Method for providing user data on a communication device, central data processing device and communication system

Abstract

Method for providing first user data (ID1) of a user (12) on a first communication device (14), wherein the first user data (ID1) comprises first user authentication data which prove an authorization of the user (12) to use at least one predetermined first online service by means of the first communication device (14) when stored on the first communication device (14), comprising the steps - Providing a second communication device (16) on which second user data (ID2) of the user (12) are stored, wherein the second user data (ID2) comprises second user authentication data that proves an authorization of the user (12) to use the at least one first online service or another service that is different from the first online service by means of the second communication device (16); and - establishing a direct communicative connection (24) between the first and second communication devices (14, 16); - transmitting device identification data (VIN) for identifying the first communication device (14) from the first communication device (14) to the second communication device (16); - transmitting a request (26) for providing the first user data (ID1) on the first communication device (14), the second user data (ID2) and the device identification data (VIN) of the first communication device (14) from the second communication device (16) to a device-external central data processing system (18); and - transmitting the first user data (ID1) from the central data processing system (18) to the first communication device (14) as a function of the second user data (ID2) transmitted to the central data processing system (18) and the device identification data (VIN) of the first communication device (14).

Description

[0001] The invention relates to a method for providing or transmitting first user data of a user to a first communication device, in particular a motor vehicle, wherein a second communication device is provided on which second user data of the user is stored, and a direct communicative connection is established between the first and second communication devices. The invention also includes a central data processing device and a communication system.

[0002] Many vehicle functions today are increasingly based on online services. In order to use such online services, the user usually needs to be familiar with many of the services. If a vehicle user wants to use such services via the vehicle, they usually have to log in with a user account or similar. Users often find such registrations annoying because they do not primarily serve the driving task and are also cumbersome. Especially when changing vehicles frequently, as is the case, for example, when leasing vehicles or using car sharing services, users find such registration processes particularly cumbersome because they take up a lot of time each time. In addition, many user groups do not have enough technical understanding to carry out such a registration process.Such user groups cannot then use online services at all.

[0003] In this context, DE 10 2012 024 010 A1 describes a method for a vehicle in which a communication connection is provided between the vehicle and a server outside the vehicle. Furthermore, user authentication information is transmitted from a user of the vehicle to the server, and an application is executed on the server depending on the user authentication information. Output information generated by the server is then transmitted from the application to the vehicle. Here, too, it is necessary for a user of the vehicle to authenticate themselves to the server, for example by entering a secret, such as a user ID and a password, via a head unit in the vehicle. Thus, here, too, the user must first log in manually via the motor vehicle.If the user uses the vehicle together with a mobile device, this mobile device can be connected to the communication link between the vehicle and the server. The user's user authentication information can then be stored on the mobile device. Furthermore, short-range communication can be automatically established between the vehicle and the mobile device, whereupon the mobile device transmits the user authentication information to the server. However, the disadvantage of this is that in this case, no user authentication data can be provided on the vehicle itself, so any type of communication with online services permanently requires the functionality and presence of the mobile device.

[0004] US 9,032,547 B1 describes a method for providing vehicle-based digital rights management for content delivered via a mobile device brought into the vehicle.

[0005] US 2013 / 0297456 A1 describes a computer system having a processor and a memory on which a plurality of vehicle applications and a vehicle application management program are stored, which is designed to initiate restricted operations of the plurality of vehicle applications.

[0006] US 2007 / 0124046 A1 describes a method for providing content from a source to a motor vehicle, wherein the content is restricted by linking the content to at least one request for vehicle information.

[0007] The object of the present invention is therefore to provide a method for providing or transmitting first user data of a user to a first communication device, in particular a motor vehicle, as well as a central data processing device and a communication system which enable the provision or transmission of user data to a first communication device, in particular a motor vehicle, as simply and conveniently as possible for a user and at the same time as securely as possible.

[0008] This object is achieved by a method, a central data processing device, and a communications system having the features according to the respective independent patent claims. Advantageous embodiments of the invention are the subject of the dependent patent claims, the description, and the figures.

