Method for user equipment, method for backend, apparatus and computer program

Abstract

Various embodiments relate to a method (100) for a user equipment. The method comprises receiving (110) data indicating use of the digital key from the communication device and storing (120) the data in a secure storage device of the user device.

Description

Technical Field

[0001] The present disclosure relates to the field of digital identity authorization. Embodiments relate to a method for a user device, a method, an apparatus and a computer program for a backend. Background Art

[0002] The authorization process enables the user of the device to enable certain functions with his device, such as verifying the generation of a digital key, unlocking the vehicle, starting the engine of the vehicle. For example, the use of a digital key enables the user of the vehicle to open the vehicle particularly easily, also known as smart access. In particular, smart access can be used to configure a user equipment (UE) to be used as a digital key for the vehicle. For this purpose, an invitation for a digital key (also known as a data key) can be passed by the user device to a friend device, such as another user device, for configuration of the friend device. This allows the friend device to be configured / authenticated so that access to the vehicle, such as opening, starting, etc., is enabled via wireless communication, such as via Bluetooth or ultra-wideband (UWB) technology.

[0003] The digital car key solution currently defined in the Car Connectivity Consortium (CCC) standard version 3 (vl.l, June 2022) standardizes an access system consisting of the following:

[0004] a) A user device having an Internet connection, which

[0005] i) Carrying a digital key embedded in a secure storage device on the user’s device;

[0006] ii) providing an interface from the secure storage device to the user device operating system; and

[0007] iii) provide an interface from the user device operating system to other applications running on the user device (e.g., vehicle original equipment manufacturer (OEM) apps),

[0008] b) vehicles, which allow the operator of the Digital Key to operate certain vehicle functions,

[0009] c) Backend systems, interconnected smart devices and vehicles, which allow sharing and management of digital keys and provide additional services.

[0010] Before digital keys can be used in a car, they are registered at a "key tracking server". This ensures that the presence of all digital keys is known at points of interest in time (e.g., insurance investigations). For example, in the event of a stolen vehicle, an insurance company may request specific data about the use of digital keys to investigate an insurance claim. However, the registration process at the key tracking server may be resource and / or time intensive. Therefore, it may be desirable to improve key tracking data collection for digital keys.

[0011] It has therefore been found that key tracking data collection for a digital key can be improved by storing the data in a secure storage device of the user device. In this way, key tracking data collection can be performed if required, for example if an insurance investigation is necessary. For example, the stored data can be transmitted to an insurance company upon request. Furthermore, by storing usage data in the UE (user equipment), a communication link between the vehicle and the backend for key tracking data collection can be omitted during the digital key generation process. The data transfer can be performed later when a communication link can be established. Thus, a digital key can be generated even if the vehicle and / or UE are offline, for example not connected to a base station. Summary of the invention

[0012] Each example provides a method for a user device, comprising: receiving data indicating the use of a digital key from a communication device and storing the data in a secure storage device of the user device. In this way, the digital key can, for example, be used to generate further digital keys without establishing a communication link from the vehicle to a backend, such as a key tracking server. Therefore, a communication link, for example to a base station, can be omitted for the use of the key. In addition, if necessary, for example if the vehicle is stolen, key tracking data collection of the digital key can be performed (later) because the data is stored in the secure storage device on the UE.

[0013] In an example, the use may indicate generating another digital key by using a digital key. In this way, a digital key may be generated, for example, by using a base station without requiring a connection link between the communication device or UE and the backend.

[0014] In an example, the method may further include preventing deletion of at least one of the data or the digital key until the data has been transmitted to the backend. In this way, it can be ensured that the stored data and / or the digital key cannot be deleted before being transmitted to the backend, such as a server, for example, for data collection for tracking the digital key of the vehicle.

[0015] In an example, the method may further include transmitting data based on deleting at least one of the data or the digital key. In this way, if a user of the UE attempts to delete the data and / or the digital key, the stored data may be automatically transmitted to the backend.

[0016] In an example, the method may further include receiving a synchronization request from a backend and transmitting the data stored in the storage device to the backend. In this way, the backend, such as a server, may request the required data for data collection of the digital key of the vehicle.

