Method for operating a vehicle access authorization system for a vehicle and vehicle access authorization system for a vehicle

Abstract

Method for operating a vehicle access authorization system (2) for a vehicle (1) for verifying a user's access authorization to the vehicle (1), wherein the vehicle (1) is assigned a vehicle key size, wherein the vehicle access authorization system (2) is set up, suitable and intended to grant or deny the user access to the vehicle (1) depending on the vehicle key size, based on a communication signal transmitted to the vehicle (1) by the user within the framework of a secure communication connection between an end device of the user, in particular a mobile device, and the vehicle (1).According to the invention, the communication data to be exchanged via the secure communication link to grant access authorization between the user's, in particular mobile, terminal device and the vehicle are determined and / or generated and / or verified on the basis of access authorization data stored in and retrieved from at least one blockchain.

Description

[0001] The present invention relates to a method for operating a vehicle access authorization system for a vehicle, in particular a locking system and / or a drive start system for the vehicle, and a vehicle access authorization system for a vehicle.

[0002] Keyless locking systems for vehicles are known from the current state of technology. For example, keyless access systems for vehicles are known that allow a driver to unlock the vehicle without using a mechanical key and to start it, for example, by pressing a start button.

[0003] With current technology, the use of a smartphone as a key replacement is still known. This often involves NFC-based signal transmission (NFC stands for "Near-Field Communication"), which allows coded signals to be transmitted wirelessly.

[0004] German patent DE 10 2016 007 472 A1 discloses a method for registering multiple vehicle data in a blockchain and securing it against subsequent changes. Vehicle-related data such as mileage or location are recorded promptly and registered in a blockchain via an internet connection using a cryptographic hash function, while maintaining data privacy.

[0005] German patent DE 10 2016 215 914 A1 discloses a method for securing device usage information. This device usage information comprises usage data and device identification information, where the usage data includes mileage, odometer reading, operating hours, repair data, diagnostic data, wear data, or maintenance data. A hash value of the usage information is generated, and this hash value is incorporated into the transaction data.

[0006] German patent application DE 10 2017 204 538 A1 discloses a method for logging the status data of a vehicle in a blockchain. The blockchain comprises a program module with program instructions in each block. Executing these instructions generates an entry associated with the program module containing the status data. This status data can include the vehicle's mileage, error messages, results of predefined test protocols, and / or identifiers of vehicle components.

[0007] The present invention is based on the objective of overcoming the disadvantages known from the prior art and providing a method for operating a vehicle access authorization system for the vehicle that is as convenient and user-friendly as possible for a vehicle user, but equally safe.

[0008] The object of the invention is achieved by the subject matter of the independent claims. Advantageous embodiments and further developments of the invention are the subject matter of the dependent claims.

[0009] In an inventive method for operating a vehicle access authorization system for a vehicle to verify a user's access authorization to the vehicle, the vehicle is assigned a vehicle key size, in particular a unique and / or one-to-one vehicle key size. Preferably, the vehicle key size is a size assigned during the production of the vehicle, such as a vehicle identification number (also known by the abbreviation "VIN"), or a characteristic size thereof. Preferably, the assignment takes place during the production of the vehicle.

[0010] The vehicle access authorization system can be a locking system and / or a drive start system for the vehicle.

[0011] The locking system for the vehicle is suitable and intended to lock and / or unlock the vehicle at least partially (e.g., individual vehicle doors and / or trunk door) and preferably completely.

[0012] The vehicle's drive start system is suitable and intended to start a drive unit (such as the engine) of the vehicle.

[0013] The access authorization to be checked may be authorization to open and / or close (or to unlock and / or lock) the vehicle and / or to start the vehicle's drive system (engine).

[0014] Preferably, the vehicle access authorization system is a so-called "keyless" vehicle access authorization system, in which an access authorization process, such as a verification of an access authorization request initiated by a user and transmitted to the vehicle, takes place contactlessly and, in particular, without mechanical intervention of a (physical) key in a (physical) lock of the vehicle.

[0015] The vehicle access authorization system is designed, suitable, and intended to grant or deny the user access to the vehicle based on a communication signal transmitted by the user, via a (particularly secure) communication link between the user's device (especially a mobile device) and the vehicle, and especially via at least partial wireless communication. Access to the vehicle is understood to include, in particular, opening and / or starting a drive system of the vehicle.

[0016] The mobile device is preferably a mobile-enabled device belonging to the user, such as the user's smartphone (so-called mobile device key, digital key on the mobile phone).

[0017] The terminal device can also be a (mobile and / or portable) radio key.

[0018] Access to the vehicle includes, in particular, unlocking the vehicle and / or locking the vehicle and / or starting the vehicle's drive system.

[0019] According to the invention, the communication data to be exchanged (preferably exchanged) via the (in particular secure) communication link to grant access authorization between the user's (in particular mobile) terminal device and the vehicle are determined, generated, and / or verified based on access authorization data stored in and retrieved from at least one (preferably external) blockchain. The communication data to be exchanged can be communication data transmitted from the terminal device to the vehicle, communication data transmitted from the vehicle to the terminal device, and / or communication data transmitted reciprocally between the vehicle and the terminal device.

[0020] In other words, access to the vehicle is verified and / or granted based on blockchain data. This offers the advantage of highly secure verification of access authorization.

[0021] The communication data to be exchanged can be data transmitted from the end device, particularly a mobile device, to the vehicle (or to a communication device of the vehicle), which indicates or is characteristic of a request from the user's end device for access authorization. Preferably, the receipt of this communication data triggers a check by the vehicle on the user's (or the user's end device's) access authorization to the vehicle.

[0022] This can involve the determination and / or generation and / or verification of communication data based on data stored locally on the terminal device and / or the vehicle, which were determined and / or generated on the basis of access authorization data retrieved from the blockchain.

[0023] It is also conceivable that, in order to determine and / or generate and / or verify the communication data to be exchanged and / or already exchanged, especially in real time, access authorization data is retrieved from the blockchain (preferably by the vehicle).

[0024] It is also conceivable that the establishment of a secure communication connection between the terminal device and the vehicle, within which the communication data to be exchanged is exchanged, is based on connection establishment data that includes data retrieved from the blockchain and / or was determined based on this (for example, once).

