Computer-implemented method for controlling access to user data of a motor vehicle user

Abstract

The present invention relates to a computer-implemented method for controlling access to user data of a user of a motor vehicle, comprising the following steps: - Storing user data in a central data storage system, where the user data includes information about the user; - Receiving a request from a request entity (9) to output at least some of the user data; - Automatic verification of whether the request complies with rules, including user-defined rules and / or regulatory rules; and - Output of the portion of user data if the request meets the rules.

Description

[0001] The present invention relates to a computer-implemented method for controlling access to user data of a user of a motor vehicle according to claim 1.

[0002] With the increasing connectivity of digital devices, the protection of personal data has become a critical concern worldwide. The urgency of robust data management solutions is underscored by the European Union's Data Governance Act and AI Act. These regulations emphasize transparency, accountability, and user empowerment, motivating system designers to integrate stringent data and privacy regulations directly into their systems.

[0003] US 2004 / 0054918 A1 discloses a system architecture for exchanging third-party user data between two companies. Upon first logging into a data management system, the user is presented with an overview displaying current data access permissions, pending access requests, and recent access logs. The data management system acts as the central hub of the system architecture, where all data requests are processed using encryption methods. For example, user settings are stored, all data access activities are logged, and security protocols are implemented to protect data transactions. The data management system also utilizes a trust information broker to configure and provide information.

[0004] In contrast, the present invention aims to simplify the user's control over user data.

[0005] This problem is solved by a method according to claim 1 and by a system according to claim 10. Embodiments of the invention are specified in the dependent claims.

[0006] The process involves storing user data in a central data storage system. This data storage system could, for example, be located on a central server, either remotely from the user or from the vehicle. Alternatively, the data storage system could be integrated into the vehicle itself. The user data comprises information about the user.

[0007] A request is received from a request entity to output at least a portion of the user data, preferably to the request entity itself. The request entity could be, for example, another computer. It could be, for instance, a server located remotely from the central server, the vehicle, and the user. The request entity could also belong to a service provider from whom the user wishes to obtain a service. The request can thus be triggered, at least indirectly, by the user having requested or intending to request the service.

[0008] The system automatically checks whether the request meets the rules. In this context, "automatic" means that the user does not need to take any action to execute the respective process step. The automatic process step can therefore be carried out without any user interaction. The rules include user-defined rules and / or regulatory rules. Regulatory rules can be, for example, laws, regulations, and / or ordinances. These rules can be issued by a supranational organization, a union of states such as the European Union, or a state. Examples of regulatory rules are the European Union's Data Governance Act and the AI ​​Act.The result of the automated check can be that at least one of the rules is violated, that all rules are met, or that at least one of the rules is possibly violated. The last result can occur, for example, because rules, especially governmental rules, often require interpretation, and this can be difficult or even impossible for a computer algorithm.

[0009] The user data portion is then output if the request meets the rules. It is possible, in particular, that this portion is only output in this case. Preferably, the output of this portion can be triggered by the request fulfilling the rules. The output of this portion can occur automatically. However, it is also possible that the output of this portion is only performed after user confirmation. The user data portion can be output, in particular, to the request entity or to another computer defined in the request.

[0010] It is advantageous that the system automatically checks whether a request complies with rules, so that the user does not have to confirm or reject the release of the requested portion of their data with each request. By checking user-defined rules, the user can automatically allow certain requests while retaining full control over their data. Checking regulatory rules ensures that the release of the requested portion of the user data complies with the data protection regulations in force at the user's location and is therefore permissible. These regulations might, for example, pertain to the user's and / or vehicle's location, so the user's and / or vehicle's location is also taken into account when checking whether the request complies with the rules.

[0011] According to one embodiment of the invention, the user-defined rules can relate to the user's location, the time of day, and / or the trust level of the requesting entity. The trust level can, for example, be determined by an independent organization. For instance, the user can define the rules such that any part of the user data may always and everywhere be released to a requesting entity if the trust level is very high. Conversely, if the trust level is particularly low, the user can define the rules so that no part of the user data is ever released. Between these extremes, the user can define gradations for different trust levels, locations, and times of day in the rules.

[0012] According to one embodiment of the invention, a notification can be displayed to the user if the request does not comply with the rules. This notification can be displayed, for example, visually on a screen and / or audibly via a speaker. The notification can include an option for the user to authorize the release of a portion of their user data. This portion of the user data is then released if the user has granted authorization. In particular, it is possible for the release of this portion of the user data to be triggered by this authorization.

[0013] This embodiment is particularly advantageous because it gives the user the opportunity to approve the output of a portion of the user data, even if the request does not meet the rules. Thus, despite the automatic check, the user can individually decide on the output of that portion of the user data.

[0014] According to one embodiment of the invention, multiple requests can be received. These requests can be processed according to another embodiment of the invention. An analysis of the requests and the approvals received from the user is performed if a particular request does not comply with the rules. Based on the results of this analysis, the user is offered an adjustment to the user-defined rules. The analysis can be performed, for example, by an algorithm using machine learning or by artificial intelligence. The analysis can, for instance, identify patterns in the user's approval behavior, which can then be automatically taken into account during future checks by adjusting the user-defined rules.Preferably, the user-defined rules will be adjusted if the user has given their consent after the adjustment has been suggested to them.

[0015] According to one embodiment of the invention, the portion of the user data can be automatically output if the request meets the rules.

