Method for determining a security level for a connectivity of a motor vehicle, and motor vehicle

Abstract

Method for determining a security level (1, 2, 3, 4) for a connectivity of a motor vehicle (5), characterized in that - a geographical area (6, 7, 8) and an associated safety parameter (9, 10, 11) are determined, and - for the Internet connectivity of the motor vehicle (5), the security level (1, 2, 3, 4) is automatically determined depending on the security parameter (9, 10, 11) when the motor vehicle (5) is located in the geographical area (6, 7, 8).

Description

[0001] The invention relates to a method for determining a security level for a connectivity of a motor vehicle, as well as an associated motor vehicle which comprises a data processing system.

[0002] Connected motor vehicles, which may be connected to other vehicles, the environment, or a central server facility via the internet or another wireless connection, can provide a variety of software-based connectivity services. However, such services and functions can provide an opportunity for unauthorized compromise of the vehicle's digital systems. In particular, local hacking via the connectivity services from a distance from the vehicle can pose a threat to the vehicle's systems and data.

[0003] DE 10 2013 226 840 A1 relates to a wireless access device for a vehicle with a radio key. DE 10 2016 216 053 A1 describes a system for automatically controlling a user's access and / or engine start authorization for a vehicle using an electronic key. DE 10 2017 213 814 A1 shows a control device for a radio key system of a motor vehicle.

[0004] The invention is based on the object of providing a method and a motor vehicle which reduces the possibilities of attacks on connectivity services of the motor vehicle and at the same time offers the highest possible level of provision of connectivity services.

[0005] The problem is solved by the subject matter of the independent patent claims. Advantageous developments of the invention are described by the dependent patent claims, the following description, and the figures.

[0006] A first aspect of the invention provides a method for determining a security level for the connectivity of a motor vehicle. In one step of the method, a geographical area and an associated security parameter are determined. In a further step, the security level for the connectivity of the motor vehicle is automatically determined depending on the security parameter when the motor vehicle is located in the geographical area.

[0007] The invention provides the advantage that the motor vehicle is protected according to the specified security level, so that potential damage to the motor vehicle can be averted. Advantageously, the security level for the connectivity of the motor vehicle is not set across the board, but rather depends on the geographical position of the motor vehicle. This allows the security level to be adjusted based on the position of the motor vehicle. For example, in areas where there is an increased risk to connectivity, the security level can be increased. For example, in areas where there is a low risk to connectivity, the security level can be decreased. Advantageously, this always ensures an optimal balance between security and functionality of the connectivity based on the position of the motor vehicle.

[0008] Connectivity can be understood as all systems, modules, programs, (connectivity) services, ports, or interfaces, or the like of the motor vehicle that can be wirelessly connected to systems external to the vehicle or to systems of another motor vehicle. Connectivity allows the motor vehicle to access the internet and send and receive data to and from external systems. Among other things, the data can be sensitive data, such as personal data or data relevant to motor vehicle safety that requires special protection.

[0009] The geographical area can, in particular, represent a spatially contiguous area or region on the Earth's surface. For example, the geographical area can be an urban area, a rural area, a mixed area, or the like. For example, boundaries of the geographical area can coincide with a territorial boundary, such as a city, district, state, or national boundary. For example, the boundaries can be independent of a territorial boundary. In particular, the boundary of the geographical area can represent a circumference of a circle.

[0010] For example, the geographical area can be defined without any geometric shapes or territorial boundaries. However, the geographical area can also be circular or ring-shaped, whereby a ring-shaped geographical area can enclose another circular geographical area. In particular, the geographical area can be defined for a limited period of time or change over time.

[0011] In addition to the geographical area, the safety parameter is determined which belongs to or is assigned to the geographical area. In other words, the safety parameter applies within the geographical area. The safety parameter can, for example, be a value, in particular a value between 0 - 100, 0 - 3, 0 - 5 or the like. The safety parameter can also be represented in color, for example from green, through yellow, red, violet to black, or in the colors of a traffic light. For example, a low value, such as 0 or green, can mean that a security situation is rated as particularly safe. The safety parameter can, in particular, be determined for a limited time or change over time.

