Methods for data transmission and methods for activating or deactivating a function on a device

Abstract

The invention relates to a method for data transmission between a device (100, 102), a mobile terminal (110), and an external computing system (120), comprising: providing a first communication connection (131) from the mobile terminal (110) to the device (100, 102); providing a second communication connection (132) from the mobile terminal (110) to the external computing system (120); performing access-protected data transmission of sensitive data (140, 141, 142) between the device (100, 102) and the external computing system (120), comprising: receiving sensitive data from the device and sending the sensitive data received by the device to the external computing system, and / or receiving sensitive data from the external computing system and sending the sensitive data received by the external computing system to the device. The invention also relates to a method for activating or deactivating a function of a device.

Description

[0001] The present invention relates to a method for data transmission between a device, e.g. a vehicle, a mobile terminal and an external computing system, a method for activating or deactivating a function of such a device, as well as a computing unit and a computer program for carrying out these operations. Background of the invention

[0002] Modern vehicles and other devices can establish a communication connection to a mobile device such as a smartphone in order to exchange data. Disclosure of the invention

[0003] According to the invention, a method for data transmission and a method for activating or deactivating a function on a device, as well as a computing unit and a computer program for carrying them out, are proposed, comprising the features of the independent claims. Advantageous embodiments are the subject of the dependent claims and the following description.

[0004] The invention relates to data transmission between a device such as a vehicle, a mobile device such as a smartphone, and an external computing system, such as a server or backend (also known as the cloud). The steps described below can be performed, in particular, by the mobile device.

[0005] An initial communication connection is established between the mobile device and the device. This can be a wireless or a wired connection. Examples of wireless communication methods include Bluetooth or Wi-Fi, while wired connections can be bus connections or data cables. It is understood that the communication connection is typically established via suitable connectivity units in both the device and the mobile device.

[0006] Furthermore, a second communication connection is established between the mobile device and the external computing system. This can be a wireless connection, particularly a mobile network (e.g., LTE, 5G, or similar). However, a Wi-Fi connection is also conceivable for the second communication connection, especially if the first connection does not use Wi-Fi. It is understood that the communication connection is typically established via suitable connectivity units in both the external computing system and the mobile device. In the case of the aforementioned mobile network connection, the communication link can be established via mobile phone masts to which the external computing system is then connected.

[0007] A secure data transfer of sensitive data is then carried out between the device and the external computing system. This secure data transfer includes receiving sensitive data from the device and sending the sensitive data received by the device to the external computing system. Additionally, or alternatively, the secure data transfer includes receiving sensitive data from the external computing system and sending the sensitive data received by the external computing system back to the device.

[0008] In other words, sensitive data is transmitted via the mobile device in an access-protected manner, in order to ultimately enable the exchange of sensitive data between the device and the external computing system.

[0009] Within the context of access-protected data transmission, sensitive data received from the external computer system and sent to the device is encrypted and can only be decrypted by the device itself. This means that the mobile device, its user, or any application on the mobile device cannot read this sensitive data. End-to-end encryption, for example, is one possible encryption method.

[0010] Preferably, sensitive data received by the device and sent to the external computing system during access-protected data transmission is also encrypted and can only be decrypted by at least one predetermined user. This also prevents sensitive data originating from the device from being read by the mobile device, a user of the mobile device, or an application installed on the mobile device. End-to-end encryption, for example, is a suitable encryption method here as well.

[0011] In one embodiment, the sensitive data comprises sensitive data of the first kind and sensitive data of the second kind. Within the context of access-protected data transmission, sensitive data of the first kind received by the device and sent to the external computing system is encrypted and can only be decrypted by at least one predetermined first user. Sensitive data of the second kind received by the device and sent to the external computing system within the context of access-protected data transmission is also encrypted and can only be decrypted by at least one predetermined second user.

[0012] Sensitive data transmitted from the device to the external computing system via access-protected data transmission can include, for example, vehicle data such as sensor signals. A recipient can be a user who manages this vehicle data (or other sensitive data). This data may require protection and should therefore not be readable by everyone. Using established encryption methods, this data can be transmitted to the IT infrastructure in the cloud and decrypted there. This could then be, for example, the sensitive data of the first type, which can be decrypted by the IT infrastructure as the first user.

