System and method for protecting at least one on-board plug-in module from theft

Abstract

The invention relates to a computer-implemented method for protecting at least one on-board plug-in module (1a, 1b, 1c, 1d, 1e, 1f) from theft, wherein the non-radio module (1a-1f) functions in a wired manner when it is plugged into a connector socket (2a, 2b, 2c) of a vehicle (3).The procedure comprises the following steps: a) Detection (S1, S1') of the module (1a-1f) by a vehicle computer (3b) of the vehicle (3) when the module (1a-1f) is inserted into the connector (2a-2c), b) Authentication (S2, S2') of the module (1a-1f) by the vehicle computer (3b) and establishment of a data connection to the module, c) Sending (S3, S3') by the vehicle computer (3b) a unique module identifier (1a', 1b', 1c') assigned to the module (1a-1f) and a unique user identifier (4a') assigned to a user (4) of the module (1a-1f) to a server (7) connected to the vehicle computer (3b), d) Requesting (S3) by the vehicle computer a pairing status of the unique module identifier (1a'-1c') and the unique user identifier (4a') from the server (7) which has a module mapping list (8) with at least one entry (8c', 8c'', 8c''', 8c. IV) includes, which assigns a listed unique module identifier (1a'-1c') to a listed unique user identifier (4a') that is paired with the listed unique module identifier (1a'-1c'), and e) if the pairing status is determined by the server (7) to be unpaired (S3b), so that the unique module identifier (1a'-1c') and the unique user identifier (4b) sent to the server (7) in step c) are not listed as paired, blocking (S5) the use by the vehicle computer (3b) of the module (1a-1f) plugged into the vehicle's connector (2a-2c) of the vehicle (3). Other aspects of the invention are a computer program product that causes a computer to execute the method, and a system for protecting the at least one on-board plug-in module (1a, 1b, 1c, 1e, 1f) from theft.

Description

[0001] The invention relates to a system and a method for protecting at least one on-board plug-in module from theft, wherein the wireless module functions in a wired manner when it is plugged into a connector socket of a vehicle.

[0002] A modularly adaptable platform is known, into which modules for geometric, crash-resistant, electrical, and digital integration can be plugged into a vehicle. However, these modules can easily be stolen during a car break-in.

[0003] Publication DE 10 2012 213 968 A1 discloses a computer-implemented method comprising determining whether an infotainment system has been activated. The method further comprises accessing a vehicle network containing at least one unique vehicle identifier. The method additionally comprises comparing the unique vehicle identifier with a stored vehicle identifier. The method further comprises permitting access to the infotainment system only if the unique vehicle identifier matches the stored vehicle identifier.

[0004] Publication DE 10 2019 110 055 A1 discloses a method for protecting a component of a first vehicle, in which an online account is first created on a backend for the first vehicle, wherein the component is registered in the online account as assigned to the first vehicle, wherein a reversible cross-exchange prevention is agreed upon via the online account and assigned to the component and stored in a retrievable manner on the online account, wherein the cross-exchange prevention assigned to the component is activated or deactivated.

[0005] It is therefore an object of the present invention to provide a computer-implemented method and system for protecting at least one onboard plug-in module from theft, avoiding the disadvantages of the prior art without hindering the use of the module by a legitimate user. It is also an object to provide the method and system in an effective, easy-to-implement, and cost-efficient manner. A further object is to provide the method in an automated manner, without any assistance from the legitimate user.

[0006] The problem is solved by the method according to claim 1, the computer program product according to claim 12, and the system according to claim 14. Further developments and advantageous embodiments are defined in the dependent claims.

[0007] The computer-implemented method for protecting at least one on-board plug-in module from theft, wherein the non-radio module functions in a wired manner when plugged into a vehicle's connector socket, comprises the following steps: a) Recognition of the module by the vehicle's computer when the module is plugged into the connector socket, b) Authentication of the module by the vehicle computer and establishment of a data connection to the module, c) Sending, by the vehicle computer, a unique module identifier assigned to the module and a unique user identifier assigned to a user of the module to a server connected to the vehicle computer, d) Request, by the vehicle computer, a pairing status of the unique module identifier and the unique user identifier from the server, which includes a module mapping list with at least one entry that maps a unique identifier of the listed module to a listed unique user identifier that is paired with the listed unique module identifier, and e) if the pairing status is determined by the server to be unpaired, so that the unique module identifier and the unique user identifier sent to the server in step c) are not listed as paired, blocking the use of the module plugged into the vehicle's connector socket by the vehicle computer.