[0012] The geographical area and the associated security parameter can, for example, be determined by a central server device external to the vehicle and transmitted wirelessly to the vehicle. For example, the geographical area and the security parameter can be stored on a storage medium of the vehicle.

[0013] Reasonably definable factors and / or data can be used to determine the geographical area. Likewise, reasonably definable factors and / or data can be used to determine the security parameter. For example, in a country with a high crime rate, the boundaries of the geographical area may coincide with the national border, and the security parameter with a high value can be assigned to the area. However, a differentiation in the determination of the geographical area and the security parameter can also be made in much more detail. For example, statistical data can be used to determine the geographical area and the security parameter, such as crime statistics, particularly with regard to the IT security of the motor vehicle. In particular, official information, for example from an IT security authority, can be taken into account in the determination.

[0014] Preferably, several security levels, for example, three, four, or five security levels, are specified for the connectivity of the motor vehicle, with one security level being selected from the several levels and thus determined. The security level is determined, in particular, automatically, for example, by a data processing system of the motor vehicle or the like, without the need for intervention by a passenger of the motor vehicle.

[0015] In particular, each of the multiple security levels can be directly assigned to a security parameter or an interval of security parameters. For example, the security level can be automatically set to zero if the security parameter displays "green."

[0016] In particular, the safety level depends on the safety parameter associated with the geographical area in which the motor vehicle is currently located.

[0017] In particular, multiple geographical areas and a safety parameter associated with each of the geographical areas can be determined. For example, a first safety parameter is associated with a first geographical area, and a second safety parameter is associated with a second geographical area. In particular, the safety level can change automatically when the motor vehicle travels from the first geographical area to the second geographical area.

[0018] The position of the motor vehicle can be determined, for example, using the vehicle's Global Navigation Satellite System (GNSS), in particular a GPS system. This position can be compared with the geographical area, for example, using a comparison unit on the vehicle.

[0019] One embodiment provides for connectivity services to be provided for the motor vehicle depending on the security level. In particular, a selection of connectivity services for the motor vehicle can be activated or deactivated, or fully usable or restricted, depending on the security level.

[0020] For example, three security levels are specified: low, medium, and high. For example, at the low security level, all connectivity services are enabled, including, for example, over-the-air updates for the vehicle. At the medium security level, most connectivity services can be enabled or provided, while security-relevant and / or confidential connectivity services are restricted or disabled. For example, at the high security level, all connectivity services can be disabled, with the exception of, for example, alarm or emergency systems.

[0021] For example, a basic connectivity setting can specify which connectivity services are provided at a certain security level. For example, a vehicle user can customize the basic settings.

[0022] Thus, connectivity services can advantageously be adapted by means of the security level to correspond to a security situation based on the security parameters in the respective local area.

[0023] One embodiment provides that the security parameter is determined based on information about an event related to vehicle IT security within the geographical area. In particular, the security parameter can be determined based on a plurality of pieces of information about a respective event within the geographical area.

[0024] A vehicle IT security incident can be any event that affects the IT security of a vehicle, particularly the vehicle's connectivity. For example, it may be known in a geographical area that a hacker or hacker group has already carried out a hacking attack on other vehicles within that area.

[0025] In particular, the geographical area can be defined for a limited period of time or change over time. For example, if no event has been detected in the geographical area after a certain period of time, the area can shrink and disappear after a further, specific period of time.

[0026] In particular, the security parameter can change over time. For example, the value of the security parameter can gradually decrease after a certain period of time if no more events have been detected in the geographical area.

[0027] One embodiment provides that the event relating to vehicle IT security comprises a hacker attack on another motor vehicle. A hacker attack on another motor vehicle, which is carried out from the immediate vicinity of the other motor vehicle, can be detected, for example, by a detection system of the other motor vehicle. Information about the event can, for example, be transmitted directly or indirectly from the other motor vehicle to the motor vehicle, so that the security parameters, and thus the security level, can advantageously be adjusted based on the information.

