Computer-implemented method for controlling the operation of vehicle systems in a fleet of motor vehicles, motor vehicle and communication system

Abstract

Computer-implemented method for controlling the operation of vehicle systems (7) of a fleet (2) of motor vehicles (3), wherein the vehicle systems (7) each provide at least one technical function in the respective motor vehicles (3) and comprise a control unit (8), wherein each motor vehicle (3) of the fleet (2) further comprises a communication device (6) for communication with a motor vehicle-external server (5), wherein the method comprises the following steps - Receipt or determination of a request information describing a restriction and / or deactivation to be carried out by the server (5) for at least one of the at least one functions of the vehicle system (7) for at least one motor vehicle (3) and / or in a region, - Evaluation of the request information to identify at least one motor vehicle (3) of the fleet (2) affected by the request information by the server (5), - Sending tax information relating to the restriction and / or deactivation from the server (5) to the at least one identified affected motor vehicle (3), - Restriction and / or deactivation of at least one of the at least one functions according to the control information by means of the control device (8), wherein the restriction concerns an adjustment of at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function.

Description

[0001] The invention relates to a computer-implemented method for controlling the operation of vehicle systems in a fleet of motor vehicles, wherein the vehicle systems each provide at least one technical function in the respective motor vehicles and comprise a control unit, and wherein each motor vehicle in the fleet further comprises a communication device for communicating with a server external to the motor vehicle. The invention also relates to a motor vehicle and a communication system.

[0002] Modern motor vehicles feature vehicle systems capable of providing a wide range of technical functions, such as driver assistance systems, which may be specifically related to the vehicle's operation. These technical functions typically utilize input data provided by the vehicle, which may include or be derived from the vehicle's own ego data and / or sensor data from at least one sensor. They evaluate this input data to determine output data that controls at least one component of the vehicle to perform a specific action, such as issuing a warning and / or information, or implementing a driving intervention.

[0003] Vehicle systems that allow fully automated driving within certain limits, known as system boundaries, are already available and are also the subject of research, particularly on the path to a fully autonomous vehicle. According to SAE J3016 dated April 30, 2021, five levels of autonomous driving are distinguished, with fully automated driving being achieved from level 3 onwards. At this level, the vehicle system executes all aspects of the dynamic driving task in a driving-mode-specific manner, with the expectation that the driver will respond to a request for intervention (driver takeover request). At higher levels, this expectation no longer exists.

[0004] Changes in external circumstances, such as restrictions on the usability of functions due to regulations, defects in vehicles and / or external components, and / or manufacturing defects, may necessitate a subsequent modification of the scope of functions within the vehicle. For example, it is common practice to recall vehicles, such as those of a specific model series, to workshops or the manufacturer to make the necessary adjustments. This is extremely complex and can lead to the function being used beforehand, which can pose risks. On the other hand, there are also circumstances, particularly local and / or time-limited ones, that make adapting a function of a vehicle system seem expedient. However, a recall to a workshop does not offer a practical solution to the problem due to its spatial and temporal limitations.

[0005] DE 10 2018 205 011 A1 discloses a method for the controlled transition of at least one autonomous or semi-autonomous vehicle from a fleet to a safe state, wherein at least one autonomous or semi-autonomous vehicle from the fleet is identified by a central vehicle management system based on discrimination factors, and a command from the central vehicle management system to transition to the safe state or to shut down the identified vehicle is transmitted to the at least one identified vehicle. In this process, a situation-specific risk of the at least one autonomous or semi-autonomous vehicle is determined by the transmitted discrimination factors, depending on which the at least one vehicle is transitioned to the safe state immediately or with a delay. The shutdown can involve deactivating an autonomous or semi-autonomous driving function, for example, in the event of certain weather conditions or malfunctions.

[0006] DE 10 2022 211 662 A1 concerns a method for operating a fleet of vehicles comprising several vehicles that are at least partially autonomous. This method allows for the detection and identification of errors and, in particular, uncertainties in at least one functional unit of the at least partially autonomous vehicle, and the transmission of these errors as a warning signal to surrounding vehicles or road users. This enables the surrounding vehicles in the vicinity of the at least partially autonomous vehicle to prepare themselves and initiate appropriate measures or countermeasures, depending on the status of the at least one functional unit. Thus, collisions or other hazardous traffic situations can be avoided. It is also possible to bring a vehicle to a safe stop.

