Temporary use of a motor vehicle

Abstract

A method (200) for the temporary use of a motor vehicle (105) by a person (120); wherein the method (200) comprises the following steps: establishing a wireless connection between the motor vehicle (105) and a mobile device (110) assigned to the person (120); determining that the mobile device (110) and the motor vehicle (105) are not yet acquainted with each other; and providing a notification to the person (120) to carry out a handover protocol.

Description

[0001] The present invention relates to the temporary use of a motor vehicle. In particular, the invention relates to the alternating use of a motor vehicle by different persons.

[0002] A motor vehicle can be rented and used temporarily by individuals. The rental vehicle can be one of several available for use. A person can use a motor vehicle individually, or a group of individuals can be designated, each of whom can use one of the vehicles.

[0003] Once use begins, the risk of damage to the motor vehicle usually lies with the person. At the end of use, responsibility can transfer to another person. It is therefore customary for the person to inspect the motor vehicle for any pre-existing damage for which they are not responsible at the start of use. If the motor vehicle is handed over in person, the person and a person responsible for the motor vehicle can jointly determine what pre-existing damage is known. At the end of use, a similar process can be followed, whereby any newly discovered damage can be documented. This procedure is time-consuming and ill-suited for the automated handover of motor vehicles.

[0004] One object underlying the present invention is to provide an improved technology for the temporary use of a motor vehicle by a person. The invention solves this problem by means of the subject matter of the independent claims. Subclaims specify preferred embodiments.

[0005] According to a first aspect of the present invention, a method for temporary use of a motor vehicle by a person comprises steps of establishing a wireless connection between the motor vehicle and a mobile device associated with the person; determining that the mobile device and the motor vehicle are not yet known to each other; and providing an indication of execution of a takeover protocol to the person.

[0006] The person can be dynamically reminded that completing a handover protocol may be in their own interest. Accidental skipping or suspending the execution of a handover protocol can be better prevented. The procedure can be used, in particular, for alternating use of the motor vehicle by different persons. The condition in which the motor vehicle is handed over to the person can be better documented using the handover protocol.

[0007] It is preferred that establishing the wireless connection is part of a method for controlling access to the motor vehicle. Within the scope of access control, it can be determined whether the person is authorized to use the motor vehicle or not. Individual functions of the motor vehicle can be enabled or disabled for the person. Conditions under which a function of the motor vehicle can be used can be predetermined. Such a condition can include, for example, a period of use, a maximum usage time, or the restriction of a function. For example, the person can be prevented from exceeding a predetermined driving speed with the motor vehicle.

[0008] The access control preferably comprises mutual authentication of the motor vehicle and the mobile device based on an asymmetric cryptographic method, in particular an encryption method. A public and a private cryptographic key can each be assigned to the motor vehicle and the mobile device. The public cryptographic key can be made known to the other communication partner.

[0009] Mutual authentication can include challenge-response authentication, which exploits the fact that a message can be encrypted by one of the participants with a public cryptographic key and then decrypted only with the private cryptographic key, or vice versa. The participants can thus prove their identities to each other. Along with mutual authentication, a request to control a function of the motor vehicle can be transmitted, for example, to unlock a door or tailgate or to start a drive motor.

[0010] It is particularly preferred that access control be carried out according to a standard known as the Digital Car Key. This standard is published by the Car Connectivity Consortium and is publicly available, for example, in version 1.1.0 dated July 20, 2022. Determining that the mobile device and the motor vehicle are not yet known to each other is described in this version, for example, in Chapter 19.5.8.2 "Friend First Approach." According to the standard's nomenclature, a friend is a person or device that has been provided with a digital key to use the motor vehicle. An owner of the motor vehicle has a digital key that allows them to issue additional keys. A motor vehicle can be assigned to more than one owner.It should be noted that in order to determine the first approach of the mobile device to the motor vehicle, authentication of the devices with each other may not be required.

[0011] In a further preferred embodiment, the handover protocol includes a confirmation of the condition of the motor vehicle. The condition may include, for example, the current mileage, the fill level of an energy storage device or fuel tank, or an assessment of cleanliness or maintenance.