[0028] Advantageously, a preventive measure can be taken for the motor vehicle by adjusting the security level in order to avert a potential local hacker attack.

[0029] The immediate vicinity of a motor vehicle can mean that a hacker attack can be launched directly from this immediate vicinity via radio. For example, the immediate vicinity can extend to less than 50 meters around the motor vehicle.

[0030] One embodiment provides that the information includes at least a local position of the event. For example, the local position includes coordinates, such as GPS coordinates. The position is, in particular, the position at which the event was detected.

[0031] Preferably, the geographical area is defined such that the geographical area surrounds the local position. For example, the position of the event can represent a center point of the geographical area.

[0032] In particular, it can be provided that the geographical area surrounds a plurality of local positions of a plurality of events if the plurality of local positions are spatially related. For example, a spatial relationship can exist if the plurality of local positions are within an area with a certain radius, for example, 1 km, or, for example, within a city district or the like.

[0033] In particular, a plurality of geographical areas that are spatially related can be combined into a higher-level geographical area, whereby a higher-level security parameter can be determined for the higher-level geographical area.

[0034] Advantageously, this ensures that the security level for the connectivity of the motor vehicle can be determined based on sound data and, in particular, in a locally limited manner, so that the security level is always optimally adapted to the local conditions.

[0035] One embodiment provides that the information about the event and at least one further piece of information about a further event relating to vehicle IT security is sent to a central, vehicle-external server device. In particular, a plurality of pieces of information about a plurality of events relating to vehicle IT security can be sent to the server device, wherein in each case one piece of information from the plurality of pieces of information can relate to one of the plurality of events. In particular, a plurality of pieces of information can be available to the server device. Advantageously, the server device can thus have a comprehensive vehicle IT security situation based on the plurality of pieces of information about the plurality of events, and preferably based on further data relating to vehicle IT security.In other words, all information relating to vehicle IT security can be received centrally in the central server facility and, in particular, stored, processed and evaluated.

[0036] Preferably, the server device can determine the geographical area and the associated security parameters based on the comprehensive vehicle IT security situation. In particular, a plurality of geographical areas and their respective associated security parameters can be determined and provided to the motor vehicle using the central server device.

[0037] A central server facility means that the information can be brought together at a central point, although it is not excluded that the information is stored decentrally or on several dislocated servers.

[0038] A server device external to the motor vehicle means that the server device is not a component of the motor vehicle.

[0039] Preferably, the geographical area and the associated security parameter are provided centrally for the motor vehicle and preferably at least one further motor vehicle, in particular a plurality of further motor vehicles, based on the information and preferably the at least one further piece of information from the server device.

[0040] Advantageously, the central server device can be used to provide the motor vehicle and a plurality of other motor vehicles with the same, location-resolved IT security situation, in particular in the form of at least one geographical area and at least one associated security parameter.

[0041] One embodiment provides that the server device provides a digital map which graphically depicts at least the geographical area and the associated security parameter. The digital map can, in particular, represent a so-called heat map for the vehicle IT security situation. The digital map preferably represents a territory which can be significantly larger than the geographical area. For example, the digital map can represent the territory of a state. The digital map can preferably graphically depict a plurality of geographical areas, each with an associated security parameter. For example, the map can depict an area of the geographical area in color, wherein the color of the depicted geographical area can correspond to the associated security parameter of the geographical area.

[0042] The digital map can, for example, be displayed graphically on a vehicle's display. The digital map can advantageously depict the IT security situation in the mapped territory in a particularly clear manner.

[0043] One embodiment provides that the security parameter depends on a predefined severity of the event regarding vehicle IT security within the geographical area.

[0044] In particular, a plurality of predefined events can each be assigned a respective predefined severity in a register. Preferably, the event can be subsumed under one of the predefined events, so that the event can be assigned the predefined severity. For example, a severity can have a value from 1.0 to 3.0. The severity value can be included, for example, as a factor or in another way when determining the security parameter.

