Communication system for proving a driver's license

Abstract

Communication system (10) for proving a driving licence, comprising an electronic vehicle key (18); and a reading device (16) which is configured to communicate with the electronic vehicle key (18); wherein driving licence data (19) are stored on the electronic vehicle key (18) and the reading device (16) is configured to retrieve the driving licence data (19) stored on the electronic vehicle key (18); characterized in that the electronic vehicle key (18) is configured to calculate a graphical interface for displaying the driving licence data (19) stored on the electronic vehicle key (18); and that the electronic vehicle key (18) is configured to send the interface for display to the reading device (16).

Description

The invention relates to a communication system for proving a driver's license and an electronic vehicle key. The functionality of electronic vehicle keys will continue to increase in the future. For example, electronic vehicle keys will not only be used to lock and unlock vehicle doors, but will also be able to contain digital official documents. The increasing range of functions offered by electronic car keys is, however, hampered by their small size, which significantly limits ease of use. A compact electronic car key can only have a limited number of input elements and provide the user with limited visual information. For example, from the publication DE 20 2011 105 142 U1, an electronic vehicle key with an integrated color display is known, which also has a combined function and menu button and features advanced touchscreen technology for remote control of the vehicle access and authorization system. The touchscreen of an electronic vehicle key can also have limited dimensions to avoid compromising its usability. Touchscreens of this size are unsuitable for clearly displaying information or conveniently managing digital official documents. Conversely, increasing the size of the integrated touchscreen significantly impairs user comfort, as carrying the electronic vehicle key on a keyring, for example, becomes impossible. Furthermore, the integration of display devices such as touchscreens, as well as the equipping of an electronic vehicle key with multiple communication modules, leads to a significantly increased energy demand. Due to the small size of an electronic vehicle key, however, only batteries with a limited size and therefore limited capacity can be used. Additional electronic components cause rapid discharge, forcing the user to replace the battery regularly. In the case of a rechargeable vehicle key battery, regular recharging is necessary. Both battery replacement and recharging significantly impair user convenience. Various solutions are known in the state of the art for proving a driver's license. The German patent application DE 10 2012 009 019 A1 proposes a method for operating a vehicle in which data relating to a general driving authorization for driving motor vehicles is automatically recorded by means of the vehicle's data acquisition devices and the data is automatically checked so that a vehicle function can be activated if the data check yields a positive result. The general driving authorization is, for example, a driver's license issued by an official authority. From German patent application DE 20 2015 100 748 U1, a device for vehicle control is known, comprising a storage unit, a reading unit, and a processor unit. The storage unit contains primary data uniquely assigned to a vehicle. The reading unit is used to acquire the data stored in an electronic driver's license. The processor unit is configured to acquire primary data from the storage unit, to obtain the data stored in the electronic driver's license via the reading unit, and to generate a transmission signal for a remote device containing the primary data acquired from the storage unit and the data acquired from the electronic driver's license. Furthermore, EP 1 568 555 A1 discloses an authentication device comprising an in-vehicle communication unit for communicating with an electronic license card on which license card information, including driver identification information, is stored. The proposed authentication device also includes an authentication unit for authenticating the license card information and an activation unit for activating a vehicle function. The activation unit is configured to activate a corresponding vehicle function based on activation information if the authentication unit has successfully authenticated the license card information. However, the known solutions always require the existence of a separate object by means of which a driver's license can be proven. In this regard, German patent application DE 199 36 528 A1 describes a motor vehicle equipped with a reader for a data carrier that must be carried by the user and brought into contact with the reader before the vehicle is used. The data carrier contains the user's personal data. Furthermore, the data carrier can replace an ignition key. Publication EP 1 495 927 A2 describes a system for controlling the functions of a motor vehicle, comprising a control unit and a chip card. Using the control unit and operating parameters and / or program additions provided by the chip card, a predetermined engine characteristic and / or chassis characteristic corresponding to the chip card can be set. The chip card can also function as an electronic ignition key. German patent application DE 10 