Data transmission method and method for activating or deactivating function on device
By establishing two communication connections between the device, the mobile terminal device and the external computing system, the access-protected data transmission is performed, and the data security is ensured using encryption technology, sensitive data between the device, the mobile terminal device and the external computing system is solved. The issue of transmission and function activation or deactivation achieves safe and efficient data transmission and flexible functional management.
Patent Information
- Application Number
- CN202411130849.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Priority Date
- 2023-08-16
- Filing Date
- 2024-08-16
- Publication Date
- 2025-02-21
AI Technical Summary
The prior art is difficult to transmit sensitive data safely and efficiently between devices, mobile terminal devices and external computing systems, and it is difficult to activate or deactivate functions on the device.
By establishing two communication connections between the device, the mobile terminal device and the external computing system, access-protected data transmission of sensitive data is performed, and the security of data is ensured using encryption technology. At the same time, activation or deactivation of device functions is achieved by receiving and sending identification data and activating or deactivating data.
It realizes safe and efficient data transmission between devices, mobile terminal devices and external computing systems, ensures the protection of sensitive data, and can flexibly activate or deactivate functions on the device.
Smart Images

Figure CN119496778A_ABST
Abstract
Description
Technical Field
[0001] The invention relates to a method for data transmission between a device (e.g. a vehicle), a mobile terminal and an external computing system, a method for activating or deactivating functions of such a device, as well as a computing unit for executing these methods and a computer program for executing these methods. Background Art
[0002] In modern vehicles and other devices, a communication connection can be established with mobile end devices such as smartphones in order to exchange data. Summary of the invention
[0003] According to the invention, a method for data transmission and a method for activating or deactivating a function on a device, as well as a computing unit for carrying out these methods and a computer program for carrying out these methods are proposed, having the features of the independent patent claims. Advantageous embodiments are the subject matter of the dependent claims and the subsequent description.
[0004] The present invention relates to data transmission between devices such as vehicles, mobile terminal devices such as smartphones, and external computing systems such as servers or backends (also known as the so-called cloud). In this case, the steps described below can be performed in particular by the mobile terminal device.
[0005] A first communication connection is established from the mobile terminal device to the device. The first communication connection may be a wireless communication connection or a wired communication connection. For example, Bluetooth or WLAN may be considered as a wireless communication connection, and a bus connection or a data cable may be considered as a wired communication connection. It should be understood that the communication connection is usually established via a suitable connection unit in the device and the mobile terminal device.
[0006] Furthermore, a second communication connection is established from the mobile terminal device to the external computing system. The second communication connection can be a wireless communication connection, in particular a mobile radio (e.g. LTE, 5G, etc.). However, in particular when the first communication connection does not include WLAN, for example WLAN is also conceivable for the second communication connection. It should be understood that here, the communication connection is usually established via a suitable connection unit in the external computing system and the mobile terminal device. In particular, in the case of the mentioned mobile radio connection, the communication connection can be made via a mobile radio pole, to which the external computing system is then connected.
[0007] Next, an access-protected data transfer of sensitive data is performed between the device and the external computing system. The access-protected data transfer includes: receiving sensitive data from the device; and sending the sensitive data received from the device to the external computing system. Additionally, or alternatively, the access-protected data transfer includes: receiving sensitive data from the external computing system; and sending the sensitive data received from the external computing system to the device.
[0008] In other words, the sensitive data are thus transferred in an access-protected manner via the mobile terminal device, so that these sensitive data can ultimately be exchanged between the device and the external computing system.
[0009] In this case, sensitive data received from an external computing system and sent to the device within the framework of an access-protected data transmission are in particular encrypted and can only be decrypted by the device. This makes it impossible for the mobile terminal device or a user of the mobile terminal device or an application present on the mobile terminal device to read these sensitive data. Encryption that can be used, for example, is so-called end-to-end encryption.
[0010] Preferably, sensitive data received from the device and sent to the external computing system within the framework of the access-protected data transmission are also encrypted and can only be decrypted by at least one predetermined user. This also makes it impossible for the mobile terminal device or the user of the mobile terminal device or the application program present on the mobile terminal device to read the sensitive data from the device. Encryption, for example, also comes into consideration here as so-called end-to-end encryption.
