Access control to a motor vehicle in emergency situations

Abstract

A procedure (200) for controlling access to a motor vehicle (105) comprises steps of determining (205) that an emergency situation exists in which the motor vehicle (105) is involved; requesting (220) a digital vehicle key for the motor vehicle (105) from a digital vehicle key management entity (115); and providing (230) the digital vehicle key for the motor vehicle (105) to a predetermined assistance organization (110), wherein the digital vehicle key authorizes the control of a function of the motor vehicle (105) necessary to resolve the emergency situation.

Description

[0001] The present invention relates to an access control system for a motor vehicle in emergency situations. In particular, the invention relates to access control in emergency situations by means of a digital vehicle key.

[0002] Access to a motor vehicle can be secured by means of a digital key. The digital key can be stored on a device that can communicate wirelessly with the motor vehicle. The device and the motor vehicle can mutually authenticate each other, and a request to use a predetermined function of the motor vehicle can be executed upon successful authentication. More precisely, mutual authentication can preferably be based on an asymmetric cryptographic encryption method, in which the device and the motor vehicle are each assigned a pair of private and public cryptographic keys.

[0003] Typically, the right to use the entire vehicle or only a specific function is granted by the owner. This involves a predetermined exchange procedure to create a valid key for another person. The exchange procedure includes communication with a central authority that manages keys for the vehicle. It can be documented which keys with authorizations for which functions of the vehicle were active at any given time. If a key is to be transferred from one owner to another person, authentication by the owner is required.

[0004] In certain situations, for example when the vehicle is involved in an emergency, the owner may not be able to control the function himself or grant authorization to another person.

[0005] One of the problems underlying the present invention is to provide a method for sharing a digital vehicle key with a predetermined organization in an emergency situation involving the motor vehicle. The method solves this problem by means of the subject matter of the independent claims. Dependent claims describe preferred embodiments.

[0006] More specifically, according to a first aspect, the present invention comprises a method for controlling access to a motor vehicle, including steps of determining that an emergency situation exists in which the motor vehicle is involved; requesting a digital vehicle key for the motor vehicle from a digital vehicle key management facility; and providing the digital vehicle key for the motor vehicle to a predetermined assistance organization, wherein the digital vehicle key authorizes the control of a function of the motor vehicle that is necessary to resolve the emergency situation.

[0007] Such a system offers the advantage that, in an emergency situation involving the vehicle, access to it can be granted by a predetermined emergency response organization, regardless of the vehicle owner's authentication. For example, the fire department can move the vehicle without owner authentication to gain access to infrastructure, such as a house.

[0008] The technology described herein advantageously builds upon a concept known as the digital car key. A specification for the digital car key has been published by the Car Connectivity Consortium and, at the time of writing, is version 1.1.0 dated July 20, 2022. This document is explicitly referenced here.

[0009] For the sake of simplicity, we will refer to a motor vehicle communicating with a device in the following text, although, strictly speaking, the communication is handled by a control unit on board the motor vehicle. The communication preferably occurs wirelessly, for which the motor vehicle may provide one or more different wireless interfaces. A preferred data interface includes Bluetooth (BT) or Bluetooth Low Energy (BLE); a preferred interface for the relative positioning of a device with respect to the motor vehicle preferably includes ultra-wideband (UWB). A communicating device may include wireless interfaces for one or both protocols.

[0010] The administrative unit is preferably located outside the vehicle. The administrative unit can store information about the vehicle, such as the vehicle identification number and / or license plate number, owner, designated assistance organization, and / or other relevant information. The administrative unit can be configured to manage one or more digital vehicle keys for one or more vehicles.

[0011] The administrative unit can operate independently of the motor vehicle and, in particular, automatically. In other words, the functionality of the administrative unit is not dependent on the functionality of the motor vehicle.

[0012] The administrative unit is preferably data-connected to the vehicle and / or the assistance organization and / or an owner's device, preferably via a wireless connection. The administrative unit can be configured to communicate with the vehicle and / or the assistance organization and / or the owner's device, preferably via the wireless data connection.