[0008] The vehicle can be an electric vehicle, a hybrid vehicle, a vehicle with an internal combustion engine, a hydrogen engine, or another propulsion technology, such as a jet engine. The vehicle can be, for example, a car, a truck, a bicycle, a motorcycle, a boat, a ship, an aircraft, or any other type of mobile vehicle.

[0009] It is therefore proposed to implement at least one unique identifier on the module, which is paired with a unique user ID of a legitimate user. The unique identifier can be in the form of a string of characters or a sequence of numbers. Numbers and characters can be combined. The method according to the invention provides that a module can only be used if it is assigned to a user. The assignment can occur when the module is first plugged into the vehicle's connector socket (new state) and is then, for example, automatically assigned, or when it is plugged into the vehicle's connector socket and is already assigned to a user. If a module is assigned to a user, it will not function for another user who is not assigned.Potential thieves who know what they are looking for are thus prevented from stealing modules that are unusable for a user not assigned to that module. Since the steps of the process are executed by the vehicle's computer and the server, the module merely provides its identity, making the process accessible to a wide variety of modules.

[0010] The interface of the connector is capable of establishing a data connection to the vehicle, specifically to the vehicle's computer. Optionally, the module can be powered via the connector. If powered, a power line can be used as a data line. The connector can be in the form of a cigarette lighter socket or another type, such as a USB (Universal Serial Bus) or LAN (Local Area Network) interface. Communication between the module and the vehicle's computer can be established via the plug / socket connection, allowing the module to be wireless, which further expands the range of modules suitable for this application. For the authorized user, this method does not impose any restrictions on use.The process is effective, easy to implement and cost-effective, and can be automated without any intervention from the legitimate user.

[0011] Advantageously, at least one entry can also include a theft status for the unique identifier of the listed module, and the procedure can further include the following step: f) If the server determines that the module plugged into the vehicle's connector is stolen, it will transmit a "found" status message to a communication device associated with the user whose listed unique user ID matches the unique module ID sent to the server in step c). This allows a user to report their module as stolen. If the vehicle computer reports a mismatched unique module / user ID, it can query the server for the "stolen" status of the module. If the module has a "stolen" status, the legitimate user will be notified that the module has been found.

[0012] It is advantageous if the server further comprises at least one user profile, which includes a unique user profile identifier, a unique vehicle profile identifier that is paired with the unique user profile identifier, and at least one unique module profile identifier that is paired with the unique user profile identifier. In this way, the unique module identifier can be linked to a user's vehicle.

[0013] The unique vehicle profile identifier can then be used by the server to identify a vehicle belonging to the user to whom the listed unique user identifier is assigned, and in step f) the found status message indicating that the stolen module has been found can be transmitted by the server to the vehicle of the user to whom the listed unique user identifier is assigned, whereby the communication device may be temporarily connected to the vehicle or permanently installed in the vehicle.

[0014] In an advantageous embodiment of the invention, in step c) a unique vehicle identifier, which is assigned to the vehicle in whose connection socket the module is plugged, can be sent to the server along with the unique module identifier and the unique user identifier, and in step f) the found status message, that the stolen module has been found, can be transmitted by the server to the user to whom the listed unique user identifier is assigned, along with a geolocation of the vehicle in whose connection socket the module is plugged, wherein the geolocation can be determined by the server using the unique vehicle identifier sent to the server in step c).In this way, the legitimate user is informed that the module has been found if the module is listed as "stolen", and the geolocation of the vehicle with the inserted module is sent to the user so that he knows where his stolen module is.

[0015] The vehicle's computer can receive geolocation data from a tracking device in the vehicle, into whose connection socket the module is plugged—for example, a GPS signal acquisition device that is either temporarily connected to the vehicle or permanently installed—and transmit it to the server. This process can be fully automated, so a potential thief might not even notice it. Since they are not alerted to the transmission of their vehicle's geolocation data from the vehicle's computer to the server, they cannot take any countermeasures to delay or block the transmission.

