METHOD FOR ESTABLISHING A DATA CONNECTION AND DATA TRANSFER SYSTEM

Description

[0001] The invention relates to a method for establishing a data connection between an end device in a vehicle and a central module of a stationary local network, as well as a data transmission system for carrying out the method.

[0002] Automated or semi-automated depots or freight forwarding yards may have a stationary local area network (LAN) covering a spatially limited area around the depot, enabling data exchange between a terminal device in an arriving vehicle and the depot itself. However, current automated or semi-automated depots do not utilize the data connection between the terminal device and a central module of the LAN to increase the level of automation.

[0003] Instead, upon arrival at the depot, the driver of the arriving vehicle must dismount to identify and authenticate themselves and determine at which loading / unloading point, e.g., ramp, a loaded cargo is to be unloaded or from which loading / unloading point a cargo to be transported is to be picked up. This is not only time-consuming, but also frequently leads to communication problems between the driver and the depot staff, especially in an international driver environment. As a result, loading and unloading operations, as well as other operational processes at the depot, cannot be carried out smoothly and quickly.

[0004] So far, no automated coordination and communication via the existing stationary local network is planned.

[0005] An automated establishment of a data connection is described, for example, in DE 101 42 193 A1, whereby a data connection is established between an end device in a vehicle and a WAP gateway. Access data is used to establish the data connection; this data is either stored on the vehicle itself or can be requested additionally, depending on the access method.

[0006] German patent DE 103 598 36 A1 describes the automatic establishment of a data connection between end devices in a vehicle and a central unit outside the vehicle, whereby a login procedure is performed before data exchange. For this purpose, the central unit transmits an SMS via the mobile network to a mobile phone in the vehicle. The end devices in the vehicle have access to the mobile phone and can evaluate the transmitted SMS or message to determine whether they are prompted to perform the login procedure. Therefore, no automated connection and authentication of an end device takes place within a local network.

[0007] WO 00 / 70530 further describes how to automatically read a vehicle's data when it arrives at a depot. This is achieved using pre-programmed transmitters and receivers that continuously transmit and receive data without connecting to a stationary local network.

[0008] In DE 10 2014 201 468 B3, it is proposed that access data be made available only locally, thus ensuring that only a user physically present can use the access data for a mobile device (e.g., smartphone, tablet computer). In DE 10 2017 009 015 A1, authorization is provided by requiring the user of the terminal device to receive a task from the central module of the network and to complete this task on the terminal device.

[0009] Furthermore, camera systems are also known that can recognize and identify vehicles based on a camera image.

[0010] Furthermore, DE 101 44 002 A1 discloses the ability to execute vehicle functions via an organizer. For this purpose, selectable interaction codes are stored on the organizer, which can be unlocked via an authorization code and then activated to execute a vehicle function corresponding to the interaction code, for example, opening the vehicle.

[0011] WO 2016 / 106774 A1 also describes how to unlock a terminal using two patterns drawn by a user on a touchscreen. Document US2013304879A1 describes a procedure for configuring an end device to access a wireless communications network managed by a network facility.

[0012] Document US20110081890A1 discloses a method and a corresponding device for providing access to a WLAN for a mobile subscriber. These methods include the identification of a mobile multimode device. Based on this identification, the WLAN is authorized to grant the mobile device access. The mobile device then gains access to the WLAN as a mobile subscriber, enabling interoperability between the two networks.

[0013] Document US2016014820A1 describes how network information can be transmitted to a mobile device via an RFID or NFC tag attached to a Wi-Fi router, which triggers corresponding communication. However, this requires the mobile device to be brought close to the router, essentially touching it.

[0014] The object of the invention is to provide a method for establishing a data connection between an end device in a vehicle and a central module of a stationary local network of a depot, with which vehicle access and communication with a vehicle can be automated and which performs automated coordination of a vehicle on the depot.

[0015] This problem is solved by a method according to claim 1, a service provider backend according to further independent claim 12, and a central module of a stationary, local network according to claim 13. The dependent claims specify preferred embodiments.

