Method for an external server for managing vehicle data, computer program and / or computer-readable medium, server

Abstract

Method (100) for an external server (90) for managing vehicle data (51) and complying with a data protection regulation (70), wherein the method (100) comprises: receiving (110), by a central component (91) of the server (90), of the vehicle data (51) relating to a vehicle (50); determining (120) control information (80) based on the vehicle data (51) and the data protection regulation (70); and transmitting (130), from the central component (91) to a receiving component (92) of the server (90), the vehicle data (51) taking into account the control information (80).

Description

[0001] The present disclosure relates to a method for an off-board server for managing vehicle data and complying with a data protection regulation. The disclosure also relates to a computer program and / or computer-readable medium and a server.

[0002] An increasing number of applications outside the vehicle require data from a wide variety of vehicles. Such data is transmitted from the vehicle to, for example, a server and can be processed and / or used for applications such as customer service, maintenance planning, fault analysis, navigation services, marketing, and / or for use by an application linked to the vehicle, for example, on a device of a vehicle user.

[0003] Therefore, vehicle data is sometimes processed by different data processing systems. The processing of the data and the transmission of the data between the data processing systems can be viewed as a data stream, in which various data processing systems can be interposed between the vehicle and the application. Different applications can receive data from different data processing systems. The applications can be viewed as receiving systems for the data stream.

[0004] DE 10 2020 108 987 A1 discloses a method, system, computer program, and storage medium for the fault-tolerant operation of a vehicle. The vehicle comprises a first functional unit for performing a first vehicle function. In addition, a second functional unit for performing a second vehicle function, as well as a prediction unit, are assigned to the vehicle. In the method, the prediction unit is used to determine an error characteristic value that is representative of a prediction as to whether an error will occur in the first functional unit in the near future, which will restrict the execution of the first vehicle function. If the error characteristic value is representative of an error occurring in the near future, the execution of the first vehicle function is transferred to the second functional unit. The error characteristic value can be determined depending on the operating data using a digital twin in the server.The digital twin can also be called a “vehicle shadow.”

[0005] Data protection regulations must be observed when using vehicle data. Such data protection regulations govern the handling of vehicle data. Data protection regulations may include contractually and / or legally specified rules and / or standards that describe how vehicle data is handled.

[0006] In the case of a new type of data stream, in order to comply with data protection regulations, it may be necessary to prepare an overview of all currently available data from the respective upstream systems, i.e. data processing systems upstream, in order to ensure that all systems involved comply with data protection regulations.

[0007] If the data flow changes, for example, due to a new application, a change to an application, and / or a change in data protection regulations, all affected receiving systems must be identified and adjusted. This can result in significant manual effort. Compliance with data protection regulations can therefore be time-consuming and costly.

[0008] Against the background of this prior art, one object of the present disclosure is to provide a method suitable for enriching the prior art and improving at least the aforementioned aspects of the prior art. In particular, the object of the disclosure is to enable improved management of vehicle data for compliance with a data protection regulation, while reducing and / or avoiding manual effort.

[0009] The problem is solved by the features of the independent claims. The subclaims contain further developments of the disclosure.

[0010] According to one aspect of the disclosure, the object is achieved by a method for an external vehicle server for managing vehicle data and complying with a data protection regulation. The method comprises: receiving, by a central component of the server, the vehicle data relating to a vehicle; determining control information based on the vehicle data and the data protection regulation; and transmitting, from the central component to a receiving component of the server, the vehicle data taking the control information into account.

[0011] It was recognized that the vehicle data can be processed by the server and transmitted to the receiving component. To ensure systematic monitoring of a data stream based on the vehicle data, the server has a central component to which the vehicle data is transmitted. The central component can determine control information based on the vehicle data and the data protection regulations. This control information can ensure that the data protection requirements defined by the data protection regulations are enforced, thus controlling access to the vehicle data and managing or controlling the data stream in accordance with data protection law. Taking the control information into account, the vehicle data can then be transmitted to the receiving component as optionally processed vehicle data.The receiving component can execute a corresponding application based on the received vehicle data and / or enable the application to be executed.

[0012] The central component allows vehicle data streams to be centrally bundled and distributed from a central location to one or more receiving systems. Data protection regulations are enforced or taken into account by the central component. This enables changes to data protection regulations and / or a vehicle data source to be applied at runtime through central configuration management. Manual adjustment of individual configurations of the receiving system(s) is unnecessary.

[0013] Furthermore, the central management of vehicle data by the central component allows a user to operate multiple vehicles while adhering to the same and / or user-specific data protection regulations. Furthermore, central management allows a vehicle to be used by multiple users, with the same or different data protection regulations applying to each user. The server can be connected to multiple vehicles, which can also transmit vehicle data to the server to enable aggregation and / or processing of the vehicle data of the multiple vehicles while adhering to individual data protection requirements.

