System for the forensic recording, securing and legally valid archiving of vehicle-specific event data (Forensic Chain)

Abstract

System for the forensic recording, securing and legally valid archiving of vehicle-specific event data, characterized in that, upon detection of a safety-relevant event, automatically synchronized data sets are generated from sensors, control units and vehicle information, locally cryptographically signed, provided with a check value (hash value) and this is stored immutably in a distributed, tamper-proof data storage structure (anchoring network), wherein, in addition, an audit-proof tracking protocol (chain of evidence protocol) documents all accesses, signatures and transfers.

Description

[0001] The present invention relates to a system for the automated, tamper-proof, and legally valid recording, storage, and evaluation of vehicle-specific event data. The object of the invention is to provide a technical method that enables complete, digital, and legally admissible documentation of safety-relevant vehicle events. This solution ensures that all recorded data, such as sensor values, control unit information, video data, or audio data, are stored in a tamper-proof manner, remain verifiable, and traceable.

[0002] The technical problem underlying the invention is that there is currently no standardized, legally sound, and tamper-proof method for permanently, verifiably, and in compliance with data protection regulations storing accident data, system states, and safety-relevant vehicle information. While conventional black-box systems can record data, they lack verifiable proof of integrity, authenticity, and immutability. This leads to uncertainties in evidence, particularly in liability or insurance cases, as data can be subsequently altered or deleted.

[0003] This problem is solved by the invention described in claim 1. The system automatically detects safety-relevant events, captures synchronized data sets from various sensors and control units, cryptographically signs them locally, and stores them in a tamper-proof manner in a distributed data structure. Due to the structure described in claim 1, data sets are stored immutably in an anchoring network. Additionally, according to claim 7, an audit-proof traceability log (chain of evidence log) is maintained, which documents all accesses and data movements.

[0004] As described in claim 2, the system automatically detects events such as impacts, abrupt braking, accelerations, airbag deployments, or tampering with control units. These events trigger the automatic activation of the forensic recording. Claim 3 adds that all data sources—sensors, cameras, GPS, audio—are synchronized and time-stamped, thus enabling a complete and accurate event reconstruction.

[0005] Claim 4 describes the cryptographic protection of the data via a hardware security module (HSM). This module ensures that each record is signed with a unique private key. Together with claim 5, which describes redundant storage in multiple layers of security (e.g., blockchain, timestamping service, tamper-proof database), a maximum level of integrity and redundancy is achieved.

[0006] According to protection claim 6, all data is stored in an immutable container whose integrity can be verified via the stored hash value. The tracking protocol according to protection claim 7 ensures that every data change, release, or deletion request is documented. In the event of official or legal requests, the system automatically provides a checksum and confirmation of data immutability, according to protection claim 8.

[0007] Protection claim 9 governs the multi-stage access mechanism, which requires consent from the vehicle owner, workshop, or insurance company before data may be viewed. In combination with protection claim 10, access is controlled contextually, ensuring that only authorized parties with the appropriate legal basis are granted access.

[0008] In accordance with protection claim 11, all personal data is processed in compliance with the GDPR. Information is stored anonymously or pseudonymously. Protection claim 12 describes the end-to-end encryption between all units of the system. Protection claim 13 stipulates that the cryptographic methods are based on nationally recognized standards.

[0009] Claim 14 extends the system to include the automatic generation of an audit report containing the time, checksum, and signature key. Building on this, claim 15 describes the event chaining, in which each new event is linked to the checksum of the preceding entry. This creates a chronological, immutable chain of events.

[0010] Claim 16 introduces an auditing interface for law enforcement agencies, insurers, and experts. This interface allows for the verification of the authenticity of the stored records. In the event of total loss or power failure, claim 17 stipulates an automatic emergency transfer to a secure cloud instance.