[0017] In the example, the data is encrypted so that the data can only be decrypted by the backend. In this way, the stored data can be prevented from being manipulated by the user of the UE.

[0018] Each example provides a method for a communication device, comprising: generating data indicating the use of a digital key of a user device and transmitting the data to the user device. In this way, a communication device, such as a communication device included in a vehicle, can transmit data to be stored to a UE and can enable the UE to enable certain functions of the communication device and / or the vehicle. For example, the communication device can generate a new digital key for use in a vehicle and can store information about the process in the UE. In this way, the UE can be used as a secure storage device for later data collection of a digital key of a vehicle, such as by a backend.

[0019] Each example provides a method for a backend, which includes receiving data indicating the use of a digital key from a user device. In this way, a backend, such as a key tracking server, can receive required data for tracking data collection of a digital key from a UE.

[0020] Each example relates to an apparatus comprising an interface circuit configured to communicate with at least one of a communication device, a user equipment or a backend, and a processing circuit configured to perform the method as described above.

[0021] Examples relate to a vehicle comprising an apparatus as described above and a sensor for measuring sensor data.

[0022] The examples also relate to a computer program having a program code for performing the above-described method when the computer program is executed on a computer, a processor or a programmable hardware component. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Some examples of apparatus, methods and / or computer programs will be described hereinafter, by way of example only, and with reference to the accompanying drawings, in which:

[0024] Figure 1 An example of a method for a user device is shown;

[0025] Figure 2 An example of a method for a communication device is shown;

[0026] Figure 3 An example of a method for a backend is shown; and

[0027] Figure 4 A block diagram of an example of an apparatus is shown. DETAILED DESCRIPTION

[0028] As used herein, the term "or" refers to a non-exclusive or unless otherwise indicated (e.g., "or other" or "or in the alternative"). In addition, as used herein, words used to describe the relationship between elements should be broadly interpreted to include a direct relationship or the presence of intermediate elements unless otherwise indicated. For example, when an element is referred to as being "connected" or "coupled" to another element, the element can be directly connected or coupled to the other element or there can be intermediate elements. Conversely, when an element is referred to as being "directly connected" or "directly coupled" to another element, there are no intermediate elements. Similarly, words such as "between," "adjacent," etc. should be interpreted in a similar manner.

[0029] The terms used herein are only used for the purpose of describing specific embodiments and are not intended to limit the exemplary embodiments. As used herein, the singular forms "a", "an", and "the" are also intended to include the plural forms unless the context clearly indicates otherwise. It will be further understood that the terms "comprise", "comprises", "includes", or "comprising", when used herein, specify the presence of the features, units, steps, operations, elements, or components, but do not exclude the presence or addition of one or more other features, units, steps, operations, elements, components, or groups thereof.

[0030] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as those commonly understood by those skilled in the art to which the example embodiments belong. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense unless explicitly defined in this document.

[0031] Figure 1 An example of a method 100 for a user device is shown. The method includes receiving 110 data indicating the use of a digital key from a communication device and storing 120 the data in a secure storage device of the user device. In this way, data associated with the digital key can be stored in the secure storage device of the UE. For example, the data can be stored in a private mailbox or a secure element. The data may include information required to supervise the use of the digital key of a vehicle. For example, the data may indicate the use of a digital key, such as for locking or unlocking a vehicle, generating a new digital key using an existing digital key, the time of use of a digital key, the location of use of a digital key. Therefore, by using the data stored on the UE, data of use required by a third party, such as an insurance company, can be provided. The digital key indicating its use can be stored on the UE.

[0032] For example, the usage data required by the insurance company may be stored on the UE, for example in a private mailbox of the UE (e.g., in a trusted execution environment of the UE). The usage data of the digital key (e.g., timestamp, location) may be transmitted to the UE carrying the used digital key. For example, the data may be transmitted from the communication device to the UE using an exchange command as defined in [1].