[0009] In a method according to the invention for providing or transmitting first user data of a user to a first communication device, such as a motor vehicle, a second communication device, for example a mobile terminal, on which second user data of the user is stored, is first provided, and a direct communicative connection is established between the first and second communication devices. Furthermore, device identification data for identifying the first communication device are transmitted from the first communication device to the second communication device. Furthermore, a request to provide the first user data on the first communication device, the second user data, and the device identification data are transmitted from the second communication device to a central data processing system external to the device.In other words, the device identification data, for example, a VIN (Vehicle Identification Number) of the motor vehicle, is first transmitted from the first communication device, for example, the motor vehicle, to the second communication device, for example, a smartphone, and then from the second communication device to the central data processing system. Furthermore, the first user data is transmitted from the central data processing system to the first communication device depending on the second user data and the device identification data transmitted to the central data processing system.The first user data comprises first user authentication data which proves an authorization of the user to use at least one predetermined first online service by means of the first communication device if these are stored on the first communication device, and the second user data comprises second user authentication data which proves an authorization of the user to use the at least one first online service or another service which is different from the first online service by means of the second communication device.

[0010] The invention is based on the realization that user data of a user, which is suitable for identifying a user and for authentication, is usually already stored on a user's mobile terminal. This user data can then advantageously be used to transmit the user identity, that is to say generally the first user data, to the first communication device, such as a motor vehicle, via a secure path, namely via the central data processing system. However, the present method can be used not only to provide such a user identity in a motor vehicle in the most convenient way possible, but also on any other communication device, such as another mobile terminal, e.g. a smartphone.To do this, a direct communicative connection is first established between the two communication devices. This can be configured in any way, for example as an audio connection or NFC (Near Field Communication) connection, for example via Bluetooth. Preferably, other communication mechanisms are used, for example (unsecured) WiFi Direct connections or, for example, visual data transmissions, for example via QR code scanning. Such mechanisms have the advantage over Bluetooth that they do not require manual pairing between the devices in question, in this case the first and second communication devices, as is the case in conventional Bluetooth operating modes. The device identification data can then be transmitted from the first communication device to the second communication device via this connection, which can in particular represent an unsecured connection.Such device identification data can represent public information, such as a device serial number or a VIN (Vehicle Identification Number) in the case where the first communication device is embodied as a motor vehicle. The second communication device, for example the user's mobile device, can then send a corresponding request to the central data processing system to transmit the first user data to the first communication device. In addition to this request, the second communication device also sends the second user data, on the basis of which the user's authorization can advantageously be verified by the central data processing system, as well as the device identification data to inform the central data processing system to which device the first user data should now be transmitted.

[0011] Thus, for example, unsecured out-of-band communication can be used between the two communication devices to exchange public information, namely the device identification data, and then a secure channel can be used from the second communication device via the central data processing system to the first communication device to securely transmit the user identity in the form of the second user data to the central data processing system and then in the form of the first user data from the central data processing system to the first communication device. The entire method requires no user interaction, thus providing a particularly secure and, above all, particularly convenient way for the user to transmit the user identity to the first communication device, for example, the motor vehicle.A user can therefore, for example, get into the motor vehicle with their mobile device and then use online services for their user identity on the mobile device via the motor vehicle, without any manual login process in the motor vehicle. Since the user data is stored on the first communication device after it has been transmitted to this first communication device, the second communication device is no longer required from this point on. All online services can therefore be used directly from the motor vehicle or, in general, from the first communication device, without the second communication device having to be connected in any way for such use. If, for example, the battery of the second communication device is empty, the user can still use these online services via the motor vehicle.