[0013] The administrative unit can be configured as an administrative server or as a service, for example in a computer cloud. The administrative unit can include a data management service, for example, from a vehicle manufacturer.

[0014] The designated aid organization can include a recognized organization, and in particular, an executive body of a state. For example, the aid organization can include the police. The aid organization can also include the fire department, civil protection, a towing service, the Federal Agency for Technical Relief (THW), an ambulance service, an emergency physician, an ordnance disposal service, or another public or private aid organization. The aid organization can include a central command center, which can be in communication with, for example, the fire department, civil protection, an ambulance service, an emergency physician, and / or an ordnance disposal service.

[0015] The aid organization can have representatives. For example, the fire department can have firefighters as representatives. The police can have police officers as representatives. A representative can act on behalf of the organization, particularly on-site in the area of ​​the vehicle.

[0016] The aid organization can request the digital vehicle key for the vehicle from the administrative body. Alternatively or additionally, the vehicle itself can request the digital vehicle key from the administrative body.

[0017] The digital vehicle key can be provided to several predetermined aid organizations.

[0018] The function of the motor vehicle can include locking or unlocking the vehicle, releasing an immobilizer, engaging neutral, unlocking a steering lock, and / or starting a drive engine. The function of the motor vehicle can also include controlling the entire motor vehicle.

[0019] The vehicle may be directly involved in the emergency situation. For example, the vehicle may be involved in a traffic accident. People inside the vehicle may have been injured. Among the injured persons may be the owner of the vehicle or the holder of a digital vehicle key. Furthermore, the vehicle may have been damaged in the traffic accident.

[0020] The vehicle may be indirectly involved in the emergency situation. For example, the vehicle may block access to infrastructure that the emergency services need. For instance, a house may be on fire, and the fire department may need access, but the vehicle is blocking this access. Alternatively or additionally, the vehicle may block access to a standpipe, such as a fire hydrant, that the fire department needs. During these emergency situations, the vehicle may be empty; in particular, no people may be inside the vehicle.

[0021] The existence of an emergency situation can be determined by a representative of the aid organization and / or by the vehicle. The procedure may include a step of transmitting a notification of the emergency situation to the previously designated aid organization. This notification can be transmitted by a representative, for example, using an aid device, and / or by the vehicle.

[0022] The request can originate from the aid organization, and the digital vehicle key can only be provided if authentication of the aid organization to the administrative body is successful.

[0023] This ensures that no unauthorized organizations or persons receive the digital vehicle key, thus guaranteeing the security of access to the vehicle.

[0024] The designated helper organization may have a helper device configured to communicate with the administrative body. Specifically, the helper device may be configured to authenticate the helper organization to the administrative body. This authentication may be based on an asymmetric cryptographic encryption method, in which the helper device and the administrative body are each assigned a pair of private and public cryptographic keys.

[0025] The aid device can be a mobile device personally assigned to a representative of the aid organization. This mobile device can be, in particular, a smartphone, smartwatch, smartband, tablet computer, or laptop computer. To use the aid device for a sensitive operation within the framework of a technique described herein, the representative may need to authenticate themselves to the device. This authentication can be done by presenting a biometric feature or entering a secret (password, PIN). The authentication can be verified by the mobile device's operating system.

[0026] The aid device can include an aid server configured to communicate with the mobile device. For example, a request for a digital vehicle key for a motor vehicle can originate from a mobile device personally assigned to a representative of the aid organization. The digital vehicle key can be made available to the aid server after successful authentication of the aid organization's aid server to the administrative body. The aid server can then forward the digital vehicle key to the representative's mobile device.

[0027] The nature of the emergency situation can be identified, and a reference to the circumstances of the request can be added. This allows the emergency situation to be defined more precisely, enabling the aid organization to immediately dispatch the appropriate representatives, such as an emergency physician, to the vehicle.

[0028] The relevant circumstances may include the role of the motor vehicle in relation to the emergency situation. Specifically, they may include whether the motor vehicle is directly or indirectly involved in the emergency. Furthermore, they may include whether the motor vehicle is involved in a traffic accident or whether it is blocking access to infrastructure. Finally, they may include the geographical location of the motor vehicle.

