Security system for vehicle communication

Abstract

System (100) for secure vehicle communication, comprising: at least one backend server (120); at least one vehicle (110) comprising: - a communication unit (112) configured to transmit data to the backend server; - a computing unit (113) which is arranged - to determine a destination of the vehicle (110); and - to determine the distance of the vehicle (110) to the destination; and - a control unit (119) configured to control the communication unit (112) when the vehicle (110) is below a predetermined distance from the destination such that the communication unit (112) restricts or stops the data transmission to the backend server (120); wherein a greater distance is predetermined for a long journey than for a short journey.

Description

The present invention relates to a safety system and method for safe vehicle communication.With the increasing networking of vehicles, data acquisition, data processing and data communication or data exchange of vehicle-related data (vehicle communication) are increasingly occurring. The vehicle communication may include servers that, in turn, act as providers of telematics services (telematics servers) for a variety of vehicles. The vehicle communication increases in particular due to the increasing assistance by driver assistance systems such as lane keeping assistants, distance assistants, etc., but due to the increasing provision of at least partially autonomous driving modes which require no assistance or only little assistance by the driver. However, vehicle communication also carries challenges with regard to information security, in particular with regard to the data protection of personal and / or person-accessible data, that is to say data which enable direct and / or indirect person access. Even if a person reference in vehicle communication is not always obvious, specific information about the driver of the vehicle can be obtained for a plurality of vehicle communication scenarios. For example, by acquiring position data, knowledge about locations and whereabouts of the driver of the vehicle can be concluded and / or movement profiles can be created. This may be undesirable and / or prohibited due to legal regulations.US 2006 / 0 178 817 A1 discloses a navigation device which carries out route guidance based on a route sought by the server.US 2010 / 0 063 729 A1 discloses a vehicle starting from the front of a house and moving to a destination. An area where the house is located at the center is an area where the position of the house is likely to be easily determined, and a road to be searched is a road required for searching for a travel route of the vehicle. An in-vehicle device does not transmit position information or the like acquired in the area in response to a request for position information from a roadside device. The in-vehicle device transmits the position information or the like about the vehicle acquired after leaving the area to the roadside device. The position information about the vehicle is transmitted to the roadside device under protection of the personal information.US 2013 / 0 261 954 A1 discloses a map or navigation device which comprises a position determination device or is connected to the latter. This serves to determine one or more locations of the map or navigation device. The one or more determined locations form at least one route, wherein the map or navigation device is configured to determine at least a portion of the at least one route, wherein the at least a portion is determined according to at least one characteristic associated with at least one location in the portion. The map or navigation device is also configured to form at least one anonymous route from the at least one particular route, wherein the at least one anonymous route does not include the at least part of the at least one route.DE 10 2011 106 295 A1 discloses a method for bidirectionally transmitting data between motor vehicles and a service provider, with provision of information data receivable by the motor vehicles and originating from the service provider via a data infrastructure cloud and provision of traffic data describing a traffic state and originating from the motor vehicles. In order to enable secure bidirectional transmission of the data, provision is made for the traffic data to be provided exclusively to the service provider via a backend server device operated by a security operator.The object of the invention is to avoid the above-mentioned disadvantages and to demonstrate a solution which enables secure vehicle communication, wherein at the same time own vehicle data can be transmitted to support telematics services.This object is achieved according to the invention by the features of the independent claims. Preferred embodiments are the subject of the dependent claims.The above object is achieved by a system for safe vehicle communication, comprising:at least one backend server;at least one vehicle comprising:a communication unit configured to transmit data to the backend server;a computing unit which is configured,determining a destination of the vehicle; anddetermining the distance of the vehicle from the destination; anda control unit which is configured to control the communication unit in such a way that it restricts or sets the data transmission to the backend server if a predetermined distance from the vehicle to the destination is undershot; wherein a higher distance is predetermined for a long route than for a short route.The backend server is a central data pool and can comprise a computing device and a storage device, e.g. a database, in which data can be stored, managed and processed in a central or centrally controlled manner. It may be necessary to first register each vehicle once at the backend server by a user. The backend server may be configured to receive, evaluate data records from a plurality of vehicles, and to provide one or more telematics services to a plurality of vehicles using the evaluated data. For example, telematics services may include real-time traffic data, real-time weather data, real-time hazard data, and / or real-time traffic change data, etc.The term vehicle includes passenger cars (cars), trucks (trucks), buses, motor homes, bicycles, etc.The vehicle comprises a communication unit. The communication unit is capable of establishing a communication connection with other communication participants, e.g. other vehicles, the backend server, etc., in order to transmit data. The communication unit can comprise a subscriber identity module or a subscriber identity module or a SIM card, which serves to establish a communication connection via a mobile radio system(s). The subscriber identity module in this case identifies the communication unit unambiguously in the mobile radio network. The communication connection can be a data connection (e.g. packet switching) and / or a wired communication connection (e.g. circuit switching). A wireless communication connection via further common and future technologies, e.g. local networks or local area networks (LANs) such as e.g. wireless LANs etc., can also be established via the communication unit with other communication subscribers. Any communication or data transmission between the vehicle and other communication participants can take place via the communication unit.The communication unit is configured to transmit data to the backend server. As already explained above, the backend server may be configured to provide telematics services including real-time data to a plurality of vehicles. If a vehicle (previously