[0012] This secure channel from the second communication device to the first communication device can be provided, for example, via a common backend including an associated authorization server as part of the central data processing system. Furthermore, the first user data includes first user authentication data, which, if stored on the first communication device, proves the user's authorization to use at least one predetermined service, in particular an online service, using the first communication device. The second user data also includes second user authentication data, which proves the user's authorization to use the at least one predetermined service or another service that is different from the first service using the second communication device.It is not necessarily the case that the same user has the same authorizations on the second communication device, for example a mobile device, as on the first communication device, for example in a motor vehicle. In addition to this user authentication data, the respective user data can, but does not necessarily have to, also include user identification data, such as the user's name, a home address, an email address, a telephone number, or similar. However, such identification data is only retrieved subsequently by the motor vehicle from the central data processing system when required, namely after the user identity has been transmitted to the motor vehicle, or generally to the first communication device, for example in the form of a token. Using such a token, further user data, such as that mentioned above, can then be retrieved from the backend.The user data therefore serves as proof of authorization for the user when they wish to use certain online services. In the context of online services, such user authentication data can be provided, for example, through tokens, such as JSON Web Tokens. Such a token represents a unique identifier for the user, signed by a trusted authority, such as the authorization server mentioned above, which is usually issued for the requesting device and is valid.

[0013] Therefore, according to an advantageous embodiment of the invention, it is further provided that the first and second user data are transmitted in the form of respective tokens. These are particularly suitable as proof of authorization, are simple, and secure. More precisely, instead of a token being transmitted from the second to the first communication device, a separate token is issued for the first communication device, i.e., the motor vehicle, and transmitted to it. For example, the motor vehicle retrieves its own token for the user from the authorization server, which token is not necessarily the same token as on the mobile device. Such a token represents a unique identifier for the user, signed by a trusted authority, such as the aforementioned authorization server, which is generally issued for the requesting device and is valid specifically for this device.

[0014] In a further advantageous embodiment of the invention, before the first user data is transmitted to the first communication device, the central data processing system checks the user's authorization based on the transmitted second user data, and the first user data is only transmitted to the first communication device if the user's authorization is verified by the central data processing system based on the second user data. The second communication device can therefore send a request to the backend in the name of the user identity set up there, i.e., using its token, to transfer the user to the first communication device. The backend can check and authorize this request using the token of the second communication device.Only once this authorization has been verified can the corresponding transmission of the user identity—that is, the initial user data, such as the corresponding token—be initiated to the first communication device. This can further increase security.

[0015] In another particularly advantageous embodiment of the invention, before the first user data is transmitted to the first communication device by the central data processing system, a time-limited one-time ticket is created, which authorizes the first communication device to retrieve the first user data from the central data processing system within a defined period of time. The one-time ticket is transmitted to the first communication device, and if the first communication device requests the first user data from the central data processing system within the defined period of time, the central data processing system transmits the first user data to the first communication device. Such a one-time ticket can, in turn, be generated by the authorization server.This authorization server can optionally also verify the token of the requesting second communication device beforehand or trust the part of the backend from which the authorization server receives the request. The contents of such a one-time ticket typically include the target device, in this case the first communication device or the motor vehicle, the user's public data, the expiration date (i.e., the information about the predetermined period), and, if applicable, information about the second communication device. All of this information, in turn, represents public information, meaning it does not contain any secrets, and can therefore advantageously be transmitted optionally from the central data processing system to the first communication device via an unsecured channel.Only if the first communication device requests the first user data from the central data processing system within the period specified by this one-time ticket will it be transmitted to the first communication device, for example, again in the form of corresponding tokens. By using such a one-time ticket, even an unsecured channel can be used between the central data processing system and the first communication device, while still providing the user data securely to the first communication device.

[0016] In general, such a one-time ticket for granting authorization to collect the tokens from the central data processing system, in particular from the authorization server of the central data processing system, can take a variety of forms, as long as it can only be used by the specific first communication device, in particular by the specific vehicle and for the specific user.

[0017] To further increase security, according to a further advantageous embodiment of the invention, the first communication device transmits a signature of the first communication device to the central data processing system along with the request to transmit the first user data after receiving the one-time ticket. The central data processing system checks the authorization of the request based on the transmitted signature and only transmits the first user data to the first communication device upon verification of the authorization. Such a signature of the request can be implemented, for example, using a private key.

