Real-time methods for unlocking a motor vehicle, as well as a real-time method for locking a motor vehicle.

Abstract

The invention relates to a real-time method for unlocking and locking a motor vehicle using a digital vehicle key, wherein - a vehicle key in a protected database; and - a user authorization for the vehicle key is stored in a mobile device, where the unlocking request links an NFT to a registered digital wallet of the associated vehicle, and wherein the vehicle computer of the vehicle to be unlocked receives the specific digital code from the protected database only if this NFT is linked to the registered digital wallet of the associated vehicle; and a locking request is only valid under the following conditions: - an NFT linked to a registered digital wallet of the vehicle and assigned to the specific digital code for the requested vehicle key, as well as - this NFT was immediately linked to a digital wallet of the mobile device that was registered for the authorized identification file. The real-time methods proposed here allow for the combination of maximum security and ease of use of a digital vehicle key.

Description

[0001] The invention relates to a real-time method for unlocking a motor vehicle, a real-time method for locking a motor vehicle, a computer program with such a real-time method, and a computer program product with such a computer program.

[0002] With increasing digitalization and, above all, mobile access to data networks, particularly widespread via smartphones, new, more convenient, and / or more secure options are emerging for vehicle owners. For example, it is already known that a digital vehicle key is used, which is transmitted wired or wirelessly to a vehicle computer. This can be used to unlock a vehicle and / or start an engine. Reference is made, for example, to DE 10 2018 202 173 A1. A particularly secure method appears to be to store a digital vehicle key in the form of a so-called blockchain. Blockchain technology enables data to be stored decentrally with a high level of security. The data contained therein and any changes to the blockchain code are publicly readable, and such changes are only legitimate if the majority of storage locations approve the change.For example, see DE 10 2019 109 341 A1 and US 2018 / 0343 110 A1. A special form of use of a blockchain is a so-called NFT (non-fungible token). The NFT is essentially an address reference to a storage location and proof of current (and historical) ownership, with the current owner, according to the NFT in question, having access to the storage location only. The NFT itself (not the data to which the address reference refers) is a blockchain.

[0003] DE 10 2023 132 483 A1 relates to the management of digital keys for a vehicle on a blockchain. Methods and systems are provided for storing vehicle, vehicle owner, and vehicle operator data on a blockchain, wherein the data includes smart contracts that can be executed to control vehicle usage via customizable permissions. In one embodiment, a vehicle management system comprises a blockchain; a streaming service configured to provide real-time event data to a contract-executing virtual machine (VM) embedded in the blockchain; and a non-transitory memory that stores instructions that, when executed by a processor of the vehicle management system, cause the vehicle management system to: Generating a digital key for an operator of a vehicle of the vehicle management system, wherein the digital key controls access to the vehicle and / or use of one or more functionalities of the vehicle by the operator based on one or more smart contracts; and storing data of the vehicle, the owner, and the operator on the blockchain. The smart contracts are stored in one or more NFTs on the blockchain.

[0004] Based on this, the present invention is based on the object of at least partially overcoming the disadvantages known from the prior art. The features of the invention are derived from the independent claims, for which advantageous embodiments are presented in the dependent claims. The features of the claims can be combined in any technically reasonable manner, whereby the explanations from the following description as well as features from the figures, which comprise additional embodiments of the invention, can also be consulted for this purpose.

[0005] The invention relates to a real-time method for unlocking a motor vehicle by means of a digital vehicle key, wherein - a vehicle key, which is assigned to a specific motor vehicle for unlocking, is stored as a specific digital code in a protected database; - an identification file with authorization to use the vehicle key is kept in a mobile device; and - the motor vehicle unlockable by means of the vehicle key comprises a vehicle computer which unlocks the motor vehicle upon receipt of the correct digital code, wherein, in the case of an unlocking request for the motor vehicle unlockable by means of the vehicle key, originating from the authorized user identification file of the mobile terminal, at least the following steps are carried out: a. from the protected database, transmitting the specific digital code to the vehicle computer of the motor vehicle that can be unlocked using the vehicle key, and receiving and determining the correctness of the digital code in the vehicle computer of the motor vehicle to be unlocked, b. using this vehicle computer, unlocking this motor vehicle.

[0006] The real-time method is characterized by the fact that an unlocking request for triggering step a is only valid under the condition that an NFT is linked to a digital wallet of the mobile device registered for the authorized user identification file, which is assigned to the specific digital code for the requested vehicle key, wherein with the unlocking request before or with step a. in a step c. this NFT is linked to a registered digital wallet of the associated motor vehicle, and wherein the vehicle computer of the motor vehicle to be unlocked receives the specific digital code from the protected database in step a. only if this NFT is linked to the registered digital wallet of the associated motor vehicle.

[0007] Unless explicitly stated otherwise, ordinal numbers used in the preceding and following descriptions serve only to clearly distinguish them and do not reflect the order or ranking of the designated components. An ordinal number greater than one does not necessarily imply that another such component must be present.

[0008] This proposes a method that can be executed in real time and by means of which a motor vehicle can be unlocked. For example, by unlocking, the motor vehicle is or can be put into a drivable state (preferably exclusively by means of a separate start button inside the motor vehicle in question). In real time means that the user experiences a system response within a sufficiently short time so that no (significant) delay is noticeable compared to a conventional analog process. In most cases, such a system response is even faster than the analog version. For example, in an error-free and undisturbed process, the time span between the unlocking request and the (physical and / or electronic) unlocking of the motor vehicle in question is 1 s [one second] or less. In the event of an error, the error display is provided to the user within a maximum of 5 s, for example.

