Method for providing verified information about a traffic sign, traffic sign system and method for a navigation system for verifying a traffic sign

Description

[0001] The present invention relates to providing verified information about traffic signs. In particular, the present invention relates to a method for providing verified information about a traffic sign.

[0002] Conventional traffic infrastructure is designed to be visually perceived by a human driver of a vehicle. A vehicle is a mobile means of transport for people or goods. A vehicle can therefore be either a passenger vehicle or a commercial vehicle. For example, a vehicle can be a passenger car, a truck, a motorcycle, or a tractor. In general, a vehicle can be understood as a device that includes wheels driven by an engine (and optionally a drivetrain system).

[0003] Document EP 2 469 230 A1 proposes a method for updating map data based on camera images.

[0004] With the increasing prevalence of autonomous driving functions in vehicles, conventional traffic infrastructure is reaching its limits. For example, a traffic sign can be optically manipulated in such a way that it can no longer be correctly recognized by the vehicle's optical traffic sign recognition systems. This can be used for a targeted attack on the vehicle.

[0005] Therefore, a method for verifying the content and location of traffic signs is proposed in document DE 10 2016 208 621 A1.

[0006] Document EP 2 327 961 A2 proposes a method in which a user can correct map errors himself and also share these corrections with other users.

[0007] EP 0521486 A1 further proposes transmitting information regarding a traffic sign to a vehicle using a radio transmitter attached to the traffic sign. The radio connection is unencrypted and can therefore be easily manipulated. The vehicle is therefore still not protected against attacks.

[0008] Furthermore, WO 2017 / 190794 A1 proposes allowing passing vehicles to communicate in encrypted form with a data processing system attached to a traffic sign in order to collect information about traffic infrastructure features using the vehicle's sensors. In this way, information about the traffic infrastructure can be collected via the vehicle in order to update road maps or databases. However, this process uses the information transmitted by any vehicle. Thus, any desired misinformation regarding traffic infrastructure can still be disseminated via one or more appropriately manipulated vehicles. In other words, the information about the traffic infrastructure transmitted by the vehicles cannot be verified, leaving a gateway open for targeted manipulation.

[0009] Publication WO 2017 / 180382 A1 further proposes the use of a decentralized network in which multiple vehicles attempt to mutually verify information regarding traffic infrastructure by sensing the surroundings multiple times. If a first manipulated vehicle feeds targeted misinformation into the decentralized network and confirms it with another manipulated vehicle, this misinformation is deemed correct due to the second manipulated vehicle's validation. Thus, even with this approach, any desired misinformation regarding traffic infrastructure can still be disseminated via appropriately manipulated vehicles. In other words, the information about the traffic infrastructure transmitted by the vehicles cannot be reliably verified.

[0010] There is therefore a need to provide verified information about traffic signs or to provide a means of verifying information about traffic signs.

[0011] The present invention enables this through a method for providing verified information about a traffic sign. A traffic sign is a sign used to regulate or influence road traffic. The traffic sign is usually erected by an authorized body (e.g., a public authority), but attackers can also manipulate existing traffic signs or erect unauthorized traffic signs.

[0012] The method comprises receiving information about the traffic sign from an electronic traffic sign following a change in the traffic sign displayed by the electronic traffic sign. Electronic traffic signs can display a plurality of traffic signs by appropriately controlling their display. The information about the traffic sign is information that characterizes or describes the traffic sign.

