Vehicle communication system, access data device and telematics communication system

Abstract

Access data device (30) for providing predetermined access data for at least a plurality of access-restricted telematics services (3_1, 3_N) used in a motor vehicle, wherein the access data device (30) is arranged outside the motor vehicle, has a second communication interface (32) and is designed, - to receive a provision request for the specified access data of the respective access-restricted telematics service (3_1, 3_N) via the second communication interface (32) - to assign the provision request to the motor vehicle and / or a specified motor vehicle user, - to determine the respective access data in response to the provision request in a vehicle-specific and / or vehicle-user-specific manner and to provide them at the second communication interface (32) and - wherein the access data device (30) has a third communication interface (35) and is designed - for the respective restricted-access telematics service (3_1, 3_N), to issue a vehicle-specific and / or vehicle-user-specific further provision request for basic access data for the restricted-access telematics service (3_1, 3_N) via the third communication interface, - to temporarily store the basic access data of the respective telematics service (3_1, 3_N) provided in response to the further provision request at the third communication interface (35) and - depending on the basic access data, to determine the specified access data vehicle-specifically and / or vehicle-user-specifically for the specified telematics service (3_1, 3_N).

Description

[0001] The invention relates to a vehicle communication system, an access data device and a telematics communication system for using access-restricted telematics services in a motor vehicle.

[0002] The use of telematics systems is becoming increasingly important in the field of automotive technology. Telematics services are already being used in motor vehicles, enabling new functionalities in the areas of traffic control, safety services, and dynamic navigation assistance. Telematics services in the automotive environment require communication between a communication device located in the motor vehicle and an infrastructure providing the telematics services. Communication between the communication device located in the motor vehicle and, for example, a network service server preferably takes place via a wireless communication link. Provision may be made for proof of user authorization, such as authentication using specific access data, to be required to access a telematics service provided by the network service server.

[0003] DE 603 ​​19 542 T2 discloses a method for controlling access to encrypted data services for an entertainment and information processing device in a vehicle. The entertainment and information processing device located in the vehicle requests access data from an access control server located outside the vehicle and uses this access data to access a content server that provides the encrypted data services.

[0004] The object underlying the invention is to create an access data device that contributes to simplifying the provision of access data for access-restricted telematics services used in a motor vehicle.

[0005] The invention is characterized by an access data device for providing predefined access data for at least a plurality of restricted-access telematics services used in a motor vehicle. The access data device is arranged outside the motor vehicle and has a second communication interface. The access data device is designed to receive a provision request for the predefined access data of the respective restricted-access telematics service via the second communication interface. Furthermore, the access data device is designed to assign the provision request to the motor vehicle and / or a predefined motor vehicle user and, in response to the provision request, to determine the respective access data in a vehicle-specific and / or vehicle-user-specific manner and to provide it at the second communication interface.

[0006] The access data device further comprises a third communication interface and is configured to issue a vehicle-specific and / or vehicle-user-specific further provision request for basic access data for the respective access-restricted telematics service via the third communication interface, as well as to temporarily store the basic access data of the respective telematics service provided at the third communication interface in response to the further provision request, and to determine the specified access data for the specified telematics service in a vehicle-specific and / or vehicle-user-specific manner based on the basic access data. In this case, the third communication interface can be the same communication interface as the second communication interface on a physical level.

[0007] The basic access data can comprise the access data that authorizes use of the restricted-access telematics service. In this case, the access data device can adopt the access data unchanged. Alternatively, the basic access data can comprise further data. For example, it can be provided that a user name and an access password are not to be used in their entirety, but only a part of them, for example some of the numbers or letters from which they are composed. For example, the basic access data can comprise an instruction to send only the second, first, and fourth digits of a PIN. In this case, the access data device is designed to determine the access data depending on the basic access data. Furthermore, it may be necessary, for example, to encrypt a password of the basic access data, so that the access data comprises an encrypted password.

[0008] In an advantageous embodiment of the invention, a telematics communication system is provided for the use of access-restricted telematics services in a motor vehicle. In addition to the access data device, the telematics communication system comprises a vehicle communication system arranged in the motor vehicle with a central access data unit, as well as an access data device provided outside the motor vehicle. The first communication interface of the central access data unit can be coupled to the second communication interface of the access data device via at least one predetermined network connection. The vehicle communication system is configured for the use of access-restricted telematics services in the motor vehicle.The vehicle communication system is arranged in the motor vehicle and comprises one or more telematics units, each configured to execute one or more telematics applications, each of which uses at least one restricted-access telematics service. Furthermore, the vehicle communication system comprises a central access data unit for managing predefined access data for at least a plurality of the restricted-access telematics services used by the telematics applications in the motor vehicle.The central access data unit has a first communication interface and is designed to issue a provision request for the access data of the restricted-access telematics service for the respective restricted-access telematics service via the first communication interface and to store access data for the respective restricted-access telematics service, which are provided in response to the provision request at the first communication interface, and to make them available via a predetermined internal interface of the telematics application that uses the respective restricted-access telematics service.

