Method for connecting a vehicle to the internet

Abstract

The invention relates to a method for connecting a vehicle (2) to the Internet, comprising a control system (5) capable of managing at least two access points (APN1, APN2), where a first access point (APN1) is used for a service channel (8) established between a vehicle manufacturer (OEM) and an Internet provider (ASP), where a second access point (APN2) is provided for another channel (9). The method according to the invention is characterized in that the control system (5) collects user-related data known or accessible to the control system (5) on a vehicle-external server (7) of the vehicle manufacturer (OEM) before using another channel (9), the vehicle-external server (7) being connected via a service channel (8), parameters required to establish an internet connection via another channel (9) are then extracted from the data, in which the control system (5) is arranged to enable transmission via the first access point (APN1).

Description

Technical Field

[0001] The invention relates to a method for connecting a vehicle to the Internet of the type defined in more detail in the preamble of claim 1 . Background Art

[0002] Internet connections between a vehicle and a vehicle-external server (e.g. a backend server of a vehicle manufacturer or OEM) are known in the prior art. In this regard, purely as an example, reference may be made to DE 10 2016 106 610 A1. The invention describes a communication system that enables a connection between a vehicle and the Internet via various access points or access point names (APNs). On the one hand, it describes an access point using a dedicated channel (a service channel) that exchanges data between a vehicle's telematics unit and a vehicle-external server of a vehicle manufacturer. For example, the data can affect the driving characteristics of the vehicle and can transfer computing operations from the vehicle to the server, for example in the context of environmental recognition, image recognition of traffic signs, traffic conditions, etc. The outsourcing of the functions of the navigation system in whole or in part to a vehicle-external server can also be achieved via such a service channel. A typical feature of this service channel (referred to in the above text as a dedicated APN) is that it is relatively secure to prevent unauthorized access to the vehicle.

[0003] Furthermore, in practice, this service channel does not incur any costs for the vehicle user, as it is based on a contractual agreement between the vehicle manufacturer and the Internet provider, so that these Internet services are actually "provided" with the vehicle.

[0004] In addition, a second access point can be used, which is referred to as a public APN in the above document. This can be used by the vehicle user, for example, for streaming corresponding content, such as videos, music, etc. This type of use is different in content from the use of the service channel and should not usually be performed via the service channel.

[0005] The aforementioned DE 10 2016 106 610 A1 essentially describes how to reinstall the connections if one of the connections is lost.

[0006] In practice, however, it is more important how this connection is established, for example when a user wishes to establish another Internet connection to an Internet provider in parallel with the vehicle manufacturer's existing service channel with the Internet provider in order to be able to use further services for his own purposes from the vehicle. It is in the interest of the vehicle manufacturer itself that this communication does not run via its service channel, simply for security reasons. Summary of the invention

[0007] It is therefore an object of the present invention to provide an improved method for connecting a vehicle to the Internet which makes it possible to provide at least two access points for a service channel on the one hand and for another channel on the other hand.

[0008] According to the invention, this object is achieved by a method having the features of the characterizing clause of claim 1. Advantageous embodiments and developments of the method according to the invention emerge from the dependent claims.

[0009] In the method according to the invention, it is now the case that, before using the further channel, the control system collects user-related data known to or accessible to the control system on a vehicle-external server of the vehicle manufacturer, which is connected via the service channel. This allows, for example, the use of data from other services or service agreements with the vehicle manufacturer, such as IDs, bank details, etc. Subsequently, the parameters required for establishing the further channel or the Internet connection via the second access point are extracted from the data and sent to the Internet provider so that the latter has all the data required for establishing and charging the further channel. Since the further channel has not yet been established at this point, the control system is set up so that the parameters can be sent via the first access point, i.e. the service channel.

[0010] The vehicle manufacturer thus ultimately offers the vehicle user, i.e. his end customer, via the vehicle's control system the possibility of performing the setup of a further channel in the vehicle via a service channel which is otherwise blocked for such data, so that, although an Internet connection does not yet exist, a further channel in the vehicle can be negotiated and set up with the Internet provider via the second access point. This provides a technical solution for a very user-friendly design of such a process.