[0011] In one embodiment, the sensitive data include sensitive data of a first type and sensitive data of a second type. Here, the sensitive data of the first type received from the device within the framework of the access-protected data transmission and sent to the external computing system is encrypted and can only be decrypted by at least one predetermined first user. The sensitive data of the second type received from the device within the framework of the access-protected data transmission and sent to the external computing system is also encrypted and can only be decrypted by at least one predetermined second user.
[0012] Sensitive data transmitted from the device to an external computing system via access-protected data transmission can be, for example, vehicle data such as sensor signals. The recipient can be a user who manages these vehicle data (or other sensitive data). These data may be worth protecting in certain circumstances and should not be readable by anyone. Therefore, these data can be transmitted to an IT infrastructure in the cloud, for example, via known encryption methods and decrypted there. This can then be, for example, sensitive data of the first type, which can be decrypted by the IT infrastructure as a first user.
[0013] However, such sensitive data, such as vehicle data (e.g. sensor signals), can also be transmitted to various interested parties. In some cases, these sensitive data may also be worth protecting, so that certain data from the external computing system are, for example, only forwarded to previously defined recipients, here at least one second user, and are therefore not accessible to everyone but can only be processed by authorized recipients. These data can be transmitted to a database in the cloud via known encryption methods, from where they are forwarded to another destination and decrypted there.
[0014] In this case, the sensitive data of the first type and the second type may also be at least partially identical, but are then encrypted separately.
[0015] In one embodiment, it is provided that, if a criterion exists, context data are provided. In this case, the context data are generated by the mobile terminal device. The context data are then added to the sensitive data received from the device, i.e., for example, combined with these sensitive data. These sensitive data, including the context data, are then sent to the external computing system within the framework of an access-protected data transmission.
[0016] In addition to the functionality of transmitting sensitive data that may require different levels of protection (such as vehicle data) from the vehicle to a database or other external computing system, additional data and information of the mobile terminal device (such as a smartphone) can be transmitted. These data can, for example, be directly generated or detected by sensors of the mobile terminal device, such as GPS position, or come from other sources, such as a weather app that is executed on the mobile device and provides corresponding information. These context data are combined with the vehicle data, for example; this can be achieved by means of different methods, such as by real-time transmission or synchronization via time stamps in the corresponding data.
[0017] In this way, additional data may be added to sensitive data, but access to the sensitive data is not permitted.
[0018] In one embodiment, a non-access-protected data transmission of non-sensitive data is also performed. Such non-access-protected data transmission includes: receiving non-sensitive data from the device. Then, providing the non-sensitive data received from the device, i.e., for example, for use on the mobile terminal device, and / or sending these non-sensitive data to an external computing system. Alternatively or additionally, receiving non-sensitive data from the external computing system, then providing these non-sensitive data, i.e., for example, for use on the mobile terminal device, and / or sending these non-sensitive data to the device.
[0019] In addition to data that deserves protection, a wide range of recipients can thus also access, for example, specific vehicle data. Here, for example, a navigation application can access non-sensitive data, i.e. data that is defined as "open". This can be, for example, speed information or status information of the vehicle, such as the remaining range.
[0020] That is, a standardized interface for data transmission is provided, which enables, for example, OEMs, supplier companies and App providers to receive vehicle data and use it for new businesses and services. It is no longer necessary to restrict the Apps determined and provided by the OEM, which expands the benefits to the end customer. The end-to-end connection between the vehicle and the various stakeholders can be achieved, for example, via different App providers. These App providers have a reduced view of the data or limited access to the data, so that protection of sensitive data is provided. These App providers obtain vehicle data that they can use for their functions, while they forward the sensitive data to other stakeholders (such as the OEM) without being able to view it.
[0021] Although this is primarily described with respect to vehicles and vehicle data, other types of devices such as household appliances may also be considered, especially when these devices do not have their own Internet connection but have a communication interface to a mobile terminal device such as a smartphone.
[0022] The proposed type of data transmission between the device, the mobile terminal device and the external computing system also enables activation or deactivation of functions of the device and subsequent use of the mobile terminal device and the external computing system.
[0023] To this end, in one embodiment, a first communication connection from the mobile terminal device to the device and a second communication connection from the mobile terminal device to the external computing system are provided. This can be done as described above.
[0024] Next, identification data are received from the device and the identification data received from the device are sent to the external computing system. Here, these identification data particularly include information about the hardware and / or software of the device.
[0025] The purpose of such data transmission is, for example, the initial exchange of information for identifying a specific vehicle or other device. This can be achieved, for example, via the vehicle identification number. This may be necessary in order to check the suitability of the vehicle for the function in addition to the vehicle itself.
