Identifying unauthorized use of vehicle function of vehicle

Abstract

The invention relates to a method for detecting an activity of an unauthorized vehicle function of a vehicle, in which a sensor detects an activity of an activated vehicle function of the vehicle, and to a vehicle.

Description

TECHNICAL FIELD

[0001] The invention relates to a method for recognizing an unauthorized activity of a vehicle function of a vehicle, wherein a sensor detects an activity of an activated vehicle function of the vehicle. The invention further relates to a vehicle. BACKGROUND

[0002] Vehicles usually provide a plurality of vehicle functions which can be activated individually as a special configuration of the vehicle.

[0003] DE 10 2022 122 126 A1 therefore discloses a method for enabling a vehicle function, wherein a stationary server recognizes an authorization of a vehicle function of a vehicle by means of a non-fungible token (NFT), transmits an enabling request to the vehicle which indicates a vehicle function recognized as authorized, and the vehicle subsequently enables the indicated vehicle function.

[0004] However, a vehicle can be tampered with by malware, resulting in an unauthorized misuse of a vehicle function which, on the one hand, leads to economic losses for the vehicle manufacturer and, on the other hand, can affect the driving safety of the vehicle. Accordingly, the vehicle manufacturer can configure the produced vehicles in such a way that they are able to automatically and independently recognize an unauthorized vehicle function which has been enabled.

[0005] DE 10 2011 110 972 A1, for example, discloses a method for recognizing a tampering of a vehicle function, wherein a control device of the vehicle detects an activity of the vehicle function, a sensor of the vehicle provides a sensor signal related to the activity, the control device compares the detected activity with the provided sensor signal, and a tampering of the vehicle function is recognized when the provided sensor signal is not related to the detected activity.

[0006] But the malware can also tamper with the control device such that the control device cannot find a lack of correlation between the provided sensor signal and the detected activity when comparing and thus cannot recognize a tampering of the vehicle function.

[0007] In order to prevent such misuse, DE 10 2018 206 880 A1 describes a method for recognizing an unauthorized activity of a vehicle function of a vehicle, wherein a function system of the vehicle transmits an authorization query to a stationary server for an activated vehicle function of the function system, the stationary server verifies an authorization of the queried vehicle function by means of a blockchain block, transmits a failure message to the function system after a failed verification, and the function system recognizes the activated vehicle function as unauthorized on the basis of the failure message.

[0008] However, the malware can additionally prevent the function system from making an authorization query with respect to a non-activated vehicle function. SUMMARY

[0009] It is an object of the present application to propose a method for recognizing an unauthorized activity of a vehicle function of a vehicle, which allows a better prevention of an unauthorized use of a vehicle function of a vehicle without being detected. It is a further object of the present application to propose a control device for a vehicle and a vehicle.

[0010] One subject of the present application is a method for recognizing an unauthorized activity of a vehicle function of a vehicle, wherein a sensor detects an activity of an activated / active vehicle function of the vehicle. The vehicle usually provides a plurality of vehicle functions. Each of the provided vehicle functions can belong to a functional system of the vehicle. Each functional system of the vehicle can comprise at least one control device, at least one actuator and / or at least one sensor as components of the functional system. These components of the functional system as well as the plurality of different functional systems of the vehicle are usually communicatively connected by means of a vehicle bus.

[0011] In many cases, a functional system is configured for providing a plurality of vehicle functions. Some of the provided vehicle functions are authorized, while other vehicle functions of the provided vehicle functions are initially unauthorized and thus cannot be used. However, each vehicle function which is initially unauthorized can be authorized later on. For this purpose, a vehicle user can selectively purchase the required vehicle functions, i.e. add these vehicle functions as a special configuration. Such a later on authorizable vehicle function is usually also referred to as "Function on Demand" (FoD).

[0012] A conventional vehicle function can be monitored by means of a sensor. The sensor can detect a manual activation of the vehicle function by a user or a usage of the activated vehicle function. Both detection variables are activities in the sense of the present application.