[0012] The handover protocol further preferably includes the inspection of any known prior damage to the motor vehicle. In particular, the reference to the execution of the handover protocol may include a reference to any known prior damage or a request to inspect the known prior damage. This allows the person to be more effectively released from liability for any known prior damage. In particular, the prior damage may be inspected before the person has opened or moved the motor vehicle. Confirmation of existing prior damage may be provided before the person assumes physical responsibility for the motor vehicle.

[0013] Further preferably, an indication of any known prior damage to the motor vehicle is identified and provided to the individual. A list of known prior damages can also be provided, allowing the individual to review the list and assess the prior damage to the motor vehicle. If the identified prior damage matches the list, the individual can confirm the list.

[0014] In another embodiment, the positions of the mobile device and a known pre-damage site on the motor vehicle are determined, and a hint is provided to guide the mobile device toward the location of the pre-damage site. In other words, the person can be guided to the location of the pre-damage site using the mobile device. This can significantly accelerate the location and assessment of the pre-damage site. Completing the handover protocol can take less time, allowing the person to use the motor vehicle more effectively.

[0015] The position of the mobile device can be determined based on the wireless connection relative to the motor vehicle. For example, the wireless connection can be established via Bluetooth (BT) or Bluetooth Low Energy (BLE). The position can be determined based on signal strength or using a technique known as channel sounding. In a further preferred embodiment, a further wireless interface is provided on the part of the mobile device and the motor vehicle, which can in particular comprise an ultra-wideband (UWB) interface. Using an adapted technique, a direction and position of the mobile device relative to the motor vehicle can be determined wirelessly. The position of the previous damage is already related to the motor vehicle, so that the mobile device can easily be guided to the position of the previous damage.

[0016] In a further development of the invention, an indication of previous damage can be displayed on the mobile device using virtual, enhanced, or augmented reality (VR, AR). The mobile device can include a camera that scans an image of the motor vehicle and outputs it to a display device of the mobile device. Based on a specific position of the mobile device relative to the motor vehicle and a position of a previous damage, an indication, such as a highlight, of the previous damage can be inserted on the display device. The person can thus very quickly locate and inspect the previous damage.

[0017] In a further preferred embodiment, a list or summary of previous damages with associated locations on the motor vehicle is determined. The person can then be guided through the locations of the list. The path along which the person is guided can be freely selected by the person or created automatically. Preferably, a path is created that minimizes the person's movement relative to the motor vehicle. An explanation can be provided for each previous damage, indicating, for example, a date, extent, or functional limitation of the motor vehicle.

[0018] If the person discovers a previous damage to the motor vehicle that is not recorded in the list, they can receive assistance in reporting the damage. In one embodiment, a reference to an unknown previous damage is recorded and the damage is documented. The reference can be initiated by the person, and the documentation can be submitted to a person or entity responsible for the motor vehicle. This could, in particular, be a motor vehicle rental company.

[0019] According to a further embodiment, the end of use of the motor vehicle is recorded by the person, and a notification is provided to the person regarding the execution of a handover protocol. The end of use can be determined by an input from the person on the mobile device or on the motor vehicle. The end of use can also be determined automatically, for example, when a time-limited usage authorization expires or the motor vehicle is driven to a previously agreed location where the motor vehicle is to be handed over at the end of use.

[0020] The handover report can be processed similarly to the handover report. Optionally, a reference can be included to any damage that has occurred to the vehicle since the handover report was completed or since the person began using the vehicle. For this purpose, a picture of the damage can be taken using the mobile device, and the person can attach further information, such as an explanation or an explanation of the circumstances of the damage. The recorded information can then be made available or forwarded.

[0021] According to a further aspect of the present invention, a system comprises a mobile device and a motor vehicle. The system is configured to carry out a method described herein. It is preferred that the determination that the mobile device and the motor vehicle are not yet known to each other be performed by the motor vehicle. The indication of the execution of a protocol can alternatively be provided to the person by the motor vehicle or by the mobile device.