registered) uses this telematics service, the vehicle can transmit at least current position data at each trip entry. The backend server may transmit current traffic data for a predetermined geographic area, e.g., 25 km perimeter. This data can be displayed in a navigation unit of the vehicle. In order for the backend server to provide telematics services, it relies on the reception of real-time data from as high a number of vehicles as possible. The real-time data comprises a data record which comprises at least current position data and a time stamp. The current position data may include geographic position data that may be acquired using a navigation satellite system. The navigation satellite system can be any common and future global navigation satellite system or global navigation satellite system (GNSS) for position determination and navigation by receiving the signals from navigation satellites and / or pseudolites. For example, this can be the Global Positioning System (GPS), GLOBE NAVIGATION SATELLITE SYSTEM (GLONASS), Gallelo, positioning system, and / or BeiDou Navigation satellite system. In the example of GPS, the vehicle may include a GPS module configured to determine current GPS position data of the vehicle. Depending on the telematics service, the data record can contain further data required for providing the telematics service, e.g. a current speed of the vehicle, sensor data of various sensors on the vehicle side (e.g. camera, radar, lidar sensor), etc. However, the backend server is thus able to generate a movement profile from the data records of a vehicle.Therefore, each vehicle comprises at least one computing unit. The computing unit is configured to determine a destination of the vehicle. In addition, the computing unit is configured to determine a distance of the vehicle from the destination.In a next step, the computing unit can determine whether a predeterminable or predetermined distance of the vehicle from the destination is undershot. For example, the predetermined distance to the destination may be 1 kilometer (km), 2 km, 3 km, 3.5 km, or another distance to the destination suitable for preventing a driving profile from being created from the position data. The same distance may be predetermined for all travel routes. In another example, a different, e.g., higher, distance may be predetermined for long travel routes than for short travel routes. The computing unit can, for example, periodically determine whether the predetermined distance from the destination is undershot.The vehicle also comprises at least one control unit. If the computing unit determines that the predetermined distance of the vehicle from the destination is undershot, the control unit is configured to control the communication unit in such a way that said communication unit restricts or sets the data transmission to the backend server. For example, the communication unit can only transmit data sets to the backend server that no longer comprise position data. In another example, the data transfer may be completely suspended.Data sets for providing one or more telematics services can thus advantageously be transmitted from the vehicle to the backend server, wherein it is simultaneously avoided that the backend server can infer findings about location and whereabouts of the driver of the vehicle or generate movement profiles from the position data of the vehicle. This ensures the security of information, in particular the protection of data.The vehicle preferably comprises a navigation unit, wherein the determination of the destination by the computing unit is effected by determining a destination selected by the user of the vehicle via the navigation unit.The driver can input a destination via a suitable input and output unit (e.g. rotary push actuator, touch screen, voice input unit, etc.) of the infotainment system of the vehicle, which comprises a navigation unit. The computing unit can read the distance to the destination from the navigation unit in accordance with the calculated route.The vehicle may preferably comprise a self-learning navigation unit configured to estimate the destination, wherein the computing unit is configured to ascertain the destination and the distance to the destination via the self-learning navigation unit even if a user of the vehicle has not entered a destination by himself.According to experience, drivers do not always use the navigation unit or the navigation device in order to reach a destination. This is particularly the case when a driver approaches driving targets well known to him. Therefore, the navigation unit of the vehicle may be a self-learning navigation unit configured to estimate the destination. Self-learning navigation devices that estimate an expected destination and an expected route to the expected destination are known. For this purpose, user- or vehicle-specific movement profiles are created, which link targets that have already been approached to time and / or location information. Taking into account the learned movement profile, a current time and / or a current day of the week and / or further suitable parameters, the prospective destination and the route to the prospective destination are estimated.Advantageously, the computing unit can thus determine the destination and the distance to the destination via the self-learning navigation unit, even if the user of the vehicle itself has not entered a destination.According to a second aspect, the object is achieved by a method for safe vehicle communication, comprising:determining, by a computing unit, a destination of a vehicle, wherein the vehicle is configured to send data to a backend server;determining, by the computing unit, the distance of the vehicle from the destination; and if the vehicle falls below a predetermined distance from the destination:restricting or adjusting, by a control unit, the data transmission from the vehicle to the backend server, wherein a higher distance is predetermined for a long route than for a short route.The determination of the destination is preferably carried out by the computing unit by determining a destination selected by the user of the vehicle via a navigation unit.The destination is preferably estimated by a self-learning navigation unit on the vehicle side and the destination and the distance to the destination are transmitted via the self-learning navigation unit by the arithmetic unit, even if a user of the vehicle has not entered a destination by himself.These and other objects, features and advantages of the present invention will become apparent from a study of the following detailed description of preferred embodiments and the accompanying drawings. It will be appreciated that although embodiments are described separately, individual features therefrom may be combined into additional embodiments. FIG. 1 shows a system for safe vehicle communication; FIG. 2 shows a flow chart illustrating a method for safe vehicle communication.FIG. 1 shows schematic system 100 for safe vehicle communication. The system 100 is configured and / or configured to perform a method 200 for safe vehicle communication as described with reference to FIG. 2.The system 100 includes a backend server 120. The backend server 120 is a central data pool and can comprise a computing device (not shown) and a storage device 125, e.g. a database 125, in which data can be stored, managed and processed in a central or centrally controlled manner. It may be necessary to first register each vehicle 110 once at the backend server 120 by a user. The backend server 110 may be configured to receive, evaluate