[0014] Optionally, the vehicle data is assigned to a component and / or component group of the vehicle. It has been recognized that different components and / or component groups, or corresponding sensors and / or input devices of the vehicle, can generate vehicle data with varying levels of sensitivity regarding data protection. For example, camera data as vehicle data of an interior camera as a vehicle component may be subject to stricter data protection requirements than chassis data as vehicle data of a shock absorber as a vehicle component. Component groups are a plurality of components.

[0015] Optionally, the control information includes access information relating to the vehicle data. The access information can relate to a receiving component's access right to read the vehicle data. The access information can thus indicate whether a specific receiving component is authorized to read the vehicle data or whether the receiving component is denied access to the vehicle data. Alternatively or additionally, the control information includes target information relating to the receiving component. This allows the control information to be specifically transmitted to the receiving component, particularly if the server comprises multiple receiving components. The target information can indicate the receiving component to which the vehicle data is forwarded.

[0016] Optionally, the control information is determined taking into account the purpose assigned to the vehicle data. It was recognized that the purpose, defined, for example, by the processing by the receiving component, may be relevant for the processing of the vehicle data; for example, if a user has only consented to limited uses of the vehicle data.

[0017] Optionally, the control information is determined taking into account a temporal validity. It was recognized that the use of vehicle data may have a validity. The validity can define a start time and / or an end time or a period of time, whereby vehicle data recorded during a given validity period can be treated differently from vehicle data recorded outside of the validity period. The validity can additionally or alternatively relate to the data protection regulation, for example, its entry into force and / or expiration.

[0018] Optionally, the procedure includes: Recording the data protection regulation. It was recognized that the data protection regulation can change. Therefore, it may be advantageous to record the data protection regulation before processing the vehicle data in order to be able to apply a current version of the data protection regulation.

[0019] Optionally, the method includes: acquiring an interface contract for the use of vehicle data relating to the vehicle and / or a user, whereby the control information is determined taking into account the interface contract. The interface contract can be based on a declaration of intent and / or consent to process the user's vehicle data. The interface contract can concern the transmission of vehicle data from the central component to the receiving component. Interface contracts are automatically linked to data protection-compliant configuration files at runtime when the respective interface contract comes into effect. From these, the technical data stream distribution systems and / or API access systems can be configured.

[0020] In other words, the above description can be summarized as follows, with reference to a specific embodiment that is described as non-limiting for the present disclosure: The disclosure relates to the control of vehicle data streams with regard to data protection. An increasing number of applications outside the vehicle require data from a wide variety of vehicles. This data is sometimes processed by intermediate data processing systems. Each application ultimately receives data from various upstream systems. In this process, all data protection requirements must always be observed. The problem is that when designing a new system chain, an overview of all currently available data from the upstream systems must be developed, and it must be ensured that all systems involved adhere to the data protection requirements. In the event of changes, all affected receiving systems must be identified and adapted.This results in a high level of manual effort and is time-consuming. The core idea of ​​the disclosure is that all vehicle data streams are centrally bundled and distributed to receiving systems from a central location. At this central location, data protection requirements are enforced, access is controlled, and data flows are regulated in accordance with data protection regulations. Adjustments to data protection guidelines and data sources are applied at runtime through central configuration management. This eliminates the need for manual adjustments to individual configurations of the receiving systems. Machine-readable interface contracts are created for each receiving system in the Vehicle Shadow. These interface contracts are automatically linked to data protection-compliant configuration files upon entry into force at runtime, and the technical data stream distribution and API access systems are configured from them.

[0021] According to one aspect of the disclosure, a computer program and / or a computer-readable medium is provided. The computer program and / or the computer-readable medium comprise instructions which, when the program or instructions are executed by a data processing device, cause the device to perform the method according to the disclosure and / or steps thereof. Optionally, the computer program and / or the computer-readable medium comprises instructions which, when the program or instructions are executed by a data processing device, cause the device to perform the method steps described as advantageous or optional in order to achieve an associated technical effect.

[0022] According to one aspect of the disclosure, a server comprising a central component and a receiving component is provided. The server is configured to perform the method described above. Optionally, the server is configured to perform a method step described as advantageous or optional and / or to implement a method feature in order to achieve an associated technical effect.

[0023] In the following, one embodiment is described with reference to the figures. Fig. 1 schematically shows a server according to an aspect of the disclosure and a vehicle; and Fig. 2 schematically shows a flow diagram of a method according to one aspect of the disclosure.

[0024] Fig. 1 schematically shows a server 90 according to one aspect of the disclosure and a vehicle 50. Fig. 1 shows a user 55 of the vehicle 50.