[0013] The method further includes checking whether the electronic traffic sign is an authorized information source. Only if the electronic traffic sign is an authorized information source does the method further include storing the information about the traffic sign in a blockchain database. A blockchain database is a continuously expandable list of data records, called blocks, which are linked together using cryptographic methods. Blockchain databases are tamper-proof with regard to the data already stored therein. In the proposed method, the information about the traffic sign is only stored in the blockchain database if the electronic traffic sign is an authorized information source, i.e. a trustworthy or known, pre-selected information source. Only authorized information sources are authorized to change or delete the blockchain database.to update (i.e., only authorized information sources have write access to the blockchain database). Accordingly, it can be ensured that only authenticated information about authorized traffic signs originating from a trustworthy, secure, or authorized source is stored in the blockchain database. If the electronic traffic sign is not an authorized information source, the information about the traffic sign provided by the electronic traffic sign will not be stored in the blockchain database. This allows the accuracy of the information stored in the blockchain database to be verified or ensured. Once stored in the blockchain database, information can no longer be manipulated due to the structure of blockchain databases outlined above.The blockchain database thus provides verified information about the traffic sign. If the displayed traffic sign changes, the blockchain database can be updated immediately to provide third parties with current and verified information about the traffic sign currently displayed by the electronic traffic sign. To authorize the electronic traffic sign, it can be assigned a separate identifier or an identifier of an operator or person responsible for the electronic traffic sign, for example.

[0014] The method further comprises permitting read access to the blockchain database in order to enable third parties to access the verified information about the traffic sign stored in the blockchain database. Autonomous (automatic) vehicles or navigation systems, in particular, can use read access to the blockchain database to check the accuracy of information about the traffic sign received via other channels (e.g., radio transmission or optical recognition). The possibility of manipulating autonomous vehicles by manipulating physical traffic signs on roadways or traffic signs recorded in digital road maps can thus be effectively prevented. Read access can be granted to anyone or any electronic data processing system, or only to selected persons or selected electronic data processing systems (e.g.,only those who subscribe to a corresponding service). A key advantage of blockchain databases over, for example, server-based standard databases is that a constant connection to the database is not necessary. If, for example, a vehicle cannot reach a central server linked to the blockchain database to verify the validity of a traffic sign due to a lack of network connection (e.g., dead zone), the sign can still be verified via the decentralized distribution of the information in the blockchain database (e.g., in the vehicle itself, at the traffic sign, in neighboring vehicles, other locally accessible computers, e.g., free Wi-Fi). This also allows for the receipt of updated elements of the blockchain database.

[0015] According to embodiments, the information about the traffic sign may, in addition to other information, include, for example, at least one of the following information:Information about a spatial position of the traffic sign in a traffic area (e.g. absolute coordinate or kilometerage along a carriageway, position relative to the carriageway); information about a type of traffic sign (e.g. sign number according to the road traffic regulations or type of regulation symbolized by the traffic sign); information about a temporal validity of the traffic sign (e.g. traffic sign applies from time T 1 to time T 2 or traffic sign applies from time T 1 or traffic sign applies until time T 2 ); information about a direction-dependent validity of the traffic sign (i.e. for which direction of travel on the carriageway the traffic sign applies); information about a lane-dependent validity of the traffic sign (i.e. for which lane(s) the traffic sign applies - e.g.only for the leftmost or rightmost lane on a multi-lane carriageway); and information on a relative spatial arrangement of the traffic sign in relation to other adjacent traffic signs (e.g. how is the traffic sign arranged relative to other traffic signs on a support pole or a girder bridge - for example, the order of the traffic signs from top to bottom or from left to right).

[0016] In some embodiments, checking whether the electronic traffic sign is an authorized information source comprises checking whether an identifier of the electronic traffic sign corresponds to a single predetermined identifier or to one of a plurality of predetermined identifiers. Each authorized information source can be assigned a known (predetermined) identifier (e.g., a MAC address, a user name, etc.) during registration, for example. Accordingly, checking the electronic traffic sign for its authorization to change the blockchain database can be performed simply by comparing its identifier with the at least one predetermined identifier.

[0017] In an embodiment not part of the claimed invention, the predetermined identifier can be, for example, an identifier assigned to a road construction authority, the police, the fire department, a regulatory authority, a road construction company, a moving company, a waste disposal company, a street cleaning company, a parking lot operator, or a toll operator. In other words, the aforementioned institutions can be examples of authorized information sources. Restricting the authorized information sources to specific, trustworthy institutions can prevent manipulated data from being introduced into the blockchain database.