[0013] However, sensitive data such as vehicle data (e.g., sensor signals) may need to be transmitted to various stakeholders. This sensitive data may also require such protection that certain data from the external computing system is only forwarded to predefined recipients—in this case, at least one other user—and thus is not accessible to everyone and can only be processed by authorized recipients. Using established encryption methods, this data can be transferred to a database in the cloud, from there forwarded to the next destination, and decrypted there.

[0014] The sensitive data of the first and second type can also be at least partially identical, but must then be encrypted separately.

[0015] In one embodiment, context data is provided when a certain criterion is met. This context data is generated by the mobile device. The context data is then added to, or combined with, the sensitive data received by the device. The sensitive data, including the context data, is then sent to the external computing system as part of an access-protected data transmission.

[0016] In addition to its function of transferring potentially sensitive data, such as vehicle data, from a vehicle to a database or other external computing system, this allows for the transmission of additional data and information from the mobile device (e.g., a smartphone). This data can be generated or recorded directly by the mobile device's sensors, such as a GPS position, or from other sources, such as a weather app running on the device that provides relevant information. This contextual data is then combined with the vehicle data; this can be done using various methods, such as real-time transmission or synchronization via a timestamp embedded in the respective data.

[0017] In this way, additional data can be added to the sensitive data without allowing access to the sensitive data itself.

[0018] In one embodiment, non-access-protected data transmission of non-sensitive data is performed. This non-access-protected data transmission includes receiving non-sensitive data from the device. The non-sensitive data received by the device is then made available, for example, for use on the mobile device, and / or sent to the external computing system. Alternatively or additionally, non-sensitive data is received from the external computing system and then made available, for example, for use on the mobile device, and / or sent back to the device.

[0019] In addition to data requiring protection, this also allows access to, for example, certain vehicle data for a broad group of recipients. Navigation applications, for instance, can access non-sensitive data, i.e., data defined as "open." This could include, for example, speed information or information about the vehicle's status, such as remaining range.

[0020] This provides a standardized interface for data transmission, enabling OEMs, suppliers, and app providers to receive vehicle data and use it for new services. Restricting access to apps specified and offered by the OEM is no longer necessary, thus expanding the benefits for the end customer. The end-to-end connection between the vehicle and various stakeholders can be established via different app providers. These providers have limited visibility and access to the data, ensuring the protection of sensitive information. App providers receive vehicle data that they can use for their functions, while forwarding sensitive data to other stakeholders (e.g., OEMs) without being able to view it themselves.

[0021] Although this has been described primarily in relation to vehicles and vehicle data, other types of devices are also possible, such as household appliances and the like, especially if they do not have their own internet connection but do have a communication interface to mobile devices such as smartphones.

[0022] The proposed method of data transmission between a device, a mobile terminal and an external computing system also allows for the activation or deactivation of a device function, then using the mobile terminal and the external computing system.

[0023] In one embodiment, a first communication connection is established from the mobile device to the external computer system, as well as a second communication connection from the mobile device to the external computer system. This can be done as explained above.

[0024] Identification data is then received from the device and sent to the external computer system. This identification data includes, in particular, information about the device's hardware and / or software.

[0025] The purpose of this data transfer is, for example, the initial exchange of information to identify a specific vehicle or other device. This can be done, for example, via the vehicle identification number (VIN). This may be necessary to verify not only the vehicle itself but also its suitability for this function.

[0026] A further step in this process can involve transferring the current software version of the vehicle, its individual control units, or other devices. This includes checking, for example, whether the control units already contain the function to be activated or deactivated, or whether the function is already activated.

[0027] Furthermore, activation or deactivation data is received from the external computer system and sent to the device to activate or deactivate the function based on this data. Once the device or vehicle is identified, and the software versions are identified if applicable, the activation or deactivation data is transmitted from the backend to the device or vehicle (or a connectivity unit there), for example, via the mobile device.