[0026] Its further details can be the transmission of the current software version of the vehicle, the individual control devices of the vehicle or other devices. Here, for example, it is important to check whether these control devices already contain the function to be activated or deactivated, or whether this function has been activated.
[0027] Furthermore, activation or deactivation data are received from the external computing system and sent to the device in order to activate or deactivate functions in the device based on these activation or deactivation data. Thus, if the device or vehicle is identified and if necessary the software versions are identified, the activation or deactivation data for activating or deactivating the function are transmitted, for example, from the backend via the mobile terminal device to the device or vehicle (or there to the connection unit).
[0028] As mentioned, the above-mentioned data transmission types, i.e. in particular access-protected data transmissions, can be used for such activation or deactivation of the function. The data received from the device and sent to the external computing system, as well as the data received from the external computing system and sent to the device, then correspond to the above-mentioned sensitive data.
[0029] In one embodiment, the activation or deactivation data received from the external computing system is temporarily stored and then sent to the device. Thereby, the activation or deactivation data received from the external computing system can be independent of the time of the sending to the device. Thereby, it is not necessary to establish two communication connections at the same time.
[0030] Then, for example, the activation or deactivation data are checked in the device or vehicle, ie, for example, whether they are permissible for the device or vehicle and, in particular, have not been manipulated.
[0031] After a successful check, the activation or deactivation can preferably be performed in two ways. If the function or the software required for this is already present on the device, the function is activated or deactivated by enabling the function for the user or no longer enabling the function. If the function is already in the vehicle, for example, and is only in the background and therefore not visible to the driver, for example via the vehicle display, the activation can be performed by displaying the new function in the function menu.
[0032] If the function is not yet present on the device, the function is activated or deactivated by transferring the software data of the function to the device and installing it there. This can also be achieved, for example, via the described type of data transmission, in particular access-protected data transmission. The function or the software data can also be transmitted to the vehicle in another way, for example via an over-the-air update.
[0033] If the activation or deactivation is successful, confirmation data may be received from the device and sent to an external computing system to confirm the activation or deactivation. This allows tracking of the activation or deactivation.
[0034] Solutions are conceivable which enable a customer to purchase and activate functions and services for his vehicle or other devices online via a smartphone or computer. However, this usually takes place on the premise that the device or vehicle is independently and permanently connected to the Internet. This is necessary for the proposed method, in particular, the device or vehicle itself does not necessarily have to have an Internet connection at all.
[0035] More precisely, previously purchased functions can now be activated as soon as the next connection between the device or vehicle and the smartphone occurs (e.g. via an online portal). This applies in particular to the two-wheeled vehicle and power sports sectors (e.g. jet skis), where providing a permanent, smartphone-independent Internet connection is not (yet) common practice.
[0036] The computing unit according to the invention, for example a mobile terminal such as a smartphone, is configured, in particular programmed, to carry out the method according to the invention.
[0037] In this case, the system according to the present invention comprises a device, such as a vehicle, and a mobile terminal, which is, for example, a computing unit according to the present invention or is designed as such a computing unit.
[0038] In particular, when the executed control device is also used for other tasks and thus always exists, the implementation scheme in the form of a computer program or computer program product with a program code for executing all method steps according to the method of the present invention is also advantageous, because this causes particularly low costs. Finally, a machine-readable storage medium is provided, on which a computer program as described above is stored. In particular, storage media or data carriers suitable for providing the computer program are magnetic storage, optical storage and electrical storage, such as hard disks, flash memories, EEPROMs, DVDs and others, etc. It is also feasible to download the program via a computer network (Internet, intranet, etc.). Here, this download can be implemented in a wired manner or in a cable manner or in a wireless manner (for example, via a WLAN network, 3G, 4G, 5G or 6G connection, etc.).
[0039] Further advantages and embodiments of the invention are apparent from the description and the accompanying drawings.
[0040] The invention is schematically illustrated in the drawings based on exemplary embodiments and is described below with reference to the drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0041] Figure 1a An arrangement is shown schematically for explaining the invention.
[0042] Figure 1b Schematically shows the Figure 1a Detailed description of the invention The arrangement in FIG. 1 is used to explain the method according to one specific embodiment of the invention.
