Procedure and server setup for granting access and start authorization to a motor vehicle

Abstract

Procedure for transferring an access and start authorization for a motor vehicle (10), comprising the steps: - Recording a first authentication step, which a user (12) has performed to confirm a group of recipients (30) selected by him for access and start authorization on a first terminal device (14), by means of a server setup (20); - if the server facility (20) has authenticated the user (12) based on the captured first authentication step: Generate and transmit a transaction number (22) to the motor vehicle (10) using the server facility (20); - Transfer of a digital key (24) serving as access and start authorization for the motor vehicle (10) by means of the server facility (20) to at least one near field communication-capable mobile terminal (18) of the selected group of recipients (30) as soon as a second authentication step has been recorded in which the transaction number (22) transferred to the motor vehicle has been entered into the first terminal (14) or into another terminal.

Description

[0001] The invention relates to a method and a server device for transmitting access and start authorization to a motor vehicle.

[0002] Various technical solutions are already known by means of which access authorization for a motor vehicle can be passed on to different persons, in particular to the respective mobile devices of persons.

[0003] For example, DE 10 2012 223 304 A1 describes a system for unlocking a vehicle. The system is designed to allow a service provider access to a vehicle for maintenance or cleaning purposes. The service provider receives an access code with which they can unlock the vehicle. Furthermore, it may be required that the service provider additionally identify themselves with a transaction number before they can unlock the vehicle.

[0004] DE 10 2012 022 786 A1 discloses an access system for a vehicle. A user can unlock a mobile device via a vehicle-mounted user interface, which then allows the mobile device to be used to unlock the vehicle. To unlock the mobile device, the user must carry an ID transmitter. The mobile device will only be unlocked if the transmitter is carried and detected in the vehicle interior during the unlocking process.

[0005] DE 10 2012 223 152 A1 describes a method in which vehicles are used as delivery locations for mail. For example, a delivery person can open the trunk of a vehicle to deposit a mail item. The delivery person can use their mobile device to unlock the trunk lid of the vehicle.

[0006] A time-limited access code is provided on the supplier's mobile device, which is used to unlock the trunk lid.

[0007] WO 2007 / 009453 A2 describes a method for unlocking and starting a motor vehicle using a mobile radio device. As soon as a ticket is ordered online, a central computer unit transmits a digital key for unlocking and starting the motor vehicle to the mobile radio device. The mobile radio device can establish a wireless connection with a vehicle-mounted receiving unit, and the digital key can be transmitted. The motor vehicle is then unlocked and can be started.

[0008] If, in addition to a simple access authorization, a start authorization for a motor vehicle is to be passed on, particularly high security standards should ideally be met. This is because, when passing on an access and start authorization, the recipient can both unlock and start the vehicle.

[0009] It is therefore the object of the present invention to provide a technical solution for passing on an access and start authorization for a motor vehicle, by means of which such an access and start authorization for a motor vehicle can be passed on in a particularly secure manner.

[0010] This object is achieved by a method and a server device for transmitting access and start authorization for a motor vehicle with the features of the independent patent claims. Advantageous embodiments with expedient and non-trivial further developments of the invention are specified in the dependent claims.

[0011] In the method according to the invention for transmitting access and start authorization for a motor vehicle, a first authentication step is recorded by a server device, which a user has carried out on a first terminal device to confirm a selected group of recipients for the access and start authorization. The user can therefore first select a group of recipients on a terminal device, i.e. one or more people to whom the access and start authorization is to be transmitted. Following the selection of the group of recipients, the user must carry out the said first authentication step on the terminal device, whereby this authentication step is recorded by the server device. The first terminal device can, for example, be a mobile terminal capable of near-field communication in the form of a smartphone.Alternatively, the first device can also be a conventional PC, for example, where the user can select the aforementioned recipient group and perform the first authentication step by accessing a specific website using the PC to complete these steps. In the case of a smartphone, however, an app can be installed on it, for example, through which the user can select the recipient group and perform the authentication step.

[0012] If the server device has authenticated the user based on the detected first authentication step, the server device generates a transaction number and transmits it to the motor vehicle. A digital key serving as access and start authorization for the motor vehicle is transmitted by the server device to at least one near-field communication-capable mobile terminal of the selected group of recipients as soon as a second authentication step has been detected, during which the transaction number transmitted to the motor vehicle has been entered into the first terminal or another terminal.