[0009] The real-time method is preferably carried out at least partially wirelessly. For example, the mobile radio network is used for this purpose, for example based on a widespread standard such as 4G or LTE or 5G [fifth generation]. For example, a WLAN [Wireless Local Area Network] or PAN [Personal Area Network] is used, for example for two-way communication between the user's mobile device and the relevant motor vehicle. In one embodiment, a single mobile radio connection is established, and communication from the mobile device and / or the relevant motor vehicle via an intermediate connection is also carried out via this single mobile radio connection, either in a shared channel or in separate (optionally mutually encrypted) channels.For example, in one embodiment, an unlocking request is sent directly to the relevant motor vehicle via a PAN and forwarded via the motor vehicle's mobile radio device to the protected database via mobile radio. In one embodiment, the motor vehicle has (at least theoretically) access to or knowledge of the content of the communication originating from the mobile device. Alternatively, this is not the case. For example, the motor vehicle is not even able to determine whether authorization for such a communication exists. The latter is advantageous, for example, for high data security and / or high agility (for example, in use with a rental car or a logistics vehicle with frequently changing mobile devices).The abuse rate is assumed to be small and also inexpensive, for example, secured by a limited maximum data volume, data rate and / or number of repetitions.

[0010] The protected database is a software environment that provides a high level of security against unauthorized access. For example, such a protected database is hosted in a server center. Alternatively or additionally, such a protected database is hosted in a proprietary data storage facility (e.g., at an insurance company or a registration authority). The vehicle key for the relevant motor vehicle is stored therein as a digital code. Such a digital code is, for example, conventionally implemented. It preferably contains security features, for example, by means of signatures, hash values, and / or cryptographic encryption. The digital code itself is preferably encrypted and, if necessary, compressed. A digital code can preferably be (reliably) located and / or identified as a vehicle key solely by means of an unlocking request.Alternatively, such a vehicle key is publicly accessible, for example limited to a predetermined number of people, which simplifies the organization of the assignment of a vehicle key to an associated motor vehicle, for example prepared in an ERP system [engl.: Enterprise Resource Planning].

[0011] The digital code is configured in such a way that, together with a corresponding (software) system in the motor vehicle, it can be verified there (or externally) for its unique affiliation and then triggers unlocking of the associated motor vehicle. In one embodiment, the digital code is only a part of the vehicle key, which must also be supplemented by individual information stored in the vehicle computer of the motor vehicle in question and / or information (possibly cryptographically encrypted) transmitted with the unlocking request from the mobile device in order to be able to trigger unlocking of the associated motor vehicle. Alternatively or additionally, at least one further separate action, for example on the motor vehicle (e.g., pulling a door handle to unlock the door) and / or by means of the mobile device (e.g., a confirmation action), is necessary to trigger unlocking.Such a verification process is carried out, for example, in advance or when determining the correctness of the received digital code.

[0012] The identification file is, for example, a signed certificate by means of which a mobile device and / or a (current) user can be uniquely identified as an individual with a high degree of security. In one embodiment, the identification file is contained in a so-called SIM (Subscriber Identity Module) in the mobile device, wherein encryption of the mobile device must preferably also be configured (for example, a requirement to enter a PIN and / or a biometric feature). In one embodiment, the identification file is already present in a data storage device upon an unlocking request, is compiled for this purpose, or is created as part of this process. The identification file is preferably secured by a separate external entity, such as a mobile service provider and / or an identification service provider.Preferably, the identification file itself is a cryptographically secured, unique file.

[0013] The vehicle computer is preferably of conventional design, such as is suitable for previously known digital vehicle keys. For example, the vehicle computer is connected to a CAN bus system. For example, the vehicle computer is Ethernet-capable. For example, the vehicle computer comprises the functions of a conventional on-board computer of a motor vehicle. The vehicle computer is preferably a high-performance computer that comprises a plurality of control units and / or is communicatively connected to a plurality of control units. In any case, the vehicle computer is at least configured to unlock the respective motor vehicle, i.e., for example, to control a control unit of a door lock, and to perform a security check of a digital vehicle key.It should be noted that a vehicle computer comprises one or more processors and is composed of a central unit or several computing units.

[0014] Please note that the procedural steps only describe error-free and legitimate procedures. Abortions and / or measures against abusive unlocking requests are not described here. It should be noted that this real-time process offers a very high level of security, but is not necessarily immune to all conceivable misuse. For example, additional security measures are necessary.

[0015] The process begins with an unlocking request, which is usually initiated by a user. Alternatively, simply approaching the vehicle in question is sufficient to trigger an unlocking request. The mobile device (e.g., a physical vehicle key containing a transmitter and identification file, or a smartphone) includes software, such as an app, through which a user can make an input via a human-machine interface (e.g., a touchscreen or a button) that triggers the unlocking request. In one embodiment, possession of the mobile device is sufficient as a security feature. In one embodiment, user authorization, such as entering a fingerprint, is (optionally additionally) a required security feature.In one embodiment, the relevant identification file is thus released (for transmission together with the unlocking request) or is only generated or completed upon entry of the security feature. Preferably, a single input from the user is sufficient to send an unlocking request, for example, pressing or touching a (virtual or physical) button on the mobile device. It should be noted that a variety of security features are now known that make unique identification very secure. These range from personal physical characteristics of the user (to be identified) to spatial characteristics (relative or absolute position of the mobile device, for example via GPS [Global Positioning System], Galileo, and / or Beidou) to the recognition of (possibly unconscious) individual movement patterns of the user.

[0016] It should be noted that in one embodiment, the unlocking request is sent directly to the protected database or an entity hosting it, for example via mobile communications. Alternatively or additionally, the mobile device establishes direct communication with the relevant motor vehicle (or vehicle computer), for example via WLAN and / or PAN, or via optical line-of-sight (for example via a pair of so-called infrared interfaces). The unlocking request is then forwarded via the vehicle computer to the protected database (possibly upgraded and / or already pre-checked for authorization to use). In an application, for example, by a fleet manager of a logistics vehicle or rental vehicle, it is sensible that an unlocking request is not (exclusively) permitted from the immediate vicinity of the relevant motor vehicle.In one embodiment, a useful security feature for this purpose is a registered device and / or a registered location where the unlocking request was submitted. In one embodiment, the mobile device is a diagnostic interface in a factory or at a maintenance workshop, where, for example, both personal (but not individually predetermined) identification of the user and also a registered device and / or location are useful necessary security features.

[0017] In step a., if the requesting user or the requesting mobile device is authorized, the digital code and, if applicable, other data are transmitted to the vehicle computer. It should be noted that if the digital code has not been transmitted, the vehicle computer can ideally not be unlocked or can only be unlocked using another (e.g., analog) unlocking method. In one embodiment, not the entire digital code, as present in the protected database, is transmitted to the motor vehicle, but only the portion that corresponds to the function of the vehicle key in the motor vehicle in question. For example, the remaining portion is necessary for secure handling of the specific digital code, for example for an authorization check when reassigning the vehicle key to a new and / or additional user.

