Access control to a vehicle

Abstract

Device (125) for access control to a vehicle (105), wherein the device (125) comprises the following: - a first on-board sensor (140) of the vehicle (105) which is designed to optically scan the vehicle's (105) surroundings; - a processing device (130) which is designed to - to capture an access pledge (155) scanned by means of the first sensor (140) and - to determine an authorization assigned to the access pledge (155); and - a release device (135) for releasing access to a predetermined function of the vehicle (105) if an associated authorization exists; characterized by - several second on-board sensors (145) of the vehicle (105) which are configured to scan a person (120) in the area of ​​the access pledge (155) (245), whereby the person is identified on the basis of the scanning (245); wherein the processing device (130) is further configured to release access to the function only if the access pledge (155) is assigned to the person (120) identified on the basis of the scanning (245) by the several second on-board sensors (145).

Description

[0001] The invention relates to access control of a vehicle. In particular, the invention relates to differentiated access control of a vehicle by different persons.

[0002] A vehicle can be used by multiple people, for example, as a family car or a rental vehicle. Access should be granted to each person with specific, predetermined permissions. For instance, a renter might have access to all vehicle functions, while a service technician might only have access to the engine compartment or the fuel tank / charging port. Vehicle operation can also be restricted based on the individual user, for example, regarding a maximum distance from a starting point or a maximum driving speed.

[0003] Typically, a person wishing to gain access carries a key or similar item that is scanned by the vehicle. However, distributing keys to a large number of people can be time-consuming, and subsequently adjusting a person's access rights may require interaction with their key.

[0004] Systems have been proposed in which a user authenticates themselves to a mobile device, which then communicates with the vehicle to enable a function. This requires the user to have a suitably equipped mobile device. The mobile device can be manipulated by the user or a third party to unlock a permission that is actually restricted. In other implementations, a complex input of authorization information by the user may be required.

[0005] DE 10 2016 008 896 A1 concerns a technology for using a vehicle as a depot, for example for the delivery of items by a delivery service.

[0006] The subsequently published DE 10 2017 112 942 A1 concerns an access control system for a vehicle in which a person can be detected by one of two first sensors facing away from each other.

[0007] DE 10 2016 221 467 A1 relates to a device and a method for access control to a vehicle according to the preamble of claim 1 or 5.

[0008] One of the problems underlying the invention is to provide a simple and flexible technology for controlling access to a vehicle. The present invention solves this problem by means of the subject matter of the independent claims. Dependent claims describe preferred embodiments.

[0009] According to a first aspect of the invention, a device for access control to a vehicle comprises a first on-board sensor of the vehicle, which is configured to optically scan the vehicle's environment; a processing device, which is configured to detect an access pledge scanned by means of the first sensor and to determine an authorization associated with the access pledge; and a release device for releasing access to a predetermined function of the vehicle if an associated authorization exists.

[0010] According to the invention, several second on-board sensors of the vehicle are provided, which are configured to scan a person in the area of ​​the access point, whereby the person is identified on the basis of the scan; and the processing device is further configured to release access to the function only if the access pledge is assigned to the person identified on the basis of scanning by the multiple second on-board sensors.

[0011] This allows a sensor already installed on board the vehicle to be used for an additional purpose. In particular, the device can be used to selectively allow or deny access to one or more functions of the vehicle to a large number of people. The device can be used especially for access control to a rental vehicle.

[0012] The device may be configured to carry out all or part of a method described herein. For this purpose, the device may include a processing unit implemented as a programmable microcomputer or microcontroller, and the method may be in the form of a computer program product with program code. The computer program product may also be stored on a computer-readable data carrier. Features or advantages of the method may be transferred to the device or vice versa.

[0013] The first sensor can include, in particular, a camera. The camera can perform an optical scan of the access token, allowing for the use of a very simple access token.

[0014] The device can further include a second on-board sensor of the vehicle, wherein the sensor is configured to scan a person within the area of ​​the access token, and wherein the processing device is configured to grant access to the function only if the access token is assigned to that person. In this way, authorization to use a function of the vehicle can be tied to a specific person. Transfer of the access token between persons can be prevented.