[0029] If a vehicle is involved in a traffic accident, for example, the circumstances may include how many people are inside the vehicle. Furthermore, the circumstances may include the health status of one or more people. For example, an interior camera in the vehicle can determine how many people are inside. The interior camera can also determine the health status of the people, for example, by detecting external injuries. Alternatively or additionally, sensors in the vehicle seats can be used to determine how many people are inside the vehicle.

[0030] This makes it possible to determine whether there is a danger to a person in the motor vehicle.

[0031] The circumstances can also include whether the vehicle is damaged. For example, vehicle sensors can determine if fuel is leaking from the vehicle. Furthermore, a vehicle's battery management system can determine the condition of the vehicle's battery. The battery's condition can, for example, determine whether the battery is approaching a state of thermal overload. This makes it possible to determine whether the vehicle poses a further danger to people inside and / or near the vehicle. It can also determine which vehicle functions can still be controlled using a digital vehicle key.

[0032] The nature of the emergency can be determined by the vehicle. This allows for a faster assessment of the emergency situation, enabling the emergency response organization to dispatch the appropriate personnel, such as an emergency physician, to the vehicle more quickly.

[0033] For example, if a motor vehicle blocks access to a hydrant that the fire brigade needs access to in order to fight an emergency situation, such as extinguishing a burning house, the emergency situation may include the fact that the motor vehicle is blocking access to the hydrant.

[0034] The emergency situation can be determined by a representative of the aid organization.

[0035] The digital vehicle key can be issued depending on the nature of the emergency. Specifically, the control of the vehicle's functions authorized by the digital vehicle key can be adapted to the emergency situation. This makes it possible to equip the digital vehicle key only with the permissions necessary to resolve the emergency. This prevents any unnecessary use or misuse of the vehicle.

[0036] For example, the digital vehicle key can be issued for a limited time, so that it automatically loses its authorization after the time limit expires. If the vehicle is blocking infrastructure, for instance, the digital vehicle key can be issued for a period of one hour, authorizing the unlocking of the vehicle, disabling an immobilizer, starting the engine, driving the vehicle away, and locking it. This would allow, for example, a representative of the aid organization to move the vehicle from its current location, park it at a different location, and lock it again. In this case, the digital vehicle key automatically loses its authorization after one hour.

[0037] The digital vehicle key can be issued with a geographically limited range, meaning that it automatically loses its authorization outside of this area. For example, if the vehicle is involved in a traffic accident, the digital vehicle key can be issued to authorize the unlocking of the vehicle within a five-meter radius.

[0038] The digital vehicle key can be issued for use by a designated assistance device. For example, if the vehicle is involved in a traffic accident, the digital vehicle key can be issued for use by a towing service representative using a mobile device. This allows the towing service representative to, for instance, move the vehicle out of the way of other traffic before it is towed away. This helps to restore traffic flow more quickly after an accident.

[0039] The emergency situation could involve a person in the vehicle experiencing a medical emergency, and the digital vehicle key could authorize the vehicle to be opened. This would allow, for example, an emergency physician to immediately access and provide medical assistance to an injured person inside the vehicle.

[0040] The vehicle can determine a person's health status, for example, using an interior camera. Additionally, the person's health status can be determined by a mobile device, such as a smartphone, smartwatch, smartband, or other mobile device worn directly or indirectly on the body, and this information transmitted to the vehicle. For example, the cardiovascular function of a person in the vehicle can be transmitted from a smartband worn by the person to the vehicle. This makes it possible not only to determine the person's health status based on external injuries but also to obtain information about potentially existing internal injuries.These details can be provided, for example, to a representative of the aid organization, such as an emergency physician, so that they receive information about the person's health condition even before arriving at the vehicle. This can reduce the time until the person receives appropriate medical care.

[0041] The emergency situation might involve a vehicle blocking access to infrastructure, and the digital vehicle key can authorize the removal of the vehicle. This allows the first responder to move the vehicle immediately, thus avoiding the need for a separate towing service. This can reduce the time it takes to resolve the emergency.