[0022] According to yet another aspect of the present invention, a mobile device comprises a wireless interface and a processing device. The processing device is configured to establish a wireless connection to a motor vehicle; to determine that the mobile device and the motor vehicle are not yet known to each other; and to provide an indication of the execution of a takeover protocol to the person.

[0023] The determination that the mobile device and the motor vehicle are not yet known to each other can be performed by the mobile device. The indication of the execution of a protocol can be provided alternatively by the mobile device or by the motor vehicle.

[0024] The mobile device or the motor vehicle can each comprise a processing device configured to partially or completely execute a method described herein. A processing device can be implemented electronically and, for example, comprise an integrated circuit, a programmable logic module, or a programmable microcomputer. The method can be implemented in the form of a configuration or as a computer program product with program code means for the processing device. The configuration or the computer program product can be stored on a computer-readable data carrier. Features or advantages of the method can be transferred to the system, the motor vehicle, or the mobile device, or vice versa.

[0025] The invention will now be described in more detail with reference to the accompanying drawings, in which: Fig. 1 a system; Fig. 2 a flowchart of a first method; and Fig. 3 illustrates a flow diagram of a second method.

[0026] Fig. 1 shows a schematic representation of an exemplary system 100. The system 100 includes a motor vehicle 105 and a mobile device 110. An external location 115 is optionally provided. The mobile device 110 is assigned to a person 120.

[0027] On board the motor vehicle 105, a control device 125 is preferably provided, which comprises a wireless interface 130 and a processing device 135. The control device 125 is preferably configured to control a security function of the motor vehicle 105, which in particular controls access of the person 120 to the motor vehicle 105. The security function can in particular relate to locking or unlocking a door or flap or driving the motor vehicle 105. Such control can be based on information that the control device 125 receives via the wireless interface 130. For the sake of simplicity, it is stated here that the motor vehicle 105 receives information and can be controlled accordingly.

[0028] The mobile device 110 includes a wireless interface 140 and a processing device 145. The mobile device 110 can be assigned to the person 120 as a personal device. For example, the mobile device 110 can include a smart watch, a smart band, a tablet computer, or a laptop computer. It is particularly preferred that the mobile device 110 includes a smartphone. The smartphone 110 can have other conventional features, for example, an optical display device, a camera, or a device for determining a geographical position.

[0029] In another embodiment, the mobile device 110 is embodied as a dedicated device for controlling a function of the motor vehicle 105. Such a device is known as a fob and can be integrated with a physical car key for the motor vehicle 105 or, for example, in the form of a key fob. The fob 110 can have buttons or other control elements to control a predetermined function of the motor vehicle 105.

[0030] The wireless interfaces 130, 140 are configured to communicate with each other as soon as a predetermined communication range is exceeded. The interfaces 130, 140 can operate, in particular, according to the BLE standard, and the range can be several tens of meters. Optionally, a further wireless interface can be provided on both the motor vehicle 105 and the mobile device 110, which can operate, in particular, according to the UWB standard. Preferably, no data is transmitted via the further wireless interface; instead, a relative position determination of the mobile device 110 with respect to the motor vehicle 105 can be determined via it.

[0031] To control a predetermined security function of motor vehicle 105, two-way authentication can be performed between mobile device 110 and motor vehicle 105. For this purpose, a mutual authentication process based on asymmetric cryptographic keys can be performed. A responsible party, in particular an owner, of motor vehicle 105 can have a digital key with which another digital key can be created or cryptographically signed, so that this key can be provided to person 120. The provided key is preferably stored on mobile device 110.

[0032] The external location 115 can maintain information about the motor vehicle 105 and, in particular, its condition. This information can include, for example, a geographical location, a current mileage, or a list of previous damages. At the start of use of the motor vehicle 105 by the person 120, a handover protocol can be created to compare a stored condition with the actual condition of the motor vehicle 105. This makes it possible to determine whether or not the person 120 assumes liability for the motor vehicle 105 in the documented condition. Similarly, at the end of use of the motor vehicle 105 by the person 120, a handover protocol can be created to document the condition of the motor vehicle 105.