[0011] Claim 18 describes the ability of the system core to reconstruct the chain of trust and to algorithmically detect manipulation attempts. Claim 19 adds that all cryptographic keys and checksums are managed decentrally and renewed regularly. Claim 20 provides for integration into existing vehicle architectures via standardized interfaces (e.g., OBD and API).

[0012] Claims 21 to 23 extend the application to fleet, leasing, and insurance systems. This enables automatic event recording for multiple vehicles. Vehicle owners can access relevant events and grant authorized approvals via a mobile user interface. Claim 24 establishes a connection between forensic data processing and digital twins of vehicles to link real-time data with evidentiary information.

[0013] Claim 25 describes the possibility of anchoring test results on external evidence platforms or with certification authorities. Claim 26 emphasizes the extensibility of the system architecture to integrate future signature procedures or government-approved services. According to claim 27, all event data is archived in an audit-proof manner and stored in accordance with national evidentiary laws.

[0014] According to claim 28, a verification routine monitors the entire lifecycle of each record, from creation and storage to deletion. Claim 29 stipulates that all reports are digitally signed and accompanied by officially recognized timestamps. Finally, claim 30 describes how the system functions as a basic technical element of a modular infrastructure for vehicle, insurance, and government applications and is interoperable with modules such as trust assessment, sustainability verification, and certificate management.

[0015] Technologically, the Forensic Chain is based on a hybrid architecture comprising on-device security modules, decentralized anchoring, and audit-proof logging. Event data is automatically classified and prioritized by an internal algorithm. Multiple anchor points across different data layers ensure fault tolerance. The system can be integrated into modern vehicle architectures while simultaneously meeting requirements for data protection, traceability, and evidence preservation.

[0016] The system offers multifaceted practical benefits: It enables a new level of evidence preservation and data integrity in the automotive sector. Vehicle manufacturers can use it to transparently document safety and liability issues. Insurance companies benefit from a clear and tamper-proof basis for damage assessment. Workshops and appraisers receive verified data sets for repair and damage analysis. Authorities and courts can access unalterable, legally admissible information, which significantly facilitates the presentation of evidence. For fleet operators, the system provides automatic, objective recording of events and conditions, thereby minimizing manipulation or disputes. For vehicle owners, the Forensic Chain creates transparency and trust in the purchase, sale, and operation of vehicles.

[0017] The functionality can be summarized as follows: A security-relevant event is detected, data sources are synchronized, signed, and stored as a checksum in an immutable data structure. Subsequently, all accesses are redundantly logged and recorded. Authorized users can then inspect or retrieve data via standardized interfaces.

[0018] Summary: The invention describes a tamper-proof, data protection-compliant, and legally sound system for storing and tracking vehicle event data. The combination of local signature, decentralized anchoring, event chaining, and access control creates a new level of quality in forensic vehicle informatics, which is equally relevant for insurance companies, manufacturers, authorities, and vehicle owners.

