Control of a motor vehicle function

Abstract

Control device (110) for a motor vehicle (105), wherein the control device (110) comprises the following elements: a wireless interface for communication with a wearable (115) worn by a person (120) in the vicinity of the motor vehicle (105); an interface for controlling a function on board the motor vehicle (105); a processing unit configured to receive a control input via the wireless interface; and to provide the control input to a device of the motor vehicle (105) connected to the interface; wherein the transmission comprises two-way authentication with the wearable (115) based on an asymmetric cryptographic method.

Description

[0001] The present invention relates to the control of a function of a motor vehicle. In particular, the invention relates to the wireless control of such a function.

[0002] A motor vehicle is designed to provide a variety of functions. Some functions relate to controlling the movement of the vehicle. Other functions involve controlling on-board conditions and may, for example, relate to a navigation system, a climate control system (heating, ventilation, air conditioning, HVAC), power seat adjustment, or an entertainment system.

[0003] The multitude of available functions and options on board a modern motor vehicle can make it difficult to implement an intuitive operating concept. Such an operating concept should enable a person on board the motor vehicle to select a desired function and operate it in the desired manner. The number of available controls should remain manageable. At the same time, all functions should be easy and quick to find. The training effort for the person should be as short as possible. Furthermore, the functions should be able to be operated with a minimum of attention, so that a driver of the motor vehicle is not distracted by operating a function.

[0004] Common operating concepts typically include a menu control or a multifunctional input device with haptic force feedback. While menu control can advantageously organize a large number of different functions hierarchically and thus, at least in principle, make them easily accessible, it typically requires a certain amount of attention. The haptic input device can at least not demand a person's visual attention, but generally requires a certain amount of training time.

[0005] One object underlying the present invention is to provide an improved technology for controlling a function of a motor vehicle. The invention achieves this object by means of the subject matter of the independent claims. Subclaims specify preferred embodiments.

[0006] According to a first aspect of the present invention, a control device for a motor vehicle comprises a wireless interface for communicating with a wearable worn by a person in the vicinity of the motor vehicle; an interface for controlling a function on board the motor vehicle; and a processing device. The processing device is preferably configured to receive a control input via the wireless interface; and to provide the control input to a device of the motor vehicle connected to the interface. The transmission comprises two-sided authentication with the wearable based on an asymmetric cryptographic method.

[0007] A wearable is understood herein to be a device that a person wears on their body and that includes a processing device. The wearable can be assigned to the person as a personal device. Typically, the wearable comprises a computer and is generally provided with at least one sensor for scanning the person. A wearable can include an optical, acoustic, or output device; however, wearables that do not include an output device directed at the person are also possible.

[0008] By using this cryptographic method, it can be ensured that only a wearable device with the appropriate cryptographic keys can be used to control the function on board the vehicle. The transmission can meet high security standards, thus largely preventing unauthorized use of the function.

[0009] It is further preferred that the cryptographic method be implemented according to the Digital Car Key Standard. This standard is disclosed by the Car Key Consortium and can be found, for example, in Technical Specification Version 1.1.0 dated July 20, 2022. The Digital Car Key Standard is typically used to control a motor vehicle's security function, in particular to unlock the vehicle or start a drive engine.

[0010] Due to the potential implications of security functions, the security requirements of the Digital Car Key Standard are correspondingly high. The disclosed standard has been extensively discussed and implemented by numerous manufacturers. The standard can be considered mature and secure. Implementations for various platforms may already be available, so development effort can be kept to a minimum. Furthermore, advanced concepts of the Digital Car Key Standard can be utilized, such as the fine-grained granting of authorizations to use predetermined functions on a wearable device.

[0011] It is generally preferred that a function of the device be controlled based on the control input. The device may, in particular, relate to a navigation system, an entertainment system, a comfort system, an air conditioning system, or a communication system on board the motor vehicle. It is further preferred that the function does not relate to a security system on board the motor vehicle that is configured to control access to the motor vehicle or driving the motor vehicle. A security system may be implemented in parallel to the technology proposed herein using a similar technology, but a different device as a carrier of a digital key.