2009 035 654 A1 describes a device for access authentication on a vehicle. The device comprises a radio module for exchanging radio signals between the radio module and the vehicle via a radio interface in order to perform contactless access authentication on the vehicle. The invention is based on the objective of creating a way to simplify the proof of driving licence. This problem is solved by a communication system according to claim 1 or by an electronic vehicle key according to claim 15. The communication system according to the invention for proving a driver's license comprises an electronic vehicle key and a reading device. The reading device is configured to communicate with the electronic vehicle key. According to the invention, driver's license data is stored on the electronic vehicle key, and the reading device is configured to retrieve the driver's license data stored on the electronic vehicle key. The communication system according to the invention has the advantage that, apart from the electronic vehicle key, no other object is required to prove a driver's license. Because the driver's license data is stored on the electronic vehicle key and the reading device is configured to retrieve this data, a person can conveniently provide proof of a valid driver's license using the electronic vehicle key. For example, such a communication system can be used during traffic stops to check the driver's license. Another area of ​​application is vehicle rental. For instance, a vehicle rental company can quickly and easily verify whether a prospective renter has a suitable and valid driver's license using the communication system according to the invention. Preferably, the driver's license data on the electronic vehicle key includes information about a person's authorization to drive specific vehicles on public roads. In particular, the electronic vehicle key uses a first key-internal communication module to communicate with the reading device. For example, communication between the reader and the electronic vehicle key takes place via 20 kHz, 125 kHz, 130 kHz, 433 MHz, 868 MHz, 315 MHz, Bluetooth, infrared, RFID, mobile network, internet, or using a local network. For added convenience, the electronic vehicle key can have a display or a touchscreen. The reader can be configured to display the driver's license data stored on the electronic vehicle key. Because the driver's license data stored on the electronic vehicle key can be displayed on the reader, verification of the driver's license data can be carried out without a separate display device. This further simplifies the process of proving a driver's license. Alternatively or additionally, the reader can also have a communication interface that can be connected to a separate display device. This allows the driver's license data to be viewed, for example, by individuals or institutions located away from the electronic vehicle key and the reader. The communication system can also include a vehicle, wherein the electronic vehicle key is configured to communicate with the vehicle. Preferably, the vehicle is configured to retrieve the driver's license data stored on the electronic vehicle key. Because the vehicle is configured to retrieve the driver's license data stored on the electronic vehicle key, it can verify the driver's license data. For example, the vehicle is configured to enable individual or all vehicle functions upon successful verification of the driver's license data. In particular, the vehicle has an internal communication module configured to communicate with the electronic vehicle key. Preferably, the electronic vehicle key uses a second internal communication module to communicate with the internal communication module.The first key-internal communication module and the second key-internal communication module preferably use different communication standards. For example, communication between the electronic vehicle key and the vehicle-internal communication module takes place at 20 kHz, 125 kHz, 130 kHz, 433 MHz, 868 MHz, 315 MHz, via Bluetooth, infrared, RFID, mobile network, internet, or using a local network. The vehicle can be equipped to display the driver's license data stored on the electronic vehicle key. For this purpose, the vehicle preferably has a display and / or a touchscreen. Because the vehicle is equipped to display the driver's license data stored on the electronic vehicle key, a person inside the vehicle can verify the driver's license information. This significantly simplifies the verification process, especially if a reader is temporarily unavailable, for example, due to a technical defect. Furthermore, the driver can use the vehicle's display of the driver's license data to confirm that their license is still valid and / or authorizes them to drive a vehicle of a specific vehicle class.The driving licence data can also provide information on whether the driver is entitled to drive a vehicle combination consisting of a towing vehicle and a trailer, and / or whether an accompanying person must be present in the vehicle in addition to the driver. The electronic vehicle key can have an internal secure memory, in which the driver's license data is stored. This driver's license data can include sensitive information, such as the driver's license holder's personal data or data defining the scope of the license, which must not be alterable by third parties. The internal secure memory of the electronic vehicle key thus significantly increases