[0045] Alternatively or additionally, the security parameter is preferably dependent on a number of events relating to vehicle IT security within the geographical area, wherein the number of events represents a sum of the events.

[0046] In particular, the security parameter can be determined based on a weighted sum depending on the severity and number of events. Advantageously, the security parameter can be determined automatically, particularly by the central server device.

[0047] One embodiment provides that a radius and / or area of the geographical region depends on the predefined severity of the event regarding vehicle IT security. The severity value can be included, for example, as a factor or in another way when determining the radius and / or area.

[0048] Alternatively or additionally, the geographical area is preferably dependent on the number of vehicle IT security-related events within the geographical area. In particular, the radius and / or area can be determined based on a weighted sum depending on the severity and number of events. Advantageously, the geographical area can be determined automatically, in particular by the central server device.

[0049] For example, it can be provided that a first geographical area is circular around the position of the event, and a second geographical area is ring-shaped around the first geographical area based on the same event, wherein the security parameter within the second geographical area is smaller than a security parameter of the first geographical area. Thus, it can advantageously be achieved that the security level can be gradually reduced as the distance from the position of the event increases.

[0050] One embodiment provides that the event relating to vehicle IT security is detected by a detection system of the motor vehicle, preferably a so-called intrusion detection system (IDS). In particular, the detection system can detect a hacker attack carried out locally on the motor vehicle. In particular, the detection system can detect that the hacker is scanning the vehicle's ports using a so-called port scanner.

[0051] Preferably, the information about the detected event can be sent directly or with a time delay to the central computing device. Preferably, the information about the detected event can be sent to at least one other motor vehicle in the vicinity of the motor vehicle, in particular to a plurality of other motor vehicles in the vicinity of the motor vehicle. For example, a transmission standard of a Car2X technology can be used to transmit the information. In particular, the at least one other motor vehicle can be located within radio range of the motor vehicle. Thus, advantageously, other vehicles can be directly warned of a hacker attack.

[0052] For use cases or application situations that may arise during the method and which are not explicitly described here, it may be provided that, in accordance with the method, an error message and / or a request to enter user feedback is issued and / or a default setting and / or a predetermined initial state is set.

[0053] A further aspect of the invention provides a motor vehicle comprising at least one data processing device. It is provided that the data processing device is provided with a geographical area and a security parameter associated with the geographical area, for example, from a central server device external to the motor vehicle or from a storage medium of the motor vehicle. The data processing device of the motor vehicle is designed, in particular, to automatically determine a security level for a connectivity of the motor vehicle depending on the security parameter when the motor vehicle is located in the geographical area.

[0054] The invention provides the advantage that the motor vehicle is protected according to the specified security level, so that potential damage to the motor vehicle can be averted. Advantageously, the security level for the connectivity of the motor vehicle is not set across the board, but rather depends on the geographical position of the motor vehicle. This allows the security level to be adjusted based on the position of the motor vehicle. For example, in areas where there is an increased risk to connectivity, the security level can be increased. For example, in areas where there is a low risk to connectivity, the security level can be decreased. Advantageously, this always ensures an optimal balance between security and functionality of the connectivity based on the position of the motor vehicle.

[0055] The motor vehicle according to the invention is preferably designed as a motor vehicle, in particular as a passenger car or truck, or as a passenger bus or motorcycle.

[0056] The invention also includes further developments of the motor vehicle according to the invention that have features already described in connection with the further developments of the method according to the invention. For this reason, the corresponding further developments of the motor vehicle according to the invention are not described again here.

[0057] The invention also includes a data processing device for a motor vehicle. The data processing device can have a processor device that is configured to carry out steps and / or an embodiment of the method according to the invention. For this purpose, the processor device can have at least one microprocessor and / or at least one microcontroller and / or at least one FPGA (Field Programmable Gate Array) and / or at least one DSP (Digital Signal Processor). Furthermore, the processor device can have program code that is configured to carry out the embodiment of the method according to the invention when executed by the processor device. The program code can be stored in a data memory of the processor device. The processor circuit of the processor device can, for example, have at least one circuit board and / or at least one SoC (System on Chip).