[0018] In step b., the vehicle is then unlocked after the digital code has been successfully transmitted and checked for correctness, and if necessary (for the first time or again) the user's authorization has been checked.

[0019] To ensure sufficient security in the simplest embodiment (at least without additional security features) of the real-time method proposed here, it is proposed that an NFT, which is linked to a wallet of the mobile device or of the user who can be uniquely identified using the associated (i.e., the same) identification file, be linked to a wallet of the motor vehicle (or the vehicle computer) with (in one embodiment, as a part of) the unlocking request (or, in one embodiment, as the only action of the unlocking request). Linking is a process in blockchain technology, whereby (at least in the visual sense) the affiliation, i.e., ownership, of the respective wallet is recorded at the end of the NFT code.Ownership is thus transferred from the user (or mobile device) to the vehicle (or vehicle computer). Thanks to blockchain technology, this process is extremely secure and does not depend on a single location or storage location. An attack (for example, by a hacker) aimed at exploiting the vehicle key is thus virtually impossible (within the security framework offered by blockchain technology).

[0020] It should be noted that such a (registered) wallet is securely assigned to a user or entity in advance and is non-transferable. It is fundamentally possible for a wallet to be lost (if the access data is forgotten) or stolen (electronically or physically, the storage used). However, it can be assumed that the owner will become aware of this and then have the vehicle key blocked, for example, in a conventional manner, or a new vehicle key created.

[0021] Another advantage is that the vehicle key itself is not publicly visible in the NFT, but rather in a protected database. Furthermore, the vehicle key, or rather a plurality of vehicle keys, can be easily organized in the protected database. At the same time, despite centralized storage of many vehicle keys, and thus a fundamentally valuable target for hackers, such an illegally acquired vehicle key is technically unusable unless one also possesses the individual wallet for the device (and the access data required for it). These, in turn, are widely dispersed and secured (using blockchain technology). A (very complex and costly) so-called 51% attack is only possible for a single NFT and thus (usually) for a single vehicle key.For most applications, this doesn't offer a sensible cost-benefit ratio. This makes it easier to protect vehicle keys in the protected database, thus reducing handling costs. For example, a simple ERP system without special security requirements can be used.

[0022] As described above, in one embodiment, binding the NFT to the motor vehicle's wallet already constitutes the unlocking request. In one embodiment, the binding takes place before the unlocking request or at least before the transmission of the specific digital code (step a.). Blockchain technology makes it easy to verify who the immediate previous owner of the NFT in question was. For example, a subsequent unlocking request is checked to see whether it originated from the immediate previous owner of the NFT. However, it is simpler and (usually) more secure to chain an unlocking request with the process of binding it to the motor vehicle's wallet, preferably cryptographically.Alternatively, the unlocking request and the linking are separate processes (in terms of time and content), whereby a vehicle can be unlocked (e.g., by anyone) once the linking to the vehicle's wallet has been completed. This is advantageous for handling by a fleet manager. The unlocking request is then, for example, only tied to a personal security feature with a low security level, such as the identification of a predetermined person or group of people using a PIN or by linking via PAN communication.

[0023] It should be explicitly emphasized again that binding is not the same as transferring, copying, or moving a file. Rather, using blockchain technology, the new ownership (the new wallet) is written into the blockchain code, namely appended to the end. Because blockchain technology maintains copies of such blockchain code on many resources, this is performed on all copies (with a compliant binding process). Therefore, binding does not generally correspond to communication between the mobile device (or its wallet) and the vehicle computer (or its wallet).

[0024] It should be noted that a wallet is preferably not permanently assigned to a mobile device and / or is not transferable to another mobile device. This is preferably possible, provided an adequate security check is performed, so that the loss or theft of a mobile device does not require the creation of a new wallet and / or the replacement of the vehicle key or the specific digital code. This also ensures a high level of security while simultaneously enabling a cost-effective solution to the unusability of a mobile device.

[0025] According to a further aspect, a real-time method for locking a motor vehicle is proposed with a digital vehicle key, wherein - a vehicle key, which is assigned to a specific motor vehicle for unlocking, is stored as a specific digital code in a protected database; - an identification file with authorization to use the vehicle key is kept in a mobile device; and - the motor vehicle that can be unlocked using the vehicle key comprises a vehicle computer that unlocks the motor vehicle upon receipt of the correct digital code, wherein, in the case of a locking request originating from the authorized user identification file of the mobile terminal, at least the following step is carried out for the motor vehicle that can be unlocked using the vehicle key: d. by means of the vehicle computer of the associated motor vehicle, locking the associated motor vehicle.

[0026] The real-time method is characterized in particular by the fact that a locking request for triggering step d. is only valid under the following conditions: - an NFT is linked to a registered digital wallet of the motor vehicle and assigned to the specific digital code for the requested vehicle key, and - this NFT was immediately previously linked to a digital wallet of the mobile device registered for the authorized user identification file.

[0027] Regarding the general aspects of the real-world environment and technical requirements, as well as the time span of the required processes, reference is made to the explanations with regard to the real-time method for unlocking a motor vehicle for clarification without excluding generality. It should be noted that, although the real-time method for unlocking a motor vehicle according to the preceding description is particularly preferably arranged upstream and / or downstream of the real-time method for locking a (and in this case the same) motor vehicle proposed here, this is not mandatory. In one embodiment, for example, the NFT is connected in a polygonal relationship in a circular sequence instead of just back and forth between two wallets.For example, at least in some cases, a wallet belonging to a regulatory authority, a fleet manager, or a manufacturer is interposed, which are then not the actual owners of the vehicle key. In one embodiment, it is not possible to effectively initiate an unlocking or locking request from such a wallet, for example, because authorization to use is missing. Alternatively, the connection of the NFT in question to a wallet is synonymous with authorization to use and is not separately verified in the methods (aspects) proposed here. For example, it is not possible to connect such an NFT to any wallet, for example, by requiring authorization from the authorized user. This is secured, for example, by a protocol.