[0028] As mentioned, the data transmission method described above, and in particular access-protected data transmission, can be used to activate or deactivate this function. The data received by the device and sent to the external computing system, as well as the data received by the external computing system and sent back to the device, then correspond to the sensitive data described above.

[0029] In one embodiment, the activation or deactivation data received by the external computer system is temporarily stored and then sent to the device. This allows the reception of the activation or deactivation data from the external computer system to occur independently of the transmission to the device. Therefore, both communication connections do not need to be established simultaneously.

[0030] The device or vehicle then performs a check of the activation or deactivation data, i.e., it is checked whether the activation or deactivation data for this device or vehicle is authorized and, in particular, has not been manipulated.

[0031] After successful verification, activation or deactivation can preferably be carried out in two ways. If the function or the necessary software is already present on the device, the function is activated or deactivated by enabling or withdrawing access for a user. For example, if the function is already on the vehicle but was merely running in the background and therefore not visible to the driver (e.g., via the vehicle display), activation can occur by displaying the new function in the function menu.

[0032] If the function is not yet present on the device, it is activated or deactivated by transferring and installing software data for the function. This can also be done, for example, via the data transfer method described above, particularly access-protected data transfer. Alternatively, the function or the software data can be transferred to the vehicle via other means, such as an over-the-air update.

[0033] If activation or deactivation is successful, confirmation data can be received from the device and sent to the external computing system to confirm the activation or deactivation. This allows for tracking of the activation or deactivation.

[0034] Solutions are being considered that would allow customers to purchase and activate functions and services for their vehicle or other device online via a smartphone or computer. However, this generally requires the device or vehicle to be permanently and independently connected to the internet. The proposed approach eliminates this requirement; in particular, the device or vehicle itself does not necessarily need to have an internet connection at all.

[0035] Rather, activating a previously purchased function (e.g., via an online portal) is now possible as soon as the next connection between the device or vehicle and the smartphone is established. This applies particularly to the two-wheeler and powersports segment (e.g., jet skis), where it is currently (still) not common practice to provide a permanent internet connection independent of the smartphone.

[0036] A computing unit according to the invention, e.g. a mobile device such as a smartphone, is, in particular in terms of programming, equipped to carry out a method according to the invention.

[0037] A system according to the invention comprises a device such as a vehicle, as well as a mobile terminal unit, which is designed as a computing unit according to the invention or as such.

[0038] Implementing a method according to the invention in the form of a computer program or computer program product with program code for carrying out all method steps is also advantageous, as this incurs particularly low costs, especially if an executing control unit is already available for other tasks. Finally, a machine-readable storage medium is provided with a computer program stored on it as described above. Suitable storage media or data carriers for providing the computer program are, in particular, magnetic, optical, and electrical storage media, such as hard drives, flash memory, EEPROMs, DVDs, etc. Downloading a program via computer networks (Internet, intranet, etc.) is also possible. Such a download can be wired or wireless (e.g., via a WLAN network, a 3G, 4G, 5G, or 6G connection, etc.).

[0039] Further advantages and embodiments of the invention will become apparent from the description and the accompanying drawing.

[0040] The invention is schematically illustrated in the drawing using exemplary embodiments and is described below with reference to the drawing. Brief description of the drawings Fig. Figure 1a schematically shows an arrangement to illustrate the invention. Fig. 1b schematically shows the arrangement of Fig. 1a to explain a method according to the invention in one embodiment. Fig. Figure 2 schematically shows a process according to the invention in a further embodiment. Embodiment(s) of the invention

[0041] In Fig. Figure 1a schematically illustrates an arrangement to explain the invention. The arrangement includes, by way of example, a device 100 designed as a vehicle, e.g., a motorcycle, a mobile terminal 110 designed as a smartphone, and an external computing system 120, which can, for example, represent a so-called cloud.

[0042] The vehicle 100, in turn, has a control unit 102, e.g., also with a connectivity unit or connectivity function, in particular for establishing various types of communication connections. The control unit 102 can also be considered the device instead of the vehicle 100. The smartphone 110 can also have a connectivity unit or connectivity function, in particular for establishing various types of communication connections. The external computing system 120 can, for example, be connected to a mobile communication base station and thus be linked via a communication connection.