[0015] The vehicle may be equipped with multiple onboard sensors, and the processing device is configured to recognize the person based on scans from these multiple secondary sensors. One of the secondary sensors may include a camera, which may coincide with the first sensor. The second sensor is preferably configured to scan a biometric feature of the person. Preferably, multiple onboard sensors are used, each to scan a biometric feature of the person, and the scans are fused together to identify the person.

[0016] The sensors used can be standard for a vehicle, and the individual biometric features may, considered separately, offer only low security against forgery or misidentification. However, by fusion, a high level of security against forgery or misidentification can be achieved overall. For example, a person's face, body proportions, or gait can be scanned using a camera. A person's weight can be determined based on the vehicle's suspension response when entering or exiting. A person's seating position can provide information about their body geometry. The number of people accessing the vehicle can be determined by the use of different doors or other access elements. Numerous other vehicle sensors can be used for scanning and / or identifying the individual.

[0017] According to a second aspect of the invention, a method for controlling access to a vehicle comprises steps of optically scanning an access token in the vicinity of the vehicle by means of an on-board sensor of the vehicle; determining an authorization associated with the access token; and releasing access to a function of the vehicle depending on a result of the determination.

[0018] According to the invention, it is provided that a person in the area of ​​the access deposit is scanned and recognized by means of several vehicle-owned second on-board sensors, wherein the person is identified on the basis of the scanning, and that access to the function will only be granted if the access pledge is assigned to the person identified on the basis of scanning by the multiple second on-board sensors.

[0019] The method can be used for access control, particularly to a rental vehicle. The vehicle can specifically be a motor vehicle and, for example, be used as part of a car-sharing arrangement shared by a group of people.

[0020] Access can include access to the interior of the vehicle or a part thereof. For example, selective access can be granted to one of several doors, a trunk, an engine compartment, or a service hatch behind which, for instance, a fuel or charging port is concealed. This facilitates the management of the vehicle's use, maintenance, and / or other operations.

[0021] The access code preferably comprises a one- or two-dimensional binary optical code. In particular, the code can be a one-dimensional barcode or a two-dimensional QR code (quick response code). The code can be easily presented to the vehicle in printed form, thus enabling intuitive operation.

[0022] The access path can be downloaded from an external instance to a mobile device and displayed visually on the device for scanning. The external instance can be a server or a service, particularly in the cloud. The mobile device does not need any special features beyond receiving and visually displaying a message. In one embodiment, a very basic mobile phone can be used, capable, for example, of receiving and displaying an SMS. The SMS can contain a numeric or alphanumeric code. In another embodiment, an MMS is used that contains a graphical representation of the code—such as a barcode or QR code—which the mobile device can display. The mobile device can be a mobile phone, a smartphone, a tablet, a laptop, or any other device that is used, in particular, at least predominantly by a predetermined person.

[0023] In one embodiment, a person is detected within the access token area by means of a vehicle-integrated sensor, whereby access to the function is only granted if the access token is assigned to that person. The assignment can be verified locally or by an external instance.

[0024] A scan of the person performed by the sensor can be transmitted to an external entity, which can then verify the person's identity and link it to the access credential. For example, biometric data scanned by the vehicle can be transmitted to the external entity and compared with stored biometric data. The external entity can also process bookings and / or reservations for vehicle use.

[0025] The invention will now be described in more detail with reference to the attached drawings, in which: Fig. 1. a system; and Fig. 2. A flowchart of a process is illustrated.

[0026] Fig. Figure 1 shows a system 100 comprising a vehicle 105, preferably a motor vehicle, and optionally an external instance 110 and also optionally a mobile device 115. The system 100 is configured to selectively allow or prevent access by a person 120 to a function of the vehicle 105. A device 125 is mounted on board the vehicle 105, comprising a processing device 130, a release device 135 for a predetermined function of the vehicle 105, and a first sensor 140, which is mounted on board the vehicle 105 and may, in particular, include a camera. Preferably, a second sensor 145 is also provided. Both sensors are preferably configured to scan the environment of the vehicle 105. Furthermore, a communication device 150 may be provided for communication, particularly wireless communication, for example, with the external instance 110.The release device 135 can enable or disable any function of the vehicle 105. In particular, the release device 135 can relate to a part of a central locking system or an immobilizer of the vehicle 105.