[0042] The infrastructure may be infrastructure for combating the emergency situation, in particular an access road, a riser pipe, a hydrant, an emergency exit, a public power supply, a manhole or sewer cover or other infrastructure for combating the emergency situation.

[0043] The administrative unit can only issue the digital vehicle key after a request has been received. In other words, the digital vehicle key can be generated and issued in response to a request. Consequently, the digital vehicle key does not exist without a request. This prevents the theft of digital vehicle keys through unauthorized access to the administrative unit.

[0044] Alternatively, the digital vehicle key may have already been created and stored in the administrative facility at a previous time, whereby the digital vehicle key can be equipped and issued in response to the request with authorizations depending on the indication of the emergency situation.

[0045] The requirement may include identification of the motor vehicle. This can, for example, identify the owner of the vehicle.

[0046] The vehicle identification can include an official license plate number and / or a vehicle identification number (VIN). Based on this identification, the administrative body can uniquely assign the vehicle to its owner. The administrative body can then automatically send the vehicle owner a notification of the emergency situation.

[0047] The vehicle's digital key can be transmitted to a helper device of the aid organization. The helper device is preferably a mobile device assigned to, or usable by, a representative of the aid organization. Use of the device may require authentication of the representative by the mobile device. For example, the digital vehicle key can be transmitted directly from the administrative unit to the helper device. Alternatively, the digital vehicle key can be transmitted from a helper server of the aid organization to the helper device.

[0048] For example, the digital vehicle key can only be transmitted to the assistance device if the assistance device is within a predetermined distance of the vehicle. This also ensures that the digital vehicle key is transmitted to the correct assistance device.

[0049] A notification regarding the provision of the digital vehicle key may be transmitted to an executive body responsible for motor vehicle matters.

[0050] The notification of the availability of the digital vehicle key can be transmitted to the responsible law enforcement agency by the administrative body, the aid organization, and / or the vehicle itself. Specifically, the notifications regarding the availability of the digital vehicle key can be transmitted independently to the responsible law enforcement agency by the administrative body, the aid organization, and the vehicle. This allows for a more reliable determination that an emergency situation actually exists. Consequently, unauthorized access to the digital vehicle key can be better prevented.

[0051] A notification regarding the availability of the digital vehicle key can be transmitted to an owner's device assigned to the vehicle. This ensures that the vehicle owner is always informed about the digital vehicle keys issued for their vehicle. Furthermore, the owner can contact the emergency response organization and potentially contribute useful information to resolving the emergency situation.

[0052] For the purposes of this document, an owner is understood to be a person who is specifically assigned to the motor vehicle and possesses special authorizations. In particular, the owner is assigned an owner's key to the motor vehicle. With regard to a procedure described herein, the owner typically acts using an owner's device. The owner's device preferably comprises a mobile device that is personally assigned to the owner, in particular a smartphone, smartwatch, smartband, tablet computer, or laptop computer. In order to use the owner's device for a sensitive action within the framework of a technology described herein, it may be necessary for the owner to authenticate themselves to the owner's device. For this purpose, the owner can present a biometric characteristic or enter a secret (password, PIN). The authentication can be verified by the mobile device's operating system.The owner's key is usually stored on the owner's device. Multiple owners can have a vehicle at any one time.

[0053] According to a second aspect of the present invention, the problem is solved by a device for managing digital vehicle keys of motor vehicles, wherein the device is configured to receive a request for a digital vehicle key of a motor vehicle involved in an emergency situation and to provide the requested digital vehicle key to a predetermined aid organization.

[0054] The device can be the previously described management unit for digital vehicle keys.

[0055] According to a third aspect of the present invention, the problem is solved by a motor vehicle which can be controlled by means of a digital vehicle key, wherein the motor vehicle is equipped to determine that it is involved in an emergency situation and to provide a request for a digital vehicle key to a predetermined external location.

