Automatic authentication of a civilian emergency vehicle

Abstract

Method for authenticating a vehicle (1) in which: - a first control unit (10) of a first vehicle (1) transmits a digital certificate (3) to a second control unit (20) of a second vehicle (2) by means of a V2X message; - the second control unit (20) receives the transmitted digital certificate (3) and a display device (21) of the second vehicle (2) displays the received digital certificate (3) as an authentication of the first vehicle (1), characterized in that: - the second control unit (20) transmits an authentication request (6) to the first control unit (10) by means of a V2X message and the first control unit (10) transmits the digital certificate (3) as a response to the authentication request (6).

Description

The invention relates to a method for authenticating a vehicle. The invention further relates to a control device for a vehicle and a vehicle.People regularly carry out traffic checks in order to ensure safe road traffic. In traffic control, a policer usually checks data concerning a vehicle and a driver of the vehicle.The data relating to the vehicle can be determined, for example, on the basis of a vehicle identification number (VIN) and / or a TÜV certificate. The data relating to the driver can be determined by means of a so-called holder query based on an official license plate of the vehicle and / or on the basis of an identity document of the driver, for example an identity card or driver's license.The policer usually stops the vehicle during traffic control and responds with the driver of the vehicle in order to determine the required data. The conversation situation at a driver's door of the vehicle is, however, unclear and risky to the policer. This is because the driver can use weapon authority, for example, in order to draw himself from the check.In order to reduce the risk of traffic control for the policer, US 2018 / 0047122 A1 and US 2022 / 0014907 A1 each disclose a method for checking a vehicle and a driver of the vehicle, in which a vehicle stores data relating to the vehicle and a driver of the vehicle, receives a checking request from a checking device via a wireless connection, and transmits the stored data to the checking device as a response to the checking request.The checking device can be installed in a police vehicle or can be mobile and can be actuated automatically or manually by the policer during traffic checking.People often use civilian emergency vehicles to perform traffic checks. Compared to the markedly painted emergency vehicles, civil emergency vehicles offer the advantage of anonymity, which is associated with a greater efficiency of traffic control.Traffic control by a civilian vehicle is risky for the driver of the controlled vehicle. This is because an occupant of the civilian vehicle may be simulated to be a policer and the controlled vehicle may actually fall over after stopping.In order to reduce the risk of unauthorized traffic control, EP 0 950 230 B1 discloses a method for authenticating a policer, in which a policer wirelessly transmits a license plate of a stopped vehicle to a stationary database server by means of a first mobile terminal, and the stationary database server provides a wireless connection to a second mobile terminal assigned to the transmitted license plate and arranged in the stopped vehicle, and transmits authentication of the policer to the second mobile terminal via the provided wireless connection.However, the latter method presupposes a complex stationary infrastructure and is difficult to handle, in particular, for a driver of the stopped vehicle.US 2022 / 0309918 A1 discloses a method in which a vehicle detects a distance of an emergency vehicle and a direction of the emergency vehicle relative to the vehicle and a display screen graphically displays the vehicle and a relative arrangement of the detected emergency vehicle to the vehicle. In this case, the emergency vehicle can identify itself wirelessly, for example by means of a DSRC message, with respect to the vehicle.The standard ETSI EN 302 637-2 V1.4.1 (2019-04) "Intelligent transport systems (ITS); Vehicular communications; Basic set of applications; Part 2: Specification of Cooperative Awareness Basic Service" discloses, inter alia, a method in which a privilege vehicle authenticates itself to a normal vehicle by means of a wirelessly transmitted digital certificate.The technical contribution "How to View SSL Certificate Details in Each Browser" by Julye Olensik, published on 02.06.2017 at https: / / www.alobalian.com / en / blood / how-to-view ssl-certificate details, discloses a method for displaying digital certificates.The specification ETSI TS 103 097 V1.3.1 (2017-0) "Intelligent Transport Systems (ITS); Security; Security header and certificate formats" describes formats for public key-based digital certificates that are wirelessly exchanged between vehicles.It is therefore an object of the invention to provide a method for authenticating a vehicle that facilitates traffic control and increases security of traffic control. Further objects of the invention are to provide a control device for a vehicle and a vehicle.An object of the invention is a method for authenticating a vehicle. The vehicle is, for example, a civil emergency vehicle which carries out a traffic control and in the process controls a private vehicle. The civilian emergency vehicle authenticates itself to the controlled private vehicle.According to the invention, a first control device of a first vehicle transmits a digital certificate to a second control device of a second vehicle by means of a V2X (Vehicle-to-Everything) message, the second control device receives the transmitted digital certificate and displays the received digital certificate as an authentication of the first vehicle to a display device of the second vehicle. In this way, a driver of the second vehicle can easily recognize whether the first vehicle is authentic by looking at the display device. Authenticity of the first vehicle is essential for the driver of the second vehicle, in particular, when the first vehicle appears to be a civilian emergency vehicle and the second vehicle stops within the scope of traffic control. The digital certificate increases a safety of the driver of the second vehicle during traffic control.Furthermore, according to the invention, the second control device transmits an authentication request to the first control device by means of a V2X message and the first control device transmits the digital certificate as a response to the authentication request. The second control device causes the first control device to transmit the digital certificate by means of the authentication request. The driver of the second vehicle can trigger the transmission of the authentication request manually, for example when the first vehicle is driving in front and prompts the second vehicle to follow by means of a visually and / or auditively perceptible display perceptible by the driver of the second vehicle.The second control device advantageously identifies the first vehicle by means of a sensor or by receiving a V2X