[0043] Figure 2 The sequence of a method according to the present invention in another specific embodiment is schematically shown. DETAILED DESCRIPTION
[0044] exist Figure 1a Schematically, an arrangement for explaining the present invention is shown in . The arrangement exemplarily comprises: a device 100 designed as a vehicle, such as a motorcycle; a mobile terminal device 110 designed as a smartphone; and an external computing system 120, which can be a so-called cloud, for example.
[0045] The vehicle 100 in turn has a control unit 102, for example also having a connection unit or a connection function, in particular also for establishing different types of communication connections. Instead of the vehicle 100, the control unit 102 can also be regarded as the device. The smartphone 110 can also have a connection unit or a connection function, in particular also for establishing different types of communication connections. The external computing system 120 can be connected to a mobile radio station, for example, and in this way connected via a communication connection.
[0046] exist Figure 1a , three different communication connections are exemplarily shown: a first communication connection 131 between the device 100 and the mobile terminal device 110 ; a second communication connection 132 between the mobile terminal device 110 and the external computing system 120 ; and a third communication connection 133 between the device 100 and the external computing system 120 .
[0047] The first communication connection 131 can be a wireless communication connection such as Bluetooth or WLAN. A wired communication connection is also conceivable, such as via a bus connection or a USB cable connection. The second communication connection 132 can be a wireless communication connection such as a mobile radio. The third communication connection 133 can also be a wireless communication connection such as a mobile radio. At this point, it should be mentioned that within the framework of the present invention, the first and second communication connections are used, while the third communication connection is not necessary. The present invention is particularly suitable, especially when such a third communication connection can be implemented, for example because the device 100 does not have a connection unit suitable for a third communication connection.
[0048] exist Figure 1b Again, the Figure 1a, but without a specific communication connection. In particular, the device 100 or 102, the mobile terminal device 110 and the external computing system 120 are shown. Also shown are two different users, namely a first user 121 and a second user 122, who can obtain or provide data via the external computing system, for example.
[0049] Now, to establish or provide reference Figure 1a The first communication connection 131 from the mobile terminal 110 to the device 100, 102 and the second communication connection 132 from the mobile terminal 110 to the external computing system 120 are mentioned. A mobile terminal such as a smartphone, for example, continuously provides a mobile radio connection (i.e., the second communication connection) at least as long as there is reception, while the first communication connection can be realized by manual or automatic coupling to the device 100 or 102.
[0050] Next, access-protected data transfer of sensitive data is performed between the device 100 or 102 and the external computing system 120 using the first communication connection 131 and the second communication connection 132. In one embodiment, this includes: receiving sensitive data 141, 142 from the device 100, 102, and sending the sensitive data 141, 142 received from the device to the external computing system 120; and receiving sensitive data 141, 142 from the external computing system 120, and sending the sensitive data 141, 142 received from the external computing system to the device 100, 102.
[0051] Here, in one embodiment, the first type of sensitive data 141 and the second type of sensitive data 142 determined for different users are distinguished. In this way, the first type of sensitive data 141 is determined for the first user 121, and the second type of sensitive data 142 is determined for the second user 122.
[0052] In this case, the sensitive data 141, 142 received from the external computing system 120 and sent to the device 100, 102 within the framework of such access-protected data transmission are in particular encrypted and can only be decrypted by the device 100, 102. Likewise, the sensitive data 141, 142 received from the device 100, 102 and sent to the external computing system 120 within the framework of access-protected data transmission are in particular encrypted and can only be decrypted by at least one predetermined user. In this way, users of the mobile terminal device, whether applications on the mobile device or human users, cannot access these sensitive data.
[0053] In particular, the first type of sensitive data 141 may be encrypted such that it can only be decrypted by the first user 121 , and the second type of sensitive data 142 may be encrypted such that it can only be decrypted by the second user 122 .
[0054] In one embodiment, context data 150 are provided, which are generated by the mobile terminal device 110. For example, an application on the mobile terminal device 110 can generate these context data. The context data itself can be any data. These context data 150 are added to the sensitive data received from the device - this can be sensitive data of the first type 141 and / or sensitive data of the second type 142. Then, within the framework of the access-protected data transmission, the sensitive data 141 or 142, and then including these context data, are sent to the external computing system 120.
[0055] It should be understood that data different from the context data or only specific, not necessarily identical, context data may also be added to the first type of sensitive data 141 and the second type of sensitive data 142 , respectively.