data records from a plurality of vehicles, and provide one or more telematics services to a plurality of vehicles using the evaluated data. For example, the provision of telematics services may include the provision of real-time traffic data, real-time weather data, real-time hazard data, real-time traffic change data, etc.The vehicle 110 includes a communication unit 112. The communication unit is capable of establishing a communication connection with other communication participants, e.g. other vehicles 110, a backend server 120, etc., in order to transmit data. Any communication or data transmission between the vehicle 110 and other communication participants can take place via the communication unit 112.The communication unit 112 is configured to transmit data to the backend server 120. As already explained above, the backend server 120 may be configured to provide telematics services to a plurality of vehicles 110.The provision of telematics services may include, for example, the provision of real-time traffic data, real-time hazard data, real-time weather data, real-time traffic change data, etc. For example, the backend server 120 may be configured to provide real-time traffic data as telematics service. If a (previously registered) vehicle 110 uses this telematics service, the vehicle 110 may transmit at least its current geographic position data at each trip entry. The backend server 120 may now transmit current traffic data for a predetermined geographic area, e.g., vicinity of 25 km, to the vehicle 110. This data can be visually displayed to the user of the vehicle in a navigation unit 114 of the vehicle. In order for the backend server 120 to provide this telematics service, it relies on real-time data from as high a number of vehicles 110 as possible. The real-time data comprise, at predefined time intervals-for example every 10 seconds-a data record which comprises at least current geographical position data of the vehicle 110 and a time stamp.Depending on the telematics service, the data record can comprise further data required for providing the telematics service, e.g. a current speed of the vehicle 110, sensor data of various vehicle-side sensors (e.g. camera 118, radar 116, lidar sensor 117), etc. The sensor data can be processed by a sensor unit 115 in a suitable manner. However, this enables the backend server 120 to generate a movement profile from the received data records of a vehicle 110.Therefore, the vehicle 110 comprises at least one computing unit 113. The computing unit 113 is configured to ascertain a destination of the vehicle 110. Furthermore, the computing unit 113 is configured to determine a distance of the vehicle 110 from the destination.The vehicle 110 may include a navigation unit 114. The determination of the destination by the computing unit 113 can be effected by determining a destination selected by the user of the vehicle 110 via the navigation unit 114. For example, the driver of the vehicle 110 may input a destination via a suitable input and output unit (not shown, e.g., rotary push actuator, touch screen, voice input unit, etc.) of the infotainment system of the vehicle 110 including the navigation unit 114. The computing unit 113 can read out the entered destination and the distance to the destination-for example according to the calculated route-from the navigation unit 114.Additionally or alternatively, the navigation unit 114 may be a self-learning navigation unit 114 configured to estimate the destination. Drivers do not always use the navigation unit 114 or the vehicle-side navigation device to reach a destination. This is particularly the case when drivers are approaching well-known targets. Therefore, the navigation unit 114 of the vehicle 110 may be a self-learning navigation unit 114 configured to estimate the destination. Self-learning navigation devices that estimate an expected destination and an expected route to the expected destination are known. For this purpose, user- or vehicle-specific movement profiles are created by self-learning navigation units, which link destinations that have already been approached to items of time and / or location information. Taking into account the learned motion profile, a current time and / or a current day of the week and / or further relevant parameters, the prospective destination and the route to the prospective destination are estimated.Advantageously, the computing unit 113 can thus determine the destination by retrieving it from the self-learning navigation unit 114, even if the user of the vehicle itself has not entered a destination. The distance from the destination can also be read or called up from the self-learning navigation unit 114.In a next step, the computing unit 113 can determine whether a predeterminable or predetermined distance of the vehicle 110 from the destination is undershot. For example, the predetermined distance to the destination may be 1 kilometer (km), 2 km, 3 km, 3.5 km, or another distance to the destination suitable for preventing a driving profile from being created from the position data. The same distance may be predetermined for all travel routes. In another example, a different, e.g., higher, distance may be predetermined for long travel routes than for short travel routes. The computing unit 113 can, for example, periodically determine whether the predetermined distance from the destination is undershot.The vehicle 110 also comprises at least one control unit 119. If the computing unit 113 determines that the predetermined distance of the vehicle from the destination is undershot, the control unit 119 is configured to control the communication unit 112 in such a way that it restricts or sets the data transmission to the backend server 120, wherein a higher distance is predetermined for a long route than for a short route. For example, the communication unit 112 can only transmit data sets to the backend server 120 that no longer comprise position data. In another example, the data transfer may be completely suspended.Advantageously, data sets for providing one or more telematics services can thus be transmitted from the vehicle 110 to the backend server 120, wherein it is simultaneously avoided that the backend server 120 can infer findings about location and whereabouts of the driver of the vehicle 110 from the position data of the vehicle 110 and / or can create movement profiles. This ensures the security of information, in particular the protection of data.FIG. 2 shows a flow chart illustrating a method 200 for safe vehicle communication as described above with reference to FIG. 1. The method steps may be implemented as described with reference to FIG. 1.Method 200 includes ascertaining 210, by a vehicle-side computing unit, a destination of a vehicle.The ascertainment 210 of the destination by the computing unit can be effected by ascertaining a destination selected by the user of the vehicle via a navigation unit. In addition or alternatively, the ascertainment 210 of the destination by the arithmetic unit 113 can be effected by ascertaining a destination selected by the user of the vehicle via a navigation unit.The method also comprises the calculation unit 113 determining 222 the distance of the vehicle from the destination. If the vehicle 110 falls below a predeterminable or predetermined distance to the destination, then in a next method step 230 the data transmission from the vehicle 110 to the backend server 120 takes place or is set, by a vehicle-side control unit, wherein a higher distance is predetermined for a long route than for a short route.

