UWB-TOKEN

Description

[0001] The invention relates to a UWB token, a UWB monitoring system and a method for controlling a UWB monitoring system.

[0002] Surveillance systems utilize modern sensor technology to collect detailed, diverse, and extensive data for monitoring purposes, for example, of spatial areas. Access cards or key cards, for example, are used to monitor access to buildings. Individual access cards or key cards can be distinguished by card IDs and / or cryptographic keys assigned to the cards. Since such card IDs, like cryptographic keys, are purely data values, they can be transferred to another card (once they are known).

[0003] Clones resulting from such a data copying process can be used for deception and / or manipulation purposes.

[0004] US 2014 / 354414 A1 describes a method for reading an RFID tag, comprising receiving a signal from the tag comprising a structural mode and an antenna mode, and selectively analyzing a time duration of the received signal corresponding to the antenna mode.

[0005] US 2015 / 199602 A1 describes radio frequency identification (RFID) tags that generate a unique radar signature through passive reflection of an electromagnetic signal. In particular, frequency-, phase-, and / or amplitude-shift-encoded RFID tags are described.

[0006] CN 105 956 645 A describes a chipless electronic tag using a double-sided dielectric substrate. The electronic tag comprises an upper conductive pattern layer, a middle dielectric layer, and a lower conductive ground layer. The conductive pattern layer is composed of six rectangular complementary open resonant microstrip loops of different sizes and a characteristic 50-ohm impedance signal transmission microstrip line. The six rectangular complementary open resonant microstrip loops of different sizes form a 6-bit coding resonant circuit on a dielectric plate.Different code combinations can be realized by changing the size of the different rectangular complementary open resonant microstrip loops, adjusting the resonant frequency of the corresponding rectangular complementary open resonant microstrip loops, and increasing or removing the rectangular complementary open resonant microstrip loops.

[0007] The invention is based on the object of creating a token with improved identity assignment.

[0008] The object underlying the invention is achieved by the features of the independent patent claims. Embodiments of the invention are specified in the dependent patent claims.

[0009] Embodiments include a UWB token comprising a UWB antenna for transmitting and receiving UWB signals. The UWB antenna comprises a plurality of conductive antenna structures. The antenna structures have a geometric coding with an individual resonance pattern that identifies the UWB token. Embodiments may have the advantage that the UWB token is identifiable by its resonance pattern, which is a hardware feature. Such a hardware feature makes it difficult to simply clone the UWB token by copying identification data.

[0010] According to embodiments, for example, a UWB communication channel is established between the UWB token and one or more UWB communication devices, e.g., UWB sensors. During communication between the UWB token and the one or more UWB communication devices, UWB signals from the UWB token are received by the UWB communication devices. These signals can be measured, and the underlying resonance pattern can be referenced to identify the UWB token based on individual resonance patterns of the antenna structures. For example, one or more reference resonance patterns are provided. The determined resonance pattern of the UWB token is compared with the one or more reference resonance patterns.If a deviation of the determined resonance pattern from one of the reference resonance patterns falls below a predefined threshold, for example, the determined resonance pattern is identified as the corresponding reference resonance pattern and the UWB token is identified as a UWB token to which or whose token ID the reference resonance pattern is assigned.

[0011] According to embodiments, the antenna structures for the UWB token are individually tuned to one another, so that the electromagnetic waves transmitted by the antenna structures overlap and exhibit an individual resonance pattern that identifies the UWB token. Depending on the complexity of the configuration and mutual tuning of the antenna structures, cloning requires considerable experimental effort or disassembling the UWB token to be cloned. With hardware features, in contrast to identification data, the corresponding data can be easily read. In particular, phishing attacks, in which corresponding identification data is requested from the user under false pretenses, are not possible. Furthermore, it is considerably more difficult and time-consuming to gain direct physical access to the UWB token than to retrieve identification data, for example, digitally.For example, access to the hardware features would only be possible if the user hands over the UWB token or if it is stolen.

[0012] According to embodiments, the conductive antenna structures comprise strip-shaped and / or planar antenna elements. Embodiments can have the advantage that, through the geometric design of the strip-shaped and / or planar antenna elements, a multitude of different resonance patterns can be realized, which can be used to individualize a multitude of UWB tokens.