[0056] exist Figure 1b In FIG. 1 , an example of how context data 150 may be added to general sensitive data 140 is shown at the bottom edge. In this way, for example, a further unit of context data 150 may be respectively appended to one of a plurality of data sets each having a plurality of data units.
[0057] In addition to the functionality of transmitting sensitive data that may require different levels of protection (such as vehicle data) from the vehicle to a database or other external computing system, additional data and information of the mobile terminal device (such as a smartphone) can be transmitted. These data can, for example, be directly generated or detected by sensors of the mobile terminal device, such as GPS position, or come from other sources, such as a weather app that is executed on the mobile device and provides corresponding information. These context data are combined with the vehicle data, for example; this can be achieved by means of different methods, such as by real-time transmission or synchronization via time stamps in the corresponding data.
[0058] In this way, additional data may be added to sensitive data, but access to the sensitive data is not permitted.
[0059] In one embodiment, a non-access-protected data transfer of non-sensitive data 160 is also performed. This includes receiving non-sensitive data 160 from the device 100, 102 and providing the non-sensitive data 160 received from the device, for example, to a user of the mobile terminal device (e.g., an application), and / or sending the non-sensitive data 160 received from the device to the external computing system 120. Likewise, non-sensitive data 162 may be received from the external computing system 120 and provided, for example, to a user of the mobile terminal device 110 (e.g., an application), and / or sent to the device 100, 102.
[0060] In addition to data that deserves protection or sensitive data, this makes it possible for a wide group of recipients to access, for example, specific vehicle data. In this case, for example, a navigation application can access non-sensitive data, i.e. data that is defined as "open". This can be, for example, speed information or status information of the vehicle, such as the remaining range.
[0061] That is, in particular, a standardized interface for data transmission is provided as a whole, which enables, for example, OEMs, supplier companies and App providers to receive vehicle data and use it for new businesses and services. It is no longer necessary to restrict the Apps determined and provided by the OEM, which expands the benefits to the end customer. The end-to-end connection between the vehicle and the various stakeholders can be achieved, for example, via different App providers. These App providers have a reduced view of the data or limited access to the data, so that protection of sensitive data is provided. These App providers obtain vehicle data that they can use for their functions, while they forward the sensitive data to other stakeholders (such as the OEM) without being able to view it.
[0062] exist Figure 2 In the figure, a flow chart of a method according to another embodiment of the present invention is schematically shown. In this case, reference Figure 1a , Figure 1b The type of access-protected data transfer explained.
[0063] This is intended to activate or deactivate functions of the device. To this end, as mentioned above with reference Figure 1a As already explained, in step 200 , a first communication connection 131 is established or provided from mobile terminal 110 to device 100 , 102 , and in step 202 , a second communication connection 132 is established or provided from mobile terminal 110 to external computing system 120 .
[0064] In step 204, identification data 206 are received from the devices 100, 102 and sent to the external computing system 120. In this case, these identification data 206 include, in particular, information about the hardware and / or software of the device. The goal of this data transmission is, for example, the initial exchange of information for identifying a specific vehicle or other device. This can be achieved, for example, via a vehicle identification number. This may be necessary in order to check the suitability of the vehicle for the function in addition to the vehicle itself. Further details of this may be the transmission of the current software version of the vehicle, of individual control devices of the vehicle or of other devices. In this case, it is important, for example, to check whether these control devices already contain the function to be activated or deactivated, or whether the function is already activated.
[0065] Next, in step 208, activation or deactivation data 210 are received from the external computing system 120 (depending on whether the function is to be activated or deactivated) and sent to the device 100, 102, so as to activate or deactivate the function in the device 100, 102 based on the activation or deactivation data 210. It is conceivable that the activation or deactivation data 210 received from the external computing system 120 is temporarily stored in the mobile terminal device 110 and then sent to the device 100, 102.
[0066] Next, in step 212, after checking the activation or deactivation data 210, the function on the device 100, 102 can be activated or deactivated. If the function already exists on the device, this can be achieved by enabling the function for the user or no longer enabling the function, i.e. step 212a. If the function does not yet exist on the device, this can be achieved by transferring the software data of the function to the device, i.e. step 212b. For this purpose, the first communication connection and the second communication connection can also be used, but it is conceivable to use the third communication connection if it exists.
[0067] Next, in step 214, after a function on a device 100, 102 is activated or deactivated, confirmation data 216 is received from the device and sent to the external computing system 120 to confirm the activation or deactivation.