[0058] As a further solution, the invention also encompasses a computer-readable storage medium comprising program code which, when executed by a processor circuit of a computer or computer network, causes the processor circuit or computer network to carry out an embodiment of the method according to the invention. The storage medium can, for example, be provided at least partially as a non-volatile data memory (e.g. as a flash memory and / or as an SSD - solid state drive) and / or at least partially as a volatile data memory (e.g. as a RAM - random access memory). The storage medium can be arranged in the processor circuit in its data memory. However, the storage medium can also be operated, for example, as a so-called app store server on the Internet. The computer or computer network can provide a processor circuit with at least one microprocessor. The program code can be in binary code or assembler and / or as source code of a programming language (e.g.B. C) and / or as a program script (e.g. Python).

[0059] The invention also includes a system comprising at least one motor vehicle according to the invention and a central, vehicle-external server device, wherein the system is adapted to carry out the steps of the method according to the invention.

[0060] The invention also encompasses combinations of the features of the described embodiments. The invention therefore also encompasses implementations that each comprise a combination of the features of several of the described embodiments, unless the embodiments are described as mutually exclusive.

[0061] Exemplary embodiments of the invention are described below. Shown are: Fig. 1 a flowchart of an embodiment of a method according to the invention; Fig. 2 a schematic representation of an embodiment of a system with a motor vehicle according to the invention; Fig. 3 a schematic representation of an embodiment of a digital map.

[0062] The exemplary embodiments explained below are preferred embodiments of the invention. In the exemplary embodiments, the described components of the embodiments each represent individual features of the invention that can be considered independently of one another, each of which also develops the invention independently of one another. Therefore, the disclosure is intended to encompass combinations of the features of the embodiments other than those shown. Furthermore, the described embodiments can also be supplemented by further features of the invention already described.

[0063] In the figures, the same reference symbols designate elements with the same function.

[0064] Fig. 1 shows a flowchart of an exemplary embodiment of a method according to the invention for determining a security level 1, 2, 3, 4 for the connectivity of a motor vehicle 5. In a first step S1, a geographical area 6, 7, 8 and an associated security parameter 9, 10, 11 can be determined. For example, this determination can be made by a central, vehicle-external server device 13 and provided by it to the motor vehicle 5, or it can be made by a component of the motor vehicle 5 itself.

[0065] The security parameter 9, 10, 11 can be determined, for example, based on information about an event relating to vehicle IT security within the geographical area 6, 7, 8. For example, the event relating to vehicle IT security includes a hacker attack on another motor vehicle 12. In particular, the security parameter 9, 10, 11 can depend on a predefined severity of the security-relevant event and / or a number of security-relevant events within the geographical area 6, 7, 8.

[0066] In particular, the event relating to vehicle IT security may have been detected in advance by another motor vehicle 12, and the information about the event may have been sent to the central server device 13.

[0067] The information includes, for example, at least a local position of the event, wherein the geographical area 6, 7, 8 can be defined such that the geographical area 6, 7, 8 surrounds the local position. A radius and / or an area of the geographical area 6, 7, 8 can, for example, depend on the predefined severity of the event and / or the number of events within the geographical area 6, 7, 8.

[0068] In a second step S2, the security level 1, 2, 3, 4 for the connectivity of the motor vehicle 5 can be automatically determined depending on the security parameter 9, 10, 11 when the motor vehicle 5 is located in the geographical area 6, 7, 8. For example, a device 16 for data processing of the motor vehicle 5 can be configured for this purpose. In particular, connectivity services can be provided for the motor vehicle 5 depending on the security level 1, 2, 3, 4.