[0011] In this case, both access points can be technically implemented via a single SIM and thus via an Internet provider, so that the vehicle user can simply and efficiently create a further channel in the vehicle without having to activate an Internet connection beforehand.

[0012] In a very advantageous development of the invention, the parameters include at least user identification data for establishing the second access point. The control system thus filters the data known to it so that the user identification data are present as a basis for another channel via the second access point. This can include data from its own memory, i.e. data that the control system can access via the service channel, such as registration data of the same user in other services of the vehicle manufacturer, or also data stored for this purpose at the vehicle manufacturer.

[0013] According to a very advantageous development of the method according to the invention, the parameters include at least one technical variable for setting up the second access point. Such a technical variable can be, for example, the amount of data required via the other channel or the security level for the communication. Depending on such an amount, a parameter can then be sent for setting up / setting up, which parameter enables the corresponding amount of data or also predetermines the required connection criteria depending on the amount of data. For example, in the case of a high security level, the parameters can include, for example, the setting up / setting up of a VPN connection.

[0014] According to a very advantageous refinement of the method according to the invention, the control system can also be set up / arranged so that the amount of data required for another channel is estimated. To this end, according to a very advantageous design of the invention, preselected services of the user or other users, already installed applications or past data can be analyzed. In addition, this analysis can also be used for other technical variables and / or parameters. In addition, boundary conditions, such as typical national regulations, etc. can also be taken into account.

[0015] According to a very advantageous development, the control system can also use the country of registration of the vehicle as a parameter so that, for example, certain legal requirements of the country of registration of the vehicle can be taken into account accordingly and the services of an Internet provider for this country can be selected or offered accordingly. In this way, the consideration of language norms and / or legal requirements of the individual countries can also be managed simply and effectively by the control system.

[0016] The method according to the invention is particularly effective because it automatically collects and combines the necessary parameters. The user can then simply confirm this, thereby quickly and efficiently establishing a second access point for another channel. This can preferably be achieved via a single sign-on function, in which the vehicle user is already registered and authenticated in the vehicle system and can therefore confirm the sending of the parameters for establishing another channel to the control system by a simple keystroke, voice command, etc.

[0017] If the control system does not have access to all data for extracting the parameters required for setting up, then according to a very advantageous development of the method according to the invention, the vehicle user can query these additionally required data. This can preferably take place in the form of a pop-up menu, for example via a so-called head unit with a central touch screen of the vehicle, in order to be able to simply and effectively supplement the necessary data in order to be able to transmit the necessary parameters from the vehicle user's vehicle to the Internet provider.

[0018] As mentioned above, in order to be able to transmit parameters via the first access point and thus to the service channel, access data to the Internet addresses required to establish another channel can be explicitly allowed by means of an exception list for the service channel. Thus, such an exception list, also called a whitelist, will allow these parameters to be switched via the service channel and can also ensure that no other data transmission occurs via the service channel.

[0019] According to a very advantageous improvement of the present invention, the control system can strictly separate data transmission via the service channel and data transmission via another channel immediately after completing the establishment of the service channel, so as to achieve a clear cost allocation on the one hand and to ensure the security of the service channel simply and effectively on the other hand.

[0020] In this case, the control system itself can be implemented at least partially on a vehicle-external server, so that the service channel is integrated into the processing of the entire communication management performed by the control system. As an alternative, the control system can also be implemented at least partially in a computing unit of the vehicle. Preferably, this is a hybrid control system, in which individual components are implemented in the vehicle and other components are implemented on a vehicle-external server. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Further advantageous embodiments of the method according to the invention and the processes implemented by the method can also be obtained from the embodiments described in more detail below with reference to the drawings.

[0022] in:

[0023] Figure 1 A schematic diagram showing the relationship between a vehicle, a vehicle user and an Internet provider;

[0024] Figure 2 A schematic diagram showing an Internet connection between a vehicle, a server external to the vehicle, and an entertainment service on the Internet;

[0025] Figure 3 A possible system architecture for implementing the method according to the present invention is shown;

[0026] Figure 4 Possible steps of the method according to the invention are shown; and

[0027] Figure 5 A schematic diagram for explaining simplified authentication is shown. DETAILED DESCRIPTION

[0028] In principle, in the case of a new vehicle 2, there is no Internet connection in the vehicle 1 for entertainment purposes, i.e. for example streaming of video and audio services, because the vehicle owner or vehicle user 1 does not yet have an independent contract with an Internet provider ASP (Application Service Provider). Figure 1 The relationship between these three units is schematically shown in the diagram, namely on the one hand the vehicle user 1, on the other hand the vehicle 2 or its manufacturer OEM (Original Equipment Manufacturer), represented here by a box around the vehicle 2, and on the other hand the Internet provider ASP.