[0016] This allows for the advantageous, fully automated establishment of a secure and verified data connection between the end device and the stationary local network, as well as the granting of authorization or access rights, without requiring driver intervention or any other manual input. The connection setup can thus be completely language-independent and without any further manual steps, thereby increasing the level of automation and simplifying and accelerating the overall process at the depot. Furthermore, no additional active querying or request is necessary, as the individual processes are carried out automatically at the given times. Overall, coordination and communication at the depot are therefore significantly simplified.

[0017] The term "authentication" here refers to the process by which a participant, in this case the vehicle or end device, proves its own identity, which is claimed via a username, for example, using an authentication code or password. Using this access data, i.e., the username and / or authentication code, the participant can first be identified and then "authenticated" in a subsequent authentication procedure to determine or verify the participant's authenticity. Following this, the participant can then be authorized for specific access or actions in an authorization procedure.

[0018] Furthermore, a limited local environment of the stationary, local network, in contrast to a global network, e.g. the Internet or a mobile network, means that access to the stationary, local network, e.g. WLAN, is only possible from a limited number of locations, namely in the area or surroundings of the depot.

[0019] Preferably, the access data should also include a subscriber identifier (see username) to identify the terminal device or vehicle and / or a network identifier (see SSID, Service Set Identifier) ​​to identify the stationary, local network and / or an authentication code to authenticate the terminal device or vehicle to the stationary, local network. This access data allows the subscriber to be easily identified and authenticated within the correct network, thus simplifying the overall connection setup.

[0020] Preferably, it is further provided that, in addition to the access data, extended authentication data is provided via the access network. This extended authentication data includes an authentication token for authenticating the end device or vehicle to the stationary, local network, depending on authentication conditions. This allows for the specification of additional conditions that are taken into account during automated authentication. For example, the authentication conditions can define an authentication validity period and / or authentication frequency. Accordingly, the service provider's backend can specify, for example, how long the end device can authenticate itself to the stationary, local network using the authentication code and how often authentication is possible. This is then automatically considered during subsequent authentication processes.

[0021] Preferably, the access data is provided wirelessly and / or via a wired connection through the access network, thus enabling flexible transmission of this data to the terminal device. For example, the access data can be provided wirelessly via the internet and / or a mobile network as the access network. This makes it possible to transfer the access data to the terminal device at virtually any location before the vehicle arrives at the depot.

[0022] Preferably, it is also provided that, upon authorization and verification of the vehicle's authenticity, an access point to the depot, such as a gate or barrier, is automatically opened, and / or that a loading / unloading gate of a loading / unloading point assigned to the vehicle on the depot premises is authorized, either manually or automatically, for loading or unloading cargo. Thus, during the authorization process of verifying the data connection, access points can also be automatically released or opened, advantageously increasing the level of automation on the depot premises.

[0023] Preferably, the loading and unloading points can be assigned based on data transmitted via the data connection, whereby loading and / or unloading information is transmitted over the data connection. Advantageously, other transmittable data relevant for authorization, particularly access to areas of the depot, can also be taken into account. The type of cargo to be loaded or unloaded, as indicated in the waybills and contained in the loading and / or unloading information, can therefore be used to permit or prohibit the vehicle from performing an action within the depot. Additionally, in the event of incorrect loading or theft, the depot or gate can remain locked.

[0024] Preferably, it is further provided that, upon authorization and verification of the vehicle's authenticity, driving information, positioning information, and / or vehicle control data are transmitted to the terminal device for coordinating the vehicle within the depot, e.g., also depending on loading and unloading information. Accordingly, it is advantageously possible to also provide the vehicle with instructions regarding its movement within the depot, i.e., for example, along a specific trajectory and / or at a predetermined maximum speed, preferably linked to authorizations, such as the assigned loading and unloading point, or to which loading and unloading point or parking space the vehicle should move.This simplifies the overall process and coordination at the depot, and this too can be fully automated, as it relies on automatically transmitted data, allowing the system to carry out the authorization procedure automatically. Ideally, this information can be displayed on the driver's device in their language to overcome the aforementioned communication problems and thus contribute to a faster process.