[0025] Preferably, a value is determined and / or generated in the terminal device based on the access authorization data, by means of which the vehicle can verify the access authorization of the terminal device.

[0026] The (particularly secure) communication link between the user's (mobile) device and the vehicle is preferably a short-range or short-range communication link. For example, the range of the communication link could be less than 5 m, preferably less than 2 m, and most preferably less than 20 cm.

[0027] The communication link can be an RFID-based communication link.

[0028] In a further preferred method, the secure communication link is a near-field communication (NFC) connection and / or an ultra-wideband (UWB) communication link. For example, an NFC chip can be provided in the terminal device for this purpose. In particular, the use of an ultra-wideband communication link offers the advantage of measuring the time of flight of the transmitted signal. This allows for the advantageous implementation of theft protection.

[0029] The (especially secure) communication connection between the user's (mobile) device and the vehicle can alternatively or additionally be a Bluetooth and / or Wireless LAN connection.

[0030] A secure communication link is understood to mean, in particular, a cryptographically secured communication link.

[0031] Preferably, communication via the communication link is based on a public key infrastructure.

[0032] Preferably, the generation of a primary user key and / or the registration of the user's device with the vehicle is based on access authorization data contained in the blockchain record. The primary user key, in particular, functions as a master key. The user who possesses the primary user key is preferably able to share the key with other users or to enable other users to gain access to the vehicle. The blockchain, and especially the access authorization data, are generated at least partially during the production, completion, and / or initial sale of the vehicle.

[0033] Preferably, the main user key size is generated and / or stored in a protected storage area of ​​the end device.

[0034] The blockchain is stored in a decentralized manner, particularly on a network that is external (public or private) to the user's (mobile) device and to the vehicle.

[0035] In a preferred method, a user-specific key is generated and / or verified on the user's device, particularly a mobile device, based on access authorization data stored in and retrieved from a blockchain, preferably located outside the vehicle. For example, activation of a generated user key can be performed via the blockchain. It is also conceivable that the user key can be registered via the blockchain. This advantageously eliminates the need for activation of the user key by a (central) server, such as that of the device manufacturer. The communication data to be exchanged can preferably consist of data generated based on the user key.

[0036] Preferably, two user key sizes are generated on the user's device, particularly a mobile device. One user key size is a private key, and the other is a public key. Preferably, only the public key, and not the private key, is transmitted (during communication to grant access authorization). The communication data to be exchanged preferably consists of data generated based on the (public) user key size.

[0037] Preferably, a so-called "pairing password" is transmitted to the (main) user or the (main) user's device, in particular by a vehicle manufacturer (e.g., OEM), based on which the device and the vehicle can establish a cryptographically secured communication connection. Preferably, activation and / or registration of the user key size only takes place after a secure communication connection has been established.

[0038] Preferably, a device identification number and / or user identification number (as access authorization data) characteristic of the device and / or the user of the device is included in the blockchain. Preferably, this number is unique. Preferably, the device identification number and / or user identification number is stored in the device, particularly in a protected storage area of ​​the device. Preferably, the device identification number and / or user identification number is not the device's telephone number or a device number, so that the user's private data remains protected and, advantageously, the device is no longer identifiable, for example, after the key has been deleted.

[0039] In a further preferred method, the access authorization data consists of data characteristic of at least one certificate and / or certificate chain, by means of which vehicle key data characteristic of the vehicle key size and / or user key data characteristic of a user key size can be authenticated. The exchange of communication data between the user's terminal device and the vehicle is thus based on authentication of the vehicle key data and / or user key data by means of the certificate or certificate chain.

[0040] Preferably, the certificate or certificate chain is an (external) certificate and / or certificate chain generated by the vehicle manufacturer (OEM), based on a root CA certificate (of a vehicle manufacturer). For example, the certificate could be signed using a root certificate (of a vehicle manufacturer). The user key data, preferably generated during a pairing process, should be verifiable using the certificate or certificate chain. It is conceivable that a user key certificate was generated during the pairing process, which includes data based on the root certificate (especially that of the manufacturer). This offers the advantage that the user key certificate (as user key data) can be verified using the blockchain (and an external CA certificate stored therein).In this way, a user key size or user key data can be verified, activated and / or registered using the blockchain.

[0041] In a further preferred method, the access authorization data consists of data that is characteristic of whether access authorization can be granted to another user, and / or that is characteristic of the scope of access authorization. In particular, a (primary) user can share their digital key with another user. The access authorization of the other user (hereinafter also referred to as a friend) can depend, in particular, on this access authorization data. Thus, the communication data exchanged and / or to be exchanged between the other user's (friend's) device, especially a mobile device, and the vehicle can be verified based on the access authorization data.

[0042] Preferably, the (main) user's device sends an invitation notification to generate a so-called "friend key." This invitation notification can include a template for key creation. Because the main key (especially during the "pairing process" with the vehicle) contains an embedded manufacturer's (OEM) certificate, the certificate chain of the main key can be continued when creating the friend key or a friend key certificate (the user key data or user key size).

[0043] The (digital) friend key, or the user key data (or user key size) resulting from the sharing of the (primary) user key, can advantageously be validated by the vehicle and / or the blockchain. Validation of the user key data resulting from the sharing by the vehicle can preferably be performed by verifying the signature of the user key size (or the signature of the primary user, which is included in the user key data) transmitted from the user's (friend's) (mobile) device to the vehicle. The vehicle determines the user's public key data and the scope of access authorization from the user key data. This offers the advantage that key sharing is possible even if no communication connection to the vehicle can be established (for example, because the vehicle is parked in an underground garage).Preferably, the communication data to be exchanged, which is checked to grant access authorization, consists of the communication data first sent or to be sent by the friend (additional user) to the vehicle (which preferably includes a signature of the main user).

[0044] In addition, and preferably, online registration of the friend's key is possible, allowing the activation and registration of the user key data or the user key size (of the friend) based on the data stored in the blockchain (such as the certificates mentioned above). Such attestation data can be transmitted to the vehicle, preferably during key registration. The attestation data can include the public key of the shared key (of the friend), data characteristic of the access authorization scope, and a signature of the primary user. The attestation data can thus preferably be determined based on access authorization data stored in and retrieved from the blockchain and sent to the vehicle. Verification of the data transmitted by the friend's or other user's device is also possible.The communication data to be transmitted can therefore be based on the confirmation data, and thus on this access authorization data.