[0029] exist Figure 1 In the illustration, vehicle 2 symbolically represents vehicle 2 itself, but on the other hand also represents Figure 2 The communication device 3 and the control system 5 are shown as well as the so-called host 6, i.e. the central display and operating unit of the vehicle 2. Usually, there is a general contractual agreement 4 between the manufacturer OEM of the vehicle 2 and the Internet provider ASP, so that the vehicle 2 or its control system 5 can be connected to the Internet via Figure 2 The first access point APN1 (APN—Access Point Name) shown operates a service channel 8 between the vehicle 2 and a vehicle-external server 7 (usually a so-called backend server of the vehicle manufacturer OEM). Figure 2 In the illustration of , a vehicle 2 with its control system 5 and its head unit 6 can be seen, which can also be referred to as a front end. Via suitable communication devices 3, there is a connection to at least one backend server 7 of the vehicle manufacturer, which is represented here as a cloud. By means of a general contractual agreement 4 between the manufacturer OEM of the vehicle 2 and the Internet provider ASP, a service channel 8 is now established between the vehicle 2 and the vehicle-external server 7 via a first access point APN1, which is also indicated in English (Access Point Name). This service channel 8 ensures Internet connectivity for various telematic services of the vehicle 2 based on the general agreement 4 and therefore on the contract between the vehicle manufacturer OEM and the Internet provider ASP. This can include, for example, supporting environmental recognition by calculating sensor data of the vehicle 2 in the vehicle-external server 7, such as image recognition, which is performed or at least partially performed in this server 7, etc. The exchange of driving data, navigation data, the uploading of vehicle software updates, etc. can also take place via this service channel 8. Under normal circumstances, this service channel 8 is strictly separated from other Internet connections, so that on the one hand a relatively high level of security is ensured, since access is generally only possible between the vehicle-external server 7 and the vehicle 2, since the access is encrypted, and since no other use of the service channel 8 via the first access point APN1 provided for it is permitted.

[0030] for Figure 1 The vehicle user 1 shown may now wish to Figure 2 9. For example, the vehicle user 1 can stream video data or music data thereon, perform searches on the Internet, make online purchases, etc. For security reasons alone, the amount of data generated by such services should not be processed via the service channel 8. For this reason, as in Figure 1As can be seen again in the schematic diagram of , the vehicle user 1 can establish an independent connection 10 with the Internet provider ASP or an alternative Internet provider. In practice, however, it is relatively expensive to reconnect such a connection 10 into the vehicle 2, so that it offers a decisive advantage for the vehicle user 1 if the vehicle user 1 can simply and efficiently establish such a connection between him and the Internet provider ASP in his vehicle 2, i.e. via his control system 5 or his head unit 6 as a display and operating part of the control system 5. Instead Figure 1 The dashed connection 10 can provide a significant convenience gain for the vehicle user 1 if he can establish a connection to the Internet provider ASP via the vehicle 2. Such a connection to the vehicle 2 or its control system 5 as an exchange example is represented by the dashed connection 11.

[0031] In this way, it is possible to simply and effectively establish a Figure 2 Another channel 9 of his own is shown, which is managed separately from the service channel 8 via his own access point APN 2 of the control system 5 of the vehicle 2. Figure 2 In the illustration of , the Internet 12, which is usually used by vehicle users for dedicated purposes or purposes independent of vehicle services, is constructed to be separate and independent from the vehicle-external server 7. Therefore, it is also represented as the cloud 12 below it. In fact, both networks / servers 12, 7 are connected to the vehicle 2 via the same Internet. Figure 2 In the illustration of , the separation of the two clouds 7 , 12 is merely a generally strict separation of the data flows via the service channel 8 on the one hand and via the further channel 9 on the other hand.