[0069] In Fig. 2 is a schematic representation of an embodiment of a system 16 with a first motor vehicle 5 according to the invention, at least one further, second motor vehicle 12, and a central server device 13 external to the motor vehicle. For example, the first and / or second motor vehicle 5, 12 can have a detection system 14 designed to detect the event relating to vehicle IT security. In particular, the event can comprise a hacker attack on the first and / or second motor vehicle 5, 12, which is carried out from an immediate environment 15 of the first and / or second motor vehicle 5, 12.

[0070] In particular, the information about the event can be sent from the attacked motor vehicle 5, 12 to the central server device 13, for example, via mobile radio. Furthermore, the attacked motor vehicle 5, 12 can be configured to send the information about the event to the non-attacked motor vehicle 5, 12, for example, using a transmission standard of a Car2X technology, so that the non-attacked motor vehicle 5, 12 can be warned.

[0071] The server device 13 can, in particular, be configured to receive, store, and process a plurality of information items about a plurality of events relating to vehicle IT security. In particular, the device can determine at least one geographical area 6, 7, 8 and an associated security parameter 9, 10, 11, preferably automatically. Furthermore, the server device can provide the geographical area 6, 7, 8 and the associated security parameter 9, 10, 11 to the first and / or second motor vehicle 5, 12.

[0072] The first and / or second motor vehicle 5, 12 may in particular comprise the data processing device 16, which may be configured to automatically determine the security level 1, 2, 3, 4 for the connectivity of the motor vehicle 5 depending on the provided security parameter 9, 10, 11 when the motor vehicle 5 is located in the geographical area 6, 7, 8.

[0073] Fig. Figure 3 shows a schematic representation of an embodiment of a digital map 17, which can be provided in particular by the server device 13. Furthermore, a motor vehicle 5 is shown, which can, for example, provide four security levels 1, 2, 3, 4 for the connectivity of the motor vehicle.

[0074] In this example, map 17, or heat map, depicts the territory of the Federal Republic of Germany, whereby within the territory a plurality of geographical areas 6, 7, 8, each with an associated security parameter 9, 10, 11, can be graphically depicted.

[0075] The heavily hatched areas can, for example, each comprise a first geographical area 6, each with a first security parameter 9. For example, low activity of hacker attacks on motor vehicles could be known in the first geographical area 6, so that, for example, the first security parameter 9 is low. According to this example, the second security level 2 for the connectivity of the motor vehicle 5 can be automatically determined depending on the first security parameter 9 when the motor vehicle 5 is located in one of the first geographical areas 6. For example, at the second security level 2, connectivity services for the motor vehicle 5 could be provided to a limited extent.

[0076] The densely hatched areas can, for example, each comprise a second geographical area 7, each with a second security parameter 10. For example, moderate activity of hacker attacks on motor vehicles could be known in the second geographical area 7, so that, for example, the second security parameter 10 is medium. According to this example, the third security level 3 can be automatically determined for the connectivity of the motor vehicle 5 depending on the second security parameter 10 when the motor vehicle 5 is located in one of the second geographical areas 7. For example, at the third security level 3, a selection of connectivity services for the motor vehicle 5 could be deactivated, in particular security-relevant and confidential services.

[0077] The black areas can, for example, each comprise a third geographical area 8, each with a third security parameter 11. For example, a high level of hacker attacks on motor vehicles could be known in the third geographical area 8, so that, for example, the third security parameter 11 is high. According to this example, the fourth security level 4 for the connectivity of the motor vehicle 5 can be automatically determined depending on the third security parameter 11 when the motor vehicle 5 is located in one of the third geographical areas 8. For example, at the fourth security level 4, all connectivity services for the motor vehicle 5 could be deactivated, with the exception of alarm and / or emergency systems.

[0078] Outside of the geographical areas 6, 7, and 8, no activity of hacker attacks on motor vehicles can be known, so that, for example, the first security level 1 for the connectivity of motor vehicle 5 can be automatically determined depending on. For example, at the first security level 1, all connectivity services for motor vehicle 5 could be provided.