message as an official emergency vehicle and the control device transmits the authentication request after the identification. When the second vehicle recognizes the first vehicle as a civilian emergency vehicle, the second vehicle automatically initiates the transmission of the authentication request, thereby further simplifying the authentication of the first vehicle. The sensory recognition may comprise a visual capturing of an image of the second vehicle by means of a camera of the first vehicle. For example, the second vehicle can recognize a text "Please follow" displayed visually perceivable by the first vehicle in the captured image.The second controller may receive a basic safety message, BSM, from the first controller, identify a V2X capability of the first vehicle, and transmit the authentication request after the identifying. Receiving the BSM confirms the V2X capability of the first vehicle, on the one hand. On the other hand, the second control device can determine a relative position of the first vehicle to the second vehicle on the basis of the BSM and determine plausibility of the determined relative position, whereby a safety of the traffic control is further increased.Ideally, the second control device displays the received digital certificate if the transmitted authentication request is correctly signed and the signature displays an entity authorising the first vehicle. The first control device signs the received authentication request with the digital certificate. The second control device checks the correctness of the received digital certificate. In addition, the second control device checks whether the signature is issued and / or verified by a trusted entity, i.e. the entity authorising the vehicle. In this way, a safety of the traffic control is further increased.The digital certificate may be transmitted during a trip of the second vehicle. As a result, the authenticity of the first vehicle is already established before the second vehicle follows and / or stops, which is associated with a further increased safety of the traffic control. For example, the second vehicle does not need to follow the first vehicle to an ambiguous location if the first vehicle is not actually a civilian emergency vehicle.In one embodiment, the digital certificate is transmitted over a V2X connection or a 5G-V2X connection. The V2X connection between the first and the second vehicle is provided directly by respective communication units and does not require a stationary infrastructure. If the first vehicle and / or the second vehicle cannot provide a direct V2X connection, but can provide a mobile radio connection, V2X messages are alternatively transmitted by means of a 5G mobile radio network.The digital certificate is advantageously transmitted via a secure connection. The secure connection is encrypted. Further non-involved vehicles are excluded from detecting the authentication of the first vehicle. In this way, anonymity of the first vehicle, for example of a civil emergency vehicle, is ensured.The driver of the second vehicle is informed by the display device whether the first vehicle has a V2X capability and whether-in the positive case-the first vehicle is authentic or not, for example is a civilian emergency vehicle or not.Yet another subject matter of the invention is a control device for a vehicle. The control device can be functionally connected to a bus system of the vehicle. The control device can be designed as a module, in particular a software module, and can be integrated in a further control device of the vehicle.According to the invention, the control device is designed to cooperate with a method according to one specific embodiment of the present invention as the first control device or as the second control device. The control device enables simple and secure authentication of the first vehicle with respect to the second vehicle.A further subject matter of the invention is a vehicle. The vehicle can be designed as a civil emergency vehicle or as a private vehicle.According to the invention, the vehicle comprises a control device according to one specific embodiment of the present invention. If both the emergency vehicle and the private vehicle comprise the respective control device, the first vehicle can automatically authenticate itself to the second vehicle as a civil emergency vehicle. In this way, the two vehicles simplify traffic control and increase their safety.An important advantage of the method according to the invention is that traffic control is facilitated and safety of the traffic control is increased.The invention is schematically illustrated in the drawings by way of an embodiment and will be further described with reference to the drawings. It shows: FIG. 1 is a functional diagram of two vehicles, each according to an embodiment of the invention.FIG. 1 shows a functional diagram of two vehicles 1, 2, each according to one embodiment of the invention. The vehicle 1 comprises a control device 10 according to one specific embodiment of the present invention. The vehicle 2 comprises a control device 20 according to an embodiment of the invention and a display device 21. The control units 10, 20 are designed to cooperate as a first control unit 10 or as a second control unit 20 with a method according to one specific embodiment of the present invention described below for authenticating vehicle 1.The second control unit 20 can receive a basic safety message, BSM, 7 from the first control unit 10, identify a V2X capability of the first vehicle 1 on the basis of the received BSM 7. Alternatively or additionally, the second control device 20 can recognize the first vehicle 1 as an official emergency vehicle by means of a sensor 22, for example a camera, or by receiving a V2X message. After the detection, the second control device 20 transmits an authentication request 6 to the first control device 10 of the first vehicle 1.In particular, the second control device 20 can transmit the authentication request 6 to the first control device 10 by means of a V2X message.The first control device 10 of the first vehicle 1 transmits a digital certificate 3 to the second control device 20 of the second vehicle 2 by means of a V2X message.The digital certificate 3 can be transmitted during a trip of the second vehicle 2, for example via a V2X connection 5 or a 5G-V2X connection 4. The digital certificate 3 is preferably transmitted via a secure connection 4, 5.The second controller 20 receives the transmitted digital certificate 3, and a display device 21 of the second vehicle 2 displays the received digital certificate 3 as authentication of the first vehicle 1. Advantageously, the second control device 20 displays the received digital certificate 3 if the transmitted authentication request 6 is correctly signed and the signature 8 displays an entity 80 authorising the first vehicle 1.LIST OF REFERENCE CHARACTERS:1 first vehicle 10 first control device 2 second vehicle 20 second control device 21 display device 22 sensor 3 digital certificate 4 5G-V2X connection 40 base station 5V2X connection 6 authentication request 7 BSM 8 signature 80 authorizing entity