[0007] The invention is therefore based on the objective of allowing an improvement in the operational control of functions provided by vehicle systems in motor vehicles, in particular with regard to their adaptation.

[0008] To solve this problem, the features of claim 1 are provided according to the invention in a method of the type mentioned at the outset.

[0009] In general, a technical function of a vehicle system is understood here as one that derives output data from input data describing the current operating situation of the vehicle, in particular comprehensive and / or derived from sensor data from at least one sensor of the vehicle and / or ego data describing the operating state of the vehicle. This output data relates to at least one action to be carried out by controlling a component of the vehicle. Numerous methods for providing input data for the function are already known in the prior art. In particular, sensor data fusion or, more generally, information fusion can be performed in the vehicle to determine, for example, an environmental map and / or an environmental model of the vehicle, which can be used, at least partially, as input data for the technical function.Components of the motor vehicle that can be controlled and are directly assigned to the vehicle system include, for example, output devices and / or actuators, for example in the case of driving interventions as measures.

[0010] In general, it can be said that preferably at least one function is an at least partially autonomous driving function designed for at least partially automatic longitudinal and / or lateral control. Especially with such autonomous driving functions, reasons for making an adjustment seem expedient may also relate to safety issues, making reliable and rapid adjustment particularly advantageous. This applies especially with regard to the deactivation, particularly when necessary, of the at least partially autonomous driving function. Specifically, the autonomous driving function can be a fully autonomous driving function that enables fully automatic control of the vehicle. In this case, the fully autonomous driving function is at least a Level 3 driving function according to SAE J3016 dated 30 [year missing].April 2021 means that the vehicle system will fully take over vehicle control and thus the dynamic driving task within the framework of the autonomous driving function.

[0011] The invention proposes enabling the targeted adaptation of at least one function provided by the respective vehicle system, in particular an autonomous driving function, for specific vehicles within a fleet "over the air," i.e., at least partially wirelessly or remotely. For this purpose, an external server is provided, which is specifically connected to the internet and communicates with the vehicle systems, specifically the control units, of the vehicles in question via a communication link that is at least partially wireless, utilizing the vehicle's communication equipment. Preferably, the communication from the server to the vehicles takes place at least partially via the internet and / or a mobile network.This takes advantage of the fact that many modern motor vehicles are already connected to the internet using a mobile network.

[0012] If a request information is determined or provided on the server side, the server can also determine which vehicles are affected by the request information and can transmit corresponding control information to the affected vehicles via the communication links. The vehicle systems, specifically their control units, are now designed to take this incoming control information into account, i.e., to evaluate it and use it to control the function in such a way that the desired restriction and / or deactivation takes place.

[0013] In this way, functional adjustments can be implemented promptly and easily through the appropriate training of the vehicle systems, which can serve in particular to increase safety in the motor vehicle, but also to generally adapt to possibly changed regulations and / or environmental conditions.

[0014] It should be noted that, within the scope of the present invention, it is of course also conceivable to implement an expansion of the functional scope and / or activation of a previously deactivated function "over the air," i.e., remotely, by means of appropriate requirement information. This is particularly advantageous if the reason for the restriction and / or deactivation is spatially (or locally) and / or temporally limited. However, embodiments are also conceivable in which other mechanisms, such as a visit to a workshop, are required for the expansion and / or deactivation. The central point is therefore that at least partially wireless, remotely controlled deactivation and / or restriction of at least one function, particularly to increase safety and / or to ensure compliance with a control system, is enabled for motor vehicles in a fleet while in operation.