[0043] Three different communication connections are given as examples in Fig. Figure 1a shows a first communication connection 131 between the device 100 and the mobile terminal 110, a second communication connection 132 between the mobile terminal 110 and the external computing system 120, and a third communication connection 133 between the device 100 and the external computing system 120.

[0044] The first communication connection 131 can be a wireless communication connection such as Bluetooth or WLAN. A wired communication connection, such as a bus connection, a USB cable connection, or the like, is also conceivable. The second communication connection 132 can be a wireless communication connection such as mobile communication. The third communication connection 133 can also be a wireless communication connection such as mobile communication. It should be noted that the first and second communication connections are used within the scope of the present invention, while the third communication connection is not necessary. In particular, the present invention is especially suitable if such a third communication connection is possible, for example, because the device 100 does not have a suitable connectivity unit for this purpose.

[0045] In Fig. 1b is the arrangement of Fig. Figure 1a is shown again, but without the specific communication connections. In particular, device 100 or 102, the mobile device 110, and the external computing system 120 are shown. Furthermore, two different users are shown: a first user 121 and a second user 122, who can, for example, receive or provide data via the external computing system.

[0046] The following should now be addressed in relation to Fig. The first communication connection 131 and the second communication connection 132 mentioned in section 1a are established or provided by the mobile device 110 to the device 100, 102 or to the external computing system 120, respectively. While a mobile device such as a smartphone, for example, provides a mobile network connection (i.e., the second communication connection) continuously, at least as long as reception is available, the first communication connection can be established by manual or automatic pairing with the device 100 or 102.

[0047] Using the first communication link 131 and the second communication link 132, access-protected data transmission of sensitive data is then carried out between the device 100 or 102 and the external computing system 120. In one embodiment, this includes receiving sensitive data 141, 142 from the device 100, 102 and sending the sensitive data 141, 142 received by the device to the external computing system 120, as well as receiving sensitive data 141, 142 from the external computing system 120 and sending the sensitive data 141, 142 received by the external computing system to the device 100, 102.

[0048] In one embodiment, a distinction is made between sensitive data of the first kind 141 and sensitive data of the second kind 142, which are intended for different users. Thus, the sensitive data of the first kind 141 are intended for the first user 121 and the sensitive data of the second kind 142 are intended for the second user 122.

[0049] The sensitive data 141, 142 received from the external computer system 120 and sent to the device 100, 192 as part of this access-protected data transmission are encrypted and can only be decrypted by the device 100, 102. Similarly, sensitive data 141, 142 received from the device 100, 102 and sent to the external computer system 120 as part of this access-protected data transmission are encrypted and can only be decrypted by at least one predetermined user. In this way, a user of the mobile device, whether an application on the mobile device or a human user, has no access to the sensitive data.

[0050] In particular, sensitive data of the first kind 141 can be encrypted in such a way that it can only be decrypted by the first user 121, and sensitive data of the second kind 142 can be encrypted in such a way that it can only be decrypted by the second user 122.

[0051] In one embodiment, context data 150, generated by the mobile device 110, is provided. For example, an application on the mobile device 110 can generate this context data. This context data can be any type of data. This context data 150 is added to the sensitive data received by the device—which can be sensitive data of the first type 141 and / or sensitive data of the second type 142. The sensitive data 141 or 142, now comprising the context data, is then transmitted to the external computing system 120 as part of an access-protected data transmission.

[0052] It is understood that various data from context data, or only certain, not necessarily identical, context data, may also be added to the sensitive data of the first kind 141 and the sensitive data of the second kind 142.

[0053] In Fig. Figure 1b below illustrates, using the example of general sensitive data 140, how context data 150 can be added. For example, another unit of context data 150 can be added to each of several data records, each containing several units of data.