[0025] The vehicle 50 is a motor vehicle or land vehicle. The vehicle 50 comprises a plurality of components 52. Two of the components 52 are combined in a component group 53. In other words, the component group 53 comprises two components 52. In another embodiment (not shown), the component group 53 comprises any desired plurality of components 52. The components 52 can be grouped hierarchically.

[0026] Each of the components 52 is configured to acquire vehicle data 51. Such a component 52 comprises, for example, a sensor and / or an input device for acquiring the vehicle data 51. Such a sensor is configured, for example, to acquire vehicle data 51 relating to the vehicle 50, a user 55 of the vehicle 50, and / or an environment of the vehicle 50. The input device is, for example, part of a user interface and configured to acquire an input by the user 55 as vehicle data 51. The vehicle data 51 can be processed in order to be able to execute one or more applications.

[0027] The vehicle data 51 can include metadata to assign the vehicle data 51 to the component 52 and / or component group 53 that acquired the vehicle data 51. The vehicle data 51 is optionally provided with a timestamp that indicates the creation of the vehicle data 51. The components 52 and / or component group 53, or the vehicle data 51 acquired thereby, can be designated and / or defined according to a predetermined scheme, for example, according to a "Vehicle Signal Specification." The vehicle data 51 can be provided by the component 52 and / or component group 53 that acquired the vehicle data 51 with purpose information for carrying out a specific application by processing the relevant vehicle data 51.

[0028] The vehicle 50 has a communication interface 54. The communication interface 54 is configured to transmit the vehicle data 51 to the server 90. For this purpose, the communication interface 54 is configured, for example, to communicate via a wireless local area network (WLAN) and / or via a mobile radio network. Alternatively or additionally, the communication interface 54 comprises a wired interface and is configured for cabled communication. Cabled communication can occur, for example, during a readout for diagnosis, service, and / or maintenance, for example in a workshop and / or at a charging point.

[0029] The user 55 can influence the processing of the vehicle data 51, for example, using data protection settings. The data is processed in accordance with a data protection regulation 70. The data protection regulation 70 can be a statutory or quasi-statutory regulation, a regulation issued by a service provider and / or a manufacturer of the vehicle 50, and / or a contractual regulation. The data protection regulation 70 can be defined with respect to data protection settings concerning the user 55 and / or the vehicle 50.

[0030] Data protection regulation 70 allows the user 55 to permit the processing of the vehicle data 51 and / or a subset of the vehicle data 51, i.e., to consent to the processing of the vehicle data 51, and / or to prohibit the processing of the vehicle data 51 and / or a subset of the vehicle data 51, i.e., to refuse the processing of the vehicle data 51. The user 55 can permit and / or prohibit the processing of the vehicle data 51 for specific purposes or use cases.

[0031] The server 90 is configured to execute the method 100 according to Fig. 2. For this purpose, the server 90 comprises Fig. 1 a server-side communication interface 94, a central component 91 and a consumer component 92. The server 90 according to Fig. 1 is configured to process the vehicle data 51 received from the vehicle 50. Thus, the server 90 is or comprises a data processing device 90'.

[0032] The server 90 receives the vehicle data 51 via the server-side communication interface 94 and forwards the vehicle data 51 to the central component 91. The server-side communication interface 94 is configured, for example, to communicate via a wired or wireless local area network (WLAN) and / or via a mobile radio network. Alternatively or additionally, the server-side communication interface 94 comprises a wired interface and is configured for wired communication.

[0033] The central component 91 is configured to process or manage the vehicle data 51 for provision to the receiving component 92 in order to comply with data protection regulations 70.

[0034] For this purpose, central component 91 is configured to capture data protection regulation 70. For example, server 90 or central component 91 can be connected to another server (not shown) to query data protection regulation 70 and / or data protection regulation 70 can be input to server 90.

[0035] The central component 91 is configured to record information relating to an interface contract 56. The interface contract 56 specifies how the vehicle data 51 may be processed within and optionally outside the server 90 with regard to the data protection regulation 70. For example, the interface contract 56 specifies which vehicle data 51 may be transmitted to the receiving component 92. Optionally, a purpose limitation for processing the vehicle data 51 by the receiving component 92 for a specific purpose, i.e., for a specific application, and / or a temporal validity taking into account the time stamp of the vehicle data 51 can be taken into account. The interface contract 56 is user-specific in order to enable a change of vehicle 50 by the user 55 and / or a change of user for a specific vehicle 50 while complying with the data protection requirement.Thus, there is a link between the interface contract 56 and the customer component 92 as a link defined by the data protection regulation 70.

[0036] The central component 91 is configured to determine control information 80 based on the vehicle data 51 and the data protection regulation 70. The control information 80 relates to the processing of the vehicle data 51 by the receiving component 92, in particular for executing an application linked to the receiving component 92. The control information 80 includes access information and thus specifies whether and, optionally, which vehicle data 91 may be processed by the receiving component 92.