[0013] According to embodiments, the antenna structures comprise a plurality of tuned individual antennas that form a patch antenna. Embodiments can have the advantage that a patch antenna can be designed to be particularly space-saving and flat, making it well-suited, for example, for integration on printed circuit boards. The patch antenna can consist, for example, of metal surfaces, such as rectangular metal surfaces whose long side corresponds to a length of λ / 2. The metal surface thus acts as a resonator, similar to dipole antennas. A patch antenna can have a directional effect. For example, the patch antenna can be combined with a reflector, such as a metal surface, for signal amplification. The reflector is arranged, for example, behind the patch antenna.

[0014] According to embodiments, the individual antennas can be designed, for example, as a loop for inductive antenna coupling, as a surface for capacitive antenna coupling and / or as an antenna stub, omnidirectional antenna, wire, etc. for antenna coupling using an E-field.

[0015] UWB ("Ultra Wideband") refers to the wireless transmission of electromagnetic pulsed signals over a plurality of parallel radio channels with low transmission power, e.g., down to a maximum of 1 mW. This involves using frequency ranges with a bandwidth of at least 500 MHz and / or at least 20% of the arithmetic mean of the lower and upper limit frequencies of the used frequency band.

[0016] UWB is based on generating pulses with the shortest possible pulse duration, which is why the spectrum emitted or received via the UWB antenna is larger or wider, according to the laws of Fourier transformation, the shorter the pulse duration.

[0017] The product of the pulse's temporal and spectral width remains constant. The total transmission power of a few milliwatts or less is distributed over such a wide frequency range that no interference is expected for radio operation using narrowband transmission methods. Therefore, it is difficult or impossible to detect that UWB transmission is taking place at all. To a narrowband receiver, a UWB signal appears more like noise. This enables communication that is difficult to locate and can be used in the same frequency range as conventional transmission methods.

[0018] UWB does not use a fixed carrier frequency that is modulated. Instead, data transmission is based on pulse phase modulation or pulse position modulation (PPM), for example, using a plurality of individual pulses. Another option for data transmission using UWB is modulation of the polarity and / or amplitude of the pulses. If the timing of the individual pulses differs sufficiently, multiple UWB transmission channels can be operated in the same spatial area without mutual interference.

[0019] With increasing bandwidth, transmission capacity increases, allowing UWB systems to deliver useful bit rates up to the Gbps range. UWB transmission ranges can range from a few meters to hundreds of meters.

[0020] UWB technology also enables the implementation of a radar method using UWB radar sensors. As with UWB data transmission, a wide-bandwidth alternating electromagnetic field with low field strengths is generated. Depending on the nature of objects within the propagation range of the alternating electromagnetic field, this will deform the alternating field. The resulting field can be detected by a UWB sensor. Knowing both the initial field and the resulting field allows for the cause of the detected deformation and thus the type and geometry of the object(s) within the propagation range of the alternating electromagnetic field.

[0021] UWB radar sensors, for example, operate at frequencies between 30 MHz and 12.4 GHz. Depending on the application, resolutions ranging from centimeters to a few millimeters can be achieved with operating bandwidths of 5 GHz.

[0022] In a radar method, short pulses are emitted and compared with the pulse patterns reflected by the object(s). This allows geometric parameters such as distance, thickness, length, position, body shape, movement, and / or speed to be determined. Objects can also be detected through clothing and walls. The properties of the propagation medium for the electromagnetic fields are assumed to be known.

[0023] UWB can prevent the tracking of mobile devices, as devices communicating via UWB, such as UWB tokens, cannot be located without knowledge of the UWB coding used. Furthermore, the relatively short range of UWB ensures that remote tracking and / or eavesdropping can be effectively prevented. Furthermore, UWB coding provides independent, instantaneous encryption of the transmitted data, thus protecting it against eavesdropping. Furthermore, due to its wide frequency band, UWB is highly resistant to jamming. Due to these special technical properties, which are advantageous for security applications, a monitoring system can be implemented using UWB that can guarantee a high level of protection for processes and the sensor data contained or used therein, especially in connection with personal sensor data of participants.In particular, a high level of data transmission security can be ensured using UWB.

[0024] Since UWB technology also allows for higher data rates, it can be particularly advantageous for transmitting sensor data in the form of video data, audio data and / or other extensive sensory measurements.

[0025] A UWB token is a hardware token in the form of a mobile, portable electronic device configured for wireless communication via UWB. A UWB token can also be configured to determine position data based on a time-of-flight measurement and triangulation of UWB signals received from localization sensors of the UWB surveillance system. For example, the UWB token can be designed as a document or integrated into a document, particularly a valuable or security document.A "document" refers to paper-based and / or plastic-based documents, such as electronic identification documents, in particular passports, identity cards, visas, driver's licenses, vehicle registration documents, vehicle registration documents, company ID cards, health cards, or other ID documents, as well as chip cards, means of payment, in particular banknotes, bank cards, and credit cards, waybills, or other forms of authorization. For example, one or more attributes of a user or object associated with the document are stored in the memory of such a document.