[0054] In addition to its function of transferring potentially sensitive data, such as vehicle data, from a vehicle to a database or other external computing system, this allows for the transmission of additional data and information from the mobile device (e.g., a smartphone). This data can be generated or recorded directly by the mobile device's sensors, such as a GPS position, or from other sources, such as a weather app running on the device that provides relevant information. This contextual data is then combined with the vehicle data; this can be done using various methods, such as real-time transmission or synchronization via a timestamp embedded in the respective data.

[0055] In this way, additional data can be added to the sensitive data without allowing access to the sensitive data itself.

[0056] In one embodiment, non-access-protected data transmission of non-sensitive data 160 is also carried out. This includes receiving non-sensitive data 160 from the device 100, 102 and making the non-sensitive data 160 received by the device available, e.g., to a user (e.g., an application) of the mobile device, and / or sending the non-sensitive data 160 received by the device to the external computing system 120. Likewise, non-sensitive data 162 can be received by the external computing system 120 and made available, e.g., to a user (e.g., an application) of the mobile device 110, and / or sent to the device 100, 102.

[0057] In addition to data requiring protection or sensitivity, this also allows access to, for example, certain vehicle data for a broad group of recipients. Navigation applications, for instance, can access non-sensitive data, i.e., data defined as "open." This could include, for example, speed information or information about the vehicle's status, such as remaining range.

[0058] This provides a standardized interface for data transmission, enabling OEMs, suppliers, and app providers to receive vehicle data and use it for new services. Restricting access to apps specified and offered by the OEM is no longer necessary, thus expanding the benefits for the end customer. The end-to-end connection between the vehicle and various stakeholders can be established via different app providers. These providers have limited visibility and access to the data, ensuring the protection of sensitive information. App providers receive vehicle data that they can use for their functions, while forwarding sensitive data to other stakeholders (e.g., OEMs) without being able to view it themselves.

[0059] In Fig. Figure 2 schematically illustrates a further embodiment of a method according to the invention. Here, the [unclear] can be [unclear] with regard to the Fig. 1a, Fig. 1b explains the type of access-protected data transmission.

[0060] The aim is to activate or deactivate a function of a device. For this purpose, as already mentioned above regarding... Fig. 1a explains that in step 200, the first communication connection 131 and, in step 202, the second communication connection 132 from the mobile device 110 to the device 100, 102 or to the external computing system 120 are established or provided.

[0061] In step 204, identification data 206 is received from device 100, 102 and sent to the external computer system 120. This identification data 206 includes, in particular, information about the hardware and / or software of the device. The purpose of this data transmission is, for example, the initial exchange of information for the identification of a specific vehicle or other device. This can be done, for example, via the vehicle identification number (VIN). This may be necessary to verify not only the vehicle itself but also its suitability for this function. Further details can include the transmission of the current software version of the vehicle, its individual control units, or other devices. This serves, for example, to check whether the control units already contain the function to be activated or deactivated, or whether the function is already activated.

[0062] In step 208, activation or deactivation data 210 (depending on whether the function is to be activated or deactivated) is received from the external computing system 120 and sent to the device 100, 102 in order to activate or deactivate the function in the device 100, 102 based on the activation or deactivation data 210. It is conceivable that the activation or deactivation data 210 received from the external computing system 120 is temporarily stored in the mobile device 110 and then sent to the device 100, 102.

[0063] In step 212, the function on device 100, 102 can then be activated or deactivated after a check of the activation or deactivation data 210. If the function is already present on the device, this can be done (step 212a) by enabling or disabling the function for a user. If, however, the function is not yet present on the device (step 212b), this can be done by transferring software data for the function to the device. The first and second communication links can also be used for this purpose; however, if available, the use of the third communication link is also conceivable.

[0064] In step 214, after the function has been activated or deactivated on the device 100, 102, confirmation data 216 can be received from the device and sent to the external computing system 120 to confirm the activation or deactivation.

[0065] This allows for the activation (or deactivation) of a previously purchased function (e.g., via an online portal) as soon as the next connection between the device or vehicle and the smartphone is established. This is particularly relevant in the two-wheeler and powersports segment (e.g., jet skis), where it is not yet common practice to provide a permanent internet connection independent of the smartphone.