[0012] Different control inputs can be predetermined and processed by the processing device. A first predetermined control input can be interpreted with respect to a currently executed function. The function can be selected through a user interface that can be operated in any desired manner, such as by means of a dedicated control element. The first control input can comprise a universal control input that can be combined with a variety of functions. For example, the first control input can correspond to pressing an up arrow key, a down arrow key, a right arrow key, a left arrow key, a confirmation key, or a cancel key.A first control input, corresponding to pressing an arrow key, can be used, for example, in a navigation system to select a destination address, while an air conditioning system can be controlled with respect to an interior temperature or the strength of a fan. Such first predetermined control inputs can be considered universal. Accordingly, control inputs used frequently and in various contexts can be controlled more effectively using the wearable. The operation of a motor vehicle function using the wearable can be seamlessly and elegantly integrated into an operating concept for a multitude of different functions on board the motor vehicle.

[0013] A second predetermined control input can be permanently assigned to a predetermined function. Examples of such second control inputs can include raising or lowering the volume of a playback system on board the motor vehicle. Muting the playback system can also be controlled or unmuted using a second control input. Through the direct assignment, central functions that should be quickly accessible under all circumstances can be controlled regardless of the situation. For example, if a difficult driving task arises on board the motor vehicle, a second control input can be used to ensure that a driver of the motor vehicle finds optimal conditions for driving the motor vehicle by turning off unnecessary distractions such as an entertainment system.

[0014] According to a further aspect of the present invention, a motor vehicle comprises a control device as described herein. The motor vehicle preferably comprises a passenger car or a motorcycle. In further embodiments, the motor vehicle may also comprise, for example, a truck or a bus.

[0015] According to yet another aspect of the present invention, a wearable configured to be worn by a person comprises a detection device for determining a posture or gesture of the person; a wireless interface for communicating with a motor vehicle in the area of ​​the person; and a processing device. The processing device is configured to determine a control input associated with the posture or gesture and to transmit it to the motor vehicle via the wireless interface. The transmission comprises two-way authentication with the motor vehicle based on an asymmetric cryptographic method.

[0016] The wearable can be used to safely and intuitively control a motor vehicle function using a posture or gesture. A variety of different wearables can be used to control the function. A motor vehicle's operating concept can be supplemented or expanded in a meaningful way.

[0017] The detection device can comprise an electromyographic sensor (EMG) attached to the person for detecting stimulation of a muscle of the person. The sensor is preferably configured to detect the stimulation transcutaneously, i.e., through the person's skin. It has been shown that tracking stimulation of a few muscles can be sufficient to detect a person's gesture or posture. The electromyographic sensor can be small and lightweight, allowing it to be worn on the person's body virtually unnoticed.

[0018] In a preferred embodiment, the sensor is attached to a hand, wrist, or forearm of the person. For example, the wearable can comprise a ring, bracelet, or bangle. The muscle whose stimulation is detected can control a hand, and in particular a finger of the person. Since the fingers of a person's hand can be controlled with only a few muscles, a good recognition of a posture or gesture can be achieved by evaluating stimulation of muscles in the wrist area. The person can reproduce a variety of different postures or gestures with their hand, so that a large repertoire of easily distinguishable inputs can be supported, to which predetermined control inputs can be assigned.

[0019] According to yet another aspect of the present invention, a system comprises a wearable device described herein and a motor vehicle described herein. The system can be used to intuitively control a function of the motor vehicle by a person in the vicinity of the motor vehicle. It should be noted that such a function can preferably also be controlled in another way, for example, using a known operating concept, which can include, for example, menu-oriented control, control by means of a multifunctional device with force feedback, or a dedicated control element.

[0020] A method for controlling a function of a motor vehicle comprises the steps of detecting a posture or gesture of a person in the area of ​​the motor vehicle; determining a control input associated with the posture or gesture; transmitting the control input to the motor vehicle; and controlling a function of the motor vehicle depending on the determined control input. The transmission includes two-way authentication, which may be based on an asymmetric cryptographic method.