security. Preferably, cryptographic material is stored in the internal secure memory of the electronic vehicle key. This cryptographic material can be used to authenticate the electronic vehicle key to the vehicle and / or the reading device.Preferably, the cryptographic material on the key-internal secure memory of the electronic vehicle key comprises cryptographic key material, cryptographic certificates, authorization files, and / or entity-related data. The entity-related data may also include, for example, biometric data. The data on the key-internal secure memory of the electronic vehicle key may be stored partially or completely as plaintext or as decryption and / or as ciphertext. The ciphertext may have been generated from plaintext either by a reversible or an irreversible process. If the ciphertext was generated from plaintext by a reversible process, the generation process can be reversed to generate the plaintext from the ciphertext.If the ciphertext was generated from plaintext through an irreversible process, the plaintext cannot be generated from the ciphertext by reversing the generation process. This irreversible process can be based on a hash function. The various cryptographic data stored in the secure internal memory of the electronic vehicle key allow for authentication of the electronic vehicle key to the vehicle using a variety of technologies, such as mutual authentication based on Transport Layer Security (TLS) and a Public Key Infrastructure (PKI), or by using the electronic vehicle key as a transaction authentication number (TAN) generator. This further enhances the security of the communication connection. In particular, the data in the secure internal memory of the electronic vehicle key is protected against alteration by the reading device.The electronic vehicle key can also be configured to cryptographically protect messages to be sent against modification and / or eavesdropping, in particular to cryptographically sign them. The driver's license data on the electronic vehicle key can have a cryptographic signature. This cryptographic signature can, for example, include a certificate. The certificate may, for instance, have been issued by a certified certification authority. This further increases the level of security. The communication system may also include a central computer, with the reading device configured to communicate with the central computer. The central computer is preferably configured as a server and / or as a backend for a vehicle manufacturer or a third-party provider. The central computer may include a database accessed by a driver's license management system. For example, the central computer may be connected to the internet. The reader, the vehicle, and / or the central computer can be configured to verify the driver's license data on the electronic vehicle key, particularly for authenticity and validity. This configuration significantly simplifies and speeds up driver's license checks. Specifically, the verification capabilities of the central computer and the vehicle enable a system that continuously monitors the validity of driver's licenses. Such a system allows for considerably more comprehensive checks than the known random checks conducted by relevant authorities. The reading device can be configured as a stationary reading terminal. Such a stationary reading terminal can be used, for example, in the buildings of authorities responsible for road traffic or the enforcement of traffic violations. A stationary reading terminal communicates with the electronic vehicle key, for instance, via near-field communication (NFC) to retrieve and / or verify the driver's license data stored on the electronic vehicle key. The reading device can be designed as a mobile device, such as a smartphone or tablet. Most people carry such devices regularly these days. This eliminates the need to purchase a separate reading device, resulting in high user acceptance. Furthermore, mobile devices are particularly well-suited for clearly displaying driver's license data due to their relatively large screens. For added convenience, the electronic vehicle key can also feature a display, such as a screen or touchscreen, which can show the driver's license data stored on it. The electronic vehicle key can be configured to be controlled via the diagnostic tool. Specifically, the generation, transmission, and reception of information and / or control commands by the electronic vehicle key can be controlled via the diagnostic tool. This allows the user to access the functions of the electronic vehicle key using the diagnostic tool without having to operate the key itself. The diagnostic tool thus provides the electronic vehicle key with its operating functionality, particularly by providing input elements such as push buttons, keys, or a touchscreen, and / or its display functionality, particularly by providing a display and / or a touchscreen. This significantly increases the ease of use of the electronic vehicle key. A vehicle management application may be installed on the electronic vehicle key and / or the reader, configured to access the driver's license data stored on the electronic vehicle key. In particular, the vehicle management application is configured to establish a communication connection with the central computer, especially via the internet. Regardless of whether the vehicle management application is installed on the electronic vehicle key and / or the reader, it may be configured to initiate