[0015] In principle, after a deactivation and / or restriction has been carried out, if the reason for the restriction and / or deactivation and / or the subject of a respective motor vehicle ceases to exist, a further extension and / or activation of the requirement information describing at least one function of the vehicle system for at least one motor vehicle and / or at least one region can be provided or determined, which, after appropriate evaluation to determine the affected motor vehicles of the fleet, causes a transmission of corresponding tax information to the affected, identified motor vehicles, whereby the tax information is implemented in the receiving motor vehicles by the control unit of the vehicle system.

[0016] In this context, it is particularly preferred if, in the case of a restriction and / or deactivation that is limited in time and / or location, the request information is determined or provided in such a way that it additionally includes time information describing the temporal validity of the restriction and / or deactivation, and / or area information describing the spatial validity of the restriction and / or activation, wherein the control information for the at least one identified, affected motor vehicle is comprehensively determined, and the control unit of the motor vehicle is designed, based on the control information for the restriction and / or deactivation of the at least one function, only for the temporal and / or spatial validity.In this way, the individual motor vehicles also receive the information for which period and / or spatial area the restriction and / or deactivation applies, so that it can be implemented precisely according to the tax information and, in particular, no further, additional communication measures and / or other interventions are required to allow activation and / or a reset to the original functionality.

[0017] It should be noted here that while a region used to identify affected vehicles and a geographical area in which the restriction and / or deactivation is to be applied may be the same, they may also differ. For example, if the geographical area concerns a hazardous location, it may be useful to inform vehicles in a larger region that could pass the hazardous location and to determine the corresponding control information, the implementation of which, based on the geographical area information, only includes the restriction and / or deactivation if the vehicle actually passes the hazardous location.

[0018] It is advisable to encrypt the control information and / or transmit it after an authentication process. This ensures that the restriction and / or deactivation originates from the correct, authorized source, namely the server, and prevents unauthorized interference with the operation of the vehicles. In principle, encryption and / or authentication methods already used for communication between vehicles and servers or other backend systems, as described in detail in the prior art, can be employed for this purpose.

[0019] The present invention provides that the restriction involves adjusting at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function. This can serve, in particular, to increase safety and / or to ensure compliance with a control system. For example, it can be provided that driving environments in which the respective function may be used are restricted and / or that the parameter value relates to a speed and / or longitudinal acceleration and / or lateral acceleration and / or steering angle for a driving intervention as a measure, in particular by reducing the maximum parameter value. In the case of a fully autonomous driving function, for example, driving environments or driving situations in which it can be used can be restricted by appropriately adjusting the system boundaries.Certain driving maneuvers can also be excluded. For example, the maximum permissible speed can be reduced by adjusting the parameter value.

[0020] In a particularly preferred embodiment of the present invention, the requested information can be automatically determined by the server using an analysis function, based on a spatially resolved state information describing a driving environment condition, in particular state information relating to traffic flow and / or an accident and / or a construction site and / or a hazard. Such state information can, for example, be derived from traffic information and / or be derived as traffic information, the use of the internet and / or other services for disseminating such traffic information, for example for navigation systems, is already known in the art. Further sources can include, for example, spatially resolved weather information and the like, which are also available online.The information can be accessed from other sources and used to determine the status. This status information can, in particular, indicate where traffic flow events, accidents, construction sites, and / or other hazards relevant to at least one function are located. A timely response to the status information is possible, and at least one function can be adjusted to provide significantly increased safety for the fleet's vehicles passing the relevant location, especially the hazard.In a specific example, it might be stipulated that if a lane closure is reported, for instance due to an accident, a lane-changing function, such as a lane change assistant and / or an overtaking assistant, is deactivated for vehicles within a predefined area around the closure, and / or a more general vehicle control function, particularly a partially autonomous driving function, is restricted to operation without lane changes on the affected lane. Similarly, an overtaking assistant could be deactivated, the maximum permissible speed for driving interventions reduced, and so on, at construction sites and / or other hazardous locations. In areas where slippery surfaces are present, restrictions and / or deactivations could be implemented, for example, with regard to cornering.