[0016] Advantageously, a request message to unpair the module in the module mapping list is transmitted by the server to the communication device associated with the user whose paired unique module identifier matches the unique module identifier sent to the server in step c). This request message is generated between the listed unique module identifier of the stolen module and the listed unique user identifier assigned to it as paired. For example, it can be displayed as a user interface for unpairing the module. This allows the module to be listed as unpaired in the module mapping list, rendering it unusable even if the unique module identifier and the paired unique user identifier are known.

[0017] If the module mapping list shows the stolen module's unique module identifier and its associated unique user identifier as unpaired, a unpairing request is sent from the server to the vehicle in whose connector the module is plugged. The vehicle's computer then unpairs the module, for example, by resetting it. This step can be performed automatically without user or third-party intervention.

[0018] It is advantageous that, if the module mapping list shows the listed unique module identifier of the unpaired module as not paired with a user of the module, the server transmits a pairing request message to an assigned input device associated with the user of the unpaired module, e.g., in the form of a pairing user interface launched in the unpaired module or in a communication device temporarily connected to the vehicle or permanently installed in the vehicle into whose connector the module is plugged, provided that the unique vehicle identifier assigned to the vehicle into whose connector the module is plugged and the unique user identifier assigned to the user of the module are listed as paired in the user profile.In this way, a stolen and recovered module can be reused by the user according to their user profile.

[0019] If the server determines the theft status of the module plugged into the vehicle's connector as not stolen, it is advantageous for the server to send a re-pairing prompt to the communication device associated with the user to whom the listed unique user ID is assigned, whose paired listed unique module ID matches the unique module ID sent to the server in step c). This prompt could be, for example, in the form of a re-pairing user interface initiated and displayed by the communication device. In this way, the pairing status determined by the server to be unpaired, such that the unique module ID and the unique user ID sent to the server in step c) are listed as unpaired, can be easily corrected to be paired.

[0020] The onboard plug-in module, or at least one of the onboard plug-in modules, is advantageously provided in the form of a display, a camera, a loudspeaker, a charger, an electronic control unit (ECU), a fragrance dispenser, a physical user interface control, a lighting device, or a heating / cooling device. In this way, a wide variety of modules can benefit from the inventive method for protecting the onboard plug-in module from theft.

[0021] Another aspect of the invention is a computer program product comprising instructions that, when the above-mentioned method is executed by a computer, cause the computer to execute the method, wherein the computer is preferably a distributed computer system, part of which resides in a cloud computing system. The computer program product can be embodied as a computer-readable medium on which the computer program product is stored. The computer program product can be distributed between the vehicle computer and the server. Alternatively, the computer program product can be distributed between the module, the vehicle computer, and the server.

[0022] The invention further relates to a system for protecting at least one on-board plug-in module from theft, wherein the wireless module, when plugged into a vehicle's connector socket, functions in a wired manner, particularly for carrying out the method described above. The system comprises the following: - a vehicle computer of the vehicle, wherein the vehicle computer is configured to recognize the module when the module is inserted into the connector socket, to authenticate the module and to establish a data connection to the module, and - a server connected to the vehicle computer, wherein the server is configured to receive from the vehicle computer a unique module identifier assigned to the module and a unique user identifier assigned to a user of the module, wherein - the vehicle computer is further equipped to request a pairing status of the unique module identifier and the unique user identifier from the server, wherein - the server is further configured to include a module mapping list with at least one entry that maps a listed unique module identifier to a listed unique user identifier that is paired with the listed unique module identifier, wherein - the system is designed in such a way that if the pairing status is determined by the server to be unpaired, so that the unique module identifier and the unique user identifier sent to the server are not listed as paired, the vehicle computer will be blocked from using the module plugged into the vehicle's connector socket.

[0023] The system according to the invention exhibits the same advantages and effects as those mentioned in connection with the method according to the invention. The vehicle computer can be located in the vehicle, e.g., in its ECU. The server can be a backend server.