[0026] A UWB sensor is understood to be a sensor or armature that is configured to transmit acquired data, e.g., sensor data, via UWB. Furthermore, a UWB sensor, such as a UWB radar sensor or a UWB localization sensor, can be configured to acquire sensor data via UWB. Alternatively, a UWB sensor can be configured to acquire the sensor data using a UWB-independent method, such as an optical, acoustic, chemical, thermal, electromagnetic, and / or vibration-based method. According to embodiments, the UWB sensors are configured for data transmission exclusively via UWB. According to embodiments, one or more of the UWB sensors can additionally be configured to transmit acquired data via a wired data connection.According to embodiments, some of the UWB sensors of the UWB monitoring system are configured to transmit acquired data via a wired data connection. According to embodiments, all of the UWB sensors of the UWB monitoring system are configured to transmit acquired data via a wired data connection.

[0027] Sensor data refers to data acquired by one of the UWB sensors, i.e., for example, optical, acoustic, chemical, thermal, electromagnetic, and / or vibration-based data. The sensor data is transmitted by the sensing UWB sensors within the UWB monitoring system via UWB. According to embodiments, one or more of the UWB sensors can additionally be configured to transmit acquired data via a wired data connection. The sensor data can also be data acquired by the UWB sensors via UWB. For example, the sensor data is sensor data from a UWB radar sensor or a UWB localization sensor.

[0028] According to embodiments, the UWB token comprises a band configured to carry the UWB token. Embodiments may have the advantage that a user can comfortably wear the UWB token on their body, for example, around their neck or wrist, using the band. Alternatively, the UWB token can be attached to a piece of clothing, an accessory, a bag, or a wallet using the band and carried by the user. Embodiments may have the advantage that, in addition to securely carrying the UWB token, the use of a band can also set the UWB token in motion, particularly in pendulum motions, as the user moves. This can be used both for energy generation and for user authentication.

[0029] According to embodiments, the UWB antenna is at least partially integrated into the band, and at least some of the conductive antenna structures extend along the band, i.e., a longitudinal direction or extension direction of the band. Embodiments may have the advantage that the antenna structure can be integrated into the band. For example, the entire UWB token can be integrated into the band. Alternatively, the UWB token can be designed compactly, and the antenna structure can be partially or completely integrated into the band. Embodiments may have the advantage that the band offers sufficient space for a UWB antenna with conductive antenna structures that have an individual geometric configuration. The more space available, the more geometric design options open up.

[0030] According to embodiments, the band comprises one or more sensors. The sensors can, for example, comprise a motion sensor and / or sensors for detecting vital functions of a wearer of the band, such as pulse and / or respiration. Using the sensors, it can be determined, for example, whether the UWB token is being worn, and / or the wearer of the UWB token can be authenticated, for example, using a movement pattern of the UWB token detected by the sensors when worn by the wearer, a pulse pattern of the wearer detected by the sensors, and / or a breathing pattern of the wearer detected by the sensors.

[0031] According to embodiments, the band comprises a display device, which, for example, comprises a display and / or one or more LEDs. The display device can, for example, display a result of an authentication, e.g., its success, using the one or more sensors. Furthermore, the display device can, for example, display a charging status of an energy storage module, e.g., an accumulator, and / or an energy generation status of an energy generation module of the UWB token.

[0032] UWB, for example, operates in the 3 to 9 GHz range. A UWB antenna can therefore be designed accordingly small. If a user is equipped with a band, such as a collar or bracelet, a number of conductive antenna structures can be applied to the band.

[0033] According to embodiments, the UWB token comprises an energy generation module which is configured to generate electrical energy for operating the UWB token by converting kinetic energy into electrical energy. The converted kinetic energy comprises, for example, kinetic energy from the pendulum movement of the band when a user wears the UWB token. Embodiments can have the advantage that a pendulum movement caused by wearing the UWB token can be used to generate energy. This makes it possible to provide a self-sufficient energy supply for the UWB token. According to embodiments, the UWB token further comprises an energy storage element for storing the generated electrical energy, such as a battery or an accumulator. According to embodiments, the energy storage element can further be configured to charge orPre-charging with electrical energy using an external energy source, for example, wirelessly inductively or via a power cable. Embodiments can have the advantage of ensuring that the UWB token has sufficient electrical energy available for operation even after a prolonged idle period and / or initially before being applied by the user.