[0021] In advantageous embodiments, it can also be provided that the requirement information is determined from user input specifically for a particular version of at least one function and / or a particular model of affected motor vehicles and / or for an affected region. Thus, even if requirement information cannot be determined fully automatically by the server, it can at least be partially determined from user input. For example, if it has become known that a particular version of at least one function and / or the vehicle system has a specific error, corresponding user input can be used to determine requirement information specifically related to this version, which describes a limitation of the function in such a way as to avoid the error and / or describes a deactivation of the function.Once the server has vehicle information about the fleet's vehicles, for example, at least partially transmitted by the vehicles themselves, fleet vehicles with this version can be identified as affected. This applies analogously to any manufacturing defects and / or other faults of vehicles of a specific model that may become known. In this way, the safety of the vehicles is also increased with regard to identified deficiencies in functions, vehicle systems, or models. A user input can also refer to a region in which a change has occurred, particularly with regard to at least one regulation, defining the spatial area where deactivation and / or restriction is to be applied. For example, if traffic regulations change, an immediate adjustment of at least one function can be made.A function can also be deactivated or restricted for a specific market, for example.

[0022] It should be noted here that it may be generally advisable for the fleet vehicles to transmit communication data containing vehicle information to the server, particularly on a regular basis. This communication data can, in particular, describe the current position of the vehicle. As already mentioned, some of the vehicle information assigned to the fleet vehicles on the server may already be present, for example, during the initial vehicle registration and assignment to the fleet. Such vehicle information can include, for example, version information, model information, equipment information, and the like.

[0023] To describe affected vehicles within the fleet, the requirement information in exemplary embodiments can include at least one vehicle identification number (VIN) and / or a range of VINs. This makes it particularly easy to identify affected vehicles and to formulate specific requirement information. For example, a deficiency, such as a manufacturing defect, can affect a specific range of VINs. Fundamentally, regardless of the use of the VIN, the requirement information can also pertain to a single vehicle. This means that the functionality or the activation of at least one function can be specifically targeted.This can be useful, for example, if a fault is noticed late in a workshop, but also depending on financial information, for example, if the function and / or scope of functions are subject to charges.

[0024] Preferably, the control unit can communicate the restriction and / or deactivation to at least one occupant of the vehicle, particularly the driver, by activating an output device. In this way, the vehicle occupants, especially the driver, are informed about the remotely controlled restriction. This avoids surprise effects when at least one of the at least one function is restricted or no longer available at all. Particularly with regard to hazardous areas or similar locations, the output can be conveniently accompanied by a general warning about this relevant location. Generally, it is also advisable to include explanatory information with the output. This information can also be provided with the request information and / or determined and transferred to the control information.

[0025] In addition to the method, the present invention also relates to a motor vehicle comprising a vehicle system that provides at least one technical function in the motor vehicle and includes a control unit, as well as a communication device for communicating with a server external to the motor vehicle. The motor vehicle is characterized in particular by the fact that the control unit is configured to restrict and / or deactivate at least one of the at least one function according to control information received from the server, wherein the restriction involves adjusting at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function. All descriptions of the method according to the invention can be applied analogously to the motor vehicle according to the invention and vice versa.

[0026] The motor vehicle according to the invention is thus designed to receive control information relating to the restriction and / or deactivation of at least one function of a vehicle system and to implement this information by means of the corresponding control unit. The motor vehicle is therefore suitable for use in the method according to the invention. It is specifically designed to implement the control information received at least partially wirelessly, particularly with regard to any time and / or area information that may be included. The control unit can, in particular, include a control unit through which the restriction and / or deactivation is carried out in accordance with the control information.

[0027] Finally, the invention also relates to a communication system comprising a fleet of motor vehicles, each of which has a vehicle system providing a technical function in the respective motor vehicles and comprising a control unit, and a communication device for communicating with a server external to the motor vehicle, as well as the server, wherein the server comprises: - a request unit for receiving and / or determining request information that describes a restriction and / or deactivation to be carried out on at least one of the at least one functions of the vehicle system for at least one motor vehicle and / or in a region, - an evaluation unit for evaluating the request information to identify at least one vehicle in the fleet affected by the request information, and - a transmission unit for sending tax information relating to the restriction and / or deactivation from the server to the at least one identified affected motor vehicle, and the control unit includes: - a control unit for restricting and / or deactivating at least one of the at least one functions according to the control information, wherein the restriction concerns an adjustment of at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function.