[0032] The process for vehicle user 1 is now basically as follows:

[0033] The vehicle user 1 is located in his vehicle 2 and receives via the host computer 6 of the control system 5 a media package provided, for example, by the vehicle manufacturer OEM or in an application managed by the latter on the control system 5 or the host computer 6. In order to receive this entertainment package, the vehicle user 1 must register accordingly and establish an Internet connection to the Internet provider ASP. For example, the vehicle user 1 can be informed of this possibility via the host computer 6, and the vehicle user 1 is thus offered the establishment of a connection for another channel 9. If the vehicle user 1 wishes to accept this, he can simply agree to this on the host computer 6 or by voice command. The control system 5, which is at least partially implemented in the vehicle 2 and represented there by a designated module 5, can now collect all the data of the vehicle user 1, which are accessible to the control system 5. For this purpose, the control system 5's own memory as well as the data stored on the vehicle-external server 7 can be evaluated. Data known to the control system 5 by the use of other services of the vehicle manufacturer OEM and / or the vehicle are also particularly relevant.

[0034] The control system 5 then extracts from this data the parameters required for establishing an Internet connection for the other channel 9 via the second access point APN2. These parameters can now be transmitted to the Internet provider ASP. If necessary, the vehicle user 1 can be prompted by a pop-up menu or the like on the head unit 6 to enter any data that may still be missing so that all necessary parameters can be extracted and transmitted. By transmitting the parameters, the Internet connection can then be initiated and a connection is now established between the vehicle user 1 and the Internet provider ASP. Figure 1 The connection 11 shown has already been exchanged by the vehicle manufacturer OEM. Now another channel 9 can be established and the contents of the ordered media package can be used in the vehicle 2 via the Internet.

[0035] Technically, the problem now exists that when the media package is provided to the vehicle user 1, the Internet connection that is later used as the basis for this media package via the second access point APN2 and the further channel 9 does not yet exist. Therefore, the technical solution provides that the service line 8 can be used for this establishment process as an exception, because before the establishment of the further channel 9, those Internet addresses that are necessary for the described process are released by means of a whitelist, so that in addition to the conventional data that are transmitted only for vehicle-internal service purposes, in this case, other parameters can also be transmitted via the service channel 8 as an exception to the selected Internet address.

[0036] exist Figure 3 In the illustration of , the vehicle external server 7 is shown again. For example, it can be a cloud system of the vehicle manufacturer OEM, such as an intelligent cloud system that provides data via Kubernetes. In this case, various services can be implemented in the system. Figure 3 In the illustration of , a service area 13 can be identified in the center, which may include a database 14 and various microservices 15.1, 15.2-15.n. The service module 13 is connected to the Internet provider ASP via a programming interface API (Application Programming Interface). In addition to the microservices 15.1, 15.2-15.n shown in the service module 13, other services are connected to the vehicle-external server 7 via the programming interface API and are represented here only as an example by 16.1, 16.2-16.n. These services can be, for example, services that are individually booked by the vehicle user, such as navigation services, flat maintenance rates, etc. The vehicle-external server 7 or its service module 13 is now also connected to the vehicle 2, in particular its control system 5 or the associated host 6. Figure 3 The connection shown in the diagram represents a service channel 8 and a further channel 9.

[0037] In this case, part of the vehicle-external server 7 can also take over the tasks of the control system 5, that is, represent a part of the control system 5. In this preferred case, the control system 5 is partially implemented on the vehicle 2 and the vehicle-external server 7 as a hybrid control system 5.

[0038] The service module 13 or the control system 5, in particular its part stored externally in the vehicle-external server 7, now communicates via a programming interface API with other already existing services of the vehicle manufacturer OEM, which are combined here as services 16.1, 16.2-16.n. In this way, the relevant data for setting up a further channel 9 for the vehicle user 1 can be collected from the Internet provider ASP. Some necessary parameters are then extracted from them and passed to the control system 5 together with other parameters of the control system, which can be based on technical variables, such as the required amount of data, etc., and via the programming interface API of the Internet provider ASP. The control system 5 with the host 6 can then ask in the area of ​​the vehicle 2 whether it is agreed to send the parameters to the Internet provider ASP for the further channel 9. Instead of the host 6, any other module connected to the Internet can also be used, such as a browser on any computer, a mobile application on a smartphone, a tablet, etc.