[0045] The scope of access authorization can be understood in particular as a type of access, such as opening and / or closing the vehicle and / or operating the vehicle (starting a drive unit of the vehicle).

[0046] Additionally or alternatively, the scope of access authorization may include access by a user in a restricted operating mode of the vehicle, for example with a predetermined (compared to another user and / or compared to a permitted reduced) maximum speed (e.g. depending on the age of the user and / or the time of obtaining an official driving licence and / or an officially permitted driving licence of the user to drive vehicles).

[0047] Preferably, at least two, preferably at least three, and most preferably at least five different access authorization levels can be provided. These can be specified, for example, by a vehicle manufacturer. Preferably, the blockchain data record can include the specified access authorization levels or characteristic values ​​for them. Preferably, at least one, and preferably exactly one, access authorization level can be assigned to a user with whom the key is to be shared. Preferably, the blockchain data record is extended and / or modified such that at least one, and preferably exactly one, access authorization level is assigned to the user.

[0048] Preferably, the vehicle, in particular a communication device of the vehicle, determines a user's access authorization scope based on the blockchain data record (especially by retrieving data contained in a blockchain data record). Preferably, a communication device of the vehicle is suitable and designed to read data characteristic of the user and / or the access authorization scope from the blockchain data record, which is stored externally, in particular, and to store it internally within the vehicle.

[0049] It is also conceivable that the vehicle repeatedly compares a user's assigned access rights (e.g., at regular intervals and / or triggered by a user) with the corresponding data in the blockchain record. This offers the advantage that a user's access rights are difficult to manipulate and can be changed with relatively little effort.

[0050] It is conceivable that changing a user's access rights in the blockchain requires approval and / or confirmation from an official body and / or the main key user.

[0051] Preferably, a primary key user can define and store characteristic parameters / data (especially as part of the access authorization data) in the blockchain, specifying the scope of access authorization within which the vehicle can be operated. Preferably, a primary key user can assign an access authorization scope to a user and ensure that this assignment is stored in the blockchain or blockchain data records. Preferably, the primary key user can effect a change to an access authorization scope by generating at least one new block in the blockchain.

[0052] Preferably, a block of the blockchain, and in particular the most recently added block of the blockchain, includes the access permissions assigned to (especially all) users.

[0053] In a further preferred method, exactly one primary user key is assigned to the vehicle, and, in particular by a user with control over this primary user key, the generation of at least one new block of the blockchain can be effected based on the primary user key. This new block then transfers the primary user key and / or a secondary user key to another user. This allows the transfer or sharing of the digital primary vehicle key to another user. It is also conceivable that the blockchain includes a program module by means of which the sharing of the primary user key can be carried out on an end device of the other user.

[0054] Preferably, the primary key user can revoke access rights from another user with vehicle access. Preferably, the primary key user can initiate or cause the creation of a new blockchain block (particularly based on the user's key data) in which the user's access rights are removed and / or which contains data indicating that the user's access rights have been revoked and / or will be revoked. Preferably, the blockchain block includes the time at which the user's access rights were revoked and / or will be revoked. A review of the communication data sent from a user's device and transmitted to the vehicle can therefore also be based on data from this (new) blockchain block indicating that the user's access rights have been revoked and / or will be revoked.

[0055] It is also conceivable that, particularly by the primary key user, it is possible to specify the time until which a user's access authorization exists. Preferably, the (especially the most recently added) block of the blockchain contains data that specifies an end date and / or a period until or within which a (respective) user has been / is / will be granted access authorization to the vehicle and preferably a scope of access authorization assigned to the user (until this end date or within this period).

[0056] Preferably, as already described above, the vehicle, in particular a communication device of the vehicle, repeatedly and preferably at regular intervals and / or at a time triggered by a (main) user, compares the locally or vehicle-internally stored data with regard to users with access authorization and preferably the access authorization scopes assigned to them, as well as with regard to users with revoked or expired access authorization, and performs an update if necessary.

[0057] Preferably, whenever the blockchain is modified, particularly when the blockchain's access authorization data is changed, and / or preferably following the creation of a new blockchain block, a data comparison of the blockchain data record with the vehicle's internal data is triggered, especially regarding the access authorization of at least one user. Such a comparison can be triggered as soon as the new blockchain block is created and as soon as a communication connection to a computer on which the blockchain data record is stored can be established and / or has been established. This advantageously ensures that even if the user's device, whose access authorization is to be denied, is offline, that user's access authorization is revoked.

[0058] It is conceivable that the vehicle and / or the (mobile) device of the (main) user of the vehicle will be notified when the blockchain is changed (especially within a specified time frame).

[0059] Preferably, the vehicle determines, based on data retrieved from the blockchain record, particularly access authorization data, a point in time and / or an event from which a user no longer receives or will receive access authorization (within a predefined scope of access authorization or no access authorization at all). This point in time or event determined by the vehicle may differ from the end of access authorization recorded in the blockchain record. This allows access authorization to be revoked only when a user has, for example, completed their journey and / or reached their destination. For instance, the vehicle can revoke a user's access authorization based on an event, such as the recording of user key data characteristic of the user key size.In this way, the communication data transmitted by the user can also be checked for the granting of access authorization based on data retrieved from the blockchain data record.

[0060] In a further preferred method, changes to the blockchain, particularly changes to access authorization data, are decided by consensus. These changes are especially characteristic of those users who may be granted access to the vehicle. Consensus can be reached, for example, by a majority vote among the nodes participating in the blockchain or network (agreement of the majority of all participants in the network). Verification of (transaction) data via consensus, based on a distributed ledger for the chronological recording of all transactions, offers the advantage of a documentation of transactions that is considered secure, transparent, and immutable.

[0061] It is conceivable that the network (of nodes involved in consensus building) is a network formed by a vehicle registration office and / or a vehicle manufacturer (e.g., OEM) and / or a service provider for managing vehicle access authorization systems and / or a vehicle registration office. It is also conceivable that one or more of these institutions are part of this network. It is also conceivable that the network is a public network.