[0028] All aspects relating to the inventive method and the inventive motor vehicle can also be applied analogously to the communication system, so that the aforementioned advantages can also be achieved with it. The server can, in particular, be a cloud server of the internet. Both the server and the control unit have at least one processor and at least one storage medium. The aforementioned and further functional units can be formed by hardware and / or software to carry out steps of the inventive method.

[0029] Further advantages and details of the present invention will become apparent from the exemplary embodiments described below and from the drawings. These show: Fig. 1 a flowchart of an embodiment of the method according to the invention, Fig. 2 a schematic diagram of a communication system according to the invention, Fig. 3 a schematic diagram of a motor vehicle of the communication system, and Fig. 4. The functional structure of a server of the communication system.

[0030] Fig. Figure 1 shows a flowchart of an embodiment of the method according to the invention. This relates to the control of the operation of vehicle systems that provide at least one function in a motor vehicle. In this case, the function is an at least partially, and in particular fully, autonomous driving function. Using this method, it is possible to restrict and / or deactivate at least one of the at least one function for at least one affected motor vehicle from a server external to the vehicle, at least partially wirelessly, i.e., remotely, even when the motor vehicle is operating in normal public traffic.

[0031] The following section provides an example of the procedure for a requirement that concerns the deactivation and / or restriction of at least one function in at least one affected motor vehicle. It goes without saying that the procedure can be carried out, and in particular repeated, with different requirement information for various deactivation and / or restriction requirements.

[0032] Each vehicle in such a remotely controlled fleet has a vehicle system that provides at least one function. Furthermore, each of these vehicles has a communication device that allows a communication connection—in this case, a mobile network and the internet—to be established with a server, specifically a stationary, external server, i.e., a backend system. Vehicle information is stored on the server and can be provided by the vehicles, at least partially, and regularly. This vehicle information can include version information, model information, the vehicle's current position, and the like. All communication to and from the server is encrypted and requires at least one authentication process.

[0033] The motor vehicles are in normal use on public roads by their respective owners or users, meaning, in particular, during normal driving operations on the road network. Restriction and deactivation measures can affect driving operations, which will be discussed in more detail below.

[0034] In step S1, request information is provided, specifically received by the server and / or determined server-side. The basis for this determination could be, for example, user input relating to an error with specific vehicle identification numbers (VINs) or within a VIN range and / or a particular version, an adjustment of regulations in a specific region, and the like. For instance, an adjustment of traffic regulations in a country might necessitate a restriction of the system boundaries of at least one function. An error could result in the need to restrict or even deactivate at least one function.

[0035] Furthermore, it is possible, for example cyclically, to determine the required information from a state information that describes spatially resolved environmental conditions. This state information can be traffic and / or weather information automatically retrieved by the server. It can, for example, indicate the location of accidents, construction sites, hazards, unusual traffic flow, and the like within the road network. For some of these locations, which are relevant to at least one function, restrictions and / or deactivations are stored in a server storage medium, such as a database, and / or can be determined, for example, by an evaluation function of the artificial intelligence.For example, if a lane is closed, such as due to an accident, the system might deactivate lane change assist and / or overtaking assist functions, and / or restrict lane changes into the closed lane for at least partially autonomous, cross-traffic functions. In the case of general hazards, the system might reduce maximum permitted speeds and / or accelerations (which could also include braking). In slippery conditions, for instance, the system might dynamically restrict cornering. Similarly, for traffic jams and similar situations, certain functions could be deactivated.

[0036] The provided and / or determined requirement information ultimately describes which at least one function is to be deactivated or restricted, and for which vehicles in the fleet this is to apply. Additionally, if the deactivation and / or restriction is time-limited, a description of this time limit is included, and if the deactivation and / or restriction is spatially limited, a description of the area is included. The area information describes the geographical area in which the deactivation and / or restriction is actually to take place. It does not necessarily have to correspond to the region described in the requirement information, which may also describe the affected vehicles.Agreement exists, for example, when motor vehicles in a particular state are to be addressed with regard to a change in the regulations in that state; however, this can diverge if the spatial area is defined around a hazard or other relevant location, but the region is intended to include all motor vehicles that could enter or pass through this spatial area.

