Control system comprising motor vehicle

Abstract

The control system (100) comprises: a motor vehicle (105) having a first control device (135); and an infrastructure (110) having a second control device (140). In this case, the control devices (135, 140) are designed to establish a wireless connection to each other and to carry out authentication on both sides via the connection. Furthermore, the motor vehicle (105) is designed to request a predetermined function of the infrastructure (110) via the connection; and the second control device (140) is designed to execute the requested function of the infrastructure (110) if the function is opened for control by the motor vehicle (105).

Description

Technical Field

[0001] The present invention relates to a control system including a motor vehicle. In particular, the present invention relates to the control of infrastructure for use by a motor vehicle. Background Art

[0002] The infrastructure is provided for use by motor vehicles. The infrastructure may include, for example, a parking structure or a parking lot in which motor vehicles can be parked. The infrastructure may be protected against unauthorized use by means of an access control system. In order to use the infrastructure or to release the infrastructure by means of an access control system, a user of the motor vehicle may be provided with an electronically readable card, a remote control or an RFID token. Alternatively, a computer program may also be used which the user may install on a mobile device that he carries.

[0003] Different infrastructures are protected by different and often incompatible access control systems. In a motor vehicle that is to use multiple infrastructures, multiple cards, devices or computer programs may be collected, each of which is provided for controlling only one infrastructure. The selection or use of authentication can be inconvenient.

[0004] If a new device is to be purchased or returned, or if the rights of a motor vehicle at one of the infrastructures are to be changed, the management device assigned to this infrastructure must usually be used. The implementation of the desired changes can be complex and can differ between the management devices of different infrastructures. It is usually not possible to combine several infrastructures into one complex or to split one infrastructure into several infrastructures. Summary of the invention

[0005] The object of the present invention is to provide an improved technology for controlling an infrastructure that can be used by a motor vehicle. The present invention achieves this object with the aid of the technical solution of the independent claim. The dependent claims specify preferred embodiments.

[0006] A control system comprises a motor vehicle with a first control device and an infrastructure with a second control device. The control devices are configured to establish a wireless connection with one another and to perform a bilateral authentication via the connection. Furthermore, the motor vehicle is configured to request a predetermined function of the infrastructure via the connection; and the second control device is configured to execute the requested function of the infrastructure if the function is available for control by the motor vehicle.

[0007] The control system can expand the known control systems which only control the functions of the motor vehicle. In the known systems, for example, the functions can relate to locking or unlocking the motor vehicle or driving functions, which can be implemented after a bilateral authentication via the wireless interface between the motor vehicle and the mobile device. If the authentication fails, the function cannot be used or cannot be triggered by the other side. The known control system can implement a digital carkey and work, for example, according to the publicly available specifications of the Car Networking Consortium.

[0008] It has been recognized that such a system can be advantageously expanded by defining new roles. In the control system presented here, a role for infrastructure is additionally provided. Preferably, a device installed in a fixed position is regarded as infrastructure. The infrastructure may include buildings and is fixedly connected to the ground. The infrastructure can be used by a motor vehicle. Preferably, the infrastructure includes a driving area or a parking area, a building or a functional device, such as a charging station for an electric energy storage device of a motor vehicle. The infrastructure or the entrance to the infrastructure can be controlled by a mobile device or by a motor vehicle. The vehicle can achieve the control by a first control device.

[0009] Advantageously, a universal access control for one or more infrastructures can be implemented by means of new roles for the infrastructures. It is thus possible to control any number of different infrastructures based on established technology. Only the first control device has to be installed in the motor vehicle, and carrying other devices, cards or tokens can be omitted. The use of the infrastructures can be made simpler or more comfortable.

[0010] The management of the right of a motor vehicle to use an infrastructure can be unified for a plurality of infrastructures. The authorization of a motor vehicle can be transferred from one infrastructure to another, or the infrastructure can be divided into different infrastructures, which can be treated differently in terms of organizational structure, but can be controlled technically by means of the same control system. The management of the use and right of the infrastructure can be made more unified and convenient in use.

[0011] Preferably, the functionality of the infrastructure relates to motor vehicles. Thus, the functionality can include granting or denying physical access to the infrastructure to motor vehicles. The infrastructure can include, for example, a parking lot or a parking building that is protected from use by motor vehicles by means of gates or barriers. In another embodiment, a double-decker parking space can be controlled in order to enable motor vehicles to drive in or out.

[0012] Typically, the function can be automatically controlled by the motor vehicle when the motor vehicle is driven close enough to the infrastructure so that a connection can be established. Alternatively, the use of the function can be automatically prepared and the use of the function is not triggered until a person in the motor vehicle, for example by pressing a button. The function can also be automatically prepared and not automatically triggered until a predetermined condition is met, for example, when the motor vehicle is parked.