[0056] The motor vehicle can be a passenger car with two, three, four, or more seats. The seats can be arranged in one, two, three, or more rows. For example, a compartment can comprise only one seat. Alternatively, a compartment can comprise two or more seats, preferably two or more seats in the same row. Again, for example, a compartment can comprise an entire row.

[0057] The motor vehicle may also include a minibus, a light commercial vehicle, a coach, and / or a truck. The motor vehicle may include an electric vehicle. The motor vehicle may also include a hybrid vehicle. A hybrid vehicle may incorporate two or more different energy conversion systems to provide the energy for propelling the motor vehicle.

[0058] The vehicle can be locked, unlocked, and / or opened using the digital vehicle key. Furthermore, the vehicle's immobilizer can be deactivated and / or the vehicle's engine can be started using the digital vehicle key.

[0059] The motor vehicle may have a processing unit, preferably configured to partially or completely execute the method described herein according to the first aspect of the invention. For this purpose, the processing unit may be electronic and may, for example, comprise an integrated circuit, a programmable logic device, or a programmable microcomputer. The method may be implemented in the form of a configuration or as a computer program product with program code means for the processing unit. The configuration or the computer program product may be stored on a computer-readable data carrier. Features or advantages of the method may be transferred to the device or vice versa. The processing unit may be part of the control device on board the motor vehicle.

[0060] The invention will now be described in more detail with reference to the attached drawings, in which: Fig. 1. a system; and Fig. 2. A flowchart of a process schematically illustrated.

[0061] In the following description, identical reference numerals denote identical components or identical features, so that a description of a component in relation to one figure also applies to the other figures, thus avoiding repetitive descriptions. Furthermore, individual features described in connection with one embodiment can also be used separately in other embodiments.

[0062] Fig. Figure 1 shows an exemplary system comprising a motor vehicle 105, a helper organization 110 and an administrative institution 115, wherein an emergency situation exists in which the motor vehicle 105 is involved, wherein the motor vehicle 105 is equipped to determine that it is involved in the emergency situation.

[0063] Administrative unit 115 is set up to receive a request for a digital vehicle key for the motor vehicle and to provide the requested digital vehicle key to a predetermined aid organization 110. The motor vehicle 105 can be controlled using the digital vehicle key.

[0064] The in Fig. The vehicle shown, number 105, is indirectly involved in the emergency situation. More precisely, vehicle 105 is blocking access to a fire hydrant (not shown) that is needed to extinguish a burning house (not shown).

[0065] Fig. Figure 2 shows a flowchart of an exemplary procedure 200, which will also be referred to below in relation to Fig. 1 is described. The procedure 200 includes a step 205 for determining that the emergency situation in which the motor vehicle 105 is involved exists.

[0066] Procedure 200 further includes a step 210 for determining a circumstance of the emergency situation, wherein the circumstance of the emergency situation comprises the fact that the motor vehicle 105 is blocking access to a fire hydrant. The circumstance of the emergency situation is determined by a representative 130 of the emergency response organization 110. Procedure 200 further includes a step 215 for transmitting a notification of the emergency situation to the emergency response organization 110.

[0067] Procedure 200 includes a step 220 for requesting the digital vehicle key for motor vehicle 105 from the administrative unit 115 for digital vehicle keys, with the request originating from the aid organization 110. The digital vehicle key is only provided if the aid organization 110 successfully authenticates itself to the administrative unit 115. This authentication is performed via an aid server 120 of the aid organization 110, which is configured to communicate with the administrative unit 115 and the aid device 125, which is configured as a mobile device 125 of the representative 130. The request includes information about the emergency situation and an identification of the motor vehicle 105.

[0068] Procedure 200 includes step 225 of issuing the digital vehicle key, whereby the digital vehicle key is issued depending on the indication of the emergency situation. In this case, the digital vehicle key authorizes the user to drive away the motor vehicle 105. More precisely, the digital vehicle key authorizes the user to unlock the motor vehicle 105, release an immobilizer, and start a drive engine.

[0069] Procedure 200 includes step 230 of providing the digital vehicle key for the motor vehicle 105 to the helper organization 110, whereby the digital vehicle key is transmitted to the helper server 120 of the helper organization 110.