[0013] The invention therefore provides for so-called two-factor authentication. The first factor is provided by the first authentication step, while the second factor is implemented by the transaction number transmitted to the vehicle. In other words, the transaction number transmitted to the vehicle is a type of Vehicle Transaction Authentication Number, hereinafter abbreviated to vTAN.

[0014] The vehicle is thus used as a secure second channel to transmit the access and start authorization for the vehicle to the selected group of recipients in a particularly secure manner. Access to the second channel is therefore particularly secure because the user who wishes to transmit the access and start authorization to other people must themselves have the access and start authorization for the vehicle in question. This is because the person who wishes to transmit the access and start authorization for the vehicle to the selected group of recipients must, on the one hand, be able to gain access to the vehicle and, on the other hand, must also be able to start the vehicle in order to view the transaction number transmitted to the vehicle.

[0015] The transmission between the server device and the motor vehicle can be encrypted using a vehicle secret. For example, the transmitted transaction number can be linked to a chassis number, whereby the transaction number can only be retrieved or displayed in the said motor vehicle if the motor vehicle has the said chassis number. This can prevent intermediate interception via another motor vehicle. In particular, the motor vehicle can include a so-called secure element within which the transmitted transaction number can be securely stored. The transaction number is preferably stored temporarily in an encrypted memory area.

[0016] Using the method according to the invention, it is therefore possible to transfer access and start authorization for a motor vehicle to other persons in a particularly simple and secure manner. Since the person who wishes to distribute the access and start authorization to other persons must be able to view the transaction number transmitted to the motor vehicle, it can be ensured that only those persons who themselves have a valid access and start authorization for the motor vehicle in question can transfer the access and start authorization.

[0017] An advantageous embodiment of the invention provides that after the transaction number has been generated, initially only a notification is sent to the motor vehicle, signaling that the transaction number can be retrieved. The transaction number is only transmitted to the motor vehicle and displayed by means of a vehicle-side display device once this has been confirmed in the motor vehicle. For example, after the motor vehicle has been started, at least after the terminal 15 state has been established, a message can appear on said display device, signaling that said transaction number has just been generated. A vehicle occupant then only has to press a button in the vehicle interior, for the generated transaction number to be transmitted to the motor vehicle.In this case, it can be provided that the motor vehicle sends a type of request to the server device, as a result of which the server device transmits the transaction number to the motor vehicle. Alternatively, it is also possible that immediately after the transaction number is generated, it is also transmitted directly to the motor vehicle, but not displayed via the display device. In this case, the transmitted transaction number is preferably only displayed once the vehicle occupant has executed a corresponding command in the vehicle, for example by pressing a specific button or giving a voice command. In both cases, the occupant must first take action before the transaction number can be viewed.

[0018] A further advantageous embodiment of the invention provides that the first authentication step consists in the user entering a valid personal identification number. For authentication, the user must first enter a personal PIN in order to be able to confirm or specify the recipient group they have selected. This already ensures a certain level of security when passing on access and start authorization.

[0019] According to a further advantageous embodiment of the invention, an input mask for selecting the recipient group is only activated and opened once the user has identified themselves with a predetermined combination of user ID and password. This incorporates an additional security level to enable particularly secure transmission of the access and start authorization for the motor vehicle. For example, it can be provided that the user uses their smartphone to transmit the access and start authorization. In this case, it can be provided that they can only open an app designed to transmit the access and start authorization once they have entered a valid combination of user ID and password.

[0020] A further advantageous embodiment of the invention provides for the transaction number to be transmitted to the motor vehicle in encrypted form. This further increases security when transmitting access and start authorization, since the encrypted transaction number can only be decrypted in the correct vehicle. Even if the encrypted transaction number is intercepted elsewhere, it cannot be easily used.

[0021] In a further advantageous embodiment of the invention, the generated transaction number is only valid for a predetermined period of time to complete the second authentication step. This further increases security when distributing the access and start authorization. The generated transaction number expires after a certain period of time and can then no longer be used to complete the second authentication step. For example, if a specific group of recipients was specified some time ago for distributing the access and start authorization, but they forgot to complete the second authentication step, the second authentication step can no longer be completed due to a delayed entry of the transaction number.

[0022] In a further advantageous embodiment of the invention, it is provided that the first terminal is a mobile terminal capable of near-field communication. Preferably, both the first terminal and the second terminal of the receiver circuit are mobile terminals capable of near-field communication, whereby the mobile terminals can be, for example, a so-called smartwatch, a smart card, a smartphone or the like. In general, any terminal is suitable that is NFC-capable and has a secure storage and execution environment, in the form of a so-called secure element. A fitness bracelet, for example, would be equally suitable. People can therefore gain access to the motor vehicle and even start it using said terminals in a particularly simple manner.Unlocking and locking as well as starting the vehicle is carried out via near-field communication between the said end devices and the corresponding reading devices of the vehicle.