[0013] In another embodiment, a component connected to the infrastructure and related to the motor vehicle can be controlled. For example, when the motor vehicle approaches the infrastructure, a charging connection for charging the energy storage device of the motor vehicle can be automatically established. For this purpose, the component can include an arm that can insert the charging plug into the charging socket of the motor vehicle.

[0014] Conversely, the infrastructure can be configured to request a predetermined function of the motor vehicle via the connection, wherein the first control device is configured to execute the requested function of the motor vehicle if the function is available for control via the infrastructure. Thus, the function of the motor vehicle can be controlled via the infrastructure. In the control system, the role of the infrastructure can also enable the control of the motor vehicle.

[0015] For example, a parking air conditioning system of a motor vehicle can be activated at the request of the infrastructure, for example, when a known user approaches the motor vehicle. In another embodiment, the driving functions of the motor vehicle can be controlled at the infrastructure level. The infrastructure can include, for example, parking lots, parking structures or underground parking lots. A path or trajectory can be determined at the infrastructure level, along which the motor vehicle can reach a free parking space or an exit. The infrastructure can control the motor vehicle to travel along this trajectory without a driver.

[0016] In a further example, the infrastructure can transmit update data to the motor vehicle. Thus, for example, map data or installed software can be automatically updated. The data can be stored on the infrastructure and provided to a plurality of motor vehicles.

[0017] Preferably, authentication is performed using an asymmetric encryption method. In this case, two communication partners, such as a motor vehicle and an infrastructure, can each be equipped with a private key and a public key. Mutual authentication can be performed based on a challenge-response method. Preferably, a single transaction is implemented, by means of which authentication can be performed in both directions.

[0018] The control system may also include an external location from which the public key of the participant can be retrieved. In addition, the management of rights can be performed at the external location. For example, the right for the first participant to use a predetermined function can be revoked by the second participant by storing the corresponding information at the external location. The first participant providing the function for control can retrieve the changed information from the external location and subsequently refuse the execution of the function after request by the second participant.

[0019] It should be noted that fine-grained permissions can be stored at an external location. For example, the use of a function can be bound not only to predetermined parties, but also to predetermined conditions. Such conditions can, for example, relate to the time of day or, in the case of a motor vehicle, to the speed of travel.

[0020] The control system may also include a mobile device, wherein the mobile device is configured to establish a wireless connection with the infrastructure and to carry out a bilateral authentication via the connection, wherein a function of the infrastructure is controlled via the connection in view of an opening requested by the motor vehicle.

[0021] The mobile device may include, for example, a smartphone, a tablet or a personal computer. Preferably, the mobile device is the primary device for the user to manage the rights of the motor vehicle to use predetermined functions of the infrastructure. Modalities such as payment or user identification may be specified. In one embodiment, the user can manage rights only for the motor vehicle only if the user is authorized to use the motor vehicle.

[0022] The control device of the infrastructure is configured to establish a wireless connection with the motor vehicle and to perform a bilateral authentication via the connection; to receive a request from the motor vehicle for a function of the infrastructure via the connection; and to execute the requested function if the function is available for control by the motor vehicle. The control device may include the second control device described herein.

[0023] The control device may also include an actuator for controlling a function of the infrastructure. The function may relate to a motor vehicle. The actuator may, for example, implement a physical access control and include a fence, a gate or a similar device. Alternatively, the actuator may be configured to implement a predetermined function on the motor vehicle, such as inserting a charging plug of a charging device into a charging socket of a motor vehicle. The actuator may also be configured to provide predetermined data or information to the motor vehicle. The request for data may be issued by the motor vehicle, or the infrastructure may actively provide the data to the motor vehicle.

[0024] According to another aspect, a first method comprises: a step of generating a two-part digital key; a step of providing a first part of the key to a motor vehicle; and a step of providing a second part of the key to an infrastructure, so that bilateral authentication can be performed between the motor vehicle and the infrastructure based on the two parts.

[0025] For example, the key can be generated and provided at an external location. The external location can sign the parts and thus ensure their authenticity. In order to be able to generate the key, proof can be required, that is, the requested location has the authority to control the infrastructure or the predetermined function. For example, if a person requests the key, he can show proof of ownership of the infrastructure. The transmission of the key or a part of the key to the motor vehicle is preferably carried out wirelessly. Optionally, the user of the motor vehicle can be requested to accept the provided key so that the key can be used by the motor vehicle.

[0026] The generation of the keys can also be carried out by another external location. For example, a manufacturer of a certain infrastructure, such as a parking gate, can operate an external location that is initially considered the owner of all infrastructure provided. If the infrastructure is sold to a person, keys for using predetermined functions of the infrastructure can be produced and provided. Part of the keys to be provided to a motor vehicle can be transferred to another external location, which is responsible for managing the digital keys for the motor vehicle.