[0021] The method can be carried out partially or completely by means of a processing device, which can be part of a control device or a wearable described herein. The processing device is preferably embodied electronically and can comprise, for example, an integrated circuit, a programmable logic module, or a programmable microcomputer. The method can be implemented in the form of a configuration or as a computer program product with program code means for the processing device. The configuration or the computer program product can be stored on a computer-readable data carrier. Features or advantages of the method can be transferred to one of the devices or a system mentioned herein, or vice versa.

[0022] It is further preferred that the wearable be assigned authorization to control at least one predetermined function. Only one such function is controlled based on the wearable's control input.

[0023] In other words, it can be ensured that the wearable can only control one or more predetermined functions that have been authorized for this purpose by the control device on the motor vehicle. For example, a first wearable can be authorized to control any function on board the motor vehicle, while a second wearable is only authorized to control the vehicle's air conditioning system. A third wearable can influence the volume of an output system, but only within predetermined limits. A fourth wearable can only be used to control the motor vehicle within a predetermined time interval. Combinations of different authorizations or restrictions are also possible.

[0024] Rights management for controlling various functions on board the vehicle can be implemented according to the rights management of the Digital Car Key Standard. A wearable's authorization can be defined at the time of creating or signing cryptographic keys for the wearable. Optionally, subsequent revocation of authorization is also possible. Details on this can be found in the aforementioned Car Key Consortium standard.

[0025] The invention will now be described in more detail with reference to the accompanying drawings, in which: Fig. 1 a system comprising a motor vehicle and a wearable; Fig. 2 a wearable on a person; and Fig. 3 a flow chart of a procedure illustrated.

[0026] Fig. 1 shows a system 100 comprising a motor vehicle 105 with a control device 110 and a wearable 115 that can be worn by a person 120.

[0027] The motor vehicle 105 comprises in the representation of Fig. 1 shows a passenger car as an example. Two persons 120 are also shown as examples, who can sit in a first row of seats of the motor vehicle 105. In the illustration of Fig. 1 A driver can sit on the left and a passenger on the right. The person 120 wears a wearable 115 directly on his body, in the representation of Fig. 1 exemplary on a wrist. The exact structure of a wearable 115 is described herein, for example, with reference to Fig. 2. It should be noted that to use a concept proposed herein, the person 120 does not necessarily have to be in the motor vehicle 105, but can also be in the immediate vicinity of the motor vehicle 105.

[0028] The control device 110 comprises a wireless interface 125, a further interface 130, and a processing device 135. The control device 110 is configured to establish a communication connection with the wearable 115 via the wireless interface 125. The wireless interface 125 preferably operates using Bluetooth (BT) or Bluetooth Low Energy (BLE) technology. Establishing a cryptographically secured connection with two-sided authentication and transmitting a control input from the wearable 115 to the control device 110 can occur in a single, closed process. This process is described as a standard transaction with reference to the Digital Car Key Standard.

[0029] Optionally, the control device 110 comprises a further wireless interface (not shown), which preferably operates according to the ultra-wideband (UWB) principle. Using the second wireless interface, a position of the wearable 115 relative to the motor vehicle 105 can be determined. In a simple embodiment, a distance of the wearable 115 from the motor vehicle 105 can be determined. In a preferred embodiment, in addition to the distance, a direction can also be determined. The distance and direction can be combined to determine a position of the wearable 115 relative to the motor vehicle 105. A control input transmitted from the wearable 115 to the control device 110 of the motor vehicle 105 can be processed depending on the determined position of the wearable 115.For example, the control input may only be accepted if the position of the wearable 115 is within a predetermined range relative to the motor vehicle 105. This range may, in particular, cover an interior of the motor vehicle 105.

[0030] The processing device 135 is preferably configured to control a device 140 on board the motor vehicle 105. Several devices 140 can be provided, which can fulfill different purposes on board the motor vehicle 105. The wearable 115 can be integrated into an operating concept that requires the selection of a device 140 or a function provided by the device 140 before a control input for controlling the function is accepted.