[0025] Preferably, a data connection between the terminal device and the central module of the stationary local network is automatically established when the vehicle and terminal device are within an access area of ​​the depot, with the transmit and receive range also covering this access area. This allows the terminal device, after the access data has been pre-transmitted, to automatically perform authentication at a location immediately before entering the depot, using the access data and, if applicable, extended authentication data. Advantageously, this involves direct network login, which can then immediately perform authentication and authorization. Due to the direct connection to the stationary local network, large volumes of data can be transferred quickly, enabling authorization.The large amounts of data relate to information about the cargo, such as images from the CargoCam (cargo monitoring camera) in the trailer, as well as other data for or about the vehicle. The authorization process itself accounts for a relatively small portion of the data volume.

[0026] Preferably, the automated transmission of the provided access data to the terminal device via the access network is to occur at a specific, predetermined time and / or when the vehicle and / or the terminal device is located at a specific, predetermined position. The position can be determined, for example, using position signals (Global Navigation Satellite System (GNSS): e.g., GPS, GLONASS, etc.), such as based on the distance to the depot. The timing can also be determined based on the vehicle's arrival at the depot. This allows for a predefined timeframe for the automated transmission of the provided access data and / or the extended authentication data.

[0027] According to the invention, a data transmission system for carrying out the method according to the invention is further provided, comprising an end device of a telematics system, in particular a fleet management system, a service provider backend that can be connected to the end device via an access network, and a central module of a stationary, local network. The end device can be a mobile device, e.g., a mobile phone, a tablet, a laptop, or the end device can be permanently installed in the vehicle. This allows for variable configurations, some of which enable simple retrofitting or adaptation.

[0028] The invention will be explained in more detail below with the aid of figures. These show: Fig. 1 a schematic view of a depot with an arriving vehicle; and Fig. 2 a flowchart of the method according to the invention.

[0029] In Figure 1A depot 1 is depicted, which has several loading and unloading points 3 at each of two buildings 2, e.g., ramps, skips, conveyor belts, filling stations, silos, heaps, etc., for loading and unloading a vehicle 5, in particular a commercial vehicle, which may be a single unit or multiple units (with trailers). The depot 1 is accessible via an access point 4, for example, a gate or a barrier. An arriving vehicle 5, for example, a commercial vehicle 5a with a trailer 5b, can enter the area 1a of the depot 1 when the access point 4 is open and move to one of the loading and unloading points 3 to load and / or unload transported cargo F.

[0030] Depot 1 allows for fully or semi-automated processing, utilizing an automated exchange of data D with vehicle 5, i.e., with commercial vehicle 5a and / or trailer 5b. This automated exchange of data D enables both automated access to area 1a of depot 1 and coordination of vehicle 5 within depot 1.

[0031] Coordination in this context means that vehicle 5, for example, can be guided to the correct building 2 and to the relevant loading and unloading point 3. For this purpose, a trajectory B can be specified for vehicle 5. In conjunction with this, vehicle control data DF for depot 1, such as a maximum speed vMax, can also be specified. Furthermore, the driver can be informed of certain time-related procedures at depot 1. Important information about the loaded or to-be-loaded cargo F can also be exchanged. This significantly simplifies communication, as the driver of vehicle 5 does not have to get out of the vehicle, and no misunderstandings arise when, for example, standardized data D is used.

[0032] To enable this, the vehicle 5 has an assigned terminal device 6, which is part of a telematics system TS, in particular a fleet management system (FMS). The terminal device 6 can be permanently installed in the vehicle 5, i.e., in the commercial vehicle 5a or the trailer 5b, or it can be a mobile terminal device 6a. The mobile terminal device 6 can be, for example, a mobile phone, laptop, tablet, etc., on which the software of the fleet management system FMS is installed as an application or program.

[0033] The terminal device 6 is configured to receive access data Z and, if applicable, extended authentication data A from a service provider backend 8, for example, from a program or server of a service provider, via an access network 7. Data transmission via the access network 7 is preferably encrypted, so that the access data Z and, if applicable, the extended authentication data A can be transmitted securely.

[0034] The access network 7 is advantageously wireless, and can be, for example, the internet 7a and / or a mobile network 7b. However, the access network 7 can also be at least partially wired. For example, the terminal device 6 can be connected via cable to a router in a workshop or on any company premises, which in turn is connected directly to the service provider backend 8 or indirectly to the service provider backend 8 via the internet. Preferably, however, a wireless access network 7 is provided, via which the access data Z and, if applicable, the extended authentication data A can be received while the vehicle 5 is in motion.