[0018] Checking whether the information source is an authorized information source can optionally include one or more further checking steps. Three optional further checking steps are described below: If the information about the traffic sign includes information about a position of the traffic sign, checking whether the information source is an authorized information source can, according to embodiments, include, for example, checking whether the predetermined identifier for the position of the traffic sign is authorized. For example, a certain authorized information source or trusted institution can only be authorized to erect or change traffic signs in a certain area / region. Accordingly, it can be checked whether this is acting within the scope of its locally restricted authorization. A moving company, for example, canOnly be authorized to erect a temporary no-parking sign on a specific street due to a completed move. The aforementioned check ensures that the moving company can only modify the blockchain database within the scope of its authorization.

[0019] If the information about the traffic sign includes information about a type of traffic sign, checking whether the information source is an authorized information source can, according to embodiments, comprise, for example, checking whether the predetermined identifier is authorized for the type of traffic sign. For example, a certain authorized information source or trustworthy institution can only be authorized to erect or change traffic signs of a certain type (e.g., only no-parking signs). Accordingly, it can be checked whether this institution is acting within the scope of its factually limited authorization. For example, a moving company can only be authorized to erect a temporary no-parking sign due to a completed move. The aforementioned check can ensure that the moving company can only change the blockchain database within the scope of its authorization.

[0020] If the information about the traffic sign includes information about the temporal validity of the traffic sign, checking whether the information source is an authorized information source can, according to embodiments, comprise, for example, checking whether the predetermined identifier is authorized for the period of temporal validity of the traffic sign. For example, a certain authorized information source or trustworthy institution may only be authorized to erect or change traffic signs for a certain period of time. Accordingly, it can be checked whether this institution is acting within the scope of its time-limited authorization. For example, a moving company may only be authorized to erect a temporary no-parking sign on a certain day due to a move that has been completed.The aforementioned check ensures that the moving company can only change the blockchain database within the scope of its authorization. Fig. 1 shows a flowchart of an embodiment of a method for providing verified information about a traffic sign; Fig. 2 shows a traffic sign system; Fig. 3 shows a navigation system; and Fig. 4 shows a vehicle.

[0021] In Fig. 1 A method 100 for providing verified information about a traffic sign is shown. The method 100 includes receiving 102 information about the traffic sign from an information source and checking 104 whether the information source is an authorized information source. Only if the information source is an authorized information source does the method 100 further include storing 106 the information about the traffic sign in a blockchain database. If the information source is not an authorized information source, the information about the traffic sign is not stored in the blockchain database. The method 100 further includes permitting 108 read access to the blockchain database.

[0022] Method 100 can provide third parties with the ability to access the verified traffic sign information stored in the blockchain database. The security advantages of blockchain technology against manipulation, combined with the diverse possibilities for conducting legalized transactions, are unmatched by any other cryptographic solution. Method 100 can thus enable the use of blockchain database technology to secure traffic sign infrastructure, for example, for autonomous vehicles.

[0023] Further details and aspects of the method 100 are described in connection with one or more further embodiments. The method 100 may include one or more optional features according to one or more of the further embodiments.

[0024] Fig. 2 shows a traffic sign system 200, which comprises a traffic sign 210 in the form of a sign mounted on a traffic sign carrier 260. The traffic sign carrier 260 is in Fig. 2 illustrated as a support mast, for example. Alternatively, the traffic sign support 260 can also be designed, for example, as a support bridge that spans one or more lanes of a roadway. In addition to the traffic sign 210, the traffic sign system 200 can also include one or more additional traffic signs (not shown). According to the invention, the traffic sign 210 is designed as an electronic traffic sign.