[0027] According to yet another aspect, a second method for controlling a predetermined function of an infrastructure comprises: a step of establishing a wireless connection between the motor vehicle and the infrastructure, and a step of performing a bilateral authentication via the connection; a step of requesting a predetermined function of the infrastructure by the motor vehicle; and a step of executing the predetermined function by the infrastructure if the function is open for control by the motor vehicle. It also applies here in other cases that if the authentication fails, the function is not controlled.

[0028] The method can be performed by means of the control system described herein. Therefore, parts of the method can be provided by different components of the control system. The components may include an electronic processing device on which a part of the method in the form of a computer program product can be run. For this purpose, the processing device can be implemented electronically and, for example, include an integrated circuit, a programmable logic component or a programmable microcomputer. The method can be implemented in the form of a configuration or as a computer program product with program code tools for the processing device. The configuration or computer program product can be stored on a computer-readable data carrier. The features or advantages of the method can be transferred to the device or vice versa. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The present invention will now be described in more detail with reference to the accompanying drawings, in which:

[0030] Figure 1 shows the control system;

[0031] Figure 2 a flow chart showing a first method; and

[0032] Figure 3 A flow chart showing a second method;

[0033] Specific implementation form

[0034] Figure 1 A control system 100 is shown, which includes a motor vehicle 105 and an infrastructure 110. In addition, an external location 115 is preferably provided. A mobile device 120 can be provided for use by a person 125. The motor vehicle 105, the infrastructure 110, the external location 115 and the mobile device 120 may also be referred to herein as components or participants of the control system 100.

[0035] Infrastructure 110 may include actuators 130 , which are designed here by way of example as barriers, which may release or block the entry of motor vehicle 105 into a parking space or an entrance. Other types of actuators 130 are also possible.

[0036] A first control device 135 is provided on the motor vehicle 105 and a second control device 140 is provided on the infrastructure 110. The control devices 135, 140 may include electronic processing devices, which may be implemented as microcomputers. With respect to the control system 100 presented here, the motor vehicle 105 may act with or through the first control device 135, and the infrastructure 110 may act with or through the second control device 140.

[0037] Communication between two participants 105, 110, 115, 120 of a control system usually presupposes the establishment of a wireless communication connection and the successful authentication of the two participants 105, 110, 115, 120 at the respective other participant 105, 110, 115, 120. Before communication with a participant 105, 110, 115, 120 can be controlled, the person 125 can also be authenticated with respect to the mobile device 120.

[0038] If the authentication is not successful, the requested function of the further parties 105, 110, 115, 120 cannot be controlled. Usually, in this case the communication is ended and the connection is eliminated.

[0039] In a known manner, functions of the motor vehicle 105 can be controlled by means of the mobile device 120. It is proposed that in the control system 100, an additional role is assigned to the infrastructure 120 in addition to the roles of the mobile device 120 and the motor vehicle 105. Functional specifications of the infrastructure 110 can be controlled by the motor vehicle 105 and optionally by the mobile device 120. Conversely, the infrastructure 110 can control functions of the motor vehicle 105. Optionally, the infrastructure 110 can also be controlled by means of the mobile device 120.

[0040] By means of mobile device 120, a person can communicate with external location 115 and negotiate or adjust the authorization of motor vehicle 105 for using functions of one of participants 105, 110. Details and optionally a time limit for the use or provision of a predetermined function of one of participants 105, 110 can be specified. It should be noted that the authorization can also be controlled by another party, for example, by a representative of infrastructure 110.

[0041] Figure 2 A flow chart of a first method 200 is shown, which can preferably be carried out by means of control system 100 . The first method serves to define the authorization of motor vehicle 105 for using predetermined functions of infrastructure 110 .

[0042] In step 205, the person 125 or external device 115 may provide proof that it has dominion over the predetermined infrastructure 110. For example, the person 125 may present proof of purchase of the infrastructure 110 or a certificate confirming that it is the owner or operator.

[0043] The generation of a key may be requested in step 210. A digital key may then be generated in step 215 and include a first part and a second part. The first part may be provided to the infrastructure 110 in step 220. The first part may correspond to a private key of the infrastructure 120 in an asymmetric encryption method.

[0044] The second part of the key may be transmitted in step 225 to a further external location 115 which is responsible for the management of the key for motor vehicle 105 .

[0045] The external location 115 can provide the second part to the motor vehicle 105 in step 230. The second part can correspond to the public key of the infrastructure 120 in an asymmetric encryption method. The second part is preferably transmitted wirelessly. It should be noted that the second part can also be transmitted directly from the device that generates the key to the motor vehicle 105.

[0046] Preferably, the operator of the motor vehicle 105 is requested to check the obtained key and confirm its installation. After confirmation, the key can be stored in a key memory of the motor vehicle 105 and is ready for authenticating the motor vehicle 105 to the infrastructure 110.