[0079] As in the Fig. As shown in Figure 2, a respective area 6, 7, 8 can have any shape, which may depend in particular on the respective events. For example, it can be provided that a third geographical area 8 is surrounded by a second geographical area 7, and the second geographical area 7 is surrounded by a first geographical area 6, so that the security level can be gradually reduced with increasing distance from a hotspot for hacker attacks.

[0080] Overall, the examples demonstrate how deactivation of vehicle connectivity functions can be deployed as a preventative measure against a local hack on the vehicle. For example, information about local hacker groups is collected to create a heat map that assesses connection security in the form of a security parameter for the geographical area. The security parameter can be defined, for example, by a traffic light system. Areas where no hacker groups are known can be classified as green (=safe). If a vehicle is located in such an area, all connectivity services and over-the-air updates for the vehicle are activated. If there is little information about hacker groups or the area is generally suspicious, it is marked as yellow (=risky).In this case, harmless services remain enabled, while security-relevant and confidential services are disabled to limit hackers' ability to compromise the system or steal sensitive data. If there is a lot of confirmed information about local hacker groups, the area is marked red (=unsafe). Then, all connectivity services except one warning system are disabled. If the vehicle detects hacker activity via an intrusion detection system (IDS), it can, for example, warn other nearby vehicles and report the incident, as well as report the location to the heat map or the server facility as confirmed information about hacker groups.

Claims

[1] Method for determining a security level (1, 2, 3, 4) for a connectivity of a motor vehicle (5), characterized by , that - a geographical area (6, 7, 8) and an associated safety parameter (9, 10, 11) are determined, and - for the Internet connectivity of the motor vehicle (5), the security level (1, 2, 3, 4) is automatically determined depending on the security parameter (9, 10, 11) when the motor vehicle (5) is located in the geographical area (6, 7, 8). [2] Method according to claim 1, characterized by that, depending on the security level (1, 2, 3, 4), connectivity services are provided via the Internet for the motor vehicle (5). [3] Method according to claim 1 or 2, characterized bythat the security parameter (9, 10, 11) is determined based on information about an event relating to vehicle IT security within the geographical area (6, 7, 8), wherein in particular the event relating to vehicle IT security comprises a hacker attack on another motor vehicle (12). [4] Method according to claim 3, characterized by that the information comprises at least a local position of the event, wherein the geographical area (6, 7, 8) is defined such that the geographical area (6, 7, 8) surrounds the local position. [5] Method according to claim 3 or 4, characterized bythat the information and at least one further item of information about a further event relating to vehicle IT security is sent to a central, vehicle-external server device (13), wherein the geographical area (6, 7, 8) and the associated security parameter (9, 10, 11) are provided centrally for the motor vehicle (5) and at least one further motor vehicle (12) based on the information and the at least one further item of information by the server device (13). [6] Method according to claim 5, characterized by that the server device (13) provides a digital map (17) which graphically depicts at least the geographical area (6, 7, 8) and the associated security parameter (9, 10, 11). [7] Method according to one of claims 3 to 6, characterized bythat the safety parameter (9, 10, 11) depends on a predefined severity of the safety-relevant event and / or a number of safety-relevant events within the geographical area (6, 7, 8). [8] Method according to claim 7, characterized by that a radius and / or an area of the geographical area (6, 7, 8) depends on the predefined severity of the event and / or the number of events within the geographical area (6, 7, 8). [9] Method according to one of claims 3 to 8, characterized by that the event relating to vehicle IT security is detected by a detection system (14) of the motor vehicle (5), wherein the information about the detected event is sent to at least one further motor vehicle (12) in an environment (15) of the motor vehicle (5). [10] Motor vehicle (5), comprising a device (16) for data processing, characterized by , that - the device (16) is provided with a geographical area (6, 7, 8) and an associated security parameter (9, 10, 11), and - the device (16) is designed to automatically determine a security level (1, 2, 3, 4) for Internet connectivity of the motor vehicle (5) depending on the security parameter (9, 10, 11) when the motor vehicle (5) is located in the geographical area (6, 7, 8).

Images