Claims

[1] Method for data transmission between a device (100, 102), a mobile terminal (110) and an external computing system (120), comprising: Providing a first communication connection (131) from the mobile terminal (110) to the device (100, 102); Providing a second communication connection (132) from the mobile terminal (110) to the external computing system (120); Carrying out an access-protected data transmission of sensitive data (140, 141, 142) between the device (100, 102) and the external computing system (120), comprising: receiving sensitive data from the device and sending the sensitive data received from the device to the external computing system, and / or receiving sensitive data from the external computing system and sending the sensitive data received from the external computing system to the device. [2] The method of claim 1, further comprising, if a criterion is present: Providing context data (150), wherein the context data has been generated by the mobile terminal (110); Adding the context data to the sensitive data (140, 141, 142) received by the device (100, 102); and Sending the sensitive data (140, 141, 142), comprising the context data (150), to the external computing system (120) as part of the access-protected data transmission. [3] Method according to claim 1 or 2, wherein, as part of the access-protected data transmission, sensitive data received from the external computer system and sent to the device are encrypted and can only be decrypted by the device. [4] Method according to one of the preceding claims, wherein, within the scope of the access-protected data transmission, sensitive data received by the device (100, 102) and sent to the external computing system are encrypted and can only be decrypted by at least one predetermined user (121, 122). [5] Method according to one of the preceding claims, wherein the sensitive data comprises sensitive data of the first type (141) and sensitive data of the second type (142), wherein, within the scope of the access-protected data transmission, sensitive data of the first type (141) received by the device and sent to the external computer system are encrypted and can only be decrypted by at least one predetermined first user (121), and wherein, within the scope of the access-protected data transmission, sensitive data of a second type (142) received by the device and sent to the external computing system are encrypted and can only be decrypted by at least one predetermined second user (122). [6] Method according to one of the preceding claims, further comprising: Performing a non-access-protected data transfer of non-sensitive data (160, 162), comprising: Receiving non-sensitive data (160) from the device and providing the non-sensitive data received from the device and / or sending the non-sensitive data received from the device to the external computing system, and / or receiving non-sensitive data (162) from the external computing system and providing the non-sensitive data received from the external computing system and / or sending the non-sensitive external data received from the external computing system to the device. [7] A method for activating or deactivating a function of a device (100, 102) using a mobile terminal (110) and an external computing system (120), comprising: Providing (200) a first communication connection (131) from the mobile terminal (110) to the device (100, 102); Providing (202) a second communication connection (132) from the mobile terminal (110) to the external computing system (120); Receiving (204) identification data (206) from the device and sending the identification data received from the device to the external computing system, wherein the identification data in particular comprise information about a hardware and / or a software of the device; Receiving (208) activation or deactivation data (210) from the external computing system and sending the activation or deactivation data received from the external computing system to the device in order to initiate activation or deactivation of the function in the device based on the activation or deactivation data. [8] Method according to claim 7, wherein the activation or deactivation data received from the external computing system are temporarily stored and then sent to the device. [9] The method of claim 7 or 8, wherein the function is activated or deactivated on the device after checking the activation or deactivation data (212). [10] Method according to one of claims 7 to 9, wherein, if the function is already present on the device, the function is activated or deactivated by enabling or no longer enabling the function for a user (212a), and / or wherein, if the function is not yet present on the device, the function is activated or deactivated by transferring software data for the function to the device (212b). [11] The method of any one of claims 7 to 10, further comprising, after the function has been activated or deactivated on the device: receiving (214) confirmation data from the device and sending the confirmation data to the external computing system to confirm the activation or deactivation. [12] Method according to one of claims 7 to 11, using the access-protected data transmission according to a method according to one of claims 1 to 6. [13] Computing unit (110) which is configured to carry out all method steps of a method according to one of the preceding claims. [14] System comprising a device (100, 102) and a mobile terminal (110), wherein the mobile terminal has or is designed as the computing unit according to claim 13. [15] Computer program which causes a computing unit to carry out all the method steps of a method according to one of claims 1 to 12 when executed on the computing unit. [16] A machine-readable storage medium having stored thereon a computer program according to claim 15.

Images