[0062] In a further preferred method, characteristic data is stored in the blockchain for each, or preferably every, access attempt by a user. This offers the advantage that all access attempts to a vehicle are traceable. This allows any hacking attacks and / or unauthorized access attempts to be recorded and, if necessary, further protective measures to be activated.

[0063] Preferably, the secure communication link can be based on a transmission protocol that uses symmetric encryption and / or a so-called message integrity check procedure to verify the trustworthiness of the data transmitted in radio communication (for example, according to the IEEE 802.15.4 or IEEE 802.15.4z standard).

[0064] In the message integrity check (MIC) process, data packets are sequentially numbered. This sequential number is transmitted along with the encrypted portion. At the receiver, the packets are checked against this sequential number, and any packets that do not match it are discarded without further processing. This helps to prevent hacking attacks.

[0065] Preferably, the user's terminal device has a token generator (especially for two-factor authentication) which generates a constantly changing and time-limited numerical combination as a security token using a one-time password procedure. Initialization preferably takes place using a shared password, which can be exchanged and / or is interchangeable, for example, taking into account the user key data and / or the vehicle key data.

[0066] Preferably, to protect vehicle unlocking, communication between the vehicle and a user's terminal device used as a key is protected by a cryptographic secret.

[0067] Preferably, to protect a vehicle lock, communication between the vehicle and a user's terminal device used as a key is protected by a cryptographic secret.

[0068] Preferably, communication between the vehicle and a user's terminal device used as a key regarding vehicle start via the immobilizer is protected by a cryptographic secret.

[0069] Preferably, the vehicle access authorization system uses an NFT (Non-Fungible Token) for authorization and / or authentication and / or verification of entitlement (e.g., in the context of car sharing) and / or smart contracts and the like.

[0070] Authentication using an NFT offers the following advantage: - Data cannot be manipulated and has a provenance. - Counterpart: Certified

[0071] An NFT is an embedded asset in a blockchain that can be used, for example, to prove ownership and / or document a purchase. It is permanently stored in the blockchain and allows for a publicly authenticated statement about a specific transaction involving an asset.

[0072] The advantage of a blockchain is that data cannot be altered without anyone noticing. Furthermore, data can only be added to a blockchain, not deleted (chain -> chain). Ideally, the blockchain is publicly known and viewable (the content, reason, and details of the transaction are preferably not identifiable).

[0073] The use of a blockchain is preferred for achieving decentralization. Adding a new element involves a consensus algorithm (trying many random values ​​-> no reverse calculation possible; new value: the last value in the chain refers to the previous chain). In particular, adding a new element requires the consent of a majority of participants.

[0074] The vehicle itself preferably uses an immobilizer to store a key secret. (This key secret is preferably generated once in a secure vehicle environment during production and then not changed again).

[0075] When the key (radio or mobile device key) is activated, the key secret, location data and information from the radio key are preferably combined and compared.

[0076] Preferably, authentication and / or authorization is performed via the vehicle key or digital key using NFT technology.

[0077] In other words, permissions for who is authorized to open the vehicle, or characteristic data for this purpose, could be stored as NFTs on the blockchain. During the unlocking process, priority is given to checking whether the corresponding authorization is stored on the blockchain. This technology leads to the advantages mentioned above in the context of blockchain and NFTs.

[0078] A radio log that tracks the key exchange is also conceivable. (This log could be an NFT to make it more difficult for thieves to forge or "destroy" it.)

[0079] In particular, encryption and / or storage of the data can preferably take place decentrally in the blockchain, whereby the data is generated, used, exchanged and stored when a vehicle is opened keylessly.

[0080] The present invention is further directed to a vehicle access authorization system for a vehicle, in particular a locking system and / or drive start system for the vehicle, for verifying a user's access authorization to the vehicle, wherein the vehicle is assigned a, in particular (one-)unique, unique vehicle key size.

[0081] The vehicle access authorization system is designed, suitable and intended to grant or deny the user access to the vehicle based on a communication signal transmitted to the vehicle, at least partially wirelessly, via a secure communication connection between the user's terminal device (in particular a mobile device) and the vehicle, and in particular via a secure communication connection between the vehicle and the vehicle.

[0082] According to the invention, the communication data to be exchanged via the secure communication connection to grant access authorization between the user's mobile device and the vehicle can be determined and / or generated and / or verified on the basis of access authorization data stored in and retrieved from at least one, preferably vehicle-external, blockchain.

[0083] Preferably, the vehicle access authorization system is configured, suitable, and / or intended to execute the procedure described above, as well as all procedural steps already described above in connection with the procedure (particularly with regard to the vehicle access authorization system), either individually or in combination. Conversely, the procedure can be equipped with all features described within the context of the vehicle access authorization system, either individually or in combination.

[0084] The present invention further relates to a vehicle, in particular a motor vehicle, comprising a vehicle access authorization system described above for a vehicle according to one embodiment. The vehicle may in particular be a (motorized) road vehicle.

[0085] A vehicle can be a motor vehicle, which is in particular a driver-operated vehicle ("driver only"), a semi-autonomous vehicle, an autonomous vehicle (for example, at autonomy levels 3, 4, or 5 (according to the SAE J3016 standard)), or a self-driving vehicle. Autonomy level 5 refers to fully automated vehicles. The vehicle can also be a driverless transport system. In this case, the vehicle can be driven by a driver or drive autonomously. Furthermore, in addition to a road vehicle, the vehicle can also be an air taxi, an aircraft, or another means of transport or vehicle type, such as an aircraft, watercraft, or rail vehicle.

[0086] The present invention further relates to a system for granting access authorization for a (given) vehicle and for managing the access authorization of at least one user, and preferably all access authorizations for the vehicle. This involves verifying the granting of access authorization to a user, or to the user, based on communication data exchanged via a (particularly secure) communication link between a, in particular mobile, terminal device of the (respective) user and the vehicle.

[0087] According to the invention, the vehicle has a vehicle access authorization system as described above, according to a preferred embodiment.

[0088] The system preferably includes the end device of the (respective) user.

[0089] According to the invention, a blockchain, preferably stored on a decentralized network and / or external to the vehicle, is provided, which includes access authorization data.

[0090] According to the invention, the system is suitable, configured and / or designed so that the communication data to be exchanged and / or exchanged between the terminal device of the (respective) user (via the secure communication connection) for granting access authorization is determined and / or generated and / or verified on the basis of access authorization data stored in and retrieved from the blockchain.