[0018] This allows the central data processing system to ensure that the request for user data originates from the first communication device and not from any other device.

[0019] The use of such a one-time ticket is, however, merely optional. Alternatively, the token or the first user data can be actively "pushed" to the target vehicle, or generally to the first communication device, by the authorization server or generally by the central data processing system, entirely without a one-time ticket. Preferably, however, the transmission takes place via a secure channel to the vehicle or the first communication device. This is, however, already the case if the first communication device is a vehicle and the central data processing system includes the motor vehicle backend. However, the implementation of the method using a one-time ticket can be easily transferred to any other system in an equivalent manner using standard technologies and can thus be used for any first and second communication device.This makes it possible to provide a secure process using standard technologies, and thus in a particularly efficient and cost-effective way, for transferring user identity in the form of tokens between multiple devices despite the use of insecure channels.

[0020] It is particularly convenient for a user if the establishment of the direct communication connection between the first and second communication devices, i.e., for the transmission of device identification data from the first communication device to the second communication device, occurs automatically as soon as the second communication device is located within a predetermined spatially limited position range relative to the first communication device. For example, such a communicative connection can be established as soon as the two devices are within reception range, for example, of Bluetooth reception.However, it can also be provided that the second communication device must be located at a specific position or a specific position range relative to the first communication device within its reception range in order to initiate the transmission of the device identification data from the first communication device to the second communication device. Such a position range can be provided, for example, by a corresponding storage tray or storage area within the first communication device embodied as a motor vehicle, on which the first communication device can be placed. This has the great advantage, for example, that if there are multiple users in the motor vehicle, each with multiple assigned communication devices, it can be determined whose user data is to be loaded into the motor vehicle by placing one of the user's respective communication devices on the storage tray.Another possibility in addition to such a storage tray would be to localize the respective mobile devices within the motor vehicle, for example by means of directional antennas, in order to identify the driver's mobile device, for example the one that is closest to the driver's area, and then to load its user identity into the motor vehicle.

[0021] The first user data loaded into the motor vehicle or generally onto the first communication device can also be deleted again by any mechanism selected, for example manually by the user or automatically when leaving the motor vehicle, locking the motor vehicle, after a predetermined period of time or the like.

[0022] Due to the complete automation of this user registration process in the vehicle, this process offers a particularly high level of convenience, especially for those with less technical experience. This allows anyone to use advanced vehicle functions based on online services in a particularly simple and convenient way.

[0023] Furthermore, the invention relates to a central data processing device for a data processing system for providing first user data of a user on a first communication device, wherein the central data processing device is designed to establish a communicative connection to a second communication device on which second user data is stored. Furthermore, the data processing device is designed to receive a request for providing the first user data on the first communication device, the second user data, and device identification data for identifying the first communication device from the second communication device via the communicative connection to the second communication device, and to transmit the first user data to the first communication device depending on the second user data and the device identification data.The first user data comprises first user authentication data which proves an authorization of the user to use at least one predetermined first online service by means of the first communication device if these are stored on the first communication device, and the second user data comprises second user authentication data which proves an authorization of the user to use the at least one first online service or another service which is different from the first online service by means of the second communication device.

[0024] The advantages mentioned for the method according to the invention and its embodiments apply equally to the central data processing device. Furthermore, the method steps mentioned in connection with the method according to the invention and its embodiments enable the further development of the central data processing device or the communication system according to the invention through additional specific features.

[0025] Furthermore, the invention relates to a communication system with a central data processing system comprising a central data processing device according to the invention or one of its embodiments, as well as the first and second communication devices. The first communication device is preferably designed as a motor vehicle. The second communication device can be designed as a user's mobile terminal, for example, a smartphone, tablet PC, or the like.

[0026] The exemplary embodiment explained below is a preferred embodiment of the invention. In the exemplary embodiment, the described components of the embodiment each represent individual, independently considered features of the invention, which also further develop the invention independently of one another and are thus also to be considered as components of the invention, either individually or in a combination other than that shown. Furthermore, the described embodiment can also be supplemented by further features of the invention already described.

