote control of a motor vehicle, wherein a check is performed to determine whether the at least one safety condition is satisfied, wherein the remote control signal is generated based on a result of the check to determine whether the at least one safety condition is satisfied.

5. The method according to claim 4, wherein: The at least one safety condition is in each case an element selected from the following group of safety conditions: at least a predetermined safety integrity level of the motor vehicle and a predetermined safety integrity level of an infrastructure for remotely controlling the motor vehicle exist; There is a maximum latency for communication between the motor vehicle and a remote control device for remotely controlling the motor vehicle based on the remote control signal; The presence of a predetermined computer protection level for a device for carrying out the steps of the method according to any of the preceding claims; the presence of predetermined components and / or algorithms and / or communication possibilities for carrying out the steps of the method according to any of the preceding claims; the presence of redundancy and / or diversity in the predetermined components and / or algorithms and / or communication possibilities for carrying out the steps of the method according to any of the preceding claims; the presence of a predetermined availability statement which states the availability of the predetermined components and / or algorithms and / or communication possibilities; There are predetermined quality standards for predetermined components and / or algorithms and / or communication options; there is a plan which includes measures for reducing errors and / or measures in the event of failure of predetermined components and / or algorithms and / or communication options and / or measures for error analysis and / or measures in the event of misinterpretation; One or more fallback scenarios exist; a predetermined function exists; a predetermined traffic condition exists; There is predetermined weather; the maximum possible time for executing or carrying out, respectively, one or more steps of the method according to any of the preceding claims; The check result is that an element or a function for carrying out the method according to any of the preceding claims is currently functioning without error.

6. The method according to claim 4, wherein: The remote control signal is generated only when the at least one safety condition is met.

7. The method according to claim 4, wherein: A check is carried out before and / or after and / or during one or more predetermined method steps to determine whether the at least one safety condition is met.

8. The method according to any one of claims 1 to 3, 5 to 7, wherein: After the remote control signal is output, the remote control of the motor vehicle is checked based on the output remote control signal in order to detect a fault, wherein, if a fault is detected, the remote control is interrupted or an emergency remote control signal is generated and output for remotely controlling the motor vehicle in an emergency.

9. The method according to any one of claims 1 to 3, 5 to 7, wherein: A boundary surroundings signal is received, the boundary surroundings signal representing the boundary surroundings of the boundary of the geographical area, wherein the boundary surroundings signal is processed in order to detect an arriving motor vehicle that wants to enter the geographical area, wherein, when the arriving motor vehicle is detected, a step of checking whether the entry condition is satisfied for the motor vehicle is implemented, and / or a step of receiving a motor vehicle setting signal or an entry condition signal is implemented.

10. The method according to any one of claims 1 to 3, 5 to 7, wherein: Verify whether the whole consisting of a motor vehicle and an infrastructure participating in the method according to any one of the preceding claims, including the communication between the infrastructure and the motor vehicle, is safe, so that the motor vehicle and / or the local infrastructure and / or the global infrastructure and / or the communication between the motor vehicle and the infrastructure are verified accordingly.

11. The method according to any one of claims 1 to 3, 5 to 7, wherein: The entry condition specifies a maximum pollutant emission limit value, which the pollutant emission of the motor vehicle must not exceed in order to allow the motor vehicle to enter the area, wherein the check on whether the entry condition is met includes checking whether the pollutant emission of the motor vehicle exceeds the maximum pollutant emission limit value.

12. The method according to any one of claims 1 to 3, 5 to 7, wherein: The motor vehicle setting includes one or more elements selected from the following motor vehicle setting parameter group: internal combustion engine settings of an internal combustion engine of the motor vehicle, an operating state of an electric motor of the motor vehicle.

13. The method according to any one of claims 1 to 3, 5 to 7, wherein: When the result indicates that the entry condition is not met, an operating restriction for limiting the operation of the motor vehicle is determined based on the entry condition so that a check on whether the entry condition is met based on the operating restriction indicates that the entry condition is met, wherein the remote control signal includes a restriction signal representing the operating restriction in order to remotely limit the operation of the motor vehicle based on the operating restriction.

14. The method according to claim 13, wherein: The operating limits specify a maximum vehicle speed and / or a maximum vehicle acceleration.

15. The method according to any one of claims 1 to 3, 5 to 7 and 14, wherein Apart from the step of generating the remote control signal and the step of outputting the remote control signal, one or more method steps are carried out inside the motor vehicle and / or one or more method steps are carried out outside the motor vehicle.

16. The method according to any one of claims 1 to 3, 5 to 7 and 14, wherein: Record one or more method steps.

17. The method according to claim 5, wherein: The infrastructure includes communication lines and / or communication components.

18. The method according to claim 5, wherein: The predetermined safety integrity level includes a predetermined safety integrity level for the overall system in the motor vehicle and in the infrastructure and a predetermined safety integrity level for each component.

19. The method according to claim 18, wherein: The various parts include components, algorithms and interfaces.

20. The method according to claim 12, wherein: The internal combustion engine settings are injection parameters.

21. The method according to claim 15, wherein: One or more method steps are implemented in an infrastructure.

22. The method according to claim 21, wherein: The infrastructure is a cloud infrastructure.

23. The method according to claim 16, wherein: One or more method steps are recorded in the blockchain.

24. A device (201) configured to carry out all the steps of the method according to any one of claims 1 to 23.

25. A machine-readable storage medium (301) on which is stored a computer program (303) comprising instructions which, when the computer program (303) is executed by a computer, arrange for the computer to implement a method according to any one of claims 1 to 23.

Images