[0034] If the UWB token is located on the user by means of a band to be worn, the UWB token naturally oscillates with the user's movements when worn, so that elements of the UWB token can convert kinetic energy of the oscillating movement to generate energy and / or record movement data of the oscillating movement to authenticate the user.

[0035] According to embodiments, the converted kinetic energy comprises, for example, kinetic energy from pulling on the band or unrolling the band and / or rolling up the band. For example, a part of the band is rolled up on a rolling device or a rolling device with a rolled-up tension band is arranged on the band. By pulling on the band or the tension band, the rolled-up band or tension band is unrolled. For example, the rolling device comprises a rolling-up mechanism for rerolling the unrolled band or tension band. The rolling-up mechanism is, for example, spring-driven, wherein a spring is tensioned during unrolling and the spring force stored in the spring when the spring is subsequently relaxed is converted into a mechanical force for rolling up the band or tension band.

[0036] According to embodiments, the energy harvesting module is configured to convert kinetic energy into electrical energy using an electromagnetic, piezoelectric, and / or electrostatic method. Embodiments may have the advantage of providing efficient harvesting of electrical energy from pendulum movements of the UWB token.

[0037] Kinetic energy can occur when the UWB token is worn, for example, in the form of vibrations of the UWB token, random displacements of the UWB token, and / or forces acting on the UWB token. Such kinetic energy can be converted into electrical energy using, for example, electromagnetic, piezoelectric, and / or electrostatic mechanisms.

[0038] For example, the UWB token provides an inertial frame in which a movably mounted, e.g., spring-loaded inertial mass is arranged. Movements or vibrations of the inertial frame are transmitted to the inertial mass, generating a relative displacement between the inertial frame and the inertial mass. Furthermore, strains can occur. Such a system has a resonant frequency, which can, for example, be designed to correspond to the frequencies of the typical vibrations occurring when the UWB token is worn. The UWB token can, for example, be configured for a plurality of resonant frequencies and / or for a wide frequency bandwidth.

[0039] The conversion mechanism for converting kinetic energy into mechanical energy can, for example, exploit mechanical strains and / or relative displacements within the system. A strain effect exploits deformation and uses, for example, an active material, such as a piezoelectric material, to generate electrical energy from the strain. With a relative displacement, either the velocity or position of the displacement can be used to harvest energy. Velocity is typically associated with electromagnetic energy conversion, while position is associated with electrostatic energy conversion.

[0040] Piezoelectric conversion utilizes the piezoelectric effect, which occurs when certain materials subjected to mechanical stress become electrically polarized. Conversely, these materials deform when exposed to an electric field. Piezoelectric materials come in a variety of forms and include, for example, single crystals such as quartz, piezoceramics such as lead zirconate titanate (PZT), thin films such as sputtered zinc oxide, screen-printable thick films based on piezoceramic powders, or polymer materials such as polyvinylidene fluoride (PVDF). Piezoelectric materials generally exhibit anisotropic properties, meaning the properties of the material differ depending on the direction of force and the orientation of the polarization and electrodes.

[0041] Electromagnetic conversion uses electromagnetic induction, which generates an electric current in a conductor within a magnetic field. The conductor can be in the form of a coil, for example. Electric current is generated in the conductor, for example, by a movement of the conductor within the magnetic field or by a change in the magnetic field.

[0042] An electrostatic conversion uses relative motion between dielectrically isolated electrodes, forming a capacitor. The electrodes become charged. Work against the electrostatic force between the electrodes results in harvested electrical energy.

[0043] According to embodiments, the UWB token comprises a motion sensor for capturing movement data of the band when the user wears the UWB token. The movement data of the band includes data from the band's pendulum movements. The UWB token further comprises an authentication module for behavior-based authentication of the user wearing the UWB token using the captured movement data.

[0044] The UWB token includes a motion sensor for capturing movement data from the band when the user wears the UWB token. The band's movement data includes data on the band's oscillating movements while the user is wearing the token. Furthermore, the UWB token includes an authentication module for behavior-based authentication of the user wearing the UWB token using the captured movement data.

[0045] Embodiments can have the advantage that movements of the UWB token resulting from the movements of the user carrying the UWB token can be recorded using the motion sensor. Since this movement data describes or quantifies movements of the UWB token based on movements of the user that are characteristic of the user, the recorded movement data is also characteristic of the user and can be used for their authentication. Recorded movement data is data from movements of the UWB token that are caused by the user carrying the UWB token with them, for example, wearing it on their body. Due to the characteristic movements of the user, the UWB token is moved in a manner that is characteristic of the user. This is even the case if the user is not actively interacting with the UWB token, e.g.does not use any user interface of the UWB token, such as a button, a keyboard, a touchscreen, or a microphone.