[0024] The server can further be configured such that the at least one entry also includes a theft status for the listed unique module identifier, wherein the system is further configured such that, together with the unique module identifier and the unique user identifier, a unique vehicle identifier assigned to the vehicle in whose connection socket the module is plugged is sent to the server, and if the server determines that the theft status of the module plugged into the vehicle's connection socket is listed as stolen, a found status message indicating that the stolen module has been found, together with a geolocation of the vehicle in whose connection socket the module is plugged, wherein the geolocation is determined by the server using the unique vehicle identifier, is transmitted by the server to a communication device assigned to the user.The listed unique user ID is assigned to the module whose paired listed unique module ID matches the unique module ID sent to the server. In this way, the user is not only informed that their module has been stolen, but also where they can find it. This function can be executed automatically, so that a potential thief cannot prevent the legitimate user from recovering the stolen module.

[0025] Further aspects, features and advantages of the invention will become apparent from the following description of exemplary embodiments alone or in conjunction with the accompanying figures. Fig. Figure 1a shows several examples of modules that function as wired, non-radio modules when plugged into a vehicle's connection socket. Fig. 1b shows several of the in Fig. 1. Modules shown, which are plugged into the vehicle's connection sockets for operation, Fig. 2 is a schematic diagram of a system for protecting at least one of the in Fig. 1 shown on-board plug-in modules and the modules that are plugged into the vehicle's connection sockets in Fig. 2 are inserted, in case of theft according to a first embodiment of the invention. Fig. 3 is a schematic diagram of the steps of the procedure for protecting at least one of the in Fig. 1 shown on-board plug-in modules and the modules that are plugged into the vehicle's connection sockets in Fig. 2 are inserted, in case of theft according to a second embodiment of the invention.

[0026] Exemplary embodiments of the invention are described in more detail below.

[0027] Fig. Figure 1a shows several examples of modules 1a, 1b, 1c, 1d, 1e, and 1f, which function as wired, non-radio modules when plugged into a vehicle's connector 2a. The onboard plug-in module can be a display 1a, a speaker 1b, a camera 1c, a charger 1d (e.g., an inductive charger), a hub 1e for connecting one or more additional devices (e.g., a hub with USB-C interfaces), or a pluggable module 1f for providing a proprietary interface (e.g., for attaching a smartphone or laptop). Other pluggable, non-radio modules could include an electronic control unit (ECU), an air freshener, a physical user interface control, a lighting device, or a heating / cooling unit. Each of the modules 1a to 1f includes a plug that can be inserted into a connection socket 2a of the vehicle.The connector can be shaped like a cigarette lighter socket or another type, such as a USB (Universal Serial Bus) or LAN (Local Area Network) interface. The connector's interface is capable of establishing a data connection to the vehicle, specifically to the vehicle's computer. Optionally, the module can be powered via the connector. If powered, a power line can be used as a data line.

[0028] Fig. 2 shows several of the in Fig. The modules 1a, 1c, 1d, 1e shown in Figure 1 are plugged into connection sockets on the dashboard 3a of a vehicle 3 for operation. The modules 1a, 1c, 1d, 1e can be used together and at least partially simultaneously. Each of the modules 1a to 1f can be attached not only to connection sockets on the dashboard 3a, but also, or alternatively, to connection sockets on a side, ceiling, or rear of the vehicle 3.

[0029] Fig. 2 is a schematic diagram of a system for protecting at least one of the in Fig. 1 shown on-board plug-in modules 1a to 1f and the modules which are in connection sockets 1a, 1c, 1d, 1e of the vehicle 3 in Fig. 2 are inserted, before theft according to a first embodiment of the invention. Each module 1a, 1b, 1c comprises a unique module identifier 1a', 1b', 1c'. The unique identifier can be in the form of a string of characters or a sequence of numbers. Numbers and characters can be combined. In the embodiment shown, the unique identifier has the form "UID" for "Unique Identifier", followed by a space and then by an uppercase letter A to M. The space can be omitted, and the expression "UID", which can be omitted, can be followed by several characters or numbers.