[0027] The camera 140 can be part of an environmental sensing or environmental detection system. In particular, the camera 140 can include a rear-facing reversing camera, a forward-facing camera for a lane keeping assist system, or a side-facing camera for collision avoidance as part of a parking aid. The camera 140 can operate in the visible or invisible range, be directed in a predetermined direction or be permanently mounted on the vehicle 105, be configured to scan a fixed or variable area of ​​the environment, have a fixed or variable focal length, be configured for two- or three-dimensional scanning, and include one or more sensors. Other configurations of a camera as a sensor 140 are also possible. Signals from multiple sensors can also be fused together to form a single sensor 140.The multiple sensors can implement principles other than optical ones, preferably imaging principles.

[0028] The first sensor 140 is preferably configured for optical scanning of an access token 155, which the person 120 can present on a suitable information carrier or carry with them. The second sensor 145 is preferably configured for scanning a biometric feature of the person 120. More preferably, several second sensors 145 are provided, each of which is part of the vehicle 105 and can scan one or more biometric or other characteristic features of the person 120. The second sensor 145 preferably operates without contact and, in a further embodiment, can also be configured for scanning inside the vehicle 105.

[0029] The instance 110 preferably comprises a communication device 160, a processing device 165 and / or a data storage device 170. The communication device 160 is preferably configured for communication, in particular wireless communication, with the communication device 150 of the device 125 on board the vehicle 105.

[0030] Fig.Figure 2 shows a flowchart of a method 200 for access control to a function of a vehicle 105. The method can be executed using the system 100, with parts of the method 200 potentially taking place on the device 125. By way of example, method steps preferably performed by the device 125 are shown on the left; those involving the person 120 are shown in the middle; and those preferably performed by the external entity are shown on the right. It should be noted that the illustrated method represents only one possible embodiment of the present invention, and the invention does not require all of the steps shown. The sequence of at least some of the steps can be varied, as a person skilled in the art will readily understand.

[0031] In a first step, person 120 is authenticated by instance 110. Authentication can be performed in any way, for example, by providing a username and password. Instance 110 can be understood as a central point that can control access by one or more persons 120 to one or more functions of one or more vehicles 105, particularly in the context of vehicle rental or a fleet of vehicles 105 usable by a user group.

[0032] In step 210, person 120 can request access to a function of vehicle 105. The function can be any function and, in particular, a prerequisite for the intended use of vehicle 105. Instance 110 can grant access and, in step 220, provide the necessary information, which may include, in particular, billing or reservation data or personal data. Furthermore, an association can be established between person 120—or a user profile assigned to them, which may be stored as a data structure in data storage 170—and a function whose use by person 120 is permitted. Additionally, an access pledge can be provided, which, in step 230, can be assigned to person 120 and / or the requested or approved function.

[0033] In step 235, person 120 can receive the access token 155. In one embodiment, instance 110 can deliver an electronic document to a mobile device 115 assigned to person 120 or to a mailbox assigned to person 120. In another embodiment, instance 110 can also include a printer on which the access token 155 is printed and made available to person 120. Person 120 can carry the access token 155 in the vicinity of the vehicle 105 and / or present it to the first sensor 140 of the vehicle 105. The access token 155 preferably comprises a code that is typically only valid temporarily and can be represented, for example, numerically, alphanumerically, or graphically, and can be scanned by the sensor 140 in step 240.