[0037] In step S2, the server then determines the vehicles in the fleet affected by the request information, for example by their vehicle identification number, region and / or by comparison with the vehicle information, such as version information.

[0038] In step S3, the server transmits control information relating to at least one function and its restriction and / or deactivation, and also including the time and scope information contained in the request information. If the request information also contains justification information describing the reason for the deactivation and / or restriction (for example, specifying the relevant location and / or adapted rule), this is also included in the control information.

[0039] In step S4, the control information is received by the respective affected vehicles, and the vehicle system is controlled by its control unit according to this information. Specifically, if time and / or area information is provided, this means that a restriction and / or deactivation is applied when the temporal and / or spatial validity is met. After the validity period expires, activation is restored, or the original functionality is reinstated.

[0040] Furthermore, by activating at least one output device, the driver or at least one occupant of the vehicle is informed of the restriction and / or deactivation at the latest when it is actually carried out, and, if available, an explanation is also provided. For example, with regard to a hazard, a warning about the hazard via an output device can be supplemented by additionally indicating that, as a result, at least one of the at least one function will be restricted and / or deactivated in a spatial area around the hazard.In the event of a restriction and / or deactivation due to a fault or other deficiency, a corresponding explanation may be provided, which may also include a request for further action, for example: "Due to a deficiency in vehicles of your model series, the autonomous driving function is initially deactivated. Please visit an authorized workshop soon to rectify the deficiency and have the autonomous driving function reactivated."

[0041] It should be noted that it is conceivable that other requirement information could relate to the activation and / or extension of at least one of the at least one function. Furthermore, requirement information can also relate to a single affected vehicle.

[0042] Fig. Figure 2 shows a schematic diagram of a communication system 1 according to the invention. The communication system 1 comprises a fleet 2 of motor vehicles 3, all of which have communication devices to establish communication connections 4 via a mobile network and the Internet to a server 5.

[0043] Fig. Figure 3 shows a motor vehicle 3 of fleet 2 in more detail in the form of a schematic diagram. In addition to the communication device 6 already mentioned, the motor vehicle 3 comprises a vehicle system 7 with a control unit 8, for example, a control module, which communicates with other components of the motor vehicle 3, for example, with the communication device 6 for receiving control information, with output devices 9, sensors, actuators, and other vehicle systems. The vehicle system 7 provides at least one technical function that determines output data from input data obtained at least partially from sensor data. This output data relates to actions to be carried out by controlling other components of the motor vehicle 3, for example, the actuators and / or the output devices 9. Specifically and preferably, the at least one function can be an at least partially autonomous driving function.The control device 8, specifically a control unit 10, is configured to restrict and / or deactivate at least one function according to the control information received from the server 5 via the communication device 6. In other words, the control unit 10 performs step S4 of the procedure according to [reference]. Fig. 1 out.

[0044] Fig. Figure 4 shows the functional structure of server 5 in more detail. In addition to a storage medium 11 and various interfaces not shown here, server 5 has a request unit 12 for receiving and determining the request information according to step S1. In an evaluation unit 13, the request information is evaluated according to step S2 in order to identify the affected vehicles 3 of fleet 2.

[0045] Finally, server 5 also has a transmission unit 14 to compile the control information according to step S3 and to transmit it via the corresponding communication links 4 to the identified, affected motor vehicles 3, more precisely to their communication devices 6, which forward the control information to the control device 8, specifically the control unit 10.