[0030] Modules 1a and 1b are plugged into connectors 2a and 2b, respectively, while module 1c is located outside the vehicle 3 for external use and / or for use inside the vehicle 3 when plugged into the unused connector 2c. Each of the connectors 2a to 2c can be in the form of a plug for receiving a module with a pluggable socket. The connectors 2a to 2c are connected to each other and to a vehicle computer 3b, which includes a unique vehicle identifier 3b'. The vehicle computer 3b can be in the form of one or more electronic control units (ECUs). The connectors 2a to 2c and the vehicle computer 3b are connected via a network 3c. The network 3c can be a bus network. A bus network is a network topology in which nodes 2a, 2b, 2c, 3b are directly connected via a common half-duplex connection, a so-called bus.Other types of networks are possible. The vehicle computer 3b is connected to the vehicle antenna 3e and can establish a data connection to a server 7 via the server antenna 7a, where the server 7 can be an OEM server (OEM: Original Equipment Manufacturer). Furthermore, a geolocation device 3d in the form of a GPS (GPS: Global Positioning System) sensor is connected to the vehicle computer 3d. Other forms of geolocation devices, such as GLONASS (Russian Global Navigation Satellite System) or GALILEO (European Global Navigation Satellite System), are also possible. A user 4 uses a communication device 4a, which includes a unique user identifier 4a' and a user antenna 4b, capable of establishing a data connection to the vehicle antenna 3e of the vehicle computer 3b.

[0031] Server 7 includes a module mapping list 8, which lists modules, e.g., UID A to UID M, such as displays, speakers, fragrance dispensers, and the like, in a first column 8a. Each module is listed in a second column 8b, which indicates a paired user (e.g., UID 1, UID 2, UID 3) or no paired user (e.g., "None"). A third column 8c of the module mapping list 8 is a theft status for each module in the first column, indicating whether the respective module has been stolen (e.g., by the entry "stolen") or not stolen (e.g., by the entry "OK"). For example, in the first row 8c' of the module mapping list 8, a display module with the unique module identifier UID A is paired with a user with the unique user identifier UID 1 and is not stolen.A second line, 8c'', of the module assignment list 8 lists a speaker module with the unique module identifier UID B, which is also paired with the user with the unique user identifier UID 1 and is listed as not stolen. In the third line, 8c''', of the module assignment list 8, a charger module with the unique module identification UID C is not paired with any user and is listed as not stolen. In the eighth line, 8c. IV In module assignment list 8, another display module with the unique module identifier UID H is paired with a user with the unique user identifier UID 2 and listed as stolen.

[0032] Server 7 also includes several user profiles 5a, 5b, 5c, and 5d. User profile 5a contains the unique user identifier 4a', e.g., in the form of "UID 1" or "1," along with the paired unique vehicle identifier 3b', e.g., in the form of "UID X." Furthermore, user profile 5a includes a paired module list that enumerates modules paired with the user with the unique user identifier UID 1. For example, the display module with the unique module identifier 1a' from "UID A" and the speaker module with the unique module identifier 1b' from "UID B" are listed as paired with the user to whom the unique user identifier "UID 1" has been assigned. Compared to the module assignment list 8, the user profile provides the additional information of which vehicle each module is paired with and which vehicle is assigned to which user.If this information is included in the module assignment list 8, user profiles 5a to 5d can be omitted.

[0033] Server 7 is therefore configured so that it contains at least one entry 8c' to 8c IV Furthermore, the system includes a theft status for the listed unique module identifier 1a' to 1c' in column 8c. The system is also configured such that, along with the unique module identifier 1a' to 1c' and the unique user identifier 4a', a unique vehicle identifier 3b', assigned to vehicle 3, in whose connector 2a to 2c the module 1a to 1f is plugged, is sent to server 7, and, if the theft status of the module 1a to 1f plugged into connector 2a to 2c of vehicle 3 is determined as stolen by server 7 (see line 8c). IVfor the display module of the unique module identifier "UID H"), for a found status message indicating that the stolen module has been found, accompanied by a geolocation of the vehicle 3, in whose connection socket 2a to 2c the module is plugged. The geolocation, which is determined by the server 7 using the unique vehicle identifier 3b', is transmitted by the server 7 to the communication device 4a, which is assigned to user 4, to whom the listed unique user identifier 4a' is assigned, whose paired listed unique module identifier matches the unique module identifier sent to the server.