[0033] The data is stored in a secure storage device, such as a private mailbox of the UE, publishing and / or carrying a digital key. The digital key may have been registered at a backend, such as a key tracking server. The data may be stored according to the exchange command defined in [1].

[0034] Whenever the UE can establish a connection to the backend, stored data from a secure storage device, such as a private mailbox, can be synchronized to the backend, such as a key tracking server. However, synchronization is not required at all times. Alternatively, synchronization can be performed triggered by events, such as the deletion of data from the secure storage device, a request from a third party (such as an insurance company). For example, in the case of an insurance claim, the legal authority investigating and / or the insurance holder may request remote deletion of all digital keys registered at the key tracking server (especially supported by the vehicle OEM). Upon deletion, data indicating the use of digital keys on the UE stored in the secure storage device can be transmitted to the backend, such as a key tracking server. Therefore, the backend can collect data about the use of the UE's digital keys.

[0035] Therefore, by storing data indicating the use of the digital key in a secure storage device, a connection between the communication device and the back end may not be required, for example, communication to a base station may not be required. The communication device may allow the user of the UE to perform certain functions of the vehicle without connecting to the back end to notify the back end of the permission. The insurance company may request data about the permission, which relates to the current use of the vehicle by the user of the UE later, such as the time of last use, the location of last use. In this way, the data can be collected later when the vehicle / communication device and UE are offline, rather than collecting the data instantly through the telematics / UE communication link. Therefore, the communication device or UE does not need to establish a communication link to the base station. Therefore, the digital key can be used even if a communication link (e.g., an Internet link) cannot be established, for example due to insufficient network coverage. This ensures that at the time of the investigation, the data of all digital keys under the control of the insurance holder is up to date in the back end, such as a key tracking server.

[0036] Furthermore, another digital key may be generated by using a digital key without establishing a communication link between the communication device and the backend. Thus, the method 100 may support creating an offline key by using a digital key that has been registered at a backend (eg, a key tracking server).

[0037] Thus, the method 100 may be used to ensure data (usage data) is up to date when needed, such as when requested by a backend, and / or to improve limited digital key generation such that a communication link may no longer be required.

[0038] Receiving 110 data may be performed by receiving data via near field communication, for example excluding a communication link in a mobile communication system. For example, the UE and the communication device may communicate via near field communication technology, Bluetooth low energy, wireless local area network.

[0039] In an example, use may indicate generation of another digital key by use of a digital key. In this way, a digital key may be generated without the need for a communication link between the communication device or UE and the backend. For example, it may be beneficial to allow creation of a digital key for a vehicle by another digital key even if there is no communication link, such as an Internet link. In this way, a user of the UE may generate and use a digital key that is not registered at a backend, such as a key tracking server. Synchronization or transmission of data indicating another digital key to the backend may be performed later, in particular when necessary. Therefore, the need to establish a communication link between a communication device or UE, such as a vehicle, and the backend may be omitted during the use time of the digital key.

[0040] In an example, the method may further include preventing deletion of at least one of the data or the digital key until the data has been transmitted to the backend. In this way, it can be ensured that a third party, such as an insurance company, can access the data at any time as needed.

[0041] In an example, the method may further include transmitting data in accordance with at least one of deleting the data or the digital key. Thus, for example, if the user has disabled / deleted the digital key, the data may be automatically transmitted to the backend. In this way, the data in the backend may be kept up to date. Optionally or alternatively, the transmission of data may be limited to actual need, for example, when requested by the backend or if deleted from the UE.

[0042] For example, when the digital key on the UE is deleted, the data stored in the secure storage device may be automatically deleted. Therefore, the data associated with the digital key can be transmitted to the back end triggered by the deletion of the digital key. For example, a user may want to delete a digital key stored on the UE, for example, the UE is a friend device and the user cannot further access the vehicle associated with the digital key. Therefore, the user can initiate the deletion of the digital key stored in the secure storage device. By initiating the deletion, the UE can transfer the data associated with the digital key and optionally the digital key to the back end, and delete the digital key and optionally delete the data after the transmission. In this way, the key tracking data collection of the digital key can be simplified.