[0033] Fig. 2 shows a flowchart of a first method 200. The method 200 can be executed for the temporary use of the motor vehicle 105 by a person 120. In a step 205, the person 120 can receive a digital key, which they store on their mobile device 110. The digital key can be issued by the external entity 115 or by another person.

[0034] In a step 210, the mobile device 110—with the person 120—can approach the motor vehicle 105 until a wireless connection can be established via the wireless interfaces 130, 140. This connection can be suitable for transmitting data and can be established, in particular, via BLE.

[0035] In a step 215, it can be determined that this is a first approach ("Friend First Approach") of the mobile device 110 to the motor vehicle 105. The mobile device 110 and the motor vehicle 105 may not yet be known to each other and determine that a first approach has occurred. The determination can be made unilaterally or bilaterally. If this is not a first approach, this part of the method 200 can be terminated in step 215.

[0036] In a step 220, an indication of the execution of a handover protocol can be provided to the person 120. The indication can alternatively be provided to the person 120 by the motor vehicle 105, for example, via a central output device in the form of a screen, or by the mobile device 110.

[0037] In a step 225, a condition of the motor vehicle 105 can be documented. For this purpose, elements of the condition according to records from the external location 115 can be provided to the person 120, and the person 120 can check the element on the motor vehicle 105. Such elements can include, for example, a mileage reading or the level of fuel in a reservoir.

[0038] To check for previous damage that may be part of the condition, a guided tour around or through the motor vehicle 105 can be initiated in a step 230. The tour can include an assessment of all known previous damage by the person 120. The person 120 or their mobile device 110 can be guided specifically to a location on the motor vehicle 105 associated with a previous damage. The person 120 can assess the previous damage and confirm or reject it.

[0039] In a step 235, additional previous damage that the person 120 identifies on the motor vehicle 105, but which is not yet known to the external location 115, can be recorded. Recording can include textual and / or visual documentation.

[0040] The execution of the handover protocol can thus be completed, and in a step 240, a created protocol or documentation, optionally with additional information, can be provided. Providing this information can, in particular, include uploading it to the external location 115.

[0041] It should be noted that mutual authentication of the mobile device 110 and the motor vehicle 105 is not required to perform steps 205 to 240. This can be performed in a step 245, which can follow step 210. In this process, the mobile device 110 and the motor vehicle 105 can prove their identities to each other. At the same time, a request can be transmitted from the mobile device 110 to the motor vehicle 105 to perform a predetermined function, in particular a security function.

[0042] In a step 250, the mobile device 110 can be noted as known by the motor vehicle 105. Conversely, the mobile device 110 can be noted as known by the motor vehicle 105. Upon repeated execution of the method 200, it can then no longer be determined in step 215 that this is a first approach between the mobile device 110 and the motor vehicle 105. It should be noted that if the cryptographic key on the mobile device 110 is exchanged, the notation of knowledge can expire.

[0043] In a step 255, a safety function can be executed by the motor vehicle 105 based on a request transmitted in step 245. This can, in particular, include unlocking a door or a hatch.

[0044] Fig.3 shows a flowchart of a second method 300. The second method 300 can be executed following steps 205 to 240 of the first method 200 and can be considered part of the method 200. Between step 240 of the method 200 and the first step of the method 300, there is typically a use of the motor vehicle 105 by the person 120.

[0045] In a step 305, the end of use of the motor vehicle 105 can be determined. In one embodiment, the person 120 can indicate the end of use themselves, for example, by activating an associated input field. Alternatively, the end of use can be determined automatically, for example, when the key required for use is deleted, a time-limited use of the motor vehicle 105 expires, or the motor vehicle is parked in the area of ​​an agreed-upon handover point. Optionally, the person 120 can be asked to confirm or reject an automatically determined end of use.

[0046] If the end of use has been determined or confirmed, a notification regarding the execution of a delivery protocol can be provided to the person 120 in a step 310. The notification can be provided via an output device of the motor vehicle 105 or an output device of the mobile device 110.

[0047] Similar to step 225 of the first method 200, the person 120 can be assisted in documenting a condition of the motor vehicle 105. The condition can include, for example, a current mileage, a fuel level in a reservoir, or a charge level of an electrical energy storage device.