[0013] For example, a seat heating of the vehicle is a vehicle function in the sense of the present application. A hand movement for switching on the seat heating or a switching sound of a mechanical switch of the seat heating, as well as a temperature of a seat cushion of the vehicle or a lighted state of a control light of the seat heating in case the seat heating is switched on / activated can be detected by means of a sensor.

[0014] Other exemplary, non-limiting vehicle functions include a digital audio broadcast (DAB) radio, a digital navigation map, a matrix LED headlight, an adaptive high beam assistant, a parking assistant, a light signal (in particular a personalized light signal, such as a welcome light signal or a confirmation light signal), a sound (in particular a personalized sound, such as a welcome sound or a confirmation sound) and a turn signal.

[0015] In the sense of the present application, sensors include sound sensors (e.g. microphones), light sensors (e.g. video cameras), temperature sensors, motion sensors (e.g. inertial sensors or gyroscopic sensors), position sensors, current and voltage sensors, etc.

[0016] According to the present application, a computing device located outside the vehicle compares the activated vehicle function related to the detected activity with each authorized vehicle function of the vehicle stored by a stationary server, and identifies the activated vehicle function as an unauthorized vehicle function when the activated vehicle function does not correspond to any of the stored authorized vehicle functions. The server can store each authorized vehicle function in a database or in a block of a blockchain. The identification of an unauthorized activated vehicle function is thus not only indirectly, i.e. not based on a function state of the vehicle function (like on or off, activated or not activated) which can be directly determined, but also outside the vehicle. In this way, a malicious manipulation of the vehicle for the purpose of unauthorized use of vehicle functions without being detected is practically excluded or at least made very difficult.

[0017] In one embodiment, sensors of the vehicle detect the activity, and a control device of the vehicle transmits a message indicating the activated vehicle function to a stationary server which is an external computing device. The stationary server can be provided and operated by the vehicle manufacturer. The stationary server can of course comprise a plurality of computing devices and / or processors. In other words, the stationary server also comprises an internet cloud, an edge data center, etc. It goes without saying that not the authorized vehicle functions themselves are stored, but rather a data set confirming the authorization of the vehicle functions.

[0018] The control device of the vehicle advantageously reads data packets transmitted via a vehicle bus of the vehicle and determines the activated vehicle function from the read data packets corresponding to the activated vehicle function. The indirect detection of the activity according to the present application can be supplemented by a direct determination, thereby further increasing the difficulty of a malicious manipulation of the vehicle without being detected.

[0019] In another embodiment, the vehicle transmits messages indicating each determined activated vehicle function to the stationary server at regular intervals. In this way, it is ensured that the activated vehicle function is continuously compared with the authorized vehicle functions. Temporary differences occurring in the course of the comparison can be identified as acceptable with the aid of a predetermined grace period.

[0020] Alternatively or additionally, a sensor of another vehicle can detect the activity and a QR code arranged on the outside of the vehicle, a control device of the other vehicle as external computing device can compare the activated vehicle function with each authorized vehicle function of the vehicle indicated by the detected vehicle QR code and transmit a message to a stationary server indicating that the activated vehicle function is identified as unauthorized. The QR (Quick Response) code enables the other vehicle to compare the activated vehicle function with each authorized vehicle function. The other vehicle can be provided by the same manufacturer as the vehicle. A plurality of such other vehicles adapted for comparison further increases the difficulty of undetected malicious tampering with the vehicle. A barcode arranged on the outside of the vehicle can be used analogously to the QR code.

[0021] In particular, the QR code can address a block of the blockchain in which each authorized vehicle function is stored, and the other vehicle can read the addressed block. For example, the authorized vehicle functions can be stored in the blockchain as non-fungible tokens (NFTs).