[0043] In an example, the method may further include receiving a synchronization request from a back end and transmitting the data stored in the storage device to the back end. In this way, for example, in the event of a stolen vehicle, a back end, such as a server of an insurance company, may request the required data for data collection.

[0044] In the example, the data is encrypted so that the data can only be encrypted by the backend. For example, a symmetric key for encryption between the communication device and the backend can be used. In this way, the manipulation of the data by the user of the UE may be complicated.

[0045] Further details and aspects are mentioned in conjunction with the embodiments described below. Figure 1 The illustrated examples may include one or more optional additional features corresponding to one or more aspects mentioned in conjunction with the proposed solution or one or more examples described below (e.g., Figure 2-4 ).

[0046] Figure 2 An example of a method 200 for a communication device is shown. The method includes generating data indicating the use of a digital key of a user device and transmitting the data to the user device. The communication device may be as described in reference Figure 1 The corresponding part of the UE described. For example, the communication device may receive data indicating a request to generate another digital key from the UE. The communication device may generate or authenticate another digital key so that the other digital key can be used for certain functions of the vehicle, such as for unlocking and starting the vehicle. Data about the other digital key, such as which digital key was used for generation, generation time, and generation location, may be stored by using data in the secure storage environment of the UE. Therefore, no communication link for synchronizing data is required between the communication device and the back end. This may enable the communication device to perform offline digital key generation. The communication device may be included by a vehicle, infrastructure, such as a traffic light, or a bus stop.

[0047] The data may be generated 210 by processing circuitry of the communication device, for example by processing circuitry comprised by a control unit of the vehicle.

[0048] For example, for offline digital key generation, only the communication technology assigned to near field communication may be used between the UE and the communication device. For example, the UE and the communication device may communicate via near field communication technology, Bluetooth low energy, or wireless local area network.

[0049] In this way, for example, a communication device included by a vehicle can transmit data to be stored to the UE and can cause the UE to enable certain functions of the communication device and / or the vehicle. For example, the communication device can generate a new digital key for use with the vehicle and can store information about the process in the UE. In this way, the UE can be used as a secure storage device for later data collection of the digital key of the vehicle.

[0050] Further details and aspects are mentioned in conjunction with the embodiments described above and / or below. Figure 2 The examples shown in may include one or more optional additional features, which correspond to one or more aspects mentioned in conjunction with the proposed solution or above (for example, Figure 1 ) and / or below (e.g., Figure 3-4 ) described in one or more examples.

[0051] Figure 3 An example of a method 300 for a backend is shown. The method 300 includes receiving 310 data indicating the use of a digital key from a user device. In this way, a backend, such as a key tracking server, can receive required data for tracking data collection of a digital key from a UE. The UE can be as described in reference Figure 1 Describe the UE.

[0052] For example, the UE may communicate with a backend, such as a server, such as a base station, in a mobile communication system. For example, the UE and the backend may communicate in / via a mobile communication system. The mobile communication system may include a plurality of transmission points and / or base stations operable to transmit radio signals with the UE. In an example, the mobile communication system may include a UE and a communication device.

[0053] Typically, a UE, such as a UE as described above, may be a device capable of wireless communication. However, in particular, a UE may be a mobile UE, such as a UE suitable for being carried by a user. For example, a UE may be a user terminal (UT) or a user equipment (UE) within the meaning of a corresponding communication standard for mobile communication. For example, a UE may be a mobile phone, such as a smart phone, or another type of mobile communication device, such as a smart watch, a laptop computer, a tablet computer, or autonomous augmented reality glasses. For example, a UE and a communication device may be configured to communicate with a backend in a cellular mobile communication system. In addition, a UE and a communication device may be configured to communicate in a non-cellular communication system. The UE and the communication device may particularly use short-range communication technology.

[0054] The mobile communication system may be cellular. The term base station refers to the coverage area of ​​a radio service provided by a transmission point, a remote unit, a remote head, a remote radio head, a communication device, a UE or a NodeB, an eNodeB, respectively. A wireless communication device, such as a UE, may be registered or associated with at least one base station (e.g., a backend), for example, it may be associated with a base station so that data may be exchanged between mobile stations in the coverage area of ​​the network and the associated base station using a dedicated channel or connection.