[0035] The terminal device 6 in the arriving vehicle 5 is also equipped to automatically connect to a stationary and local network 10, for example, a WLAN network 10a, of the depot 1. For this purpose, the terminal device 6 can establish a data connection 9 with a central module 11 of the stationary local network 10. The central module 11 has a specific transmission and reception range 12, which preferably covers part of the depot 1a area as well as an access area 13 of the depot 1. The access area 13 is the area in front of the entrance 4 of the depot 1, into which an arriving vehicle 5 enters before it can pass through the open entrance 4 into the depot 1 area 1a.

[0036] In contrast to a global network, the transmission and reception area 12 covers only a local or limited spatial environment 14, which here mainly comprises the area around the depot 1. Accordingly, access to the stationary, local network 10 is only possible within the transmission and reception area 12 of the central module 11 and thus from a very limited number of locations.

[0037] As soon as the terminal device 6 enters this transmit and receive range 12, the data connection 9 between the central module 11 and the terminal device 6 can be established. The establishment of the data connection 9 for the exchange of data D is carried out, for example, according to the flowchart in Figure 2In a first step ST1, which is carried out in a defined situation, for example at a specific time T and / or at a specific position X of the vehicle 5, the access data Z and, if applicable, the extended authentication data A are transmitted via the access network 7 to the terminal device 6 of the telematics system TS or fleet management system FMS. The driver in the vehicle 5 is preferably unable to read or decrypt these encrypted access data Z and, if applicable, the extended authentication data A, which were generated and provided by the service provider backend 8 in a previous step ST0, and therefore cannot be modified.

[0038] Vehicle 5 subsequently arrives at depot 1 and eventually enters access area 13 and thus also the transmit and receive area 12 of the stationary, local network 10 or the central module 11. In a second step, ST2 (authentication) then establishes a data connection 9 between the terminal device 6 and the central module 11 using the previously provided access data Z in a login procedure L.

[0039] Using the access data Z, it can be determined in a first intermediate step ST2.1 whether a network identifier KN of the stationary, local network 10 is correct, whereby this can be done, for example, using a service set identifier SSID transmitted with the access data Z.

[0040] In a second intermediate step ST2.2, a participant identifier TK, transmitted via the access data Z, is entered or transmitted, which allows the participant or the relevant vehicle 5 to be identified. This is comparable to entering a username, which in this case is created and provided by the service provider backend 8 and assigned to the respective vehicle 5.

[0041] Subsequently, in a third intermediate step ST2.3, an authentication code AC (see password) transmitted via the access data Z is entered or transmitted. This code is individually generated beforehand by the service provider's backend 8 and assigned to the participant ID TK. The terminal device 6 or the vehicle 5 authenticates itself to the stationary, local network 10 using the authentication code AC.

[0042] In a further, optional fourth intermediate step ST2.4, depending on the security requirements of the stationary, local network 10, the previously transmitted extended authentication data A can also be used. This could be, for example, an authentication token AT or an access profile containing additional authentication conditions AB. For instance, an authentication validity AG can be defined, i.e., the period during which the vehicle 5 or the terminal device 6 can authenticate itself in the stationary, local network 10 using the authentication token AT. If the authentication token AT expires, a subsequent authentication procedure P1 fails or an existing data connection is interrupted. Furthermore, an authentication frequency AH can also be defined, which specifies that the authentication token AT can only be used for one login procedure L.

[0043] Using these access data Z and, optionally, the extended authentication data A, the stationary, local network 10 can identify and authenticate the vehicle 5 in a subsequent third step ST3 in an authentication procedure P1. Based on the access data Z, which is individually generated for each vehicle 5, the authenticity of the vehicle 5 or the terminal device 6 is checked, and consequently, whether the vehicle 5 is authorized to enter the depot 1.

[0044] In a fourth step ST4, after successful authentication of the vehicle 5 or the terminal device 6, an authorization procedure P2 takes place. In this procedure, the vehicle 5 is granted access to both the stationary, local network 10 and the depot 1. This is preferably expressed by the automatic opening of access 4 to depot 1. Furthermore, data D for coordination and communication can be exchanged via the data connection 9 that is then established.