[0028] Furthermore, it should be noted that the real-time method for locking the motor vehicle proposed here does not necessarily represent the conclusion to the real-time method for unlocking. For example, it is desirable (in a special case, for example) that the locking can be carried out by a person or entity other than the person with the authorized identification file, for example, a fleet manager upon termination of a rental. However, it is then preferably ensured that a person sitting in the motor vehicle cannot be locked in by locking the exterior doors. For example, such (external) locking is limited to an engine lock. Alternatively or additionally, at least one of the exterior doors can still be opened from the inside for a certain period of time and / or can be opened again at least briefly using a previously registered terminal.

[0029] The real-time method for locking a motor vehicle is only possible in an unlocked motor vehicle that has the relevant NFT linked to its wallet as a representation of the vehicle key. In contrast to the previously proposed real-time method for unlocking the motor vehicle, it is imperative here that the (temporally) immediately previous ownership (namely, the wallet of the mobile device associated with the identification file that submitted the locking request) is a condition for detaching the NFT from the motor vehicle's wallet and linking it to another wallet.

[0030] Here, especially in preparation for the future implementation of the previously described real-time method for unlocking the relevant motor vehicle, it is ensured that the NFT enabling the unlocking process is assigned to an authorized (i.e., legal) owner, namely, it is linked to the relevant wallet of the mobile device. In a preferred embodiment, it is not possible to lock the motor vehicle unless it is first ensured that the relevant NFT is linked to another wallet (preferably to the mobile device requesting the unlocking).

[0031] It should be noted that the mobile device's wallet is not, or at least preferably not, physically hosted on the mobile device. Access data to this wallet is stored there (preferably as the only data) in digital form, allowing access and / or a change of (blockchain-based, not legal) ownership using only one or more common security features (e.g., PIN and / or biometric data), preferably with a single user interaction via a corresponding human-machine interface.

[0032] In a preferred embodiment, the specific digital code is deleted from the vehicle computer immediately after unlocking or with or shortly after locking. Alternatively or in addition to deleting the digital code, it is cryptographically encrypted in such a way that it can only be opened with the NFT linked to the motor vehicle's wallet. Alternatively or additionally, the digital code is irretrievably encrypted upon locking by deleting the key and / or incorporating a (protocol-specified) condition that this digital code or its digital container may only be decrypted once.

[0033] In an advantageous embodiment of the real-time method, it is further proposed that, before, with or after step d., in a step e., this NFT is connected to a digital wallet of the mobile terminal device registered for the authorized identification file.

[0034] This ensures that the NFT is always connected back and forth between the (legal) owner (on the end device side) and the vehicle (or its vehicle computer) and does not fall into the hands of third parties or cause an undefined ownership. Thus, when the vehicle is locked, ownership of the NFT assigned to the vehicle is transferred back to the relevant mobile device.

[0035] It is further proposed in an advantageous embodiment of the real-time method that a plurality of mobile terminals, each with an authorized identification file, each have an associated registered wallet and each of these mobile terminals is associated with a separate NFT, where step a. is only executable under the condition that the wallet of the motor vehicle is not linked to any other NFT associated with the specific digital code for the specific vehicle key, and whereby step d. can only be carried out under the condition that the NFT connected to the wallet of the motor vehicle is assigned to the mobile device making the locking request.

[0036] A variant is proposed here that is particularly suitable for private ownership of the motor vehicle and thus the vehicle key, where a clear assignment to an individual person should be possible, which is enabled via the respective individual wallet. Furthermore, this is advantageous for an embodiment in which (at least normally) only a two-way relationship should exist between a terminal-side wallet and the vehicle-side wallet, so that unlocking and locking can be carried out (alternately) one after the other according to the previously described real-time procedures. For example, it is thus clear that person A (namely with their NFT A) unlocked and / or locked the motor vehicle and not person B (with their NFT B). Person B has no authorization to use NFT B, even if both NFTs (A and B) are ultimately equally usable for unlocking and / or locking the motor vehicle.

[0037] A particular advantage of this embodiment is that, for example, a single vehicle key or specific digital code can be used by a plurality of authorized users. Thus, there is only a single digital vehicle key. This significantly simplifies handling. In one embodiment, the specific digital code is also linked to a change of ownership history, a maintenance history, and / or a service booklet. In one embodiment, access to such information is not possible for every owner of an associated NFT, but, for example, only for a primary owner and / or an insurer or lessor.Preferably, one of the owners, for example the legal owner, is entitled to declare an NFT belonging to another person invalid and / or (preferably alternatively) to change a vehicle key or its storage address so that the previous NFTs point to an invalid vehicle key or to nothing.

[0038] It's important that no other NFT is currently connected to the vehicle's wallet when an unlocking request is made. This prevents an undefined state from occurring in which an unlocking attempt is made while the vehicle is already unlocked.

[0039] It is important that, when a locking request is sent to the motor vehicle's wallet, another owner of another (fully authorized) device does not receive the NFT currently linked to the motor vehicle's wallet. This prevents a (generally authorized) person from restricting the rights of a currently active person or even (accidentally) locking them in the vehicle. In a (possibly alternative or supplementary) embodiment, a locking request for an authorized person is only possible if an unlocking request has previously been sent from the same wallet. This is already ensured, for example, in the mobile device (for example, by a locking request being unavailable on a human-machine interface during the process).Conversely, in one embodiment, this is also the case with an unlocking request, which is only possible under the condition of a previous locking request from this mobile terminal.

[0040] It is further proposed in an advantageous embodiment of the real-time method that a plurality of mobile terminals, each with an authorized identification file, have a common registered wallet and a single NFT is provided, wherein step d. is only executable under at least one of the following conditions: - the mobile device making the locking request is located at a predetermined maximum distance from the motor vehicle to be locked, - the mobile device making the locking request has immediately made an unlocking request, and - the vehicle to be locked is in a predetermined secure environment.