[0046] The motion sensor can, for example, comprise an acceleration sensor. A movement can be calculated, for example, by integrating acceleration measurements recorded by the acceleration sensor. The motion sensor can, for example, also detect its position in space and / or changes in position. For example, the motion sensor comprises a gyroscope. The movement data recorded by the motion sensor can be, for example, acceleration, inclination, and / or position data.

[0047] According to embodiments, the authentication module comprises a classification module configured to recognize one or more generic movement patterns using movement data. For example, the classification module is pre-trained to recognize the generic movement patterns using training data sets with movement data from a user cohort. The behavior-based authentication of the user using the UWB token comprises the following steps: Capturing the movement data by the motion sensor of the UWB token, inputting the captured movement data into the classification module, generating a classification result by the classification module as to whether the user carrying the UWB token is a user registered in the UWB token, generating an authentication signal if the classification result meets a verification criterion, wherein the authentication signal signals successful authentication of the user carrying the UWB token.

[0048] Embodiments can have the advantage that user authentication is enabled simply by carrying the UWB token. This ensures that the mobile, portable UWB token is actually carried by the assigned user. This prevents a user from parting with their UWB token for deceptive purposes, i.e., exchanging it, leaving it lying around, or handing it over to another person. Particularly if central processing and / or storage of personal data is to be avoided, monitoring the position of UWB tokens enables monitoring of the whereabouts of the assigned users without requiring the user's personal data to be centrally processed and / or stored.However, such indirect location monitoring requires the presence of the UWB tokens used on the respective assigned user, so that the position of the assigned user can be equated with the position of the UWB token. This correspondence can be ensured through authentication. In other words, the presence of the UWB token on the assigned user can be verified.

[0049] The verification criterion may, for example, include a sufficiently high degree of agreement between the recorded movement data and one or more reference values ​​stored for the registered user. Furthermore, the verification criterion may include that the recorded movement data and / or the one or more reference values ​​used do not exceed a maximum age.

[0050] According to embodiments, the user is registered as a user of the UWB token during a learning phase. According to embodiments, the learning phase includes capturing the user's movement data using an authentication sensor in the form of a motion sensor of the UWB token and extracting one or more reference values ​​characteristic of the user to be registered.

[0051] According to embodiments, recorded movement data can be used to adapt and / or improve the reference values ​​stored for the corresponding user in the event of successful user authentication.

[0052] According to embodiments, the reference values ​​are stored in a memory of the UWB token. Embodiments can have the advantage that the reference values ​​are only stored locally on the UWB token and thus remain under the control of the assigned user. For example, the reference values ​​are stored in a protected memory area of ​​the memory of the mobile, portable UWB token. A "protected memory area" is understood here to be an area of ​​an electronic memory to which access, for example, read access or write access, is possible exclusively via a processor coupled to the memory. The processor coupled to the memory enables access to the protected memory area, for example, only if a required condition is met.This condition can, for example, be a cryptographic condition, in particular successful authentication and / or successful authorization verification. For example, access to certain cryptographic programs and / or service applications is restricted.

[0053] According to embodiments, the reference values ​​are stored in encrypted form in the memory of the UWB token. According to embodiments, the encrypted reference values ​​are decrypted to validate the captured authentication data. According to embodiments, the captured authentication data is encrypted for validation using the encrypted reference values.

[0054] According to embodiments, the UWB token is configured to repeatedly perform the steps of capturing the movement data, entering the movement data, and generating the classification result. The behavior-based authentication of the user by the UWB token further comprises storing the respectively generated classification results in a memory of the UWB token. Generating the authentication signal comprises: in response to an authentication request, accessing the memory of the UWB token to read the stored classification result, reading the classification result from the memory of the UWB token, evaluating the read classification result using the verification criterion.

[0055] Embodiments may have the advantage that the classification results can be pre-stored and are immediately available in the event of an authentication request. For example, the steps of capturing the movement data, entering the movement data, and generating the classification result are repeated continuously, at fixed time intervals, or randomly. For example, repetition occurs at short time intervals of seconds, e.g., 10, 20, 30, 40, 50 seconds, or minutes, e.g., 1, 2, 3, 4, 5, 10, 15, 20, 25, 30 minutes.