data exchange between the electronic vehicle key and the vehicle. Preferably, a user can access a user account via the vehicle management application, particularly using a username and password.The user account preferably stores the user's personal data as well as information on the purchase process and / or driver's license data. The vehicle management application can be configured to display a graphical interface on the reader for retrieving and / or viewing the driver's license data stored on the electronic vehicle key. For example, the vehicle management application includes a menu structure that is displayed to the user of the reader. By selecting a menu item, the user can, for instance, initiate a data exchange between the electronic vehicle key and the vehicle, such as transmitting the driver's license data. The graphical interface is preferably designed to allow convenient operation via a touchscreen. The diagnostic tool can be configured to enable an internal communication module for the electronic vehicle key, and the electronic vehicle key can then use this enabled internal communication module. This internal communication module could be, for example, a radio module that allows connection to a local wireless network and / or establishes a mobile communication connection. This expands the communication capabilities of the electronic vehicle key without requiring the necessary hardware to be present within the key itself. This avoids the additional space requirements and energy consumption associated with additional communication units within the electronic vehicle key.The lifespan of the vehicle key battery is therefore not affected, even though the communication capabilities of the electronic vehicle key are expanded. Specifically, the electronic vehicle key can be connected to the internet via the reader's enabled communication module. An internet connection allows the electronic vehicle key to be accessed from other internet-connected devices. For example, the electronic vehicle key can be accessed remotely using a mobile device such as a smartphone or tablet, or a personal computer, provided it has internet connectivity with the reader. The diagnostic tool can be configured to communicate directly with an in-vehicle communication module. This allows not only direct communication between the electronic vehicle key and the vehicle, but also direct communication between the diagnostic tool and the vehicle. The in-vehicle communication module used for communication between the diagnostic tool and the vehicle can be either the same or a different module than the one used for communication between the electronic vehicle key and the vehicle. The electronic vehicle key can be personalized and / or linked to a specific user. Such a key is preferably issued by a vehicle manufacturer for use by a user or user group and is not inherently tied to a specific vehicle. The user or user group can, for example, link the electronic vehicle key to one or more vehicles via a management system, such as a central computer, or locally, enabling them to use the key in these vehicles. Preferably, the user is automatically logged into a customer account stored on the electronic vehicle key upon entering the vehicle. This customer account can also be linked to usage rights and / or purchased vehicle functions or mobile online services.For example, two-factor authentication is required for registration. Specifically, the electronic vehicle key provides a cryptographic factor for two-factor authentication, namely proof of ownership. The electronic vehicle key thus also serves as proof of authentication. Alternatively, the electronic vehicle key can also be a conventional, vehicle-specific key. The electronic vehicle key can also be configured to communicate with multiple different vehicles, multiple different mobile devices, and / or multiple different reading devices. This allows the electronic vehicle key to be used for several vehicles. Ideally, the user's access rights for these multiple vehicles are stored in the user's user account. If the electronic vehicle key is configured to communicate with multiple reading devices, verifying driver's license data is significantly simplified. However, for security reasons, it may be advisable or even necessary that the electronic vehicle key be paired with only one mobile device at a time to prevent misuse. The electronic vehicle key can provide an open API (application programming interface). The reader can communicate directly with the electronic vehicle key using an available communication technology such as Bluetooth, NFC, ZigBee, or USB. To secure the communication between the reader and the electronic vehicle key, authentication can be performed between the two. This authentication can be one-way or two-way. Authentication verifies the presence of the other party. The communication between the reader and the electronic vehicle key can also be encrypted and / or authenticated using a cryptographic solution. The vehicle management application and logic preferably run on the reader.The vehicle management application can therefore access the functions and memory, especially the secure internal memory, of the electronic vehicle key. Alternatively, a trusted execution environment (TEE) exists on the electronic vehicle key. Preferably, only applications approved or released by the vehicle manufacturer run in this TEE. These applications can preferably only be introduced into the TEE via a secure