[0091] The system may be suitable, designed and / or configured to execute the procedure described above or the procedural steps described above within the framework of the procedure for operating a vehicle access authorization system, either individually or in combination.

[0092] The present invention further relates to a computer program or computer program product, comprising program means, in particular a program code, which represents or encodes at least some of and preferably all of the process steps of the inventive method for operating a vehicle access authorization system and preferably one of the described preferred embodiments and is designed for execution by a processor device.

[0093] The present invention further relates to a data storage device on which at least one embodiment of the computer program according to the invention or a preferred embodiment of the computer program is stored.

[0094] The present invention further relates to a method, in particular a computer-implemented method, for providing a digital, preferably multidimensional and particularly preferably three-dimensional, space (and / or data characteristic thereof), in particular a metaverse and / or a part of a metaverse.

[0095] Preferably, the digital space and / or the metaverse can be provided by a vehicle manufacturer (especially an OEM) and / or an operator of a vehicle production facility. This allows vehicle manufacturers, in particular, to advantageously create their own metaverse, which can preferably be designed as described below.

[0096] At least one user access point is provided through which a user can (virtually) enter the provided digital space and / or the (virtual) objects provided therein and / or perceive and / or record objects and / or information displayed or provided in the digital space.

[0097] Preferably, the user can interact with, influence, and / or modify objects and / or information displayed and / or provided (which may be represented as a virtual image of a graphic object) via user access in the provided digital space.

[0098] Preferably, the user access system includes means for verifying access authorization and / or permissions. Ideally, a user is only granted access to the digital space after successful authentication and / or authorization. For this purpose, biometric data (fingerprint, iris scan, password, etc.) of the user can be evaluated and compared with user authentication and / or authorization data stored in a storage device. Preferably, multiple authentication of the user is required to grant access authorization.

[0099] It is also conceivable that means are provided to determine the scope of access authorization. Preferably, each user is assigned a scope of access authorization (from a predefined range of different possible scopes of access authorization).

[0100] For example, a user may only be granted the right to perceive / record the content displayed in the digital space or (predefined and / or predefined) parts thereof. Another user, however, may also be granted the right to interact with, influence, and / or modify the content displayed in the digital space or (predefined and / or predefined) parts thereof.

[0101] Preferably, the method can provide a human-machine interface (HMI) and / or be connected to one (for data exchange) via which user data collected by at least one user interaction device relating to the user can be received.

[0102] The user interaction device may, for example, be a sensor device that captures movement data of a user, such as of the user's body and / or a part of the user's body (arm, foot, hand, finger, head and the like) and / or of the user's posture (upright posture, sitting, standing) and / or of the user's type of movement (static, walking, turning, running) and / or is suitable and intended for capturing such data.

[0103] Preferably, the sensor device can detect facial expressions and / or gestures and / or the direction of gaze of the user.

[0104] It is conceivable, for example, that the sensor device is a (purely) optical sensor device such as at least one or more cameras. However, it is also conceivable that the sensor device is a haptic and / or wearable sensor device (such as so-called "wearables"), which is attached to the user and which collects sensor data relating to the user, for example, by evaluating the positioning and / or orientation and / or movement of the sensor device.

[0105] Preferably, the user's movement within the digital space can be simulated based on the received user data. For example, depending on the user data, which may be characteristic of the user's movement, orientation, posture, head tilt, and / or gaze direction, multidimensional content (such as virtual objects) displayed and / or rendered in the digital space can be shown to the user from various perspectives (adapted to the user). This can create the impression for the user that they are moving within the digital space and / or interacting with the objects provided therein.

[0106] The user interaction device is preferably a device, in particular a processor- and / or computer-based device (preferably portable or so-called "wearable").

[0107] Preferably, the user interaction device is (alternatively or additionally) suitable and intended to add information to a user's perceptual area based on (digital) spatial data provided and / or transmitted by the human-machine interface and / or to influence a user's perceptual area and / or to enable (the user) a so-called "augmented reality" and / or a "mixed reality".

[0108] For example, the user interaction device could be smart glasses or data glasses that add information to the user's field of vision.

[0109] However, it is also conceivable that a user interaction device is suitable and intended to influence a different area of ​​the user's perception than a visual one (e.g., haptic, auditory, sensory, and the like).

[0110] This allows the user to experience a combination of virtual, augmented, and physical reality.

[0111] Preferably, a virtual image of a (real) production plant, especially for vehicles, preferably a digital twin of a (real) production plant is provided and / or generated (for at least partial recording / perception by a user) in the digital space.

[0112] Preferably, the virtual representation depicts at least one momentary state of the production plant and preferably a multitude of states of the production plant. Preferably, the state of the production plant is updated repeatedly and preferably at regular intervals. Preferably, every change in the state of the production plant is transmitted to the virtual representation, and the plant is adjusted accordingly. This allows the user to be informed about the current state of the production plant at any time without having to be physically present.

[0113] A state of the production plant can preferably be understood as a production state of a vehicle and / or vehicle part to be produced.

[0114] Additionally or alternatively, a state of the production plant can be understood to mean at least one state of a production device within the production plant. This could include, for example, the quantity of a material required for carrying out a production step, the current state of a currently executed production step, the operating state of the production device, a fault state of the production device, or a production parameter characteristic of carrying out a production step.

[0115] Preferably, the method includes determining production data characteristic of a production step to be performed by a production worker. This production step could, for example, be the next step to be performed by the production worker. It is conceivable that the production data is transmitted to an output and / or display device assigned to the production worker, such as a user interaction device like smart glasses. Advantageously, the production data is output by the output device.

[0116] Production data can include tools, materials, components, and / or locations required for the production step, or other characteristic data. Displaying such information, for example, in smart glasses worn by production workers, offers the advantage of quick and efficient access to this information.

[0117] In vehicle production, different types of vehicles encounter a production worker in an (irregular) rotation. Therefore, it is particularly advantageous to provide the production worker with characteristic production data, such as vehicle-type-specific production data, for at least one upcoming production step or for several production steps related to the next vehicle to be processed, and preferably to output this data to the production worker (as user) via the production worker's user interaction device.