[0034] In step 245, person 120 can be scanned using one or more second sensors 145. Based on the scan, the person can be identified. In a first variant, the scanned information is transmitted to instance 110, which compares the information with stored information and determines whether it is assigned to a person for whom the access token 155 has been issued. In a second variant, the scanned information is evaluated locally by the device 125 to identify person 120, for example, against locally stored information or information obtained by instance 110 about person 120 for whom the captured access token 155 has been issued. If the information matches, so that person 120 in the vicinity of vehicle 105 is identical to the person who has been granted access to vehicle 105, the procedure 200 can continue.

[0035] In step 250, an authorization assigned to access pledge 155 can be checked. The authorization can indicate whether or not person 120, to whom access pledge 155 is assigned, is permitted access to a predetermined function of vehicle 105. This check takes precedence over stored information in instance 110 and can be performed by instance 110 or by device 125. Depending on the result of this check, access to the function can be granted or denied in step 255. Reference sign 100 System 105 vehicles 110 external instance 115 Mobile device 120 people 125 Device 130 Processing device 135 Release device 140 first sensor 145 second sensor 150 communication equipment 155 Access deposit 160 Communication equipment 200 procedures 205 Authentication Person 210 Request for access 220 accesses recorded 225 Provide access deposit 230 Assign person to access pledge 235 Receiving and Displaying Access Pledge 240 scans access deposit 245 Scanning Person 250 Check assignment Grant 255 access

Claims

[1] Device (125) for access control to a vehicle (105), wherein the device (125) comprises the following: - a first on-board sensor (140) of the vehicle (105) which is designed to optically scan the vehicle's (105) surroundings; - a processing device (130) which is designed to - to capture an access pledge (155) scanned by means of the first sensor (140) and - to determine an authorization associated with the access pledge (155); and - a release device (135) for releasing access to a predetermined function of the vehicle (105) if an associated authorization exists; characterized by - several second on-board sensors (145) of the vehicle (105) which are configured to scan a person (120) in the area of ​​the access pledge (155) (245), whereby the person is identified on the basis of the scanning (245); wherein the processing device (130) is further configured to release access to the function only if the access pledge (155) is assigned to the person (120) identified on the basis of the scanning (245) by the several second on-board sensors (145). [2] Device (125) according to claim 1, wherein the first sensor (140) comprises a camera. [3] Device (125) according to one of the preceding claims, wherein the multiple second on-board sensors (145) of the vehicle (105) are configured to each scan a biometric feature of the person. [4] Device (125) according to one of the preceding claims, wherein the device (125) is configured to fuse scans from the multiple second onboard sensors (145) to identify the person. [5] Method (200) for controlling access to a vehicle (105), wherein the method (200) comprises the following steps: - optical scanning (240) of an access pledge (155) in the vicinity of the vehicle (105) by means of a first on-board sensor (140) of the vehicle (105); - Determine (250) an authorization assigned to the access pledge (155); and - Releasing (255) access to a function of the vehicle (105) depending on a result of the determination (250); characterized by , - that a person (120) in the area of ​​the access pledge (155) is scanned (245) and detected by means of several vehicle-owned second on-board sensors (145), whereby the person is identified on the basis of the scanning (245), and - that access to the function is only granted if the access pledge (155) is assigned to the person (120) identified on the basis of the scanning (245) by the several second on-board sensors (145). [6] Method (200) according to claim 5, wherein the access comprises access to an interior of the vehicle (105) or a part thereof. [7] Method (200) according to claim 5 or 6, wherein the access pledge (155) comprises a one- or two-dimensional binary optical code. [8] Method (200) according to one of claims 5 to 7, wherein the access pledge (155) is downloaded from an external instance (110) to a mobile device (115) and is optically displayed on it for scanning. [9] Method (200) according to any one of claims 5 to 8, wherein - the vehicle's (105) multiple second onboard sensors (145) are used to scan one biometric feature of the person each, and / or - whereby the scans from the multiple second onboard sensors (145) are fused together to identify the person. [10] Method (200) according to claim 9, wherein a scanning of the person (120) carried out by means of the second on-board sensors (145) is transmitted to an external instance (110) and an assignment of the person (120) to the access pledge (155) is checked by the external instance (110).

Images