[0041] A variant is proposed here that is particularly suitable for a (legal) ownership of the motor vehicle and thus the vehicle key that is separate from the actual users. A clear assignment to an individual person is not possible in this way, but is already secured through other measures (e.g., handover protocols). Such a procedure is useful, for example, for an application in the logistics sector, which already has an infrastructure to document who used which motor vehicle and when. At the same time, the effort required for one NFT per person and vehicle would be too high.In this context, access to a device-based wallet can be secured, for example, by locking the access data, for example, using a PGP method, where the individual only knows the public key, but not the actual (i.e., private) key to the wallet in question. Preferably, each individual has a single public key to a group of wallets, each of which is assigned to an NFT and a motor vehicle.

[0042] Furthermore, this is advantageous for an embodiment in which there should not just be a two-way relationship between a single terminal device and the vehicle-side wallet, but rather a single terminal-side wallet. For example, in the case of a user group, such as two to three long-distance drivers in a single truck or a construction vehicle used jointly on a construction site for at least a certain period of time (e.g., in shifts one after the other). Each user can be assigned their own terminal device, or their personal mobile device can be enabled to use a single terminal-side wallet. Thus, at the level of the real-time process, there is no difficulty if terminal A is used for unlocking and terminal B for locking, and then terminal A or terminal C is used again for unlocking, because this always originates from the same wallet (and NFT).In other words, from the perspective of the real-time unlocking and / or locking procedure proposed here, there is an uninterrupted two-way relationship between the legal owner's wallet (on the mobile device side) and the vehicle's wallet. A different measure, for example, for maintenance or misuse, is not fundamentally excluded.

[0043] A particular advantage of this embodiment is that, for example, a single vehicle key or specific digital code can be used by multiple authorized users. Thus, there is only a single digital vehicle key. This significantly simplifies handling. In one embodiment, vehicle data (e.g., a maintenance history and / or service booklet) is also linked to the specific digital code.

[0044] In a scenario in which a group of people has been assigned user authorization by granting access rights to a (shared) device-based wallet, it should be (optionally) additionally ensured, for sufficiently secure handling, that such an authorized user is also in the immediate vicinity of the relevant vehicle with their mobile device. For example, an authorized user might be absent due to acute illness, but the user authorization has not yet been revoked due to ignorance of the circumstance, or should not be revoked even in the case of occasional use (e.g., a company car). This query therefore increases flexibility while simultaneously reducing administrative effort.

[0045] This (optional) embodiment assumes the (responsible) use of the motor vehicle in question by a single person, such as a company car occasionally used by a larger group of people. In the phase between unlocking and locking, access by another authorized user is thus reliably excluded. It should be noted that this process must be ensured via a corresponding process protocol and cannot be ensured via the NFT (as previously described in one embodiment). However, increased security is not required here because the other person is fundamentally authorized to use the vehicle.

[0046] This (optional) embodiment provides an exception. It is preferably possible to overcome the above conditions because it has a higher-ranking condition. For example, in a workshop, at a towing service, at the manufacturer, and / or a fleet manager, it is possible for authorized persons (or entities, such as a test bench) to unlock and / or lock the vehicle in any order. This eliminates complications resulting from the sequence protocol.

[0047] If there is no condition that the locking should be initiated by the person who previously carried out the unlocking, but preferably overall, it is advantageous if locking a person in the motor vehicle in question can be excluded with a high degree of certainty, for example as described above.

[0048] It is further proposed in an advantageous embodiment of the real-time method that the NFT is used as a digital certificate in the event of a change of ownership of the associated motor vehicle, Preferably, this certificate is stored in the protected database.

[0049] In one embodiment, as previously described, a change of ownership is stored in the protected database, which can be accessed via an NFT assigned to the relevant vehicle key. The change of (legal) ownership is organized and stored in the protected database in a conventional manner, for example.

[0050] In one embodiment, for example, a single NFT (or multiple NFTs) is used for the entire lifetime of a particular motor vehicle. This is then linked to a new wallet according to blockchain technology (or the NFT protocol). In one embodiment, this is only possible while the particular motor vehicle is locked.

[0051] A certificate confirming a change of (legal) ownership is created, for example, by an independent entity (e.g., a regulatory authority or a vehicle dealer), possibly based on a certified authorization. This is preferably recorded in the NFT itself using blockchain technology.

[0052] It is further proposed in an advantageous embodiment of the real-time method that the NFT refers to vehicle data, preferably a maintenance history and / or a service booklet, of the associated motor vehicle, Preferably, this vehicle data is stored in the protected database.

[0053] In one embodiment, as already described above, vehicle data (e.g., a maintenance history and / or a service booklet) is stored in the protected database, which can be accessed via an NFT associated with the relevant vehicle key. The vehicle data entries are organized and stored in the protected database in a conventional manner, for example.

[0054] In one embodiment, for example, a single NFT (or multiple NFTs) is used for the entire lifetime of a particular motor vehicle. This NFT is then linked to a new wallet according to blockchain technology (or the NFT protocol) upon a (legal) change of ownership. In one embodiment, the new (legal) owner then has secure access to the vehicle's history.

[0055] Changes to vehicle data, for example, are created by an independent entity (e.g., a repair shop or manufacturer), possibly based on certified authorization. This is preferably logged in the NFT itself using blockchain technology.

[0056] It is further proposed in an advantageous embodiment of the real-time method that the protected database is assigned to: - a vehicle manufacturer of the motor vehicle in question; - a fleet manager for the motor vehicle in question; - a supervisory authority; - a separate service provider; or - an entity belonging to the identification file of the mobile device authorized for use in the real-time procedure.

[0057] In an advantageous embodiment of the real-time method, it is further proposed that the protected database is decentralized and that the concrete digital code is stored in this decentralized database as a usable representation for a specific vehicle key using blockchain technology.

[0058] As previously indicated, the NFT itself is secured using blockchain technology. However, this does not (necessarily) apply to the specific digital code representing a vehicle key. Here, it is proposed that this code also be stored using blockchain technology. This makes it possible to store the vehicle key in a decentralized yet secure manner. At the same time, however, public access to the vehicle key code is not possible, or only possible, through ownership of the associated NFT.

[0059] It is further proposed in an advantageous embodiment of the real-time method that - by unlocking the motor vehicle according to step b. at least one exterior door and / or an electronic engine lock is unlocked, or - when the motor vehicle is locked in accordance with step d, all unlocked exterior doors and / or an electronic engine lock are locked.