[0016] According to one embodiment of the invention, information about the request and information regarding a potential violation of regulatory rules can be provided to the user if the review reveals that regulatory rules may be violated. It is possible that, in this case, the user data is only released after confirmation of its release. This confirmation can preferably be received by the user. In this case, the user can, for example, decide to release the data even though a violation of regulatory rules may have occurred.

[0017] According to one embodiment of the invention, the request can be related to a real-world activity. This real-world activity could, for example, be the provision of a service. It could, for example, be the delivery or purchase of goods or services. It could, for example, be the delivery of food. It is possible that the real-world activity is only carried out if the user data is provided. This user data can then be used in carrying out the real-world activity.

[0018] According to one embodiment of the invention, the activity can only be performed if the user data is output. For example, if the actual activity is the delivery of goods, the user data could include the user's real address. If the goods are clothing or shoes, the user data could include the user's clothing or shoe size.

[0019] According to one embodiment of the invention, the user data can include the user's name, date of birth, physical address, and / or digital address. The digital address can, for example, be an email address.

[0020] The process can be carried out, for example, while the user is in the vehicle. In this case, the authorization(s) can be received from the user in spoken language. Speech recognition software can recognize the authorization(s) in spoken language. Other user input can also be received in this way in spoken language.

[0021] The system according to claim 10 comprises a digital data processing unit and a digital data storage device. Instructions are stored in the data storage device. The data processing unit is configured to execute the instructions. The instructions are configured to cause the data processing unit, upon execution of the instructions, to carry out a method according to an embodiment of the invention. The system can, in particular, be arranged in a motor vehicle.

[0022] Further features and advantages of the present invention will become clear from the following description of a preferred embodiment with reference to the accompanying figure. This figure shows Fig. 1 a schematic block diagram of a method according to an embodiment of the invention.

[0023] A server 1 located remotely from the user contains a data management service module 2, a module 3 for checking a request against user-defined rules, a module 4 for checking a request against government rules, and a trust information broker 5.

[0024] A request entity 9 sends a request to server 1 to retrieve at least some user data, which may be stored on server 1 or in a vehicle. The request may be sent, for example, as part of a service requested by the user, such as the delivery of goods. This portion of the user data may be necessary to provide the service.

[0025] The request is received by the Data Management Service Module 2. For this purpose, the Data Management Service Module 2 can, for example, implement various security protocols and, in particular, encryption.

[0026] Module 3 automatically checks, without user interaction, whether the request meets user-defined rules. Module 4 automatically checks, also without user interaction, whether the request meets regulatory rules. Both Module 3 and Module 4 can consider the trust level of the request entity during their checks. The trust level can be determined or queried by the trust information broker and made available to Modules 3 and 4.

[0027] If the request meets both the official and user-defined rules, the requested portion of the user data is automatically released. However, if the request fails to meet at least one rule, a message will be displayed via user interface 7 indicating that the request was rejected, if it was rejected, or that the user must approve the request before the data is released.

[0028] User input, such as permission to release a portion of user data, can be received, particularly in spoken human language. An artificial intelligence (AI), which can, for example, utilize a large-language model, can then make this information from the spoken human language available to server 1.

[0029] If multiple requests are received that are found to violate at least one user-defined rule, and if user approvals for these requests have been received or not received, the user's approval behavior can be analyzed by artificial intelligence. Based on this analysis, the user can be offered adjustments to the user-defined rules, which the user must approve before they are implemented.

[0030] The activities of server 1 are logged and displayed to the user as needed, so that the user can be informed about the requests and the output parts of the user data at any time.

[0031] When the user data is released, it is used to carry out a real activity, such as the delivery of goods or the purchase of goods or services. QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] US 2004 / 0054918 A1

[0003]

Claims

[1] Computer-implemented method for controlling access to user data of a user of a motor vehicle, comprising the following steps: - Storing user data in a central data storage system, where the user data includes information about the user; - Receiving a request from a request entity (9) to output at least some of the user data; - Automatic verification of whether the request complies with rules, including user-defined rules and / or regulatory rules; and - Output of the portion of user data if the request meets the rules. [2] Method according to claim 1, characterized by that the custom rules relate to a user's location, a time of day and / or a trust level of the request entity. [3] Method according to any one of the preceding claims, characterized by, that the user is given a notification regarding the request if the request does not meet the rules, the notification including an opportunity for the user to authorize the release of that part of the user data, and the release of that part of the user data if authorization to release that part of the user data has been received from the user. [4] Method according to the previous claim, characterized by , that multiple requests are received, an analysis of the requests and approvals is performed, and an adjustment of the user-defined rules is suggested to the user based on a result of the analysis. [5] Method according to any one of the preceding claims, characterized by , that the portion of user data is automatically output if the request meets the rules. [6] Method according to any one of the preceding claims, characterized by, that the user will be given information about the request and information about the possible violation of official rules if the review reveals that official rules may be violated, whereby the part of the user data will only be released after confirmation to release the part of the user data. [7] Method according to any of the preceding claims, characterized by that the request is related to a real activity, the real activity is only carried out if the portion of user data is output, and the user data is used in carrying out the real activity. [8] Method according to the previous claim, characterized by that the activity can only be carried out if the user data is output. [9] Method according to any one of the preceding claims, characterized bythat the user data includes a user's name, a user's date of birth, a user's real address and / or a user's digital address. [10] System comprising a digital data processing unit and a digital data storage unit, wherein instructions are stored in the data storage unit, wherein the data processing unit is configured to execute the instructions, wherein the instructions are configured to cause the data processing unit, when executing the instructions, to carry out a method according to one of the preceding claims.

Images