[0037] In another embodiment (not shown), the server 90 comprises a plurality of receiver components 92. This makes it possible for the server 90 or the central component 91 to manage the vehicle data 51 for a plurality of applications. The control information 80 can include target information relating to the receiver component 92. The target information includes, for example, an address of the receiver component 92. Based on the target information, the vehicle data 51 can be transmitted to one or more of the receiver components 92 for executing one or more applications.

[0038] The central component 91 is configured to transmit the vehicle data 51 to the receiving component 92, taking into account the control information 80. The receiving component 92 can then process the vehicle data 51 according to the control information 80 in order to execute the application.

[0039] In another embodiment (not shown), the server 90 is connected to a plurality of vehicles 50 that are also connected to the Fig. 1, transmit vehicle data 51 to the server 90. This enables aggregation and / or processing of the vehicle data 51 of the plurality of vehicles 50 while complying with individual data protection requirements 70.

[0040] Fig. 2 schematically shows a flow diagram of a method 100 according to one aspect of the disclosure. The method 100 according to Fig. 2 is a method 100 for an off-board server 90 for managing vehicle data 51 and for complying with a data protection regulation 70. Such a server 90 is described with reference to Fig. 1 described. Fig. 2 is made with reference to Fig. 1 described.

[0041] The procedure 100 according to Fig. 2 indicates: Capture 105 of Data Protection Regulation 70.

[0042] The method 100 comprises: recording 107 an interface contract 56 relating to the vehicle 50 and / or a user 55 for the use of the vehicle data 51.

[0043] The method 100 comprises: receiving 110, by a central component 91 of the server 90, the vehicle data 51 relating to a vehicle 50. The vehicle data 51 are assigned to a component 52 and / or component group 53 of the vehicle 50.

[0044] The method 100 comprises: determining 120 a piece of control information 80 based on the vehicle data 51 and the data protection regulation 70. The control information 80 comprises access information relating to the vehicle data 51 and / or target information relating to the receiving component 92. The control information 80 is determined taking into account a specific purpose assigned to the vehicle data 51. The control information 80 is determined taking into account a time validity. The determination 120 of the control information 80 takes place taking into account the interface contract 56.

[0045] The method 100 comprises: transmitting 130, from the central component 91 to a receiving component 92 of the server 90, the vehicle data 51 taking into account the control information 80. Reference symbol (part of the description) 50 vehicles 51 Vehicle data 52 Component 53 Component group 54 Communication interface 55 users 56 Interface Agreement 70 Data Protection Regulation 80 Control information 90 servers 90' data processing device 91 Central component 92 Customer component 94 server-side communication interface 100 procedures 105 Recording a data protection regulation 107 Entering an interface contract 110 Receive 120 Determine 130 Submit QUOTES CONTAINED IN THE DESCRIPTION

[0000] This list of documents submitted by the applicant was generated automatically and is included solely for the convenience of the reader. This list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions. Cited patent literature

[0000] DE 10 2020 108 987 A1

[0004]

Claims

[1] Method (100) for an off-vehicle server (90) for managing vehicle data (51) and for complying with a data protection regulation (70), the method (100) comprising: - receiving (110), by a central component (91) of the server (90), the vehicle data (51) relating to a vehicle (50); - determining (120) a control information (80) based on the vehicle data (51) and the data protection regulation (70); and - transmitting (130) the vehicle data (51) from the central component (91) to a receiving component (92) of the server (90), taking into account the control information (80). [2] Method (100) according to claim 1, wherein the vehicle data (51) are assigned to a component (52) and / or component group (53) of the vehicle (50). [3] Method (100) according to claim 1 or 2, wherein the control information (80) comprises access information relating to the vehicle data (51) and / or target information relating to the consumer component (92). [4] Method (100) according to one of the preceding claims, wherein the control information (80) is determined taking into account a purpose associated with the vehicle data (51). [5] Method (100) according to one of the preceding claims, wherein the control information (80) is determined taking into account a temporal validity. [6] Method (100) according to one of the preceding claims, wherein the method (100) comprises: detecting (105) the data protection rule (70). [7] Method (100) according to one of the preceding claims, wherein - the method (100) comprises: detecting (107) an interface contract (56) relating to the vehicle (50) and / or a user (55) for the use of the vehicle data (51), and - the determination (120) of the control information (80) takes place taking into account the interface contract (56). [8] Computer program and / or computer-readable medium comprising instructions which, when the program or instructions are executed by a data processing device (90'), cause the device (90') to carry out the method (100) and / or the steps of the method (100) according to one of claims 1 to 7. [9] Server (90) comprising a central component (91) and a receiver component (92), wherein the server (90) is configured to carry out the method (100) according to one of claims 1 to 7.

Images