[0060] For one application, it makes sense to handle the unlocking or opening of the exterior doors and the unlocking of an electronic engine lock separately, for example, in a motor vehicle that is often left unlocked. In another application, especially for private use of a motor vehicle, it makes sense to always perform both functions simultaneously. The same applies to locking.

[0061] In one embodiment, locking is performed automatically after a longer period of time after leaving the motor vehicle, for example, limited to the engine lock. In one embodiment, the NFT is then transmitted back according to step d. In principle, it is possible for the motor vehicle to have the NFT bound to its wallet without it having done so either currently or during the locking process, based on a locking request. For example, locking is always possible if no NFT (representing its own vehicle key) is bound to the motor vehicle's wallet. In one embodiment, the NFT is rebound to the original wallet (of the mobile device) immediately after unlocking or after a predetermined period of time, for example, using a locking method different from the one described above, comprising step d. and / or step e.

[0062] According to a further aspect, a motor vehicle is proposed, comprising at least one outer door, a drive train and a propulsion device driven thereby, as well as a wireless communication interface and a vehicle computer, wherein the vehicle computer is configured to carry out the real-time method according to an embodiment as described above.

[0063] The motor vehicle is driven by a drive train with a (for example, electric) drive motor as a torque source, a (transmission) transmission, and at least one drive wheel, for example for use on a road, preferably for transporting people and / or goods. For this purpose, the motor vehicle often has a transport cabin, access to which can be prevented by means of at least one lockable exterior door. Furthermore, one embodiment provides an electronic engine lock. Regarding the vehicle computer and a suitable wireless communication interface (preferably configured for V2G [vehicle to grid] or V2X [vehicle to everything] communication, preferably using 5G [fifth generation] or higher), reference is made, at least optionally, to the preceding description with respect to the real-time method for unlocking and / or locking.

[0064] According to a further aspect, a computer program is proposed, comprising a computer program code, wherein the computer program code is executable on at least one computer such that the at least one computer is caused to carry out the real-time method according to an embodiment as described above, wherein at least one unit of the computer: - in a vehicle computer of a motor vehicle, and / or - in a cloud or in an edge device.

[0065] The real-time method described here for unlocking and / or locking a motor vehicle is computer-implemented according to this embodiment. The computer-implemented real-time method is stored as computer program code. When executed on a computer, for example, comprising a data memory and a processor, the computer program code causes the computer to execute the real-time method according to an embodiment as described above.

[0066] The computer-implemented real-time method is implemented, for example, by a computer program, wherein the computer program comprises computer program code. When executed on a computer, the computer program code causes the computer to execute the real-time method according to an embodiment as described above. Computer program code is synonymously referred to as one or more instructions or commands that cause a computer to perform a series of operations, which represent, for example, an algorithm and / or other processing methods.

[0067] The computer program is preferably partially or completely executable on an on-board computer and / or on a separate control device. The term "computer" is used here synonymously with the devices known from the prior art. A computer therefore comprises one or more general-purpose processors (CPUs) or microprocessors, RISC processors, GPUs, and / or DSPs. The computer has, for example, additional elements such as memory interfaces or communication interfaces. Optionally or additionally, the terms refer to such a device that is capable of executing a provided or integrated program, preferably using a standardized programming language (e.g., C++, JavaScript, or Python), and / or controlling and / or accessing data storage devices and / or other devices such as input interfaces and output interfaces.The term "computer" also refers to a plurality of processors or a plurality of (sub-)computers that are interconnected via physical lines and / or otherwise communicatively connected (e.g., over-the-air) and may share one or more other resources, such as data storage. A (data) storage device is, for example, a hard disk drive (HDD) or a (non-volatile) solid-state memory, such as ROM or flash memory [Flash EEPROM]. Memory often comprises a plurality of individual physical units or is distributed across a plurality of separate devices, so that it is accessed via data communication, such as packet data communication (e.g., as per the Internet Protocol [TCP / IP]).The latter is a decentralized solution, where memory and processors of a large number of separate computers are used instead of a (single) central server or in addition to a central server.

[0068] According to a further aspect, a computer program product is proposed on which a computer program code is stored, wherein the computer program code is executable on at least one computer such that the at least one computer is caused to carry out the method according to an embodiment as described above, wherein at least one unit of the computer: - in a vehicle computer of a motor vehicle, and / or - in a cloud or in an edge device.

[0069] As a computer program product comprising the computer program code described above, a medium such as RAM, ROM, an SD card, a memory card, a flash memory card, or a disc, or stored and downloadable on a server, for example, is possible. Once the computer program is made readable via a readout unit (e.g., a drive) and / or an installation, the contained computer program code and the real-time method for segmenting self-moving objects contained therein can be executed by a computer or in communication with a plurality of server units, for example, as described above.

[0070] The invention described above is explained in detail below against the relevant technical background with reference to the accompanying drawings, which show preferred embodiments. The invention is in no way limited by the purely schematic drawings, whereby it should be noted that the drawings are not to scale and are not suitable for defining proportions. It is shown in Fig. 1 a system for executing the real-time method for unlocking or locking a motor vehicle; and Fig. 2 a flowchart of a real-time method for unlocking and relocking a motor vehicle.

[0071] In Fig. 1 shows a system for executing the real-time method for unlocking or locking a motor vehicle 1 in a schematic overview sketch. The system shown here comprises a motor vehicle 1 that is to be unlocked and / or locked, a mobile terminal 5 used for unlocking or locking, and a protected database 3, which are (purely optionally) integrated into a mobile network 19. The motor vehicle 1 comprises a communication interface 18, a (dedicated) wallet 10 with an NFT 9 connected to it (shown in simplified form arranged therein), a vehicle computer 7 (with a processor 17 and a memory 20), and a vehicle identification file 21 (for example, a chassis number and / or a SIM), which is unique for the motor vehicle 1 and also for the wallet 10 of the motor vehicle 1.The vehicle computer 7 is suitable for unlocking or locking using a digital vehicle key 2. For example, the vehicle computer 7 comprises the functions of a conventional on-board computer of a motor vehicle 1.