[0025] The traffic sign system 200 further comprises a memory 220 configured to store information about the traffic sign 210. The information about the traffic sign 210 corresponds to database information stored by an authorized information source in a publicly accessible blockchain database 280. Although the blockchain database 280 is depicted as a single entity, in some embodiments the blockchain database 280 may also be a distributed blockchain database. The memory 220 of the traffic sign system 200 may thus be considered an electronic wallet in which the information about the traffic sign 210 is stored. In addition to the location coordinates of the traffic sign 210, its position at the edge of the road or above the road may also be stored in the electronic wallet, for example.If the traffic sign system 200 comprises multiple traffic signs, the different traffic signs can be registered temporarily (i.e., with limited validity) or permanently in the electronic exchange. For each traffic sign, in addition to its validity period, a direction vector indicating a direction-dependent validity, or information about the sequence of the multiple signs on the same support mast or the same support bridge, can be stored in the exchange.

[0026] Furthermore, the traffic sign system 200 includes an output device 230 configured to output the information about the traffic sign (e.g., using a suitable transmitting device and antenna). The traffic sign system 200 is thus capable of outputting its current configuration of traffic signs, e.g., continuously or upon request. As already indicated above, the information can be transmitted in various ways (e.g., optically, WLAN, Bluetooth, UMTS, LTE, VHF, or any other radio signals, etc.).

[0027] Using blockchain cryptographic technologies, every vehicle integrated into the blockchain can verify the validity of the information received from the traffic sign system 200 for its current position and / or time. Safety-relevant driving maneuvers can thus be protected from manipulation by unauthorized or manipulated traffic signs.

[0028] The posting of traffic signs to and from memory 220 in the blockchain database 280 can be performed by various authorized entities (i.e., authorized information sources), since these can be managed and verified via the distributed blockchain database. As already indicated above, rights control can be limited in terms of location, time, and content.

[0029] Bookings can be made, for example, via remote access if the traffic sign system 200 is accessible online. For this purpose, the traffic sign system 200 can optionally include a receiver 240 configured to wirelessly receive information about the traffic sign 210 from a server 270 coupled to the blockchain database 280.

[0030] Alternatively, an authorized transfer can also be performed on-site via a wired connection. For this purpose, the traffic sign system 200 can comprise a wired interface 250 configured to receive the information about the traffic sign 210 via a wired connection from an operating device (e.g., a laptop, tablet computer, or special handheld terminal) coupled to the blockchain database 280, or via a wired connection from the server 270 coupled to the blockchain database 280.

[0031] Likewise, a traffic sign installation 200 that is not accessible online, for example, can be notified of its new, verified occupancy via a passing vehicle. Alternatively or additionally, the receiver 240 can be configured to wirelessly receive the information about the traffic sign 210 from a vehicle 295 linked to the blockchain database 280. In this way, any vehicle integrated into the blockchain can be used as a courier for encrypted delivery of information to the electronic exchange of a traffic sign installation located along the route. This approach can be used, for example, for remote locations or as a fallback solution in the event of disrupted or limited accessibility via cellular networks.

[0032] Fig. 3 further shows a navigation system 300, which accordingly uses a blockchain database to verify received first information 310 about a traffic sign. The first information 310 about the traffic sign can originate from any source or even from an unknown source, which is why it may be unclear whether the first information is correct. The first information 310 can be received, for example, from a transmitter associated with the traffic sign, a digital road map, or an optical recognition system of a vehicle.

[0033] The navigation system 300 therefore compares the first information 310 with second information 320 about the traffic sign stored in a blockchain database 330. The second information 320 is stored in the blockchain database 330 by an authorized information source and is therefore correct or not tampered with.

[0034] Only if the first information matches the second information, i.e. the first information has been verified as correct, does the navigation system 300 use the first information 310.

[0035] The navigation system 300 can thus verify the accuracy of the first information 310. The possibility of manipulating the navigation system 300 by manipulating traffic signs can thus be avoided.