[0027] In the figures, functionally identical elements are provided with the same reference numerals.

[0028] An exemplary embodiment of the invention is described below. The single figure shows a schematic representation of a communication system 10 for providing first user data ID1 of a user 12 on a first communication device, which is designed here as a motor vehicle 14, according to an exemplary embodiment of the invention. In addition to the motor vehicle 14, the communication system 10 comprises a second communication device, which in this example is designed as a mobile terminal 16 assigned to the user 12. In addition, the communication system 10 comprises a central data processing system 18, which includes a backend 20 and an authorization server 22 communicatively connected to the backend 20. Second user data ID2 is stored on the mobile terminal 16 of the user 12. This comprises user authentication data in the form of a token, such as a JSON Web Token.Such a token represents a unique identifier for the user 12, signed by a trusted authority, such as the authorization server 22.

[0029] In order to provide such tokens in the motor vehicle 14 in the most convenient way possible, so that the user 12 can also use online services provided by the backend 20 via the motor vehicle 14 independently of their mobile device 16, a direct communicative connection 24 is first established between the motor vehicle 14 and the mobile device 16. This communicative connection 24 can be unsecured and can be established, for example, via NFC, for example by placing the mobile device 16 in a storage tray in the motor vehicle 14. Via this communicative connection 24, the mobile device 16 can now query public information from the vehicle 14 that allows identification of the motor vehicle 14, such as a device serial number or a vehicle identification number (VIN).Subsequently, the mobile device 16 can send a request to the backend 20 in the name of the user identity established there, i.e., using its token, or generally using the second user data ID2, to transfer the user 12 to the motor vehicle 14. In this request 26, the motor vehicle 14 is addressed via its public information, in this example, the vehicle identification number VIN. The backend 20 can then verify and authorize the request 26 using the token, i.e., the second user data ID2 that is also transmitted. The backend 20 then informs the authorization server 22 of the motor vehicle 14 that the requesting user 12 is to be transferred. The authorization server 22 can trust the part of the requesting backend 20 or itself verify the token or the user data ID2 of the user 12.

[0030] Furthermore, the authorization server 22 now generates a one-time ticket T or similar for the request from user 12 and sends it to the motor vehicle 14. Here, too, the channel used can be unsecured. The contents of such a ticket T are typically the target device, here the motor vehicle 14, the user 12, an expiration date, and possibly information about the mobile device 16. The motor vehicle 14 can then use this ticket T to retrieve the corresponding tokens, or generally the first user data ID1, for the user 12 from the authorization server 22. The motor vehicle 14 can also identify itself if necessary, for example, by a signature S of the request using a private key. This allows security to be increased even further.

[0031] If the authorization server 22 receives such a corresponding request 28 within the validity period specified in the ticket T, possibly together with its signature S, which is verified by the authorization server 22, the authorization server 22 issues the requested tokens or, in general, the first user data ID1, which are then transmitted to the motor vehicle 14. By receiving these tokens, the motor vehicle 14 can now communicate with the backend 20 as the user.

[0032] The token, or generally the first user data ID1, can also be actively pushed to the target vehicle 14 by the authorization server 22, but this is then done using a secure channel to the vehicle 14. The use of a one-time ticket T, on the other hand, also enables the use of an unsecured channel and thus a transfer of the user identity to the motor vehicle using standard technologies that ultimately enable a secure provision of this user identity between different devices despite the use of insecure channels.