Claims

Method for authenticating a vehicle (1), in which - a first control device (10) of a first vehicle (1) transmits a digital certificate (3) to a second control device (20) of a second vehicle (2) by means of a V2X message; - the second control device (20) receives the transmitted digital certificate (3) and a display device (21) of the second vehicle (2) displays the received digital certificate (3) as an authentication of the first vehicle (1), characterized in that - the second control device (20) transmits an authentication request (6) to the first control device (10) by means of a V2X message and the first control device (10) transmits the digital certificate (3) as a response to the authentication request (6).Method according to Claim 1, in which the second control device (20) identifies the first vehicle (1) as an official emergency vehicle by means of a sensor (22) or by receiving a V2X message and transmits the authentication request (6) after the identification.Method according to Claim 1 or 2, in which the second control device (20) receives a basic safety message, BSM, (7) from the first control device (10), identifies a V2X capability of the first vehicle (1) and transmits the authentication request (6) after the identification.Method according to one of Claims 1 to 3, in which the second control device (20) displays the received digital certificate (3) if the transmitted authentication request (6) is correctly signed and the signature (8) displays an entity (80) authorising the first vehicle (1).Method according to one of Claims 1 to 4, in which the digital certificate (3) is transmitted during a journey of the second vehicle (2).Method according to one of Claims 1 to 5, in which the digital certificate (3) is transmitted via a V2X connection (5) or a 5G-V2X connection (4).Method according to one of Claims 1 to 6, in which the digital certificate (3) is transmitted via a secure connection (4, 5).Control device (10, 20) for a vehicle (1, 2) which is designed to cooperate with a method according to one of Claims 1 to 7 as the first control device (10) or as the second control device (20).Vehicle (1, 2) comprising a control device (10, 20) according to Claim 8.

Images