Claims

A system (100) for safe vehicle communication, comprising: at least one backend server (120); at least one vehicle (110) comprising: - a communication unit (112) which is configured to transmit data to the backend server; - a computing unit (113) which is configured to - determine a destination of the vehicle (110); and - determine the distance of the vehicle (110) from the destination; and - a control unit (119) which is configured to, when a predetermined distance of the vehicle (110) from the destination is undershot, control the communication unit (112) such that said communication unit (112) restricts or sets the data transmission to the backend server (120); wherein a higher distance is predetermined for a long route than for a short route.The system (100) according to claim 1, wherein the vehicle (110) comprises a navigation unit (114); and wherein the determination of the destination by the computing unit (113) is performed by determining a destination selected by the user of the vehicle (110) via the navigation unit (114).The system according to claim 1 or 2, wherein the vehicle (110) comprises a self-learning navigation unit (114) configured to estimate the destination, wherein the computing unit (113) is configured to determine the destination and the distance to the destination via the self-learning navigation unit (114) even if a user of the vehicle (110) has not entered a destination by himself.A method (200) for safe vehicle communication, comprising: determining (210), by a computing unit (113), a destination of a vehicle (110), wherein the vehicle (110) is configured to transmit data to a backend server (120); determining (220), by the computing unit (113), the distance of the vehicle (110) to the destination; and if the vehicle (110) falls below a predetermined distance to the destination: restricting or setting (230), by a control unit (119), the data transmission from the vehicle (110) to the backend server (120), wherein a higher distance is predetermined for a long route than for a short route.Method (200) according to Claim 4, wherein the ascertainment (210) of the destination is carried out by the arithmetic unit (113) by ascertaining a destination selected by the user of the vehicle (110) via a navigation unit (114).Method (200) according to Claim 4 or 5, wherein the destination is estimated by a vehicle-side self-learning navigation unit (114), and the ascertainment (210, 220) of the destination and of the distance to the destination via the self-learning navigation unit (114) is carried out by the arithmetic unit (113), even if a user of the vehicle (110) has not entered a destination itself.

Images