[0056] According to embodiments, authentication is used to monitor the presence of the UWB token on the associated user. The authentication request is received, for example, by a UWB monitoring system. The authentication signal is sent, for example, to the UWB monitoring system in response to the authentication request. For example, the transmission occurs via UWB. At the same time, the UWB monitoring system can be configured to determine a position of the UWB token within a spatial area monitored by the UWB monitoring system. Upon receiving an authentication confirmation in the form of the authentication signal, the position of the UWB token can be identified as the position of the user associated with the UWB token. Embodiments can have the advantage that, in the event of successful validation, the position of the user associated with the UWB token can be reliably determined via the UWB token.

[0057] According to embodiments, an authentication request is sent to the UWB token at predefined fixed intervals, at random intervals, randomly, upon detection of an exception event, upon reaching certain positions within the spatial area by the UWB token, or upon detection of unusual behavior by the user of the UWB token. According to embodiments, an authentication request is sent depending on the position of the UWB token within the spatial area. For example, the spatial area can be divided into a plurality of spatial sections, each of which is assigned different security levels. For example, if the position of the UWB token is in a spatial section with a higher security level, more authentications can be imitated than in a spatial section with a lower security level.Increasing the number of authentications can be implemented, for example, by shortening the intervals between sending authentication requests, increasing the probability of randomly sending authentication requests, and / or shortening the distances between positions within the spatial area at which an authentication request is sent by the UWB token.

[0058] Furthermore, using the determined position data of the UWB token, a movement pattern of the UWB token can be determined, for example. If this movement pattern exhibits anomalies, an authentication request can be sent. To detect anomalies in movement patterns, the movement patterns of a plurality of UWB tokens can be used as input data for a movement pattern classification module with a machine learning algorithm. This training data can be specified as normal movement patterns without anomalies. If movement patterns are input to the thus trained movement pattern classification module as input data, the movement pattern classification module detects any anomalies compared to the training movement patterns.As an output, the trained movement pattern classification module outputs a binary classification result: either no abnormalities are present or one abnormality is present. If the classification result indicates the presence of abnormalities, for example, an authentication request is sent; if the classification result indicates no abnormalities, for example, no authentication request is sent.

[0059] The UWB token, particularly the band, can also contain additional sensors for capturing bioinformation about the user. This bioinformation can include, for example, data on the user's body temperature, pulse, blood pressure, or respiration. This is particularly possible when the UWB token or band is worn on the user's skin, for example on the neck or wrist, or around the neck or wrist. This bioinformation can be used to check whether the UWB token is actually being worn by a user. Furthermore, this bioinformation can also be used to authenticate the user. For example, the bioinformation includes vein data for authenticating the user based on user-specific vein characteristics.

[0060] According to embodiments, the band comprises a holding element configured to hold an object. Embodiments can have the advantage that the UWB token can be used not only for localization and identification purposes, but also for other practical applications by the user. According to embodiments, the UWB token is a lanyard. According to embodiments, the holding element is a snap hook, fastening ring, or carrying case. A snap hook refers to a hook with a spring-assisted snap closure for opening and closing the hook. According to embodiments, the one or more objects are, for example, a document, a key, a mobile portable communication device such as a smartphone, or a neck pouch.

[0061] According to embodiments, the strap is a lanyard configured to carry the UWB token around the user's neck. Embodiments may have the advantage that when worn around the user's neck, the user's hands remain free, the UWB token can be worn on the user's skin, and / or pendulum movements may be particularly pronounced.

[0062] Depending on the embodiment, the UWB token is integrated into a document. The document, such as a valuable or security document, can be a paper-based and / or plastic-based document. The document can be designed, for example, as an electronic identification document, in particular passports, identity cards, visas, driver's licenses, vehicle registration documents, vehicle registration documents, company ID cards, health cards, or other ID documents, as well as chip cards, means of payment, in particular banknotes, bank cards and credit cards, waybills, or other proof of authorization.

[0063] For example, the document can be configured to be worn around the user's neck using a lanyard or neck strap. In this case, the UWB token configured as a document can utilize pendulum movements, as described above, to authenticate the user and / or generate energy, even if no antenna structures are integrated into the lanyard or neck strap itself, but rather exclusively into the UWB token. For example, the document has the shape of a chip card, such as the ID-1 format according to ISO 7816, i.e., 85.60 mm by 53.98 mm.

[0064] According to embodiments, the UWB token is integrated into a mobile, portable communication device. The mobile, portable communication device is, for example, a smart device, such as a smartphone, a smartwatch, smartglasses, a phablet, a tablet, a smartband, a smart keychain, a smart card, etc.