[0118] Even when monitoring / controlling the production step and / or the handling of the vehicle being manufactured, a comparison with a virtual model can be preferentially used. Because, for example, different vehicles are manufactured on one assembly line, production workers must be able to quickly adapt to slightly different assembly tasks. For training new employees, parallel virtual step-by-step instructions can be provided and / or distributed to the employee via a user interaction device.

[0119] Preferably, the production plant is one with a highly time-sensitive production cycle (for example, more than 50, preferably more than 100, preferably more than 200, preferably more than 250, and particularly preferably more than 300 vehicles per day). Preferably, a display device, preferably a user interaction device, is used to provide at least one, and particularly preferably each, production employee involved in the same assembly line with a time-based status update and / or instructions for the time-efficient execution of the remaining production or processing steps.

[0120] This can be particularly effective when combined with gamification, so that production employees perceive time tracking positively and a special time incentive is created. The "record" could be displayed on a scoreboard, and production employees could collect points for particularly good performance. Points could be converted into, for example, time off (at a certain number of points, the employee earns an hour of overtime).

[0121] Alternatively or additionally, production data can be collected with regard to a production step performed by a production worker (as user), in particular the result achieved by the production step (on the vehicle). Preferably, the production data is characteristic of the quality of the at least one production step performed. This advantageously enables just-in-time quality assurance. Through a user interaction device, in particular smart glasses, deviations, e.g., in the joints, screw connections, or clipping of cable harnesses, can be displayed directly to the production worker, allowing for immediate response.

[0122] Additionally or alternatively, the virtual model of the production plant can depict information relating to production employees involved in the production process. This information can be characteristic of occupational safety and / or ergonomics of a work step performed by the production employee.

[0123] Characteristic data for this purpose can be collected via sensor-equipped ("sensitive") clothing, such as gloves (Metaverse gloves / clothing). This "sensitive" clothing preferentially detects and / or tracks excessive friction, strenuous activity, and poor posture, thus enabling the faster identification of ergonomically poor workplaces. This would allow for the earlier creation of safer workplaces, for example, during the development / construction of a new production line.

[0124] Preferably, the provided digital space or metaverse can be used in the development / design process. This allows for the integration of a simulation / calculation of a production process and / or the operating mode of a product. Preferably, an improvement and / or further development of a vehicle is based on the digital space and / or the metaverse.

[0125] Nowadays, development largely takes place in 2D on a PC, and communication occurs, for example, via Teams meetings. Utilizing the digital space, or metaverse, allows for even more interdisciplinary and interactive collaboration. Tasks that previously took place in the normal "doing" on the computer are advantageously augmented by another dimension.

[0126] The user could also be a customer who wants to order a fully produced vehicle. Ideally, ordering options are provided that allow the user to specify and order a vehicle to be produced. For this purpose, the user can preferably configure the vehicle using these ordering options (e.g., with a virtual, possibly AI-based advisor). Payment processing is preferably via cryptocurrency.

[0127] Preferably, a user, particularly during an ordering process, can virtually test a vehicle (selected and especially configured by them) to gain an impression of the driving experience and / or vehicle dynamics. Preferably, a simulation of the vehicle's operation is performed based on the vehicle data characteristic of the vehicle entered by the user. Preferably, the simulated driving operation of the vehicle is displayed in the digital space, or metaverse.

[0128] Preferably, at least one user interaction device conveys a driving feel and / or driving dynamics, preferably determined by simulating the vehicle's driving operation, using augmented reality. Preferably, the simulation determines at least one driving dynamics parameter, such as speed, acceleration, yaw rate, roll rate, and / or wheel speed. Preferably, at least one driving dynamics parameter is output to the user via augmented reality.

[0129] This offers the advantage of a much more emotional buying experience compared to purely browser-based software for configuring a vehicle.

[0130] Preferably, at least one (virtual) landscape is generated and / or displayed to the user using digital space, particularly augmented reality, to convey a driving experience and / or driving dynamics. Preferably, the (virtual) landscape to be displayed is determined and / or generated based on user-specific data. This user-specific data can, for example, indicate the user's intended use of the vehicle, such as off-road driving. The user-specific data preferably specifies landscapes relevant to the user (off-road, urban, highways).

[0131] User-specific data can be obtained, for example, through user input (such as via a user interaction device). For instance, a query could identify places of interest to the customer, allowing the "test drive" to be highly personalized and unique, perhaps by taking the virtual test drive through their favorite vacation spot or hometown.

[0132] Alternatively or additionally, vehicle orders could be transferred to the Metaverse. Customers could order their vehicles in the virtual space (i.e., the Metaverse). This would allow them to configure the vehicle virtually in 3D with the help of a virtual advisor. This could also be linked to artificial intelligence – thus eliminating the need for a real-life advisor, as the AI ​​in the Metaverse would handle the task. The order would ideally also be processed within the Metaverse (for example, payment could be made with a cryptocurrency – or the vehicle manufacturer could create its own digital currency, such as an "OEM Coin"). Ideally, the vehicle would be delivered / made available automatically upon completion.

[0133] The user may also be a supplier to an operator of the production facility, such as a vehicle developer and / or an OEM or vehicle manufacturer. The preferred platform is the digital space, or metaverse, (as an interface) for collaboration between a supplier and the operator of the production facility and / or the vehicle manufacturer and / or the vehicle developer.

[0134] Ideally, a user can use the provided digital space to conduct a virtual production tour and / or inspect new technologies and tools. By displaying information and objects in the user's interaction device, such as smart glasses, the user can be provided with information beyond a visual tour of the relevant areas of the production facility.

[0135] Preferably, the provided digital space, and in particular the (especially true-to-scale) representation of the production plant, can be used to virtually (visually) test the movements of a robot and other processing equipment in a common area, for example, for (fine-)adjusting their movements. A digital simulation of an interaction in the metaverse can be used to particularly advantageous effect for the development of manufacturing processes and / or the setup and / or configuration of a production plant.

[0136] This allows tools (e.g., from different suppliers and / or manufacturers) to be virtually adapted and / or coordinated with each other, and the consequences to be simulated.

[0137] Providing a digital space, such as the Metaverse, offers numerous advantages and innovations for the work environment of a vehicle manufacturer. "Metaverse offices" could be developed – meetings within the Metaverse for production planning, vehicle component design, prototype creation, integration of simulations / calculations, etc. (everything a vehicle manufacturer needs to develop and produce a finished vehicle can be enhanced / improved using the Metaverse). In particular, the interfaces between various development partners can be consolidated within the Metaverse.