[0031] The interface 130 between the processing device 135 and the device 140 can, in particular, comprise a data bus, for example a CAN bus or a LIN bus. Preferably, several devices 140 are connected to such a data bus on board the motor vehicle 105.

[0032] Fig. 2 shows an exemplary wearable 115 on a person 120. The wearable 115 is embodied, for example, as a bracelet that the person 120 can wear on their wrist or forearm on board the motor vehicle 105. The wearable 115 preferably comprises an electromyographic sensor 205, an energy storage device 210, and a wireless interface 215. Furthermore, a processing device 220 is preferably provided.

[0033] The electromyographic sensor 205 preferably rests against the skin of the person 120 and is configured to determine stimulation of a muscle that controls a posture or gesture of the person 120. In the illustrated embodiment, the muscle can control a posture or gesture of a hand 225 of the person 120. Stimulations of multiple muscles can be evaluated so that a simple or complex posture or gesture of the hand 225 can be recognized. In one embodiment, the wearable 115 additionally comprises an acceleration sensor, and the posture or gesture of the hand 225 can be determined based on the additional acceleration values.

[0034] The processing device 220 is preferably configured to convert a posture or gesture performed by the person 120, for example, with their hand 225, into an associated control input. The determined control input can be transmitted via the wireless interface 215 of the wearable 115 to the wireless interface 125 of the control device 110 of the motor vehicle 105. The transmission preferably comprises an asymmetric cryptographic method described herein, which can be implemented, in particular, in the manner of a standard transaction within the framework of the Digital Car Key Standard.

[0035] Fig. 3 shows a flowchart of an exemplary method 300 for controlling a function on board a motor vehicle 105. The method 300 can be carried out in particular by means of a system 100. Method steps that can be assigned to a wearable 115 are shown in Fig.3 in a left-hand area, and those which can be assigned to a motor vehicle 105 or a control device 110 mounted therein are shown in a right-hand area.

[0036] In a step 305, a body of a person 120 can be scanned in the area of ​​the motor vehicle 105. The scanning is preferably performed using a sensor of the wearable 115. The sensor can comprise an electromyographic sensor 205, and a further sensor can be provided to determine a further aspect of the body of the person 120. The further sensor can comprise, for example, an acceleration sensor.

[0037] In a step 310, a posture or gesture of the person 120 or a predetermined body portion can be determined. The body portion can, in particular, comprise a hand 225. In a further embodiment, the posture or gesture can comprise two hands 225, wherein wearables 115 can be attached to the respective hands 225, wrists, or forearms.

[0038] In a step 315, a control input can be determined based on the determined posture or gesture. A predetermined repertoire of control inputs is preferably provided. This repertoire can, for example, comprise approximately ten control inputs, each of which is uniquely assigned to a posture or gesture of the person 120. It is preferred that the repertoire be manageable, so that the learning effort for a person 120 to learn all predetermined postures or gestures and the respectively assigned control inputs is not excessive.

[0039] In a step 320, the control input can be transmitted from the wearable 115 to the motor vehicle 105 or the control device 110. The transmission preferably takes place within the framework of a standard transaction, which can include two-way authentication of the wearable 115 and the motor vehicle 105 or the control device 110.

[0040] In a brief summary, the transmission process may proceed as follows. The steps may, at least in part, correspond to an RKE (Remote Keyless Entry) function specified in the Digital Car Key Specification. - Generating temporary key pairs by the wearable 115 and the control device 110, wherein a key pair comprises a public and a private key - Exchanging public keys between the wearable 115 and the control device 110 - Creating authentication information from the motor vehicle 105 and transmitting the information to the wearable 115 - Creating an endpoint on the part of the wearable 115 and transmitting a response to the control device 110 on board the motor vehicle 105 - generating an end point by the control device 110, further - Transmitting an RKE challenge from the control device 110 to the wearable 115 and processing it there - Transmitting an RKE response from the wearable 115 to the control device 110 on board the motor vehicle 105.