[0055] Further details and aspects are mentioned in conjunction with the embodiments described above and / or below. Figure 3 The illustrated examples may include one or more optional additional features corresponding to one or more aspects mentioned in conjunction with the proposed solution or above (e.g., Figure 1-2 ) and / or below (e.g., Figure 4 ) described in one or more examples.

[0056] Figure 4 A block diagram of an example of an apparatus 30 for a vehicle 400 is shown. The apparatus comprises: an interface circuit configured to communicate with at least one of a communication device, a user device or a backend; and a processing circuit configured to execute the method as described above, for example, as described in reference Figure 1 The method for UE described in reference Figure 2 A method for a communication device as described or as referred to in Figure 3 The method described for a backend. For example, the device may be comprised by the vehicle 400, for example by a control unit of the vehicle 400. For example, as referenced Figure 2 The described communication device and the apparatus 30 may be comprised by the same vehicle 400 .

[0057] For example, the vehicle 400 may be a land vehicle, such as a road vehicle, a sedan, an automobile, an off-road vehicle, a motor vehicle, a bus, a robot taxi, a van, a truck, or a truck. Alternatively, the vehicle 400 may be any other type of vehicle, such as a train, a subway, a boat, or a ship. For example, the proposed solution may be applied to public transportation (trains, buses) and future mobility (e.g., robot taxis).

[0058] like Figure 4 As shown, the corresponding interface circuit 32 is connected to the corresponding processing circuit 34 at the device 30. In each example, the processing circuit 34 can be implemented using one or more processing units, one or more processing devices, any mechanism for processing, such as a processor, a computer, or a programmable hardware component that can operate with corresponding adapted software. Similarly, the functions of the processing circuit 34 can also be implemented in software, which is then executed on one or more programmable hardware components. Such hardware components may include a general-purpose processor, a digital signal processor (DSP), a microcontroller, etc. The processing circuit 34 is capable of controlling the interface circuit 32 so that any data transmission occurring through the interface circuit 32 and / or any interaction that the interface circuit 32 may involve can be controlled by the processing circuit 34.

[0059] In an embodiment, the apparatus 30 may include a memory and at least one processing circuit 34 operably coupled to the memory and configured to perform the above-described method.

[0060] In various examples, the interface circuit 32 may correspond to any mechanism for obtaining, receiving, transmitting or providing analog or digital signals or information, such as any connector, contact, pin, register, input port, output port, conductor, channel, etc., which allows providing or obtaining signals or information. The interface circuit 32 may be wireless or wired, and it may be configured to communicate with another internal or external component, such as transmitting or receiving signals, information.

[0061] The device 30 may be a computer, a processor, a control unit, a (field) programmable logic array ((F)PLA), a (field) programmable gate array ((F)PGA), a graphics processor unit (GPU), an application specific integrated circuit (ASIC), an integrated circuit (IC), or a system on a chip (SoC) system.

[0062] Further details and aspects are mentioned in conjunction with the described embodiments. Figure 4 The examples shown may include one or more optional additional features corresponding to one or more aspects mentioned in conjunction with the proposed solution or one or more examples described above (e.g., Figure 1-3 ).

[0063] The aspects and features described with respect to a particular example in the previous examples may also be combined with one or more of the further examples to replace the same or similar features of the further examples, or to additionally introduce these features into the further examples.

[0064] Each example may further be or relate to a (computer) program including program code to perform one or more of the above methods when the program is executed on a computer, processor or other programmable hardware component. Therefore, the steps, operations or processes of different methods in the above methods may also be performed by a programmed computer, processor or other programmable hardware component. Each example may also cover program storage devices, such as digital data storage media, which are readable by a machine, processor or computer and encode and / or contain machine-executable, processor-executable or computer-executable programs and instructions. For example, the program storage device may include or be a digital storage device, a magnetic storage medium such as a disk and a tape, a hard drive or an optically readable digital data storage medium. Other examples may also include a computer, a processor, a control unit, a (field) programmable logic array ((F)PLA), a (field) programmable gate array ((F)PGA), a graphics processor unit (GPU), an application-specific integrated circuit (ASIC), an integrated circuit (IC) or a system on a chip (SoC) system, which is programmed to perform the steps of the above methods.