[0138] Preferably, the advantages of metaverse applications can also be made accessible to students and / or pupils or for training purposes, or collaborations between companies and universities can be established to integrate a greater practical relevance into studies.

[0139] Preferably, the digital space, particularly in the metaverse, can serve as an exhibition space in which NFTs, representing digital counterparts of a vehicle, are displayed. Preferably, the NFTs to be displayed and / or already displayed are NFTs generated by tokenizing a real vehicle.

[0140] Here too, the vehicle can be one of the above-mentioned vehicle types, such as a road vehicle.

[0141] The present invention further relates to a metaverse provisioning device, in particular a processor-based device, for providing a digital, preferably multidimensional and particularly preferably three-dimensional, space (and / or data characteristic thereof), in particular a metaverse and / or a part of a metaverse.

[0142] The metaverse provisioning facility is preferably used to carry out at least one process step, preferably several process steps individually or in combination with each other, which were described above in the context of the process for providing a digital space.

[0143] The present invention further relates to a metaverse system comprising at least one metaverse provisioning device as described above, at least one user interaction device of at least one user, and preferably a plurality of user interaction devices of different users.

[0144] The present invention further relates to a computer program or computer program product, comprising program means, in particular a program code, which represents or encodes at least some and preferably all of the process steps of the inventive method for providing a digital, preferably multidimensional and particularly preferably three-dimensional, space (and / or data characteristic thereof), in particular a metaverse and / or a part of a metaverse, and preferably one of the described preferred embodiments, and is designed for execution by a processor device.

[0145] The present invention further relates to a data storage device on which at least one embodiment of the computer program according to the invention or a preferred embodiment of the computer program is stored.

[0146] The present invention is further directed to the creation of an NFT based on a (real) vehicle and / or at least one component, and preferably a plurality of components of a (real) vehicle. The invention thus relates in particular to NFTs used in the automotive industry. NFTs are unique and can be understood as digital certificates of authenticity. NFTs are now already considered digital securities and can also appreciate in value.

[0147] Preferably, a unique number assigned to a vehicle, in particular the vehicle identification number and / or part number and / or equipment specifications characteristic of a vehicle's configuration (also known as PR numbers, where "PR" stands for "primary characteristic"), is linked to an NFT. This leverages the uniqueness of an NFT. This offers the advantage of theft protection / protection against counterfeiting through a unique digital certificate of authenticity.

[0148] Furthermore, the car key could also be linked to the same NFT. Ideally, this would eliminate the need for a physical car key, as customers could unlock the car using the NFT stored, for example, on their mobile phone.

[0149] The NFT, or digital certificate of authenticity, thus offers protection against theft or copying, as NFTs are forgery-proof.

[0150] Especially with more expensive cars, the NFT itself also offers an additional collector's item character and exclusivity.

[0151] The invention could also be extended to vehicle components to prevent copying and theft in these areas as well.

[0152] Using apps, one could, for example, record rims, engines, etc. from an automobile manufacturer (such as VW), scan them (e.g., via an integrated QR code, chip or similar), and if an NFT of the automobile manufacturer (such as VW) is stored, this proves in particular the authenticity of the component.

[0153] Furthermore, an NFT can be used as early as the vehicle production stage. With each production step or production line, the vehicle-specific NFT is expanded (e.g., with timestamps). Depending on the vehicle's features or class, this results in a more valuable / complex NFT. The entire production process could then be tracked by monitoring changes in the NFT. Tracking information offers many advantages today. Especially for customers in the luxury segment, this creates a digital collectability aspect that extends beyond the physical vehicle (e.g., some customers specifically collect physical vehicles).

[0154] Preferably, a non-functional technology (NFT) is generated for a vehicle by tokenizing the vehicle and / or at least one component and / or a plurality of components of the vehicle (at least and preferably exactly). Preferably, the NFT is generated at least temporarily and preferably completely during the production of the vehicle.

[0155] A kind of competition could develop (preferably in a digital space, such as a metaverse) to see who has the most extraordinary / elaborate NFT. This would give customers the opportunity to collect their luxury cars in their garages, but also to display them digitally, for example, in the metaverse. Very expensive luxury cars are often only collected, but never driven. Perhaps NFT technology in the automotive industry will change customer collecting behavior. Theoretically, the luxury cars could then also be driven, because an associated digital NFT could be displayed digitally at the same time.

[0156] Preferably, a virtual NFT automotive marketplace is provided where NFTs can be bought and sold.

[0157] Preferably, tracking / control can be achieved using NFTs (timestamps, equipment features, colors, locations, etc. integrated into NFTs - vehicle-specific NFTs are extended by the aforementioned features). - The vehicle NFT could, for example, also evolve based on user behavior: - For example, TÜV tests could expand the NFT - Holidays abroad could expand the NFT (this allows for the preferential development of a kind of "automotive footprint on the world". This could be interesting, for example, for motorhomes, campervans, and commercial vehicles).

[0158] The vehicle-specific NFT can ideally be a digital twin of the real vehicle (in 2D, 3D, 4DX, or other representational formats within the metaverse). The blockchain could store vehicle-specific characteristics as well as other valuable information that makes the NFT unique (timestamps, equipment features, colors, locations). The vehicle-specific NFT is continuously developed and expanded with each unique piece of information. Thus, valuable intermediate steps are also recorded within the NFT.

[0159] At the same time, the stored unique information could in turn be used in the future for analysis purposes or evaluation of information, which can be very helpful.

[0160] Furthermore, an NFT generated based on a vehicle can contain (tamper-proof) information about the materials used and / or the vehicle's structure. In terms of sustainability, this offers the advantage of simplified recycling via information about the vehicle's three-dimensional structure, which can be determined based on the NFT. The NFT can also advantageously contain information regarding the vehicle's design and / or assembly, such as where components were joined, how the vehicle can be disassembled, how plastics are bonded, the vehicle's manufacturing process, the material composition of the vehicle or a component thereof, and / or information regarding the vehicle's recycling.