[0009] The central access data unit can advantageously contribute to making the access data for the respective access-restricted telematics services available in a timely and application-specific manner. Furthermore, this can contribute to simplifying the expansion of the telematics services used in the motor vehicle and reducing the complexity of a telematics unit, since circuit modules and / or software modules for managing access data can be eliminated in the respective telematics unit.

[0010] Preferably, the central access data unit is designed to manage all restricted-access telematics services used in the motor vehicle. A telematics service whose use requires access authorization is referred to as a restricted-access telematics service. The access data may, for example, comprise vehicle-specific identification information and / or vehicle-user-specific identification information and / or a password. The access data may further comprise, for example, secret keys and / or digital certificates. The access data may have an unlimited or limited validity period. Access data with an unlimited validity period may also be referred to as static access data. Access data with a limited validity period may be referred to as dynamic access data.For example, dynamic access data can be used to better protect a network service server from unauthorized access. To manage the access data, the central access data unit can have a memory in which the access data is stored. In particular, the static access data can be stored in the memory so that the static access data can be read from the memory and made available to the respective telematics application when needed, for example, when the access data unit is signaled that the respective telematics service should be activated. If the respective telematics service requires dynamic access data, the dynamic access data can be requested from the central access data unit.Furthermore, the dynamic access data can also be temporarily stored in the memory, read from the memory as needed, and, if the dynamic access data still has a predetermined remaining validity period, made available directly to the respective telematics application. During an initial service configuration of the motor vehicle, for example, upon delivery of the motor vehicle from the factory and / or upon sale of the motor vehicle, it can be provided that the access data for all desired telematics services, in particular for telematics services whose access data have an unlimited or longer validity period, are requested and stored by the central access data unit.

[0011] In an advantageous embodiment, the central access data unit is configured to evaluate the access data of a currently used telematics service in such a way that, if the access data has a limited validity period, a point in time is determined depending on the validity period and a predetermined update period. At the determined point in time, a renewed provision request for the updated access data of the currently used telematics service is issued via the first communication interface. This enables the updated access data to be made available in a timely manner, i.e., before the expiration of the limited validity period of the respective telematics application. The update period can be fixed or determined, for example, based on update times actually used in the past.Advantageously, this can prevent, for example, a communication connection between the respective telematics application and a network service server from being interrupted due to the expiration of the validity period of the access data.

[0012] Embodiments of the invention are explained in more detail below with reference to the schematic drawings. It shows: Fig. 1 an embodiment of a telematics communication system.

[0013] A telematics communication system 1 ( Fig. 1) comprises a vehicle communication system 10 arranged in a motor vehicle and an access data device 30 arranged outside the motor vehicle.

[0014] The vehicle communication system 10 comprises one or more telematics units 15_1, 15_M, which are configured to execute at least one telematics application that uses at least one access-restricted telematics service 3_1, 3_N. The at least one telematics application can, for example, comprise fleet management, route planning, remote diagnostics, theft protection, sending electronic mail, and / or access to vehicle-external databases. The respective telematics unit 15_1, 15_M can, for example, comprise a standalone circuit unit or part of a central computer unit. Additionally or alternatively, the respective telematics unit 15_1, 15_M can comprise a software module that is executed by a computer unit.The respective telematics unit 15_1, 15_M can comprise at least one network connection device and / or the respective telematics unit 15_1, 15_M can be assigned the at least one network connection device, so that the respective telematics application of the telematics unit 15_1, 15_M can be coupled to a network service server of a service provider via a predetermined network in order to retrieve the at least one access-restricted telematics service 3_1, 3_N.

[0015] Furthermore, the vehicle communication system 10 comprises a central access data unit 20 for managing predefined access data for at least a plurality of the restricted-access telematics services 3_1, 3_N used by the telematics applications in the motor vehicle. The central access data unit 20 has a first communication interface 22 and is configured to issue a provision request for the access data of the restricted-access telematics service for the respective restricted-access telematics service 3_1, 3_N via the first communication interface 22, as well as to store access data for the respective restricted-access telematics service 3_1, 3_N, which are provided in response to the provision request at the first communication interface 22, and to make them available via a predefined internal interface 25 to the telematics application that uses the respective restricted-access telematics service 3_1, 3_N.

[0016] The central access data unit 20 can, for example, be designed to evaluate the access data of a currently used telematics service 3_1, 3_N in such a way that, if the access data has a limited period of validity, a point in time is determined depending on the period of validity and a predetermined update period, and at the determined point in time, a renewed provision request for the updated access data of the currently used telematics service 3_1, 3_N is issued via the first communication interface 22.

[0017] The access data device 30 is preferably arranged in a stationary manner, for example, in a service center of the motor vehicle manufacturer or an OEM partner of the motor vehicle manufacturer. The access data device 30 can, for example, comprise a computing unit. The access data device 30 has a second communication interface 32, which can be coupled to the first communication interface 22 of the central access data unit 20 via at least one predetermined network connection. The at least one network connection preferably comprises a wireless communication connection.