[0045] In an optional intermediate step ST4.1, loading information IB and / or unloading information IE can be exchanged via data connection 9. This information specifies which cargo F the vehicle 5 has loaded or which cargo F is to be loaded onto the vehicle 5.

[0046] This allows access to individual loading and unloading points 3 for loading and unloading within the authorization procedure P2. For example, loading and unloading gates 15 at the relevant loading and unloading points 3, for which authorization has been granted based on the information IB, IE, can be opened manually or automatically. This ensures that the driver of vehicle 5 only has access to the loading and unloading points 3 assigned to him based on his order.

[0047] The respective vehicle 5 (participant) can therefore register in the stationary, local network 10 in a targeted and fully automated process using the access data Z and, if applicable, the extended authentication data A, by means of a corresponding data exchange, and after identification, authentication and authorization in the stationary, local network 10 automatically receives access with the correspondingly defined permissions.

[0048] Upon successful completion of the authentication and authorization procedures P1 and P2, a number of additional functions can optionally be performed simultaneously through an automated exchange of data D via the then verified data connection 9: Based on the loading and unloading information IB and IE, the central module 11 can, for example, transmit driving information IF and / or positioning information IS and / or vehicle control data DF to the terminal device 6 via data connection 9 (ST5). The driving information IF specifies how the vehicle 5 must move after entering the area 1a of the depot 1 in order to reach the correspondingly assigned loading and unloading point 3. This information can be communicated to the driver via the terminal device 6, for example, in the form of navigation instructions and / or a trajectory B.The parking information (IS) can also be used to transmit instructions regarding the parking space, such as a parking space number identifying the assigned loading and unloading point 3, which can also be displayed visually on the terminal device 6. The vehicle control data (DF) can additionally include, for example, a maximum speed (vMax) that must be observed in the depot 1.

[0049] Due to the transmission of the respective data D, i.e., the access data Z, the extended authentication data A, the driving information IF, the positioning information IS, the unloading information IE, the loading information IB, etc., via the data connection 9 to the central module 11, communication and coordination can take place independently of language and, above all, fully automatically. The driver can therefore understand and receive all instructions provided in the stationary, local network 10 or via the central module 11 using their terminal device 6. At the same time, identification, authentication, and authorization in the stationary, local network 10 can take place without the driver's intervention, thus significantly increasing the degree of automation. Reference symbol list (part of the description)

[0050] 1 Depot 1a Site 2 Building 3 Loading and unloading point 4 Access 5 Vehicle 5a Commercial vehicle 5b Trailer 6 Terminal device 6a Mobile terminal device 7 Access network 7a Internet 7b Mobile network connection 8 Service provider backend 9 Data connection 10 Stationary local network 10a WLAN network 11 Central module 12 Transmit and receive range 13 Access area 14 Environment 15 Loading and unloading point gate 20 Data transmission system A Extended authentication data AB Authentication conditions AC Authentication code AG Authentication validity AH Authentication frequency AT Authentication token B Trajectory D Data DF Vehicle control data F Freight FMS Fleet management system IB Loading information IEE Unloading information IF Journey information IS Position information KN Network identifier KT Participant ID L Login Procedure P1 Authentication Procedure P2 Authorization Procedure SSID Service Set Identifier T Time T Telematics System v Maximum Speed ​​X Position Z Access Data ST0,ST1,ST2,ST2.1,ST2.2,ST2.3,ST2.4,ST3,ST4,ST4.1,ST5 Steps of the procedure