[0034] Fig. 3 is a schematic diagram of the steps of the procedure for protecting at least one of the in Fig. 1 shown on-board plug-in modules 1a to 1e and modules 1a, 1c, 1d, 1e, which are in connection sockets 2a to 2c of the vehicle 3 in Fig.2 are inserted, before theft according to a second embodiment of the invention. If, in step S1, the vehicle computer 3b detects that a paired module 1a to 1e with a unique module identifier 1a' to 1e' is inserted into one of the connection sockets 2a to 2c, the module is authenticated by the vehicle computer 3 via the unique module identifier, and a data connection is established between the module and the vehicle computer, in step S2. The unique module identifier 1a' to 1e' is sent to the server 7 together with a unique user identifier 4a', and the server 7 is queried by the vehicle computer 3b for a pairing status, in step S3. If the pairing status is positive, i.e., h, if the unique module identifier 1a' to 1e' matches the unique user identifier 4a' in step S3a, the use of modules 1a to 1e for user 4 is permitted by the vehicle computer in step S4.If the pairing status is negative, i.e., the unique module identifier 1a' to 1e' does not match the unique user identifier 4a', in step S3b, the vehicle computer 3 blocks the use of module 1a to 1e for user 4. A "MATCH Failed" message is sent to server 7, and server 7 is queried for a stolen status, which is listed in column 8c of the module mapping list 8, in step S5.

[0035] If the module's unique identifier does not match the user's unique identifier in step S3b, server 7 can, after step S5 has been executed, send information back to vehicle computer 3 in step S5a indicating that the "stolen" status means that module 1a to 1e has not been stolen. In this case, a user interface can be launched for user 4, who is listed in the module mapping list 8 for the module for which the "stolen" status was requested by vehicle computer 3 and / or server 7, in order to re-pair module 1a to 1e in step S6.

[0036] If the module's unique identifier does not match the user's unique identifier in step S3b, server 7 can, after executing step S5, send information back to the vehicle computer 3 in step S5b indicating that the "stolen" status means that module 1a to 1e has been stolen. In this case, server 7 notifies user 4, listed in module mapping list 8, in step S7, that the stolen module 1a to 1e has been found for the module for which the "stolen" status was requested. Along with the "found" status notification, geolocation data can be sent to listed user 4. Server 7 then gives user 4 the option, in step S8, to remove the pairing of modules 1a to 1e in module mapping list 8 and / or user profile 5a.Once it is listed as unpaired in the module assignment list 8 and / or in the user profile 5a, the server sends a unpairing request to the vehicle computer 3b in step S9, and the module is subsequently reset and unpaired by the vehicle computer 3b in step S10.

[0037] If, in step S1', the vehicle computer 3b detects that an unpaired module 1a to 1e is plugged into a connector 2a to 2c, in step S2' the vehicle computer 3b authenticates the module and establishes a data connection to the module. The unique module identifier 1a' to 1e' is sent to server 7 along with a unique user identifier 4a', and in step S3', server 7 requests that the vehicle computer 3b pair the modules 1a to 1e with user 4. Once the pairing is complete, i.e., the unique module identifier 1a' to 1e' matches the unique user identifier 4a', the vehicle computer 3b authorizes the use of the modules 1a to 1e for user 4 in step S4.

[0038] A technical feature or features disclosed in relation to one or more embodiments previously disclosed herein may also be present in another embodiment, unless it is specified that it / they should not be present, or it is technically impossible for it / they to be present.