[0070] Procedure 200 further includes step 235 of transmitting the digital vehicle key to the mobile device 125 of the representative 130 of the aid organization 110. The digital vehicle key is only transmitted to the mobile device 125 of the representative 130 if the mobile device 125 is within a predetermined distance of the motor vehicle 105.

[0071] Procedure 200 also includes step 240 of transmitting a notification of the provision of the digital vehicle key to an executive body 145 responsible for the motor vehicle 105, for example the police.

[0072] Finally, the procedure 200 includes a step 245 of transmitting a notification of the provision of the digital vehicle key to an owner device 135 assigned to the motor vehicle belonging to an owner 140. Reference sign 100 System 105 motor vehicles 110 aid organizations 115 Administrative Unit 120 helper devices (helper servers) 125 Helper device (mobile device) 130 Representative (of the aid organization) 135 Owner's device 140 owners 145 Executive body 200 procedures 205 Determine that an emergency situation exists 210 Determining a circumstance of the emergency situation 215 Transmitting a warning about the emergency situation to a relief organization 220 Requesting a digital vehicle key for the motor vehicle 225 Issuing the digital vehicle key 230 Providing the digital vehicle key 235 Transmitting the digital vehicle key to an assistance device 240 Transmitting a notice of the provision of the digital vehicle key to an executive body 245 Transmitting a notification of the provision of the digital vehicle key to an owner's device

Claims

[1] Method (200) for controlling access to a motor vehicle (105), wherein the method comprises the following steps: - Determine (205) that an emergency situation exists in which the motor vehicle (105) is involved; - Requesting (220) a digital vehicle key for the motor vehicle (105) from an administrative body (115) for digital vehicle keys; and - Providing (230) the digital vehicle key for the motor vehicle (105) to a predetermined helper organization (110); - wherein the digital vehicle key authorizes the control of a function of the motor vehicle (105) necessary to resolve the emergency situation. [2] Method (200) according to claim 1, wherein the request originates from the aid organization (110) and the digital vehicle key is only provided if authentication of the aid organization (110) to the administrative institution (115) is successful. [3] Method (200) according to claim 1 or 2, wherein a circumstance of the emergency situation is determined and a reference to the circumstance of the request is added. [4] Method (200) according to claim 3, wherein the digital vehicle key is issued depending on the indication of the emergency situation. [5] Method (200) according to one of claims 3 or 4, wherein the emergency situation includes the fact that a person in the motor vehicle (105) is in a state of health impaired and the digital vehicle key authorizes the opening of the motor vehicle (105). [6] Method (200) according to any one of claims 3 to 5, wherein the emergency situation includes the fact that the motor vehicle (105) blocks access to an infrastructure, and the digital vehicle key authorizes the motor vehicle (105) to be driven away. [7] Method (200) according to one of the preceding claims, wherein the administrative institution (115) issues the digital vehicle key only after a request has been received. [8] Method (200) according to any of the preceding claims, wherein the requirement includes identification of the motor vehicle (105). [9] Method (200) according to one of the preceding claims, wherein the digital vehicle key for the motor vehicle (105) is transmitted to an assist device (125) of the assist organization (110). [10] Method (200) according to one of the preceding claims, wherein a notification of the provision of the digital vehicle key is transmitted to an executive body (145) responsible in the area of ​​the motor vehicle (105). [11] Method (200) according to one of the preceding claims, wherein a notification of the provision of the digital vehicle key is transmitted to an owner device (135) assigned to the motor vehicle. [12] Device for managing digital vehicle keys of motor vehicles, wherein the device is configured to receive a request for a digital vehicle key of a motor vehicle (105) involved in an emergency situation and to provide the requested digital vehicle key to a predetermined aid organization (110). [13] Motor vehicle (105) that can be controlled by means of a digital vehicle key; wherein the motor vehicle (105) is equipped to determine that it is involved in an emergency situation; and to provide a request for a digital vehicle key to a predetermined external location.

Images