[0047] Figure 3 A flow chart of a second method 300 for controlling a control system 100 is shown. In step 305, a wireless connection can be established between the motor vehicle 105 and the infrastructure 110. The connection is preferably also based on known technologies such as UWB or BT-LE.

[0048] In step 310, the vehicle 105 and the infrastructure 110 may authenticate each other. If the authentication fails, the first method 300 may end here. In step 315, a predetermined function of the infrastructure 110 may be requested by the vehicle 105. The request may be part of the transaction for mutual authentication in step 310.

[0049] In step 320, it can be checked whether motor vehicle 105 is authorized to use the function. If this is the case, the function can be executed in step 325. Otherwise, the function cannot be executed.

[0050] Method 300 can also be carried out in a modified manner using mobile device 120 instead of motor vehicle 105. However, this presupposes that mobile device 120 is always carried with you in order to use the infrastructure with motor vehicle 105. Person 125 may have to be authenticated with respect to mobile device 120 so that motor vehicle 105 can use the functions of infrastructure 110. This can be problematic, for example, if person 125 simultaneously controls motor vehicle 105. Automatic control of functions by motor vehicle 105 cannot be carried out in this way.

[0051] By means of the defined roles proposed here of infrastructure 110, the functions can be used by motor vehicle 105 without using mobile device 120. In one embodiment, the presence of person 125 is not even necessary for use.

[0052] Reference numerals

[0053] 100 systems

[0054] 105 Motor Vehicles

[0055] 110 Infrastructure

[0056] 115 External Location

[0057] 120 mobile devices

[0058] 125 staff

[0059] 130 actuator

[0060] 135 First control device

[0061] 140 Second control device

[0062] 200 First Method

[0063] 205 Certification

[0064] 210 Request to generate key

[0065] 215 Generate key

[0066] 220 Provide the first part of the key to the infrastructure

[0067] 225 Transmitting the second portion of the key to an external location

[0068] 230 Providing the second part of the key to the motor vehicle

[0069] 300 Second Method

[0070] 305 Establishing connections between vehicles and infrastructure

[0071] 310 Bilateral Certification

[0072] 315 Request Function

[0073] 320 Inquirers are open to using said functionality?

[0074] 325 Execution Function

Claims

1. A control system (100), the control system comprising: A motor vehicle (105) having a first control device (135); An infrastructure (110) having a second control device (140); The control devices (135, 140) are configured to establish a wireless connection with each other and to perform a bilateral authentication via the connection; The motor vehicle (105) is configured to request a predetermined function via the connection infrastructure (110); The second control device (140) is configured to execute a requested function of the infrastructure (110) if the function is available for control by the motor vehicle (105).

2. The control system (100) according to claim 1, wherein: The functionality of the infrastructure (110) is associated with the motor vehicle (105).

3. The control system (100) according to claim 1 or 2, wherein: The infrastructure (110) is configured to request a predetermined function of the motor vehicle (105) via the connection; wherein the first control device (135) is configured to execute the requested function of the motor vehicle (105) if the function is available for control via the infrastructure (110).

4. A control system (100) according to any one of the preceding claims, wherein: Authentication is performed with the help of asymmetric cryptographic methods.

5. A control system (100) according to any one of the preceding claims, wherein: The control system also includes an external location (115) from which the public keys of the participating parties can be retrieved.

6. A control system (100) according to any one of the preceding claims, wherein: The control system further comprises a mobile device (120); the mobile device (120) is configured to establish a wireless connection with the infrastructure (110) and to carry out a bilateral authentication via the connection; wherein a function of the infrastructure (110) is controlled via the connection in view of an opening requested by the motor vehicle (105).

7. A control device (140) for an infrastructure (110); wherein: The control device (140) is configured to establish a wireless connection with a motor vehicle (105) and to perform bilateral authentication via the connection; to receive a request from the motor vehicle (105) for a function of the infrastructure (110) via the connection; and to execute the requested function if the function is available for control by the motor vehicle (105).

8. The control device (140) according to claim 7, wherein the control device further comprises an actuator (130) for controlling a function of the infrastructure (110).

9. A method, wherein: The method comprises the following steps: Generate (215) a two-part digital key; providing (220) a first portion of the key to a motor vehicle (105); providing (225) the second portion of the key to the infrastructure (120), Based on the two parts, a bilateral authentication between the motor vehicle (105) and the infrastructure (120) is thus possible.

10. A method (300) for controlling a predetermined function of an infrastructure (110), wherein: The method comprises the following steps: Establishing (305) a wireless connection between the motor vehicle (105) and the infrastructure (110) and performing a bilateral authentication (310) via the connection; requesting (315) a predetermined function of the infrastructure (110) by the motor vehicle (105); and If the function is available for control by the motor vehicle (105), the predetermined function is executed (325) by the infrastructure (110).

Images