[0039] On the network side, for example, a first access point APN1 is established / set up for the vehicle 2 via the vehicle manufacturer OEM and the Internet provider ASP in order to exchange data via a service channel 8 established thereon. The vehicle 2 can use the Internet connection via the service channel 8, for example, to download software updates, support the telematics system, for example by at least partially transferring the image recognition to a vehicle-external server 7 when using the environmental sensor system, etc. If the vehicle user 1 now wants to use his own services, such as video streaming, music streaming, etc., the vehicle user 1 should have a connection 10, 11 established for himself to the Internet provider ASP. For this purpose, the vehicle manufacturer OEM wants to provide the vehicle user 1 with services that are as comfortable as possible, so that the vehicle 2 or the control system 5 appears as an exchange and offers the vehicle user 1 a connection 11 to the Internet provider ASP with respect to the second access point APN2 in order to establish another channel 9. However, when this connection 11 is established, there is no Internet connection available to the vehicle user 1 as an end customer between the vehicle 2 and the Internet provider ASP. Therefore, the control system 5 now allows the use of the service channel 8, especially in this case. This can be achieved, for example, by saving the Internet pages required for this purpose in a white list of the control system 5, so that despite the strict separation between service data and additional data in this case, the service channel 8 can be used to establish a further channel 9 via the second access point. The IP addresses of this white list can be stored, for example, in the host computer 6 or also in the area of ​​a server 7 external to the vehicle.

[0040] In this case, the structure can be implemented with a single SIM card, which can be implemented as a SIM card or an eSIM, for example. Therefore, the first access point APN1 and the second access point APN2 are implemented by the same Internet provider ASP, which may be advantageous because the Internet provider ASP also benefits from the end-customer business exchanged accordingly by the vehicle manufacturer OEM through a general contract with the corresponding vehicle manufacturer OEM, and due to the expected higher number of such end-customer contracts, preferential prices can be offered to the customers of the corresponding vehicle manufacturer OEM.

[0041] Figure 4 The basic steps implemented to perform the method are now shown:

[0042] In the first step shown, an activation request for another channel 9 is received. For example, the vehicle user enters in the head unit 6 of the vehicle 2 that he wants a specific media package, such as an annual flat rate, a monthly flat rate, a theme-related flat rate, a specific amount of data, etc.

[0043] In a next step, vehicle data and vehicle user data are received from all sources accessible within the control system 5 or on a vehicle-external server 7, so that all parameters required for establishing a new Internet connection can be provided directly from these data, if possible. These parameters can include in particular a user identification, a vehicle identification and other parameters that can include or be derived from technical variables for establishing an Internet connection. This can include, for example, data volumes, security settings, etc.

[0044] These parameters can then be sent via the service channel 8 to the Internet provider ASP, which then prepares the establishment of the connection 11. This step can be implemented both at the Internet provider and by the control system 5, in particular in its part that cooperates with the service module 13. Figure 4 In the embodiment shown, this preparation is preferably carried out by the Internet provider ASP.

[0045] The control system 5 then receives a URL from the Internet provider ASP via a service channel, which in combined form offers the preparation for the connection 11. This is displayed to the vehicle user 1, for example on the host computer 6, so that the latter can supplement any data that may still be missing and, in particular by appropriate authentication and confirmation, can start setting up another channel 9.

[0046] Then, after establishment, another channel 9 is unlocked.

[0047] Finally, the status of the further channel 9 can be set to "connected" in order to strictly separate the data transmission between the further channel 9 and the service channel 8 again, so that the service channel 8 is actually used exclusively for service-related data transmission and is only allowed to be used to establish the further channel 9 between the vehicle user 1 and the Internet provider ASP in exceptional cases.

[0048] Furthermore, the country in which the vehicle is registered can be queried in the vehicle data for the purpose of extracting parameters in order, for example, to provide a connection to an Internet provider in a suitable language and / or with the legal framework conditions applicable in the respective country.