[0033] Overall, the example shows how the invention enables a secure process using standard technologies for transmitting user identity in the form of tokens between multiple devices despite the use of insecure channels. List of reference symbols 10 Communication system 12 users 14 Motor vehicle 16 mobile devices 18 central data processing system 20 backend 22 authorization servers 24 direct communicative connection 26 Inquiry 28 Inquiry ID1 first user data ID2 second user data S Signatur T One-time ticket VIN Vehicle Identification Number

Claims

[1] Method for providing first user data (ID1) of a user (12) on a first communication device (14), wherein the first user data (ID1) comprises first user authentication data which prove an authorization of the user (12) to use at least one predetermined first online service by means of the first communication device (14) when stored on the first communication device (14), with the steps - Providing a second communication device (16) on which second user data (ID2) of the user (12) are stored, wherein the second user data (ID2) comprises second user authentication data that proves an authorization of the user (12) to use the at least one first online service or another service that is different from the first online service by means of the second communication device (16); and - establishing a direct communicative connection (24) between the first and second communication devices (14, 16); - transmitting device identification data (VIN) for identifying the first communication device (14) from the first communication device (14) to the second communication device (16); - transmitting a request (26) for providing the first user data (ID1) on the first communication device (14), the second user data (ID2) and the device identification data (VIN) of the first communication device (14) from the second communication device (16) to a device-external central data processing system (18); and - transmitting the first user data (ID1) from the central data processing system (18) to the first communication device (14) as a function of the second user data (ID2) transmitted to the central data processing system (18) and the device identification data (VIN) of the first communication device (14). [2] Method according to claim 1, characterized by that before transmitting the first user data (ID1) to the first communication device (14), the central data processing system (18) checks an authorization of the user (12) on the basis of the transmitted second user data (ID2), and the first user data (ID1) is only transmitted to the first communication device (14) if the authorization of the user (12) is verified by the central data processing system (18) on the basis of the second user data (ID2). [3] Method according to one of the preceding claims, characterized bythat before the first user data (ID1) is transmitted to the first communication device (14), a time-limited one-time ticket (T) is created by the central data processing system (18), which ticket authorizes the first communication device (14) to retrieve the first user data (ID1) from the central data processing system (18) within a defined period of time, and wherein the one-time ticket (T) is transmitted to the first communication device (14), wherein in the event that the first communication device (14) requests the first user data (ID1) from the central data processing system (18) within the defined period of time, the central data processing system (18) transmits the second user data (ID2) to the first communication device (14). [4] Method according to claim 3, characterized bythat the first communication device (14) transmits a signature (S) of the first communication device (14) together with the request to transmit the first user data (ID1), wherein the central data processing system (18) checks an authorization of the request on the basis of the transmitted signature (S) and only transmits the first user data (ID1) to the first communication device (14) upon verification of the authorization. [5] Method according to one of the preceding claims, characterized by that the establishment of the direct communicative connection (24) between the first and second communication device (14, 16) takes place automatically as soon as the second communication device (16) is located in a predetermined spatially limited position range relative to the first communication device (14). [6] Method according to one of the preceding claims, characterized bythat the first and second user data (ID1, ID2) are transmitted in the form of respective tokens. [7] Central data processing device (20) for a data processing system (18) for providing first user data (ID1) of a user (12) on a first communication device (14), wherein the first user data (ID1) comprises first user authentication data which proves an authorization of the user (12) to use at least one predetermined first online service by means of the first communication device (14) when these are stored on the first communication device (14), wherein the central data processing device (20) is designed to establish a communicative connection to a second communication device (16) on which second user data (ID2) are stored, wherein the second user data (ID2) comprises second user authentication data which proves an authorization of the user (12) to use the at least one first online service or another service which is different from the first online service,by means of the second communication device (16), wherein the data processing device (20) is designed to - to receive a request for providing the first user data (ID1) on the first communication device (14), the second user data (ID2) and device identification data (VIN) for identifying the first communication device (14) from the second communication device (16) via the communicative connection to the second communication device (16); and - to transmit the first user data (ID1) to the first communication device (14) depending on the second user data (ID2) and the device identification data (VIN). [8] Communication system (10) with a central data processing system (18) comprising a central data processing device (20) according to claim 7, the first and the second communication device (14, 16). [9] Communication system (10) according to claim 8, characterized bythat the first communication device (14) is designed as a motor vehicle (14).

Images