[0072] The motor vehicle 1 also includes (purely optionally) an engine lock 13, which can be deactivated or activated when the motor vehicle 1 is unlocked or locked. The motor vehicle 1 also includes (purely optionally) at least one exterior door 12, which can be opened or locked when the motor vehicle 1 is unlocked or locked.

[0073] A protected database 3 is provided for the vehicle key 2 or its specific digital code 4, which is stored, for example, in a cloud 15 and / or in an edge device 16. The protected database 3 is a software environment in which a high level of security against unauthorized access is provided.

[0074] The mobile terminal 5 (for example, a smartphone) comprises, in addition to the (for example, conventional) components of a computer 14 (processor 17 and memory 20), a wallet 8 with an NFT 9 (currently not) connected to it (shown in simplified form as arranged therein), which is therefore shown here in dashed lines. Furthermore, an identification file 6 is included (for example, a SIM), which is uniquely assigned to a user of the mobile terminal 5 as well as to the wallet 8 of the mobile terminal 5. In this exemplary embodiment, the mobile terminal 5 is located (purely optionally) in the environment 11 of the relevant motor vehicle 1 and is (purely optionally) configured for direct wireless communication with the motor vehicle 1, for example, via WLAN and / or PAN. Alternatively or additionally, the mobile terminal 5 is configured for (preferably wireless) communication via the mobile radio network 19.

[0075] The identification file 6 is, for example, a signed certificate by means of which a mobile terminal 5 and / or a (current) user can be uniquely identified as an individual with a high degree of certainty. In one embodiment, the identification file 6 is contained in a so-called SIM (Subscriber Identity Module) in the mobile terminal 5, wherein encryption of the mobile terminal 5 must preferably also be configured.

[0076] The vehicle key 2 is required to unlock or lock the respective motor vehicle 1 and is provided externally as a digital code 4, namely in a protected database 3. Such a digital code 4 is, for example, conventionally implemented. The vehicle key 2 is present as a concrete digital code 4, for example, in an ERP system among a multitude of others. The digital code 4 is configured such that, together with a corresponding (software) system in the motor vehicle 1, it can be verified there (or externally) for its unique affiliation and then triggers the unlocking or locking of the associated motor vehicle 1.

[0077] The real-time process is (at least partially) carried out wirelessly in the system shown. For example, the mobile network 19 (symbolized here as a satellite as a mobile network node) is used for this purpose, for example based on a widespread standard such as 4G or LTE or 5G [fifth generation]. For example, a WLAN [Wireless Local Area Network] or PAN [Personal Area Network] with the relevant motor vehicle 1 is used as an intermediary for communication between the mobile terminal 5 and the protected database 3. Using the motor vehicle 1 as an intermediary provides additional data security and / or useful authorization restrictions against abusive requests.

[0078] As a result of or as an unlocking request, an NFT 9, which prior to the unlocking request is linked to the wallet 8 of the mobile device 5 or the user who can be uniquely identified using the associated (i.e., the same) identification file 6, is linked to the wallet 10 of the motor vehicle 1 (or the vehicle computer 7). Linking is a process in blockchain technology, whereby (at least in the visual representation) the affiliation, i.e., ownership, to the respective wallet is recorded at the end of the code 4 of the NFT 9. Ownership is thus transferred from the user (or mobile device 5) to the motor vehicle 1 (or the vehicle computer 7). Conversely, upon a locking request, the NFT 9 is detached from the wallet 10 of the motor vehicle 1 and relinked to the wallet 8 of the mobile device 5.

[0079] In Fig.2 shows a flowchart of a real-time method for unlocking and relocking a motor vehicle 1.

[0080] In step c, the NFT 9 is bound to the wallet 10 of motor vehicle 1 (here purely optionally, even before a user submits an unlocking request). It is important that another NFT 9 is not currently bound to the wallet 10 of motor vehicle 1 when an unlocking request is made. This prevents an undefined state from occurring in which an unlocking is attempted while motor vehicle 1 is already unlocked (e.g., for another user).

[0081] In step a., if the requesting user or the requesting mobile device 5 is authorized and the NFT 9 is connected to the wallet 10 of the motor vehicle 1, the digital code 4 and, if applicable, further data are transmitted to the vehicle computer 7. It should be noted that the vehicle computer 7 can, if possible, not be unlocked or can only be unlocked via another (e.g., analog) unlocking method if the digital code 4 has not been transmitted. In step b., the motor vehicle 1 is then unlocked, i.e., after the digital code 4 has been successfully transmitted and checked for correctness.

[0082] If the motor vehicle 1 is now to be locked (again) in preparation for a repetition of the real-time unlocking process, the user submits a locking request. In contrast to the previously proposed real-time method for unlocking the motor vehicle 1, it is imperative here that the (temporally) immediately previous ownership (namely, the wallet 8 of the mobile device 5 associated with the identification file 6 that submitted the locking request) is a condition on the basis of which the NFT 9 is detached from the wallet 10 of the motor vehicle 1 and linked to another wallet. It should be noted that this applies exclusively to the real-time locking process proposed here and is not mandatory in other applications.

[0083] In step e., it is ensured that the NFT 9 is always connected back and forth between the (legal) owner (on the terminal side) and the motor vehicle 1 (or its vehicle computer 7) and does not fall into the hands of third parties or an undefined ownership occurs. Thus, when the motor vehicle 1 is locked, the (digital) ownership of the NFT 9 assigned to the motor vehicle 1 is transferred back to the relevant mobile device 5.

[0084] Finally, in step d., the motor vehicle 1 is relocked using the vehicle computer 7 and the engine lock 13. The specific digital code 4 in the vehicle computer 7 is destroyed or rendered unusable immediately after unlocking or with or shortly after locking.

[0085] It should be noted that the mobile device 5 never needs to receive the specific digital code 4 of the vehicle key 2. This eliminates a major uncertainty factor.

[0086] The invention relates to a real-time method for unlocking and locking a motor vehicle by means of a digital vehicle key, wherein - a vehicle key in a protected database; and - an authorization to use the vehicle key is stored in a mobile device, whereby the unlocking request connects an NFT to a registered digital wallet of the associated motor vehicle, and whereby the vehicle computer of the motor vehicle to be unlocked receives the specific digital code from the protected database only if this NFT is linked to the registered digital wallet of the associated motor vehicle; and A locking request is only valid under the following conditions: - an NFT is linked to a registered digital wallet of the motor vehicle and assigned to the specific digital code for the requested vehicle key, and - this NFT was immediately previously linked to a digital wallet of the mobile device registered for the authorized user identification file.