[0065] Embodiments further include a UWB monitoring system for monitoring a spatial area. The UWB monitoring system includes a plurality of UWB sensors distributed throughout the spatial area and configured to collect sensor data. The UWB sensors are further configured for communication via UWB. The plurality of UWB sensors includes one or more UWB identification sensors configured to identify at least one UWB token according to one of the preceding embodiments. A plurality of reference patterns, each associated with a UWB token, are stored in a memory of the UWB monitoring system. Identification includes: Acquiring sensor data by one of the identification sensors in the form of receiving a UWB signal transmitted by the UWB token, which signal has an individual resonance pattern identifying the UWB token as a result of a geometric coding of antenna structures of a UWB antenna used for transmission, determining the individual resonance pattern, comparing the determined individual resonance pattern with the reference patterns of the plurality of reference patterns, in the event that a match between the determined individual resonance pattern and one of the reference patterns exceeds a predefined threshold, identifying the UWB token associated with the corresponding reference pattern as the transmitting UWB token.

[0066] Embodiments may have the advantage of providing a UWB monitoring system capable of identifying UWB tokens based on individual resonance patterns. Since the identification is based on hardware properties of the UWB token, a high degree of certainty can be achieved that an identified UWB token is actually the corresponding UWB token and not a clone. According to embodiments, the UWB monitoring system comprises at least one UWB token that it is capable of identifying if the UWB token is within the spatial area. According to embodiments, the UWB monitoring system comprises a plurality of UWB tokens that it is capable of identifying if the UWB tokens are within the spatial area.

[0067] According to embodiments, the UWB token further comprises sensors that can detect vital functions, such as respiration and / or pulse, of a wearer of the UWB token. Using the corresponding sensors, an individual respiration and / or pulse pattern of the wearer can thus be determined. The determined respiration and / or pulse pattern can be compared with the reference patterns of a plurality of respiration and / or pulse resonance patterns. If a match between the determined individual respiration and / or pulse pattern and one of the reference patterns exceeds a predefined threshold, the person associated with the corresponding reference pattern is identified as the wearer of the transmitting UWB token. This identification method can be used based on any type of vital function and a vital function pattern specific to this vital function.

[0068] Depending on the embodiment, the spatial area is, for example, a restricted-access spatial area, such as a restricted-access security area. The restricted-access spatial area is, for example, demarcated from the surrounding area and, as intended, can only be accessed via one or more entrances or exits. For example, the restricted-access spatial area is an indoor area.

[0069] According to embodiments, the plurality of UWB sensors comprises a plurality of UWB identification sensors, which are further configured to determine position data of the UWB token within the spatial area. Determining the position data comprises time-of-flight measurements of UWB signals between the UWB localization sensors and the UWB token. Embodiments may have the advantage that the UWB localization sensors can efficiently determine the position of the UWB token. UWB tokens are localized, for example, by means of triangulation using at least two or three localization sensors in the form of UWB antennas. The triangulation signals can be sent by the UWB token and / or the UWB antennas. The triangulation signals can be evaluated by the UWB token and / or the UWB antennas and / or an evaluation module of the monitoring system.

[0070] According to embodiments, the UWB sensors are configured to detect relative positions and movements of multiple UWB tokens worn by a wearer. Based on the detected relative positions and movements of the UWB tokens, movement triangulation of movements of the UWB tokens resulting from being worn by the wearer and thus of movements of the wearer themselves can be performed. Based on the movements detected in this way, it can be determined, for example, whether the UWB tokens are actually worn by a wearer, whether they are worn by the same wearer, i.e., jointly by a wearer. The wearer can be authenticated, for example, and / or anomalies in the wearer's movements can be detected. Corresponding anomalies can, for example, indicate an exceptional event.

[0071] According to embodiments, the sensor data acquired by the plurality of UWB sensors comprises personal sensor data and the UWB monitoring system is configured to Capturing sensor data in the spatial area which includes personal sensor data, filtering the captured sensor data using an anonymization filter, wherein the anonymization filter is configured to anonymize the personal sensor data, evaluating the captured sensor data to detect an exceptional event, upon detection of the exceptional event, temporarily suspending the anonymization of the personal sensor data.

[0072] Embodiments can have the advantage of ensuring that personal sensor data, to the extent that it is recorded by the UWB sensors, is not made available as a result of anonymization, or is only made available in such a form that no conclusions can be drawn about the identity of the persons to whom the personal data relates. According to embodiments, anonymization particularly includes altering personal sensor data in such a way that individual details about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or can only be assigned with a disproportionate amount of time, cost, and labor. Altering includes, for example, redesigning the content of recorded personal sensor data, including deleting it.Deletion, for example, refers to making personal sensor data unrecognizable or even completely removing the corresponding personal sensor data from a storage used to store recorded sensor data. This storage can be, for example, a local or central storage of the UWB monitoring system.