[0018] The access data device 30 is configured to receive a provision request for the specified access data of the respective restricted-access telematics service 3_1, 3_N via the second communication interface 32. Furthermore, the access data device 30 is configured to assign the provision request to the motor vehicle and / or a specified motor vehicle user and, in response to the provision request, to determine the respective access data in a vehicle-specific and / or vehicle-user-specific manner and to provide it at the second communication interface 32.

[0019] Furthermore, the access data device 30 can have a third communication interface 35 and, for example, be configured to issue a vehicle-specific and / or vehicle-user-specific further provision request for basic access data for the respective restricted-access telematics service 3_1, 3_N via the third communication interface 35, as well as to temporarily store the basic access data of the respective telematics service 3_1, 3_N, which are provided at the third communication interface 35 in response to the further provision request, and to determine the specified vehicle-specific and / or vehicle-user-specific access data for the specified telematics service 3_1, 3_N depending on the basic access data. In this case, the third communication interface 35 can be the same communication interface as the second communication interface 32 on a physical level.

[0020] The third communication interface 35 of the access data device 30 can, for example, be coupled via a further predetermined network connection to a predetermined service authorization control unit 50_1, 50_N for the respective access-restricted telematics service 3_1, 3_N of a service provider in order to request the basic access data of the respective access-restricted telematics service 3_1, 3_N. The service authorization control unit 50_1, 50_N can, for example, have a proxy component. The proxy component can, for example, be used as an access point for an access-protected network that can comprise one or more network service servers. In this case, the network service servers of the access-protected network can only be reached via the proxy component.The proxy component can, for example, be configured to allow access to the access-protected network and thus to a desired telematics service 3_1, 3_N, depending on an access authorization credential, such as the access data. The proxy component can contribute to better protecting the network service server(s) from unauthorized access and manipulation. List of reference symbols 1 telematics communication system 3_1, 3_N Telematics service 10 Vehicle communication system 15_1, 15_M Telematics unit 20 central access data unit 22 first communication interface 25 internal interface 27 storage 30 Access data setup 32 second communication interface 35 third communication interface 50_1, 50_N Service authorization control unit

Claims

[1] Access data device (30) for providing predetermined access data for at least a plurality of access-restricted telematics services (3_1, 3_N) that are used in a motor vehicle, wherein the access data device (30) is arranged outside the motor vehicle, has a second communication interface (32) and is designed, - to receive a provision request for the specified access data of the respective access-restricted telematics service (3_1, 3_N) via the second communication interface (32) - to assign the provision request to the motor vehicle and / or a specified motor vehicle user, - to determine the respective access data in response to the provision request in a vehicle-specific and / or vehicle-user-specific manner and to provide them at the second communication interface (32) and - wherein the access data device (30) has a third communication interface (35) and is designed - for the respective restricted-access telematics service (3_1, 3_N), to issue a vehicle-specific and / or vehicle-user-specific further provision request for basic access data for the restricted-access telematics service (3_1, 3_N) via the third communication interface, - to temporarily store the basic access data of the respective telematics service (3_1, 3_N) provided in response to the further provision request at the third communication interface (35) and - depending on the basic access data, to determine the specified access data vehicle-specifically and / or vehicle-user-specifically for the specified telematics service (3_1, 3_N). [2] Telematics communication system (1) for using access-restricted telematics services (3_1, 3_N) in a motor vehicle, comprising an access data device (30) according to claim 1 and a vehicle communication system (10), wherein the vehicle communication system (10) is arranged in the motor vehicle and comprises: - one or more telematics units (15_1, 15_M), each designed to execute one or more telematics applications, each using at least one restricted-access telematics service (3_1, 3_N), - a central access data unit (20) for managing predefined access data for at least a plurality of the access-restricted telematics services (3_1, 3_N) used by the telematics applications in the motor vehicle, wherein the central access data unit (20) has a first communication interface (22) and is designed to output a provision request for the access data of the access-restricted telematics service (3_1, 3_N) for the respective access-restricted telematics service (3_1, 3_N) via the first communication interface (22) and to store access data for the respective access-restricted telematics service (3_1, 3_N) provided in response to the provision request at the first communication interface (22) and to make said access data available via a predefined internal interface (25) of the telematics application that uses the respective access-restricted telematics service (3_1, 3_N). and where - the first communication interface (22) of the central access data unit (20) can be coupled to the second communication interface (32) of the access data device (30) via at least one predetermined network connection. [3] Telematics communication system (1) according to claim 2, wherein the central access data unit (20) is designed - to evaluate the access data of a currently used telematics service (3_1, 3_N) in such a way that, if the access data has a limited period of validity, a point in time is determined depending on the period of validity and a predetermined update period, and - at the determined time, to issue a new provision request for updated access data of the currently used telematics service (3_1, 3_N) via the first communication interface (22).

Images