[0087] The real-time procedures proposed here combine the highest level of security with the ease of use of a digital vehicle key. List of reference symbols 1 motor vehicle 2 vehicle keys 3 protected database 4 digital code 5 mobile device 6 Identification file 7 vehicle computers 8 Device wallet 9 NFT 10 Wallet of the motor vehicle 11 Surroundings 12 Exterior door 13 Engine lock 14 computers 15 Cloud 16 Edge Device 17 processor 18 Communication interface 19 Mobile network 20 storage 21 Vehicle Identification File

Claims

[1] Real-time method for unlocking a motor vehicle (1) by means of a digital vehicle key (2), wherein - a vehicle key (2) which is assigned to a specific motor vehicle (1) for unlocking is stored in a protected database (3) as a specific digital code (4); - an identification file (6) with user authorization for the vehicle key (2) is kept in a mobile terminal (5); and - the motor vehicle (1) which can be unlocked by means of the vehicle key (2) comprises a vehicle computer (7) which unlocks the motor vehicle (1) upon receipt of the correct digital code (4), wherein, in the case of an unlocking request originating from the authorized identification file (6) of the mobile terminal (5), for the motor vehicle (1) that can be unlocked using the vehicle key (2), at least the following steps are carried out: a. from the protected database (3), transmitting the specific digital code (4) to the vehicle computer (7) of the motor vehicle (1) that can be unlocked using the vehicle key (2); and receiving and determining the correctness of the digital code (4) in the vehicle computer (7) of the motor vehicle (1) to be unlocked, b. by means of this vehicle computer (7), unlocking this motor vehicle (1), characterized by , that an unlocking request for triggering step a. is only valid under the condition that an NFT (9) is connected to a digital wallet (8) of the mobile terminal (5) registered for the authorized user identification file (6), which NFT is assigned to the specific digital code (4) for the requested vehicle key (2), where the unlocking request is made before or with step a. in a step c. this NFT (9) is linked to a registered digital wallet (10) of the associated motor vehicle (1), and wherein the vehicle computer (7) of the motor vehicle (1) to be unlocked receives the specific digital code (4) from the protected database (3) in step a. only if this NFT (9) is linked to the registered digital wallet (10) of the associated motor vehicle (1). [2] Real-time method for locking a motor vehicle (1) with a digital vehicle key (2), wherein - a vehicle key (2) which is assigned to a specific motor vehicle (1) for unlocking is stored in a protected database (3) as a specific digital code (4); - an identification file (6) with user authorization for the vehicle key (2) is kept in a mobile terminal (5); and - the motor vehicle (1) which can be unlocked by means of the vehicle key (2) comprises a vehicle computer (7) which unlocks the motor vehicle (1) upon receipt of the correct digital code (4), wherein, in the case of a locking request originating from the authorized identification file (6) of the mobile terminal (5), for the motor vehicle (1) that can be unlocked using the vehicle key (2), at least the following step is carried out: d. by means of the vehicle computer (7) of the associated motor vehicle (1), locking the associated motor vehicle (1), characterized by , that a locking request for triggering step d. is only valid under the following conditions: - an NFT (9) is present in a registered digital wallet (10) of the motor vehicle (1) and assigned to the specific digital code (4) for the requested vehicle key (2), and - this NFT (9) was immediately previously connected to a digital wallet (8) of the mobile device (5) registered for the authorized identification file (6). [3] Real-time method according to claim 2, wherein before, with or after step d. in a step e. this NFT (9) is connected to a digital wallet (8) of the mobile terminal (5) registered for the authorized identification file (6). [4] Real-time method according to one of the preceding claims, wherein a plurality of mobile terminals (5), each with an authorized identification file (6), each has an associated registered wallet (8) and each of these mobile terminals (5) is associated with a separate NFT (9), wherein step a. is only executable under the condition that the wallet (10) of the motor vehicle (1) is not connected to any other NFT (9) associated with the specific digital code (4) for the specific vehicle key (2), and wherein step d. is only executable under the condition that the NFT (9) connected to the wallet (10) of the motor vehicle (1) is assigned to the mobile terminal (5) making the locking request. [5] Real-time method according to one of Claim 1 to Claim 3, wherein a plurality of mobile terminals (5), each with an authorized identification file (6), has a common registered wallet (8) and a single NFT (9) is provided, wherein step d. is executable exclusively under at least one of the following conditions: - the mobile terminal (5) making the locking request is located at a predetermined maximum distance from the motor vehicle (1) to be locked, - the mobile terminal (5) making the locking request has immediately made an unlocking request, and - the motor vehicle (1) to be locked is located in a predetermined secure environment (11). [6] Real-time method according to one of the preceding claims, wherein the NFT (9) is used as a digital certificate in the event of a change of ownership of the associated motor vehicle (1). [7] Real-time method according to one of the preceding claims, wherein the NFT (9) refers to vehicle data of the associated motor vehicle (1). [8] Real-time method according to one of the preceding claims, wherein: - with the unlocking of the motor vehicle (1) according to step b. at least one external door (12) and / or an electronic engine lock (13) is unlocked, or - when the motor vehicle (1) is locked according to step d., all unlocked exterior doors (12) and / or an electronic engine lock (13) are locked. [9] A computer program comprising a computer program code, wherein the computer program code is executable on at least one computer (14) such that the at least one computer (14) is caused to carry out the real-time method according to one of the preceding claims, wherein at least one unit of the computer (14): - in a vehicle computer (7) of a motor vehicle (1), and / or - is arranged in a cloud (15) or in an edge device (16). [10] A computer program product on which a computer program code is stored, wherein the computer program code is executable on at least one computer (14) such that the at least one computer (14) is caused to carry out the method according to one of Claim 1 to Claim 8, wherein at least one unit of the computer (14): - in a vehicle computer (7) of a motor vehicle (1), and / or - is arranged in a cloud (15) or in an edge device (16).

Images