[0022] In an embodiment, an interior space sensor and / or an environmental sensor detect the activity. The interior space sensor detects a physical quantity inside the vehicle. The environmental sensor detects a physical quantity outside the vehicle. The sensor of the other vehicle described above is an environmental sensor that detects the vehicle with the activated vehicle function when the vehicle is arranged in the surroundings of the other vehicle. For example, an external camera of the other vehicle can detect the QR code of the vehicle and the activated turn signal of the vehicle.

[0023] Preferably, a plurality of sensors detect the activity. The more sensors that detect the activity, the more difficult it is to maliciously tamper with the vehicle undetected. In particular, a plurality of sensors can simultaneously detect different physical quantities, which leads to a higher reliability of the identification method.

[0024] Ideally, a plurality of activated vehicle functions are detected. In this way, a plurality of (ideally all) activated vehicle functions that are not authorized can be identified.

[0025] A further subject of the application is to provide a vehicle that provides a vehicle function. More precisely, a function system of the vehicle provides the vehicle function. The vehicle can comprise a plurality of function systems that each provide a plurality of vehicle functions. The vehicle function provided by the function system can subsequently be authorized as a “function on demand” (FoD).

[0026] According to the application, the vehicle is configured to carry out the method according to an embodiment of the application in cooperation with a computing device located outside the vehicle. Thus, the vehicle is protected against undetected, malicious tampering with unauthorized vehicle functions of the vehicle that can be used.

[0027] The main advantage of the method according to the invention is that the vehicle can be better protected against misuse of the vehicle functions without being detected. Thereby, economic losses for the vehicle manufacturer are avoided or at least reduced and the driving safety of the vehicle is also improved. BRIEF DESCRIPTION OF DRAWINGS

[0028] The invention is schematically illustrated by means of embodiments in the attached drawings and will be further described with reference to the attached drawings. In which:

[0029] Figure 1 A system with a vehicle according to an embodiment of the invention is shown. DETAILED DESCRIPTION

[0030] Figure 1 A system with a vehicle 1 according to an embodiment of the invention is schematically shown. The system comprises an external computing device 2 which can be designed as a stationary server 3 or as another vehicle 4. The stationary server 3 can comprise a database 30 for storing authorized vehicle functions of the vehicle 1. The other vehicle comprises sensors 40 and a control device 41.

[0031] Furthermore, the system can comprise a blockchain 5. As usual, the blockchain 5 comprises a plurality of interlinked cryptographic blocks 50.

[0032] The vehicle 1 can comprise sensors 10 and / or a QR code 12 arranged on the outside of the vehicle 1, can provide vehicle functions 13 and is configured to execute a method according to an embodiment of the invention for recognizing activities of unauthorized vehicle functions 13 of the vehicle 1 in the following way.

[0033] The stationary server 3 can store each authorized vehicle function 13 of the vehicle 1 as an entry in the database 30 and / or as a non-fungible token (NFT) in the blockchain 5.

[0034] The sensors 10, 40 detect activities of activated vehicle functions 13 of the vehicle 1. As sensors 10, 40 which detect the activities can be interior space sensors 10 and / or environmental sensors 40. In particular, a plurality of sensors 10, 40 can detect the activities. Of course, activities of a plurality of activated vehicle functions 13 can be detected.

[0035] For example, the sensor 10 of the vehicle 1 can detect an activity, the control device 11 of the vehicle 1 can transmit a message 6 to the stationary server 3 indicating the activated vehicle function 13, and the stationary server 3 as external computing device 2 can compare the indicated activated vehicle function 13 with each authorized vehicle function 13 stored. The stored authorized vehicle functions can be stored in a database 30 or in a blockchain 5.

[0036] In addition, the control device 11 can read data packets transmitted over the vehicle bus 14 of the vehicle 1 and determine each activated vehicle function 13 from the read data packets corresponding to the activated vehicle function 13. Preferably, the control device 11 transmits messages 6 to the stationary server 3 indicating each determined activated vehicle function 13 periodically.