Claims

1. Method for establishing a data connection (9) between a terminal device (6) of a telematics system (TS), in particular a fleet management system (FMS), in a vehicle (5), in particular a commercial vehicle (5a) and / or trailer (5b), and a central module (11) of a stationary local network (10), wherein the stationary local network (10) covers a delimited spatial environment (14) of a depot (1), the method comprising at least the following steps: - providing access data (Z) for identifying and authenticating the terminal device (6) in the stationary local network (10), wherein the access data (Z) is provided via an access network (7), wherein the access network (7) is different (ST0) from the stationary local network (7); - automatedly transmitting the provided access data (Z) to the terminal device (6) using the access network (7) (ST1), wherein the provided access data (Z) is automatedly transmitted to the terminal device (6) using the access network (7) at a specific determined time (T) and / or when the vehicle (5) is at a specific determined position (X); - automatedly establishing a data connection (9) between the terminal device (6) and the central module (11) of the stationary local network (10) when the vehicle (5) comprising the terminal device (6) is located (ST2) in a transmitting and receiving range (12) of the central module (11), wherein the terminal device (6) automatically identifies and authenticates itself to the stationary local network (10) in a login procedure (L) on the basis of the transmitted access data (Z) (ST2.1, ST2.2, ST2.3, ST2.4), - automatedly authenticating the terminal device (6) on the basis of the access data (Z) in order to verify the authenticity of the terminal device (6) (ST3); and - automatedly authorizing the terminal device (6) and / or the vehicle (5) if the terminal device (6) is classified as authentic (ST4) - by means of the automated authorization step if the vehicle (5) is authentic (ST4), transmitting driving information (IF) and / or positioning information (IS) and / or vehicle control data (DF) to the terminal device (6) in order to coordinate the vehicle (5) at the depot (1) (ST5).

2. Method according to claim 1, characterized in that the vehicle (5) is automatically granted access to the depot (1) and / or the terminal device (6) is automatically granted an exchange of data (D) via the formed data connection (9) if the terminal device (6) is classified as authentic.

3. Method according to claim 1 or claim 2, characterized in that the access data (Z) include a subscriber identifier (TK) for identifying the terminal device (6) (ST2.2) and / or a network identifier (KN) for identifying the stationary local network (10) (ST2.1) and / or an authentication code (AC) for authenticating the terminal device (6) to the stationary local network (10) (ST2.3).

4. Method according to any of the preceding claims, characterized in that, in addition to the access data (Z), extended authentication data (A) is provided (ST2.4) via the access network (7), the extended authentication data (A) comprising an authentication token (AT) for authenticating the terminal device (6) to the stationary local network (10) depending on authentication conditions (AB).

5. Method according to claim 4, characterized in that an authentication validity (AG) and / or authentication frequency (AH) is determined via the authentication conditions (AC).

6. Method according to any of the preceding claims, characterized in that the access data (Z) are provided via the access network (7) wirelessly and / or via a wired connection.

7. Method according to claim 6, characterized in that the access data (Z) are provided wirelessly via the Internet (7a) and / or via a mobile network (7b) as an access network (7).

8. Method according to any of the preceding claims, characterized in that, by means of the authorization if the vehicle (5) is authentic (ST4), an entrance (4) to the depot (1) is automatically opened and / or a manual or automatic opening of a loading and unloading bay gate (15) of a loading and unloading bay (3) assigned to the vehicle (5) on a site (1a) of the depot (1) for loading or unloading freight (F) is permitted.

9. Method according to claim 8, characterized in that the loading and unloading bay (3) is assigned depending on data (D) transmitted via the data connection (9), loading information (IB) and / or unloading information (IE) being transmitted (ST4.1) for this purpose via the data connection (9).

10. Method according to any of the preceding claims, characterized in that the stationary local network (10) comprising the delimited spatial environment (14) is a WLAN network (10a).

11. Method according to any of the preceding claims, characterized in that a data connection (9) is automatedly established between the terminal device (6) and the central module (11) of the stationary local network (10) when the vehicle (5) comprising the terminal device (6) is located in an entrance region (13) of the depot (1), the transmitting and receiving range (12) of the central module (11) also covering the entrance region (13).

12. Data transmission system (20) for establishing a data connection between a terminal device of a telematics system, in particular a fleet management system, in a vehicle, in particular a commercial vehicle and / or trailer, and a central module of a stationary local network, wherein the stationary local network covers a delimited spatial environment of a depot; for carrying out all the method steps of a method according to any of the preceding claims 1-11.

13. Central module of a: stationary local network (10) for use in a data transmission system (20) according to claim 12 for establishing a data connection to a terminal device of a telematics system, in particular a fleet management system, in a vehicle, in particular a commercial vehicle and / or trailer, wherein the stationary local network (10) covers a delimited spatial environment (14) of a depot (1), wherein the central module (11) is designed to carry out all the steps of a method according to any of claims 1 to 11.