Claims

[1] Computer-implemented method for protecting at least one on-board plug-in module (1a, 1b, 1c, 1d, 1e, 1f) from theft, wherein the non-radio module (1a-1f) functions in a wired manner when plugged into a connector (2a, 2b, 2c) of a vehicle (3), the method comprising the following steps: a) Detection (S1, S1') of the module (1a-1f) by a vehicle computer (3b) of the vehicle (3) when the module (1a-1f) is plugged into the connector socket (2a-2c), b) Authentication (S2, S2') of the module (1a-1f) by the vehicle computer (3b) and establishment of a data connection to the module, c) Sending (S3, S3') by the vehicle computer (3b) a unique module identifier (1a', 1b', 1c') assigned to the module (1a-1f) and a unique user identifier (4a') assigned to a user (4) of the module (1a-1f) to a server (7) connected to the vehicle computer (3b), d) Request (S3), by the vehicle computer, a pairing status of the unique module identifier (1a'-1c') and the unique user identifier (4a') from the server (7) which has a module mapping list (8) with at least one entry (8c', 8c'', 8c''', 8c IV ) includes, which assigns a listed unique module identifier (1a'-1c') to a listed unique user identifier (4a') that is paired with the listed unique module identifier (1a'-1c'), and e) if the pairing status is determined by the server (7) to be unpaired (S3b), so that the unique module identifier (1a'-1c') and the unique user identifier (4b) sent to the server (7) in step c) are not listed as paired, blocking (S5) the use of the module (1a-1f) plugged into the connector (2a-2c) of the vehicle (3) by the vehicle computer (3b). [2] Computer-implemented method according to claim 1, wherein the at least one entry (8c'-8c IV) furthermore includes a theft status for the listed unique module identifier (1a'-1c'), and the procedure further includes the following step: f) if the theft status of the module (1a-1f) plugged into the connection socket (2a-2c) of the vehicle (3) is determined by the server (7) to be stolen, a found status message that the stolen module has been found is transmitted by the server (7) to a communication device (4a) (S7) that is assigned to the user (4) to whom the listed unique user identifier (1a'-1c') is assigned, the paired listed unique module identifier (1a'-1c') of which matches the unique module identifier (1a'-1c') sent to the server (7) in step c). [3] Computer-implemented method according to claim 2, wherein the server (7) further comprises at least one user profile (5a, 5b, 5c, 5d) comprising a unique user profile identifier (4a'), a unique vehicle profile identifier (3b') paired with the unique user profile identifier (4a'), and at least one unique module profile identifier (1a', 1b') paired with the unique user profile identifier (4a'). [4] Computer-implemented method according to claim 3, wherein the unique vehicle profile identifier (4a') is used by the server (7) to identify a vehicle (3) of the user (4) to whom the listed unique user identifier (4a') is assigned, and in step f) the found status message that the stolen module has been found is transmitted by the server (7) to the vehicle (3) of the user (4) to whom the listed unique user identifier (4a') is assigned, wherein the communication device (4a) is temporarily connected to the vehicle (3) or permanently installed in the vehicle (3). [5] Computer-implemented method according to any one of claims 2 to 4, wherein in step c) a unique vehicle identifier (3b') assigned to the vehicle (3) in whose connection socket (2a-2c) the module (1a-1f) is plugged is transmitted to the server (7) together with the unique module identifier (1a'-1c') and the unique user identifier (4a'), and in step f) the found status message that the stolen module has been found is transmitted by the server (7) to the user (4) to whom the listed unique user identifier (4a') is assigned, together with a geolocation of the vehicle (3) in whose connection socket (2a-2c) the module (1a-1f) is plugged, wherein the geolocation is determined by the server (7) using the unique vehicle identifier (3b') sent to the server (7) in step c). [6] Computer-implemented method according to claim 5, wherein the geolocation is received by the vehicle computer (3b) from a localization device (3d) in the vehicle (3), into whose connection socket (2a-2c) the module (1a-1f) is plugged, for example a GPS signal acquisition device, which is temporarily connected to the vehicle (3) or permanently installed in the vehicle (3), and is transmitted by the vehicle computer (3b) to the server (7). [7] Computer-implemented method according to any one of claims 2 to 6, wherein a request message to unpair the module in the module assignment list (8) of the listed unique module identifier of the stolen module and the listed unique user identifier (4a') assigned to it as paired is transmitted by the server (7) to the communication device (4a) assigned to the user (4) to whom the listed unique user identifier (4a') is assigned, whose paired listed unique module identifier matches the unique module identifier sent to the server (7) in step c), e.g. in the form of a user interface started in and displayed by the communication device (4a) for unpairing. [8] Computer-implemented method according to claim 7, wherein, if the listed unique module identifier of the stolen module and the listed unique user identifier (4a') assigned to it are not listed as paired in the module mapping list (8), a unpairing request is transmitted by the server (7) to the vehicle (3) in whose connector (2a-2c) the module (1a-1f) is plugged, and the module (1a-1f) plugged into