[0037] Alternatively or additionally, the sensor 40 of another vehicle 4 can detect an activity and a QR code 12 arranged outside the own vehicle 1, the control device 41 of the other vehicle 4 as external computing device 2 can compare the activated vehicle function 13 with each authorized vehicle function 13 of the vehicle 1 indicated by the detected QR code 12 of the vehicle 1 and transmit a message 7 to the stationary server 3 indicating that the activated vehicle function 13 is identified as unauthorized.

[0038] The QR code 12 can address a block 50 in the blockchain 5 in which each authorized vehicle function 13 is stored, and the other vehicle 4 can read the addressed block 50.

[0039] The computing device 2 located outside the vehicle 1 compares the activated vehicle function 13 related to the detected activity with each authorized vehicle function 13 of the vehicle 1 stored by the stationary server 3 and identifies the activated vehicle function 13 as unauthorized when it is different from any of the stored authorized vehicle functions 13.

[0040] List of reference signs:

[0041] 1 vehicle

[0042] 10 sensor

[0043] 11 control device

[0044] 12 QR code

[0045] 13 vehicle function

[0046] 14 vehicle bus

[0047] 2 external computing device

[0048] 3 stationary server

[0049] 30 database

[0050] 4 another vehicle

[0051] 40 sensor

[0052] 41 control device

[0053] 5 blockchain

[0054] 50 block

[0055] 6 message

[0056] 7 message

Claims

1. A method for identifying the activity of unauthorized vehicle functions (13) of a vehicle (1), wherein: - Sensors (10, 40) detect the activity of the vehicle function (13) activated by the vehicle (1); - A computing device (2) located outside the vehicle (1) compares the active vehicle function (13) associated with the detected activity with each authorized vehicle function (13) of the vehicle (1) stored in the stationary server (3), and identifies the active vehicle function (13) as unauthorized when the active vehicle function (13) is not simultaneously with any of the stored authorized vehicle functions (13).

2. The method according to claim 1, characterized in that, The vehicle's (1) sensors (10) detect activity, and the vehicle's (1) control device (11) transmits a message (6) indicating the activated vehicle function (13) to a stationary server (3), which acts as an external computing device (2) to compare the indicated activated vehicle function (13) with each stored authorized vehicle function (13).

3. The method according to claim 2, characterized in that, The control device (11) reads the data packets transmitted through the vehicle bus (14) of the vehicle (1) and determines each activated vehicle function (13) based on the data packets read that correspond to the activated vehicle functions (13).

4. The method according to claim 3, characterized in that, The control device (11) periodically transmits a message (6) to the stationary server (3) specifying each activated vehicle function (13).

5. The method according to any one of claims 1 to 4, characterized in that, The sensor (40) of another vehicle (4) detects the activity and the QR code (12) arranged on the outside of the vehicle (1). The control device (41) of the other vehicle (4) acts as an external computing device (2) to compare the activated vehicle function (13) with each authorized vehicle function (13) of the vehicle (1) indicated by the QR code (12) of the detected vehicle (1) and transmits the following message (7) to the stationary server (3), which indicates that the activated vehicle function (13) is identified as unauthorized.

6. The method according to claim 5, characterized in that, QR code (12) addresses the storage of the blockchain (5) containing the block (50) of each authorized vehicle function (13), and another vehicle (4) reads the addressed block (50).

7. The method according to any one of claims 1 to 6, characterized in that, The sensors (10, 40) that detect activity are the in-vehicle sensor (10) and / or the environmental sensor (40).

8. The method according to any one of claims 1 to 7, characterized in that, Multiple sensors (10, 40) detect the activity.

9. The method according to any one of claims 1 to 8, characterized in that, The activity of multiple activated vehicle functions (13) is detected.

10. A vehicle (1) that provides vehicle functions (13) and is configured to perform the method according to any one of claims 1 to 9 in cooperation with a computing device (2) located outside the vehicle (1).

Images