[0036] The navigation system 300 can be, for example, a navigation system implemented in a mobile terminal (e.g., mobile phone, tablet computer, or laptop) or a navigation system installed, used, or implemented in a vehicle.

[0037] Fig. 4Finally, a vehicle 400 is shown, which includes the navigation system 300. For example, the vehicle 400 can be an autonomous vehicle that moves autonomously in traffic using the navigation system 300 (and optionally additional vehicle sensors). Accordingly, manipulation of the vehicle 400 by manipulating traffic signs can be prevented. In particular, safety-relevant driving maneuvers of the vehicle 400 can be protected in this way from manipulation by unauthorized traffic signs. The vehicle 400 can thus be immune to, for example, provoked accidents or traffic violations or disadvantageous route guidance that are intended to be triggered by manipulated traffic signs.

[0038] Alternatively, the verification of traffic signs described in connection with the navigation system 300 can also be performed by any other electronics or processors or programmable hardware components of the vehicle 400. Accordingly, a copy of the blockchain database can also be stored, for example, in a memory of the vehicle 400, or the vehicle 400 can wirelessly receive the information stored in the blockchain database about a traffic sign from a server coupled to the blockchain database via a receiver.

[0039] Similar to what was described above for the traffic sign system 200, other vehicles can also be used to update the copy of the blockchain database stored in the vehicle 400. For example, the vehicle 400 can receive one or more elements of the blockchain database from another (e.g., passing) vehicle and update the local copy of the blockchain database in the vehicle 400 based on the received elements of the blockchain database. For example, in an area without cellular network coverage (e.g., in a dead zone), a vehicle that is offline can receive new database elements from oncoming vehicles that are currently offline themselves but previously received updated data. List of reference symbols

[0040] 100 Method for providing verified information about a traffic sign 102 Receiving information about the traffic sign 104 Checking whether the information source is an authorized information source 106 Storing the information about the traffic sign in a blockchain database 108 Allowing read access to the blockchain database 200 Traffic sign system 210 Traffic sign 220 Storage 230 Output device 240 Receiver 250 Wired interface 260 Traffic sign carrier 270 Server 280 Blockchain database 290 Operating device 295 Vehicle 300 Navigation system 310 First information about the traffic sign 320 Second information about the traffic sign 330 Blockchain database 400 Vehicle

Claims

1. Method (100) for providing verified information about a traffic sign, comprising: receiving (102) information about the traffic sign from an electronic traffic signboard following a change in the traffic sign displayed by the electronic traffic signboard; checking (104) whether the electronic traffic signboard is an authorized information source; storing (106) the information about the traffic sign in a blockchain database, only if the electronic traffic signboard is an authorized source of information; and allowing (108) read access to the blockchain database.

2. Method according to claim 1, wherein the information about the traffic sign comprises at least one of the following pieces of information: - information about a spatial position of the traffic sign in a traffic space; - information about a type of traffic sign; - information about a temporal validity of the traffic sign; - information about a direction-dependent validity of the traffic sign; - information about a lane-dependent validity of the traffic sign; and - information about a relative spatial arrangement of the traffic sign in relation to further traffic signs installed adjacently.

3. Method according to claim 1 or claim 2, wherein checking (104) whether the electronic traffic signboard is an authorized information source comprises: checking whether an identifier of the electronic traffic signboard corresponds to a predetermined identifier.

4. Method according to claim 3, wherein checking (104) whether the electronic traffic signboard is an authorized information source further comprises the following: if the information about the traffic sign comprises information about a position of the traffic sign, checking whether the predetermined identifier is authorized for the position of the traffic sign; and / or if the information about the traffic sign comprises information about a type of traffic sign, checking whether the predetermined identifier is authorized for the type of traffic sign; and / or if the information about the traffic sign comprises information about a temporal validity of the traffic sign, checking whether the predetermined identifier is authorized for the period of temporal validity of the traffic sign.