[0161] Preferably, at least one recycling step of a vehicle is carried out depending on information about the vehicle obtained on the basis of the NFT (which is in particular uniquely and especially preferably uniquely assigned to the vehicle).

[0162] The present invention further relates to a computer program or computer program product, comprising program means, in particular a program code, which represents or encodes at least some and preferably all of the process steps of the inventive method for generating an NFT based on a (real) vehicle and / or at least one component and preferably a plurality of components of a (real) vehicle, and preferably one of the described preferred embodiments, and is designed for execution by a processor device.

[0163] The present invention further relates to a data storage device on which at least one embodiment of the computer program according to the invention or a preferred embodiment of the computer program is stored.

[0164] The present inventions have each been described in relation to a vehicle. However, the present inventions are also transferable to other products to be manufactured (e.g., jewelry such as watches, clothing, etc.) or their production facilities. The applicant reserves the right to also claim claims relating to such products.

[0165] Further advantages and embodiments can be seen from the attached drawings:

[0166] It shows: Fig. 1 A schematic representation to illustrate a method according to the invention for operating a vehicle access authorization system. Fig.Figure 1 shows a schematic representation to illustrate a method according to the invention for operating a vehicle access authorization system 2 of a vehicle 1.

[0167] Reference symbol 20 identifies a user's mobile device, such as a driver's. This device specifically features a protected storage area 22 where sensitive data can be stored.

[0168] Reference symbol 30 identifies a decentralized storage facility or network, particularly a cloud-based one. Reference symbol 32 identifies a blockchain data record. These blockchain data records are stored on different computers (a so-called "distributed database").

[0169] A secure communication connection can be established between the user's terminal device 20 and the vehicle 1, in which the terminal device 20 can transmit user key data to the vehicle 1. The vehicle 1, in particular its vehicle access authorization system, is suitable and designed to verify the user key data and (depending on the vehicle key size assigned to the vehicle) grant or deny the user of the terminal device access to the vehicle.

[0170] This can involve, for example, activation and / or registration of the key size of the (main) user and / or a shared key based on stored data (such as external certificates) included in the blockchain data records.

[0171] Furthermore, data relating to the scope of access rights of a (especially each) user of the vehicle can be stored using the blockchain.

[0172] The applicant reserves the right to claim all features disclosed in the application documents as essential to the invention, provided they are novel individually or in combination compared to the prior art. It is further noted that the individual figures also describe features which may be advantageous on their own. A person skilled in the art will immediately recognize that a particular feature described in a figure may be advantageous even without incorporating other features from that figure. Furthermore, a person skilled in the art will recognize that advantages may also arise from a combination of several features shown in individual or different figures. Reference symbol list 1 vehicle 2 Vehicle access authorization system 20 Mobile device 22 Protected storage area 30 decentralized storage facility or decentralized network 32 Blockchain QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] DE 10 2016 007 472 A1

[0004] DE 10 2016 215 914 A1

[0005] DE 10 2017 204 538 A1

[0006] Cited non-patent literature

[0000] Standard IEEE 802.15.4 or IEEE 802.15.4z

[0063] HMI, abbreviation for English "Human Machine Interface"

[0101]

Claims

[1] Method for operating a vehicle access authorization system (2) for a vehicle (1), in particular a locking system and / or drive start system for the vehicle (1), for verifying a user's access authorization to the vehicle (1), wherein the vehicle (1) is assigned a vehicle key size, in particular a unique and / or one-to-one size, wherein the vehicle access authorization system (2) is set up, suitable and intended to grant or deny the user access to the vehicle (1) depending on the vehicle key size, based on a communication signal to the vehicle (1) transmitted by the user within the framework of a secure communication connection between a mobile terminal device (20) of the user and the vehicle (1), in particular at least partially wirelessly, characterized by, that the communication data to be exchanged via the secure communication link to grant access authorization between the user's terminal device (20), in particular mobile, and the vehicle (1) are determined and / or generated and / or verified on the basis of access authorization data stored in and retrieved from at least one blockchain (32), preferably external to the vehicle. [2] Method according to claim 1, characterized by , that a user key size is generated and / or verified on the basis of access authorization data stored in and retrieved from a blockchain, preferably external to the vehicle, in the user's terminal device (20), in particular mobile. [3] Method according to any one of the preceding claims, characterized bythat the access authorization data consists of data characteristic of at least one certificate and / or certificate chain, by means of which vehicle key data characteristic of the vehicle key size and / or user key data characteristic of a user key size can be authenticated. [4] Method according to any of the preceding claims, characterized by , that the access authorization data consists of data which are characteristic of whether an access authorization can be granted to another user, and / or which are characteristic of an access authorization scope. [5] Procedure according to the preceding claim, characterized by, that the vehicle is assigned exactly one main user key size and, in particular by a user with control over this main user key size, the generation of at least one new block of the blockchain can be effected on the basis of the main user key size, wherein the generated new block effects and / or can effect a transfer of the main user key size and / or a sub-user key size to another user. [6] Method according to any of the preceding claims, characterized by , that a decision is made by consensus on a change to the access authorization data, which are characteristic of those users to whom access authorization to the vehicle can be granted. [7] Method according to any of the preceding claims, characterized by , that characteristic data is stored in the blockchain for each, preferably every, access attempt by a user. [8] Method according to any of the preceding claims, characterized by that the secure communication link is a near field communication (NFC) link and / or an ultra-wideband (UWB) link. [9] Vehicle access authorization system (2) for a vehicle (1), in particular a locking system and / or drive start system for the vehicle (1), for verifying a user's access authorization to the vehicle (1), wherein the vehicle (1) is assigned a unique vehicle key size, in particular a one-to-one, and wherein the vehicle access authorization system (2) is designed, suitable and intended to grant or deny the user access to the vehicle (1) depending on the vehicle key size, based on a communication signal transmitted to the vehicle (1) by the user via a secure communication link between a mobile terminal of the user and the vehicle (1), in particular at least partially wirelessly, characterized bythat the communication data to be exchanged via the secure communication link to grant access authorization between the user's mobile device and the vehicle can be determined and / or generated and / or verified on the basis of access authorization data stored in and retrieved from at least one blockchain, preferably external to the vehicle. [10] Vehicle (1), in particular motor vehicle, comprising a vehicle access authorization system (2) according to the preceding claim.

Images