[0023] A further advantageous embodiment of the invention provides that the selection of the recipient group, the first authentication step, and the second authentication step are carried out using a smartphone app or a web portal. Depending on the type of device the user uses to transmit access and start authorization, they can use either a smartphone app or a web portal.

[0024] This allows the user to choose how they wish to transfer access and start authorization in a particularly convenient way. For example, they can first specify the recipients in a web portal, e.g., using their laptop, and then enter the vehicle with their smartphone to enter the transmitted transaction number into the aforementioned smartphone app, thereby completing the transfer of access and start authorization.

[0025] The server device according to the invention is configured to carry out the method according to the invention or an advantageous embodiment of the method according to the invention for transmitting access and start authorization to a motor vehicle. Advantageous embodiments of the method according to the invention are to be regarded as advantageous embodiments of the server device, wherein the server device in particular comprises means for carrying out the method steps.

[0026] Further advantages, features, and details of the invention will become apparent from the following description of a preferred embodiment and from the drawings. The features and combinations of features mentioned above in the description, as well as the features and combinations of features mentioned below in the description of the figures and / or shown alone in the figures, can be used not only in the respective combinations specified, but also individually, without departing from the scope of the invention.

[0027] The drawing shows: Fig. 1 shows a schematic representation of the transmission of an access and start authorization for a motor vehicle, wherein a first user initiates the transmission of the access and start authorization to a smartphone of another user via his smartphone; and in Fig. 2 a schematic representation of the smartphone of the first user and a display device of the motor vehicle while the start authorization is being passed on.

[0028] In the figures, identical or functionally identical elements are provided with the same reference symbols.

[0029] A motor vehicle 10, a first user 12 with a near-field communication-capable smartphone 14, and a second user who also holds a near-field communication-capable smartphone 18 in his hands are shown schematically in Fig. 1. The user 12 can, for example, be the owner of the motor vehicle 10. The other person 16 can, for example, be a friend or acquaintance of the person 12.

[0030] Using the near-field combination-capable smartphone 14, the person 12 can both gain access to the motor vehicle 10 and start it. In other words, a digital access and start authorization for the motor vehicle 10 is stored on the smartphone 14 of the user 12. The motor vehicle 10 is equipped with several NFC readers. For example, it can be provided that respective NFC readers are arranged in the area of ​​the outer door handles. The user 12 only needs to place their smartphone 14 near the NFC readers of the motor vehicle 10 arranged in the area of ​​the outer door handles in order to unlock and lock the motor vehicle 10. Alternatively, it is also possible for the person 12 to gain access to the motor vehicle 10 simply using a conventional key or radio key that includes a valid access and start authorization.

[0031] Furthermore, it can be provided that another NFC reader is arranged in the area of ​​a center console of the motor vehicle 10. After taking a seat in the motor vehicle 10, the user 12 simply needs to place their NFC-enabled smartphone 14 near the NFC reader arranged in the area of ​​the center console in order to start the motor vehicle. Thus, the user 12 no longer needs to use a conventional key; instead, they can use their near-field communication-capable smartphone 14 to lock, unlock, and start the motor vehicle 10.

[0032] In Fig. 1 also schematically depicts a server device 20. With the aid of the server device 20, the person 12 can also transmit access and start authorization for the motor vehicle 10 to another person 16, more precisely to their near-field communication-capable smartphone 18. To transmit the access and start authorization to the other person 16, the person 12 can use their smartphone 14. Using the smartphone 14, the person 12 can select a specific group of recipients, for example, only the person 16 or also other persons not shown here.

[0033] After specifying the recipient group, a first authentication step must be performed by the person 12 on the smartphone 14, which is recorded by the server device 20. If the server device 20 has authenticated the user 12 based on the recorded first authentication step, the server device 20 generates a transaction number 22 and transmits it to the motor vehicle 10. A digital key 24 serving as access and start authorization for the motor vehicle 10 is transmitted by the server device 20 to the near-field communication-capable smartphone 18 of the further person 16 as soon as a second authentication step has been recorded, in which the transaction number 22 transmitted to the motor vehicle 10 has been entered into the smartphone 14 of the person 12.