the connector (2a-2c) of the vehicle (3) is uncoupled (S10) by the vehicle computer (3b), e.g. by resetting the module (1a-1f). [9] Computer-implemented method according to any one of claims 5 to 8, insofar as it relates to claim 3, wherein, if the listed unique module identifier (1c') of the unpaired module (1c) is listed as not paired with a user (4) of the module in the module assignment list (8), a pairing request message is transmitted by the server (7) to an input device that is assigned to the user (4) of the unpaired module (1c), e.g.in the form of a user interface for pairing, which is started in the unpaired module (1c) or in a communication device that is temporarily connected to the vehicle (3) or permanently installed in the vehicle (3) into whose connection socket (2a-2c) the module is plugged, provided that the unique vehicle identifier (3b') assigned to the vehicle (3) into whose connection socket (2a-2c) the module (1c) is plugged, and the unique user identifier (4a') assigned to the user (4) of the module (1c) are listed as paired in the user profile (5a-5d). [10] Computer-implemented method according to any one of claims 2 to 9, wherein, when the server (7) determines (S5a) that the theft status of the module (1a-1f) plugged into the connector (2a-2c) of the vehicle (3) is listed as not stolen, the server (7) transmits a re-pairing request message to the communication device (4a) associated with the user (4) to whom the listed unique user identifier (4a') is assigned, the paired listed unique module identifier (1a', 1b') of which matches the unique module identifier (1a', 1b') sent to the server (7) in step c), e.g. in the form of a re-pairing user interface that is started in and displayed by the communication device (4a). [11] Computer-implemented method according to one of the preceding claims, wherein the onboard plug-in module (1a-1f) or at least one of several onboard plug-in modules (1a-1f) is provided in the form of a display, a camera, a loudspeaker, a charger, an electronic control unit (ECU), a fragrance dispenser, a physical user interface control, a lighting device or a heating / cooling device. [12] Computer program product comprising instructions which, when the method according to any one of claims 1 to 11 is executed by a computer, cause the computer to execute the method according to any one of claims 1 to 11, wherein the computer is preferably a distributed computer system, part of which is located in a cloud computing system. [13] Computer-readable medium on which the computer program product according to the preceding claim is stored. [14] System for protecting at least one on-board plug-in module (1a, 1b, 1c, 1e, 1f) from theft, wherein the non-radio module (1a-1f) functions in a wired manner when plugged into a connector socket (2a-2c) of a vehicle (3), in particular for carrying out the method according to any one of claims 1 to 11, wherein the system comprises: - a vehicle computer (3b) of the vehicle (3), wherein the vehicle computer (3b) is configured to recognize the module (1a-1f) when the module (1a-1f) is inserted into the connector (2a-2f), to authenticate the module (1a-1f) and to establish a data connection to the module (1a-1f), and - a server (7) connected to the vehicle computer (3b), wherein the server (7) is configured to receive from the vehicle computer (3b) a unique module identifier (1a', 1b', 1c') assigned to the module (1a-1f) and a unique user identifier (4a') assigned to a user (4) of the module (1a-1f), wherein - the vehicle computer (3b) is further configured to request a pairing status of the unique module identifier (1a'-1c') and the unique user identifier (4a') from the server (7), wherein - the server (7) is further configured such that it has a module mapping list (8) with at least one entry (8c', 8c'', 8c''', 8c IV ) includes, which assigns a listed unique module identifier (1a'-1c') to a listed unique user identifier (4a') that is paired with the listed unique module identifier (1a'-1c'), wherein - the system is designed such that if the pairing status is determined by the server (7) to be unpaired, so that the unique module identifier (1a'-1c') and the unique user identifier (4a') sent to the server (7) are not listed as paired, the vehicle computer (3b) will be prevented from using the module (1a-1f) plugged into the connector (2a-2f) of the vehicle (3). [15] System according to claim 14, wherein the server (7) is further configured such that the at least one entry (8c'-8c IV) furthermore includes a theft status for the listed unique module identifier (1a'-1c'), wherein the system is further configured such that, together with the unique module identifier (1a'-1c') and the unique user identifier (4a'), a unique vehicle identifier (3b') assigned to the vehicle (3), into whose connector (2a-2c) the module (1a-1f) is plugged, is sent to the server (7), and when the server (7) determines that the theft status of the module (1a-1f) plugged into the connector (2a-2c) of the vehicle (3) is listed as stolen, a found status message indicating that the stolen module (1a-1f) has been found, together with a geolocation of the vehicle (3) into whose connector (2a-2c) the module (1a-1f) is plugged, wherein the geolocation is carried out by the server (7) using the unique Vehicle identification (3b') is determined and transmitted by the server (7) to a communication device (4a),which is assigned to the user (4) to whom the listed unique user identifier (4a') is assigned, whose paired listed unique module identifier matches the unique module identifier sent to the server (7).

Images