[0065] It is further understood that the disclosure of several steps, processes, operations or functions disclosed in the specification or claims should not be interpreted as implying that these operations necessarily depend on the order described, unless explicitly stated in individual cases or necessary for technical reasons. Therefore, the previous description does not limit the execution of several steps or functions to a certain order. In addition, in other examples, a single step, function, process or operation may include and / or be decomposed into several sub-steps, sub-functions, sub-processes or sub-operations.

[0066] If some aspects have been described with respect to a device or system, these aspects should also be understood as descriptions of the corresponding methods. For example, blocks, devices or functional aspects of a device or system may correspond to features of the corresponding methods, such as method steps. Therefore, aspects described with respect to methods should also be understood as descriptions of corresponding blocks, corresponding elements, attributes or functional features of the corresponding device or corresponding system.

[0067] If some aspects have been described with respect to a device or system, these aspects should also be understood as descriptions of the corresponding methods, and vice versa. For example, blocks, devices or functional aspects of a device or system may correspond to features of a corresponding method, such as method steps. Therefore, aspects described with respect to a method should also be understood as descriptions of corresponding blocks, corresponding elements, attributes or functional features of a corresponding device or corresponding system.

[0068] The attached claims are hereby incorporated into the detailed description, wherein each claim may stand alone as a separate example. It should also be noted that, although in the claims a dependent claim refers to a specific combination with one or more other claims, other examples may also include a combination of a dependent claim with the subject matter of any other dependent or independent claim. Such a combination is explicitly proposed here, unless it is stated in individual cases that a specific combination is not intended. In addition, the features of a claim should also be included in any other independent claim, even if the claim is not directly defined as being dependent on the other independent claim.

[0069] The aspects and features described with respect to a particular example in the previous examples may also be combined with one or more of the further examples to replace the same or similar features of the further examples, or to additionally introduce these features into the further examples.

[0070] Reference numerals list

[0071] 30 devices

[0072] 32 processing circuits

[0073] 34 Interface circuit

[0074] 100 Method for user equipment

[0075] 110 Receiving data indicating the use of a digital key

[0076] 120 Store data in a secure storage device

[0077] 200 Method for communication device

[0078] 210 Generate data indicating the use of the digital key

[0079] 220 Transmitting data to user equipment

[0080] 300 for backend methods

[0081] 310 receiving data indicating the use of the digital key from the user device

[0082] 400 vehicles

Claims

1. A method for a user device (100), comprising: receiving ( 110 ) data indicating use of a digital key from a communication device; as well as The data is stored (120) in a secure storage device of the user device.

2. The method (100) according to claim 1, wherein: The use instruction generates another digital key by using the digital key.

3. The method (100) according to any one of the preceding claims, further comprising: Deletion of at least one of the data or the digital key is prevented until the data has been transmitted to a backend.

4. The method (100) according to claim 3, further comprising: The data is transmitted based on deleting at least one of the data or the digital key.

5. The method (100) according to any one of the preceding claims, further comprising: Receive synchronous requests from the backend; as well as The data stored in the storage device is transmitted to the back end.

6. The method (100) according to any one of the preceding claims, wherein: The data is encrypted so that it can only be decrypted by the backend.

7. A method (200) for a communication device, comprising: generating ( 210 ) data indicating use of a digital key of a user device; as well as The data is transmitted (220) to the user equipment.

8. A method (300) for a backend, comprising: Data indicating use of a digital key is received ( 310 ) from a user device.

9. A device (30), comprising: an interface circuit configured to communicate with at least one of a communication device, a user device, or a backend; as well as Processing circuitry configured to perform a method according to any one of the preceding claims.

10. A computer program having a program code for carrying out the method (100; 200; 300) according to claims 1 to 8 when the computer program is executed on a computer, a processor or a programmable hardware component.

Images