[0068] This makes it possible to activate (or deactivate) previously purchased functions (e.g. via an online portal) as soon as the next connection between the device or vehicle and the smartphone occurs. This is particularly applicable in the two-wheeled vehicle and power sports sectors (e.g. jet skis), where providing a permanent, smartphone-independent Internet connection is not currently common practice.
Claims
1. A method for transmitting data between a device (100, 102), a mobile terminal device (110) and an external computing system (120), the method comprising: Providing a first communication connection (131) from the mobile terminal device (110) to the device (100, 102); providing a second communication connection (132) from the mobile terminal device (110) to the external computing system (120); Performing an access-protected data transfer of sensitive data (140, 141, 142) between the device (100, 102) and the external computing system (120), comprising: receiving sensitive data from the device, and sending the sensitive data received from the device to the external computing system; and / or receiving sensitive data from the external computing system, and sending the sensitive data received from the external computing system to the device.
2. The method according to claim 1, further comprising: When standards exist: Providing context data (150), wherein the context data is generated by the mobile terminal device (110); adding the context data to sensitive data (140, 141, 142) received from the device (100, 102); and The sensitive data (140, 141, 142), including the context data (150), are sent to the external computing system (120) within the framework of the access-protected data transmission.
3. The method according to claim 1 or 2, wherein: Sensitive data received from the external computing system and sent to the device within the framework of the access-protected data transmission are encrypted and can only be decrypted by the device.
4. A method according to any one of the preceding claims, wherein: Sensitive data received from the device (100, 102) and sent to the external computing system within the framework of the access-protected data transmission are encrypted and can only be decrypted by at least one predetermined user (121, 122).
5. A method according to any one of the preceding claims, wherein: The sensitive data includes first type of sensitive data (141) and second type of sensitive data (142), wherein sensitive data of a first type (141) received from the device and sent to the external computing system within the framework of the access-protected data transmission is encrypted and can only be decrypted by at least one predetermined first user (121), and Therein, sensitive data (142) of a second type received from the device and sent to the external computing system within the framework of the access-protected data transmission are encrypted and can only be decrypted by at least one predetermined second user (122).
6. The method according to any one of the preceding claims, further comprising: Performing an access-unprotected data transfer of non-sensitive data (160, 162), including: Receiving non-sensitive data (160) from the device and providing the non-sensitive data received from the device and / or sending the non-sensitive data received from the device to the external computing system; and / or receiving non-sensitive data (162) from the external computing system and providing the non-sensitive data received from the external computing system and / or sending the non-sensitive data received from the external computing system to the device.
7. A method for activating or deactivating a function of a device (100, 102) using a mobile terminal device (110) and an external computing system (120), the method comprising: Providing (200) a first communication connection (131) from the mobile terminal device (110) to the device (100, 102); providing (202) a second communication connection (132) from the mobile terminal device (110) to the external computing system (120); receiving (204) identification data (206) from the device, and sending the identification data received from the device to the external computing system, wherein the identification data includes, among other things, information about the hardware and / or software of the device; Activation or deactivation data (210) is received (208) from the external computing system, and the activation or deactivation data received from the external computing system is sent to the device to activate or deactivate a function in the device based on the activation or deactivation data.
8. The method according to claim 7, wherein: The activation or deactivation data received from the external computing system is temporarily stored and then sent to the device.
9. The method according to claim 7 or 8, wherein: After checking the activation or deactivation data, the function on the device is activated or deactivated (212).
10. The method according to any one of claims 7 to 9, wherein: If the functionality is already present on the device, activating or deactivating the functionality by enabling the functionality for the user or no longer enabling the functionality (212a); and / or If the function does not yet exist on the device, the function is activated or deactivated by transferring software data of the function to the device (212b).
11. The method according to any one of claims 7 to 10, further comprising: After the function on the device is activated or deactivated: confirmation data is received (214) from the device and the confirmation data is sent to the external computing system to confirm the activation or deactivation. 12 . The method according to claim 7 , wherein the method according to claim 1 uses the access-protected data transmission.
13. A computing unit (110) which is configured to carry out all method steps of the method according to any of the preceding claims.
14. A system, comprising a device (100, 102) and a mobile terminal device (110), wherein: The mobile terminal has a computing unit according to claim 13 or is designed as such a computing unit. 15 . A computer program which, when executed on a computing unit, causes the computing unit to execute all method steps of the method according to claim 1 .
16. A machine-readable storage medium having stored thereon the computer program according to claim 15.