[0041] Challenge-response authentication preferably occurs in both directions, whereby by applying the respective private key, both the wearable 115 and the control device 110 can prove to the other party that their identity is correct. A request or response can be transmitted between the wearable 115 and the control device 110 along with authentication information, i.e., a challenge or a response.

[0042] In a step 325, the transmitted control input can be evaluated by the control device 110. For this purpose, a current function can be determined that is the focus of an operating concept for the person 120 or whose functions can currently be controlled. A first group of control inputs can be provided that can be interpreted with respect to the currently controlled function. A control input from a second group, however, can be assigned to a function directly and without interpretation.

[0043] In a step 330, the function associated with the control input can be controlled. An exemplary first control input, which can be interpreted in the context of a current function, includes activating navigation in an operating concept, in particular moving an input cursor up, down, right, or left, triggering a confirmation or a rejection. An exemplary second control input, which does not need to be interpreted, includes muting an audio or video playback system on board the motor vehicle 105. A plurality of first and / or a plurality of second control inputs can be predetermined. Reference symbol 100 systems 105 Motor vehicle 110 Control device 115 Wearable 120 people 125 wireless interface 130 Interface 135 Processing facility 140 furnishings 205 electromyographic (EMG) sensor 210 energy storage units 215 wireless interface 220 processing facility 225 Hand 300 procedures 305 Body palpation 310 Determine posture or gesture 315 Determine tax input 320 Submit tax input 325 determine current function 330 Control function

Claims

[1] Control device (110) for a motor vehicle (105), the control device (110) comprising the following elements: - a wireless interface (125) for communicating with a wearable (115) worn by a person (120) in the area of the motor vehicle (105); - an interface (130) for controlling a function on board the motor vehicle (105); - a processing device (135) configured to receive a control input via the wireless interface (125); and to provide the control input to a device (140) of the motor vehicle (105) connected to the interface (130); - wherein the transmission comprises a two-sided authentication with the wearable (115) based on an asymmetric cryptographic method. [2] Control device (110) according to claim 1, wherein the cryptographic method is carried out according to the Digital Car Key Standard. [3] The control device (110) according to claim 1 or 2, wherein a function of the device (140) is controlled based on the control input. [4] Control device (110) according to one of the preceding claims, wherein a first predetermined control input is interpreted with respect to a currently executed function. [5] Control device (110) according to one of the preceding claims, wherein a second predetermined control input is permanently assigned to a predetermined function. [6] Motor vehicle (105) comprising a control device (110) according to one of the preceding claims. [7] Wearable (115) adapted to be worn on the body by a person (120); wherein the wearable (115) comprises the following elements: - a detection device (205) for determining a posture or gesture of the person (120); - a wireless interface (215) for communication with a motor vehicle (105) in the area of the person (120); - a processing device (220) configured to determine a control input associated with the posture or gesture and to transmit it to the motor vehicle (105) via the wireless interface; - wherein the transmission comprises a two-sided authentication with the motor vehicle (105) based on an asymmetric cryptographic method. [8] Wearable (115) according to claim 7, wherein the detection device comprises an electromyographic sensor (205) attached to the person (120) for detecting a stimulation of a muscle of the person (120). [9] Wearable (115) according to claim 8, wherein the sensor (205) is attached to a hand (225), a wrist (225) or a forearm of the person (120). [10] System (100) comprising a wearable (115) according to any one of claims 7 to 9 and a motor vehicle (105) according to claim 6. [11] Method (300) for controlling a function of a motor vehicle (105), the method comprising the following steps: - detecting (310) a posture or gesture of a person (120) in the area of the motor vehicle (105); - determining (315) a control input associated with the posture or gesture; - transmitting (320) the control input to the motor vehicle (105); and - controlling (330) a function of the motor vehicle (105) in dependence on the determined control input; - wherein the transmitting (320) comprises a two-sided authentication based on an asymmetric cryptographic method. [12] The method (300) of claim 11, wherein the wearable (115) is assigned an authorization to control at least one predetermined function; and wherein only one such function is controlled (330) based on the control input.

Images