Claims

[1] System for the forensic recording, securing and legally valid archiving of vehicle-specific event data, characterized by , that when a safety-relevant event is detected, automatically synchronized data sets are generated from sensors, control units and vehicle information, locally cryptographically signed, provided with a check value (hash value) and this is stored immutably in a distributed, tamper-proof data storage structure (anchoring network), whereby in addition a revision-proof tracking protocol (chain of evidence protocol) documents all accesses, signatures and transfers. [2] System according to claim 1, characterized by , that the detection unit detects events such as impact, abrupt braking, acceleration, airbag deployment, vibrations, power interruption or manipulation of control units and automatically triggers the forensic recording. [3] System according to any one of the preceding claims, characterized by that all recorded sensor data, video data, location data (Global Positioning System - GPS), noise data and digital vehicle parameters are synchronized, encrypted and time-stamped. [4] System according to any one of the preceding claims, characterized by that the local signing unit uses a private key stored in a secure hardware component (Hardware Security Module - HSM) to uniquely authenticate each record. [5] System according to any one of the preceding claims, characterized by that the system uses multiple independent layers of security and anchoring, in particular a public blockchain, a trusted time stamping service, and an audit-proof database of a recognized third party. [6] System according to any one of the preceding claims, characterized bythat all forensic records are stored in an unalterable data container, the integrity of which can be verified at any time using the stored checksum. [7] System according to any one of the preceding claims, characterized by that the tracking log (chain of evidence log) automatically documents all accesses, data releases, transfers, deletion attempts and edits with timestamps and user identity. [8] System according to any one of the preceding claims, characterized by that the system provides a legally valid checksum and confirmation of the immutability of the data container in the event of an official or judicial request. [9] System according to any one of the preceding claims, characterized by that the stored data can only be viewed by vehicle owners, insurance companies, workshops or vehicle manufacturers after a multi-stage consent process (consent protocol). [10] System according to any one of the preceding claims, characterized by , that context-dependent access is granted based on user role, event type and legal basis. [11] System according to any one of the preceding claims, characterized by that the stored data is processed in compliance with the GDPR and that personal information is protected by anonymization or pseudonymization. [12] System according to any one of the preceding claims, characterized by that communication between all units of the system takes place via end-to-end encrypted data channels. [13] System according to any one of the preceding claims, characterized by that the signature and encryption algorithms are based on a nationally recognized cryptographic method. [14] System according to any one of the preceding claims, characterized by, that the system automatically generates an audit report (certificate of integrity) containing the time of the event, the checksum, the signature key and the chain of storage stations. [15] System according to any one of the preceding claims, characterized by , that the data structure forms a hierarchical event chain (forensic event chain) in which each new event is linked to the checksum of the previous entry. [16] System according to any one of the preceding claims, characterized by , that a verification interface is provided for authorized auditors, insurers or investigative authorities, through which the authenticity of the records can be verified. [17] System according to any one of the preceding claims, characterized by , that in the event of total loss or power failure, an emergency transfer is automatically sent to a secure cloud instance. [18] System according to any one of the preceding claims, characterized bythat the system core is able to reconstruct the chain of trust (trust chaining) with each access and to algorithmically detect manipulation attempts. [19] System according to any one of the preceding claims, characterized by that all keys, certificates and checksums are managed decentrally and renewed regularly. [20] System according to any one of the preceding claims, characterized by that the system is designed for integration into existing vehicle architectures and communicates via standardized interfaces (diagnostic interfaces - OBD and programming interfaces - API). [21] System according to any one of the preceding claims, characterized by that the system is designed for integration into fleet and leasing management systems and enables automated event recording for fleet vehicles. [22] System according to any one of the preceding claims, characterized bythat the forensic data can also be used as evidence for insurance claims, warranty claims or product liability investigations. [23] System according to any one of the preceding claims, characterized by , that the vehicle owner is informed about events via a mobile application (user interface) and can authorize data releases. [24] System according to any one of the preceding claims, characterized by that forensic data processing is coupled with the modules of a digital vehicle twin (Digital Twin - Vehicle Twin), thereby establishing a connection between real-time condition data and the evidence archive. [25] System according to any one of the preceding claims, characterized by , that the verification value (hash value) can also be anchored on external evidence platforms or with independent certification bodies. [26] System according to any one of the preceding claims, characterized bythat the system architecture is expandable to integrate future cryptographic methods or government-approved signature services. [27] System according to any one of the preceding claims, characterized by that the generated event data records are archived in a revision-proof manner and remain stored for a minimum retention period in accordance with national evidentiary laws. [28] System according to any one of the preceding claims, characterized by that the system has a verification routine that tracks the lifecycle of each record, including creation, storage, access, transmission and deletion. [29] System according to any one of the preceding claims, characterized by that all data logs, checksums and reports are digitally signed and provided with an officially recognized time stamp. [30] System according to any one of the preceding claims, characterized bythat the system functions as a central technical base element within a modular vehicle, insurance and government infrastructure and works interoperably with other system modules such as trust rating (TrustScore), sustainability verification (ESG report) and certificate management.