process. The specifics of this process depend on the technology used for the TEE. The reader is preferably configured to establish a remote maintenance session with the electronic vehicle key during pairing, for example, via virtual network computing. In this case, the reader is used purely as a display and control device and / or serves as an interface to the internet.The vehicle management application thus runs on the electronic vehicle key, and the rendering of the interfaces and graphics also takes place on the electronic vehicle key. These interfaces are then sent to the reader for display. Conversely, the reader sends control commands and / or data from the internet to the electronic vehicle key in the secure environment. The application logic therefore runs entirely on the electronic vehicle key and is thus under the control of the vehicle manufacturer. Ideally, the data from the mobile device, such as the control commands and / or data from the internet, is appropriately secured or authenticated to prevent erroneous or manipulated data from entering the secure runtime environment. Preferably, user data is secured on the diagnostic tool and / or the electronic vehicle key. For example, security is achieved through a PIN or password prompt when connecting the diagnostic tool to the electronic vehicle key. This provides simple and easy access protection against manipulation. The electronic vehicle key according to the invention stores driver's license data and is configured to provide the stored driver's license data to a reading device. Preferably, the electronic vehicle key is designed for use with a communication system according to one of the embodiments described above. The same advantages and modifications apply to the electronic vehicle key as previously described with regard to the electronic vehicle key of the communication system. Further preferred embodiments of the invention result from the remaining features mentioned in the dependent claims. Unless otherwise specified in a particular case, the various embodiments of the invention mentioned in this application can advantageously be combined with one another. The invention is explained below with reference to an exemplary embodiment and the accompanying drawing. Figure 1 shows a schematic representation of an exemplary embodiment of the communication system according to the invention. Fig. 1 shows a communication system 10 for proving a driver's license. The communication system 10 comprises a vehicle 12, a reading device 16, an electronic vehicle key 18 and a central computer 20. Vehicle 12 has two internal communication modules 14a and 14b. The vehicle 12 communicates with the electronic vehicle key 18 via the internal communication module 14a. The communication connection 24, based on the Bluetooth standard, is used for communication between the internal communication module 14a and the electronic vehicle key 18. The vehicle 12 communicates with the diagnostic device 16 and the central computer 20 via the internal communication module 14b. The communication connection 26, based on mobile communications, is used for communication between the internal communication module 14b and the diagnostic device 16. The communication connection 30, based on mobile communications, is used for communication between the internal communication module 14b and the central computer 20. The electronic vehicle key 18 is a personalized and person-specific electronic vehicle key 18 and has an internal secure memory 21 on which driver's license data 19 is stored. The driver's license data 19 on the electronic vehicle key 18 includes information on a person's authorization to drive certain vehicles on public roads and has a cryptographic signature. Furthermore, cryptographic material is stored on the internal secure memory 21 of the electronic vehicle key 18.The cryptographic material on the key-internal secure storage 21 of the electronic vehicle key 18 comprises cryptographic key material, cryptographic certificates, authorization files and entity-related data, wherein the data on the key-internal secure storage 21 of the electronic vehicle key 18 are protected against changes by the mobile device. The reader 16 is designed as a mobile device, specifically a smartphone. The reader 16 communicates with the electronic vehicle key 18 via the communication link 22, which is a Bluetooth connection. Furthermore, the reader 16 communicates with the central computer 20 via the communication link 28. The communication link 28 is an internet connection that uses a mobile network. The reader 16 is configured to retrieve and display the driver's license data 19 stored on the electronic vehicle key 18. Vehicle 12 and central computer 20 are also configured to retrieve the driver's license data 19 stored on electronic vehicle key 18. Vehicle 12 can retrieve the driver's license data 19 stored on electronic vehicle key 18 either directly via communication link 24 or indirectly via the reader 16. Indirect retrieval of the driver's license data 19 via the reader 16 can be achieved, for example, by the reader 16 granting access to an internal communication module of electronic vehicle key 18, which then uses the granted internal communication module of the reader 16 for communication. The electronic vehicle key 18 is configured to be controlled via the reader 16. For this purpose, a vehicle management application is installed on both the electronic vehicle key 18 and the reader 16. Using the vehicle