Claims

[1] Computer-implemented method for controlling the operation of vehicle systems (7) of a fleet (2) of motor vehicles (3), wherein the vehicle systems (7) each provide at least one technical function in the respective motor vehicles (3) and comprise a control unit (8), wherein each motor vehicle (3) of the fleet (2) further comprises a communication device (6) for communication with a motor vehicle-external server (5), wherein the method comprises the following steps - Receipt or determination of a request information describing a restriction and / or deactivation to be carried out by the server (5) for at least one of the at least one functions of the vehicle system (7) for at least one motor vehicle (3) and / or in a region, - Evaluation of the request information to identify at least one motor vehicle (3) of the fleet (2) affected by the request information by the server (5), - Sending tax information relating to the restriction and / or deactivation from the server (5) to the at least one identified affected motor vehicle (3), - Restriction and / or deactivation of at least one of the at least one functions according to the tax information by means of the control device (8), characterized by , that the restriction concerns an adjustment of at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function. [2] Method according to claim 1, characterized by that the communication from the server (5) to the motor vehicles (3) takes place at least partially via the Internet and / or via a mobile network. [3] Method according to claim 1 or 2, characterized by that the tax information is encrypted and / or transmitted after an authentication process. [4] Method according to any of the preceding claims, characterized by , that in the case of a restriction and / or deactivation that is limited in time and / or location, the request information is determined or provided in such a way that it additionally includes time information describing a temporal validity of the restriction and / or deactivation, and / or area information describing a spatial validity of the restriction and / or activation, wherein the control information for the at least one identified, affected motor vehicle (3) is comprehensively determined, and the control unit (8) of the motor vehicle (3) restricts and / or deactivates at least one of the at least one function only for the temporal and / or spatial validity based on the control information. [5] Method according to any of the preceding claims, characterized by, that driving environments in which the respective function may be used are restricted and / or the parameter value relates to a speed and / or a longitudinal acceleration and / or a lateral acceleration and / or a steering angle for a driving intervention as a measure, in particular a reduction of the maximum parameter value takes place. [6] Method according to any of the preceding claims, characterized by , that the request information is automatically determined by the server (5) using an analysis function, depending on a location-resolved state information describing a driving environment state, in particular state information relating to traffic flow and / or an accident and / or a construction site. [7] Method according to any of the preceding claims, characterized by, that the requirement information is determined specifically for a particular version of at least one of the at least one function and / or a particular model of affected motor vehicles (3) and / or for an affected region from a user input. [8] Method according to any of the preceding claims, characterized by , that, for the description of the motor vehicles (3) concerned within the fleet (2), the request information shall include at least one vehicle identification number and / or a range of vehicle identification numbers. [9] Method according to any of the preceding claims, characterized by , that the request information relates to a single motor vehicle (3). [10] Method according to any of the preceding claims, characterized by, that the control device (8) communicates the restriction and / or deactivation to at least one occupant of the motor vehicle (3), in particular a driver, by controlling an output device (9). [11] Method according to any of the preceding claims, characterized by that at least one function is at least a partially autonomous driving function designed for at least partially automatic longitudinal and / or lateral guidance. [12] Motor vehicle (3) comprising a vehicle system (7) which provides at least one technical function in the motor vehicle (3) and includes a control unit (8) and a communication device (6) for communication with a server (5) external to the motor vehicle, wherein the control unit (8) is configured to restrict and / or deactivate at least one of the at least one function according to control information received from the server (5), characterized by, that the restriction concerns an adjustment of at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function. [13] Communication system (1) comprising a fleet (2) of motor vehicles (3), each of which comprises a vehicle system (7) providing a technical function in the respective motor vehicles (3) and comprising a control unit (8) and a communication device (6) for communication with a motor vehicle-external server (5), and the server (5), wherein the server (5) comprises: - a request unit (12) for receiving and / or determining request information that describes a restriction and / or deactivation to be carried out at least one of the at least one function of the vehicle system (7) for at least one motor vehicle (3) and / or in a region, - an evaluation unit (13) for evaluating the request information to identify at least one motor vehicle (3) of the fleet (2) affected by the request information, and - a transmission unit (14) for transmitting control information relating to the restriction and / or deactivation from the server (5) to the at least one identified affected motor vehicle (3), and the control device (8): - a control unit (10) for restricting and / or deactivating at least one of the at least one functions according to the control information characterized by , that the restriction concerns an adjustment of at least one system boundary of the respective function and / or a permissible parameter value for at least one action triggered by the function.

Images