[0049] If the authentication of the connection 11 can be carried out simply and efficiently with the help of the authentication that has already taken place in the vehicle 2, the entire process becomes particularly efficient and comfortable for the vehicle user 1. This is called single sign-on. For this purpose, for example, a hardware authentication of the vehicle user 1 relative to the vehicle 2 can be used, for example a corresponding code stored in a mobile device (key, smartphone, smartwatch, smart ring, etc.) and the vehicle user 1 can be authenticated relative to the vehicle 2, for example as part of an access and / or driving authorization check.

[0050] For example, you can also Figure 5 . In this case, the vehicle user 1 is shown as an example as the circle at the bottom. On the left is the domain of the vehicle manufacturer OEM, marked 17, in the upper middle is the authentication server, marked 18, and on the far right is the domain of the Internet provider ASP, marked 19. In between is a cookie memory 20, which can be part of a browser used, for example, in a host computer 6 or in a different type of device. The sequence is now that first the vehicle user 1 browses to the domain 19 of the vehicle manufacturer OEM. Then, according to arrow 22, it is forwarded from the domain 17 of the vehicle manufacturer OEM to the authentication server 18, in which the login or cookie of the vehicle user 1 is available and authenticated. This is correspondingly stored in the cookie memory 20, indicated here by arrow 23. Thereafter, according to arrow 24, a token is sent to the domain 17 of the vehicle manufacturer, where it is used to authenticate the vehicle user 1. Then, arrow 25 indicates that another cookie is stored in the cookie memory 20 based on this authentication. In the next step, the vehicle user 1 browses to the domain 19 of the Internet provider ASP according to arrow 26, where the same process occurs again. This in turn begins with forwarding the corresponding cookie stored in the cookie memory 20 according to arrow 23 to the authentication server 18 according to arrow 27 and sending the token back to the domain 19 of the Internet provider ASP according to arrow 28. In this case, the token is used for authentication and the cookie is stored according to arrow 29 so that the authentication is associated therewith.

Claims

1. A method for connecting a vehicle (2) to the Internet, comprising a control system (5) capable of managing at least two access points (APN1, APN2), wherein: The first access point (APN1) is used for a service channel (8) established between a vehicle manufacturer (OEM) and an Internet provider (ASP), wherein a second access point (APN2) is provided for another channel (9), It is characterized in that Before using the further channel (9), the control system (5) collects user-related data known to or accessible to the control system (5) on a vehicle external server (7) of the vehicle manufacturer (OEM), the vehicle external server (7) being connected via the service channel (8), and then extracts from the data the parameters required for establishing an Internet connection via the further channel (9) and sends them to the Internet provider (ASP), wherein the control system (5) is configured to enable the sending to be performed via the first access point (APN1).

2. The method according to claim 1, It is characterized in that The parameters include at least user identification data for establishing the second access point (APN2).

3. The method according to claim 1 or 2, It is characterized in that The parameters include at least one technical variable for establishing the second access point (APN2).

4. The method according to claim 3, It is characterized in that The control system (5) estimates the amount of data required for the further channel (9) and uses this as a technical variable.

5. The method according to any one of claims 1 to 4, It is characterized in that The parameters include the country of registration of the vehicle.

6. The method according to any one of claims 1 to 5, It is characterized in that At least one of the parameters is determined based on an analysis of previous user behavior, current boundary conditions, and / or pre-installed applications.

7. The method according to any one of claims 1 to 6, It is characterized in that Once user authentication has been performed, the control system (5) generates parameters suitable for authentication and uses them for automatic authentication of the connection via the further access point (APN2).

8. The method according to any one of claims 1 to 7, It is characterized in that Data required for establishing parameters which are unknown to the control system (5) and / or inaccessible to the control system (5) are requested from the vehicle user (1).

9. The method according to any one of claims 1 to 8, It is characterized in that In order to be able to send parameters via said first access point (APN1), access data to the required Internet addresses is allowed via an exception list.

10. The method according to any one of claims 1 to 9, It is characterized in that After the establishment of the second access point (APN2) is completed, the control system (5) strictly separates data transmission via the service channel (8) and data transmission via the other channel (9).

11. The method according to any one of claims 1 to 10, It is characterized in that The control system (5) is at least partially implemented on the vehicle-external server (7).

12. The method according to any one of claims 1 to 11, It is characterized in that The control system (5) is implemented at least partially in a computing unit of the vehicle (2).

Images