management application, the reader 16 can also access the driver's license data 19 stored on the electronic vehicle key 18. The vehicle management application provides a graphical user interface on the reader 16 for retrieving and displaying the driver's license data 19 stored on the electronic vehicle key 18. The central computer 20 is a backend system of a vehicle manufacturer. The central computer 20 includes a database accessed by an administrative system for managing driver's licenses. The reading device 16, the vehicle 12 and the central computer 20 are set up to check the driving licence data 19 on the electronic vehicle key 18 for authenticity and validity. By storing driving licence data on the electronic vehicle key and by designing the reading device to retrieve the driving licence data stored on the electronic vehicle key, the present invention significantly simplifies the proof of a driving licence. Reference symbol list 10 Communication system 12 Vehicle 14a, 14b Vehicle-internal communication modules 16 Reading device 18 Electronic vehicle key 19 Driving licence data 20 Central computer 21 Key-internal secure storage 22-30 Communication links

Claims

Communication system (10) for proving a driving licence, comprising an electronic vehicle key (18); and a reading device (16) which is configured to communicate with the electronic vehicle key (18); wherein driving licence data (19) are stored on the electronic vehicle key (18) and the reading device (16) is configured to retrieve the driving licence data (19) stored on the electronic vehicle key (18); characterized in that the electronic vehicle key (18) is configured to calculate a graphical interface for displaying the driving licence data (19) stored on the electronic vehicle key (18); and that the electronic vehicle key (18) is configured to send the interface for display to the reading device (16). Communication system (10) according to claim 1, characterized in that the reading device (16) is configured to display the driving licence data (19) stored on the electronic vehicle key (18). Communication system (10) according to claim 1 or 2, characterized by a vehicle (12), wherein the electronic vehicle key (18) is configured to communicate with the vehicle (12) and the vehicle (12) is configured to retrieve the driving licence data (19) stored on the electronic vehicle key (18). Communication system (10) according to claim 3, characterized in that the vehicle (12) is equipped to display the driving licence data (19) stored on the electronic vehicle key (18). Communication system (10) according to one of the preceding claims, characterized in that the electronic vehicle key (18) has a key-internal secure memory (21) and the driving licence data (19) are stored on the key-internal secure memory (21) of the electronic vehicle key (18). Communication system (10) according to one of the preceding claims, characterized in that the driving licence data (19) on the electronic vehicle key (18) have a cryptographic signature. Communication system (10) according to one of the preceding claims, characterized by a central computer (20), wherein the readout device (16) is configured to communicate with the central computer (20). Communication system (10) according to one of the preceding claims, characterized in that the reading device (16) is configured to check the driving licence data (19) on the electronic vehicle key (18), in particular for authenticity and validity. Communication system (10) according to claim 3 or 7, characterized in that the vehicle (12) and / or the central computer (20) is configured to check the driving licence data (19) on the electronic vehicle key (18), in particular for authenticity and validity. Communication system (10) according to one of the preceding claims, characterized in that the readout device (16) is designed as a stationary readout terminal. Communication system (10) according to one of claims 1 to 9, characterized in that the readout device (16) is designed as a mobile terminal device. Communication system (10) according to one of the preceding claims, characterized in that the electronic vehicle key (18) is configured to be controlled via the readout device (16). Communication system (10) according to one of the preceding claims, characterized in that a vehicle management application is installed on the electronic vehicle key (18) and / or the reading device (16), which is configured to access the driving licence data (19) stored on the electronic vehicle key (18). Communication system (10) according to one of the preceding claims, characterized in that the readout device (16) is configured to release an internal communication module to the electronic vehicle key (18), wherein the electronic vehicle key (18) is configured to use the released internal communication module of the readout device (16). Electronic vehicle key (18), in particular for use with a communication system (10) according to one of claims 1 to 14, wherein driving licence data (19) are stored on the electronic vehicle key (18) and the electronic vehicle key (18) is configured to provide the stored driving licence data (19) to a reading device (16); characterized in that the electronic vehicle key (18) is configured to calculate a graphical interface for displaying the driving licence data (19) stored on the electronic vehicle key (18); and that the electronic vehicle key (18) is configured to send the interface for display to the reading device (16).

Images