[0034] Person 12 can therefore initiate and complete the transfer of access and start authorization to the other person 16 using their smartphone 14. This involves two-factor authentication. The first factor is implemented via the first authentication step on user 12's smartphone 14. The second factor is implemented in the form of the transaction number 22 transmitted to the motor vehicle 10, which is transmitted in encrypted form from the server device 20 to the motor vehicle 10 and must be entered by user 12 into their smartphone 14.

[0035] In Fig.2, the smartphone 14 of the first person 12 and a display device 26 of the motor vehicle 10 are shown, while the access and start authorization is being passed on to the further person 16. First, the person 12 starts an appropriately configured app on their smartphone 14, using which app the person 12 can specify the group of recipients to whom the access and start authorization is to be transmitted in the form of the digital key 24. For example, it can be provided that the person 12 must first enter a specific combination of user ID and password so that the app can even be started or at least an input mask for specifying the group of recipients is opened. A text field 28 is then displayed, by means of which the person 12 is prompted to specify the group of recipients for the access and start authorization.The person 12 can define the circle of recipients, for example, by entering corresponding email addresses 30 in the app.

[0036] After the email addresses 30 have been entered to define the recipient group, another text field 32 appears, prompting the person 12 to confirm the recipient group by entering a personal identification number 34, a so-called PIN. Once the personal identification number 34 has been entered, the aforementioned transaction number 22 is generated in a next step and transmitted to the motor vehicle 10.

[0037] Person 12 must then enter motor vehicle 10 in order to read the transaction number 22 displayed on display device 26 of motor vehicle 10. For example, a text field 36 can be displayed on display device 26 of motor vehicle 10, prompting person 12 to enter the displayed transaction number 22 into the app on their smartphone 14 or into a web portal. Preferably, the recipient group of the digital key is always displayed along with the transaction number 22. For example, something like this: "The transaction number for issuing the key to 'max.mustermann@audi.de, erika.musterfrau@audi.de' is '123456'."

[0038] In the example shown here, person 12 enters the transaction number 22 displayed by display device 26 into their smartphone 14. After the transaction number 22 has been transmitted to motor vehicle 10, a further text field 38 appears within the app, prompting person 12 to enter the transaction number 22 transmitted to the motor vehicle. After person 12 has entered the transaction number 22 into their smartphone 14, a further text field 14 is displayed via the smartphone 14, confirming to person 12 the successful transmission of the digital key 24, which serves as access and start authorization, to the further smartphone 18 of the further person 16.

Claims

[1] Method for transmitting an access and start authorization for a motor vehicle (10), comprising the steps: - detecting a first authentication step which a user (12) has carried out to confirm a group of recipients (30) selected by him for the access and start authorization on a first terminal (14) by means of a server device (20); - if the server device (20) has authenticated the user (12) based on the detected first authentication step: generating and transmitting a transaction number (22) to the motor vehicle (10) by means of the server device (20); - transmitting a digital key (24) serving as access and start authorization for the motor vehicle (10) by means of the server device (20) to at least one mobile terminal (18) capable of near-field communication of the selected group of recipients (30) as soon as a second authentication step has been detected, in which the transaction number (22) transmitted to the motor vehicle has been entered into the first terminal (14) or into another terminal. [2] Method according to claim 1, characterized by that after the generation of the transaction number (22), initially only a notification is sent to the motor vehicle (10), which signals that the transaction number (22) can be retrieved, wherein the transaction number (22) is only transmitted to the motor vehicle (10) and displayed by means of a vehicle-side display device (26) when this has been confirmed in the motor vehicle (10). [3] Method according to claim 1 or 2, characterized by that the first authentication step consists in the user (12) entering a valid personal identification number (34). [4] Method according to one of the preceding claims, characterized by that an input mask for selecting the recipient group (30) is only activated and opened when the user (12) has identified himself with a predetermined combination of user ID and password. [5] Method according to one of the preceding claims, characterized by that the transaction number (22) is transmitted to the motor vehicle (10) in encrypted form. [6] Method according to one of the preceding claims, characterized by that the generated transaction number (22) is only valid for a specified period of time in order to complete the second authentication step. [7] Method according to one of the preceding claims, characterized bythat the first terminal (14) is a mobile terminal capable of near-field communication. [8] Method according to one of the preceding claims, characterized by that the selection of the recipient group (30), the first authentication step and the second authentication step are carried out by means of a smartphone app or by means of a web portal. [9] Server device (20) which is designed to carry out a method for forwarding an access and start authorization to a motor vehicle (10) according to one of the preceding claims.

Images