[0048] Furthermore, the condition may include damage to the motor vehicle 105. In a step 320, the person 120 can be guided around the motor vehicle 105, similar to step 230 of the first method 200, wherein indications of known previous damage can be provided. However, here, the search may be less for known previous damage than for newly discovered damage. Accordingly, the person 120 can be guided along a predetermined path around or through the motor vehicle 105 in order to check as many areas as possible where damage may have occurred. If new damage is identified, it can be recorded, for example, by taking an image and / or capturing a textual description.

[0049] After completing the handover protocol, documentation of the condition or any new damage can be uploaded to the external location 115 in a step 325. Upon handover of the protocol—and, if applicable, invalidation of the cryptographic key—the person's responsibility for the motor vehicle 105 can end. Reference symbol 100 systems 105 Motor vehicle 110 Mobile device 115 external positions 120 people 125 Control device 130 wireless interface 135 Processing facility 140 wireless interface 145 Processing facility 200 first procedure 205 people receive a digital key on their mobile device 210 Mobile device approaches motor vehicle, establish wireless connection 215 determine first approximation 220 Reference to handover protocol 225 Document condition 230 guided tour around the motor vehicle 235 additional previous damage 240 Upload documentation 245 mutual authentication 250 Mark device as known 255 Control safety function 300 second procedure 305 Determine end of use 310 Provide reference to delivery protocol 315 Document condition Record 320 new damage 325 Provide delivery protocol

Claims

[1] Method (200) for the temporary use of a motor vehicle (105) by a person (120); the method (200) comprising the following steps: - establishing (210) a wireless connection between the motor vehicle (105) and a mobile device (110) associated with the person (120); - determining (215) that the mobile device (110) and the motor vehicle (105) are not yet known to each other; and - Providing (220) an indication of the execution of a takeover protocol to the person (120). [2] Method (200) according to claim 1, wherein establishing (210) the wireless connection is part of a method (200) for controlling access to the motor vehicle (105). [3] Method (200) according to claim 2, wherein the access control comprises mutual authentication (245) of the motor vehicle (105) and the mobile device (110) based on an asymmetric cryptographic method (200). [4] Method (200) according to claim 2 or 3, wherein the access control is carried out according to the Digital Car Key Standard. [5] Method (200) according to one of the preceding claims, wherein the handover protocol comprises a confirmation of a state of the motor vehicle (105). [6] Method (200) according to claim 5, wherein the handover protocol comprises checking (230) a known previous damage to the motor vehicle (105). [7] Method (200) according to one of the preceding claims, wherein an indication of a known previous damage to the motor vehicle (105) is determined and provided (230) to the person (120). [8] The method (200) of claim 7, wherein positions of the mobile device (110) and a known pre-damage to the motor vehicle (105) are determined; and wherein an indication for approaching the mobile device (110) to the position of the pre-damage is provided (230). [9] The method (200) of claim 8, wherein the position of the mobile device (110) is determined (230) based on the wireless connection relative to the motor vehicle (105). [10] Method (200) according to one of claims 6 to 9, wherein an indication of a previous damage is displayed (230) on the mobile device (110) by means of augmented reality. [11] Method (200) according to claim 9 or 10, wherein a list of previous damages with associated positions on the motor vehicle (105) is determined; and wherein the person (120) is guided (230) through positions of the list. [12] Method (200) according to one of the preceding claims, wherein an indication of an unknown previous damage is detected; and wherein the previous damage is documented (235). [13] Method (200) according to one of the preceding claims, wherein an end of use of the motor vehicle (105) by the person (120) is detected; and wherein an indication of an execution of a handover protocol is provided to the person (120). [14] System (100) comprising a mobile device (110) and a motor vehicle (105); wherein the system (100) is configured to carry out a method (200) according to any one of the preceding claims. [15] A mobile device (110) having a wireless interface (140) and a processing device (145); wherein the processing device (145) is configured to establish a wireless connection to a motor vehicle (105); to determine that the mobile device (110) and the motor vehicle (105) are not yet known to each other; and to provide an indication of an execution of a takeover protocol to the person (120).

Images