[0073] According to embodiments, the authentication data is personal sensor data. Personal sensor data refers to sensor data that enables the identification of a person or can be assigned to a person to whom the personal sensor data relates. In particular, personal sensor data is, for example, individual information about the personal or factual circumstances of a specific or identifiable natural person, recorded using one of the UWB sensors. For example, the personal sensor data includes visual sensor data, such as video and / or photo data, from which a person can be recognized. This is particularly the case if a person's face can be recognized based on the video and / or photo data.

[0074] An anonymization filter is configured to selectively anonymize personal data. For example, the anonymization filter can be configured to anonymize sensor data collected by certain UWB sensors or a specific type of UWB sensor in the UWB surveillance system. This includes, for example, video and / or image data collected using a surveillance camera, in which individual persons can be identified.

[0075] An exception event refers to an anomaly in the acquired sensor data, i.e., a data constellation that is not expected under predefined operating conditions. In particular, the anomaly can be an emergency situation, such as a fire or unauthorized intrusion into and / or movement within the spatial area.

[0076] According to embodiments, the exception event comprises an unsuccessful attempt to identify the UWB token. Embodiments may have the advantage that, in the case of a UWB token unknown to the UWB monitoring system, suspending the anonymization process allows for the identification of the UWB token and / or who is actually carrying the UWB token.

[0077] According to embodiments, an exception event includes unsuccessful authentication. Unsuccessful authentication indicates that a UWB token is not being carried by the assigned user. For example, the assigned user attempts to move within the spatial area without the UWB token, or the UWB token is being carried by an unassigned user who has thus gained or intends to gain unauthorized access to the spatial area. By suspending anonymization, it is possible to determine who is actually carrying the UWB token and / or where the assigned user is located.

[0078] According to embodiments, the suspension of anonymization is limited to personal sensor data acquired by UWB sensors that have a predefined relationship to the detected exceptional event. For example, a predefined relationship consists in the UWB sensors for whose personal sensor data anonymization is suspended being assigned to the same spatial section of the spatial area as the UWB sensor(s) in whose acquired sensor data the exceptional event is detected. Embodiments can have the advantage that the suspension of anonymization is limited not only temporally but also spatially. Thus, an unnecessary suspension of anonymization, e.g., for personal data that has nothing to do with the exceptional event, can be avoided.According to embodiments, the predefined reference additionally or alternatively consists in the fact that UWB sensors, for whose personal sensor data anonymization is suspended, are assigned to predefined spatial sections of the spatial area. The corresponding spatial sections are, for example, entrances and exits of a restricted-access area. In the event of a possible unauthorized intrusion into the restricted-access spatial area or in the event of a possible emergency, such as a fire alarm, it may be advantageous to record who enters and / or leaves the restricted-access spatial area or who attempts to enter and / or leave the restricted-access spatial area.

[0079] According to embodiments, the anonymization of all personal sensor data collected by the UWB monitoring system is temporarily suspended. Embodiments may have the advantage of ensuring that no personal sensor data relevant and / or necessary for handling and / or resolving the exception event is missing due to the anonymization.

[0080] According to embodiments, anonymization by the anonymization filter comprises deleting at least a portion of the personal sensor data. Temporarily suspending anonymization comprises storing the personal sensor data collected within a limited time window.

[0081] Embodiments may have the advantage that in the event of deletion, i.e., complete removal of personal sensor data from local and / or central storage of the UWB monitoring system, it can be ensured that no one can gain access to this data. However, if an exceptional event occurs, personal sensor data, such as video and / or image data, is stored for a limited time only for this specific case. According to embodiments, the stored data is provided for the purpose of data analysis, in particular for the purpose of identifying individuals to whom the stored personal sensor data relates.

[0082] Depending on the embodiment, the storage is temporary. For example, the stored personal sensor data is deleted after its evaluation and / or upon the end of the exceptional situation. Depending on the embodiment, the storage is permanent.

[0083] According to embodiments, the limited time window begins with the detection of the exception event. According to embodiments, the limited time window ends with the expiration of a predetermined period of time or the end of the detection of the exception event.

[0084] Embodiments can have the advantage that the storage of the personal sensor data remains limited in time to a time window that is related to the detected exceptional event. It can be assumed, for example, that only personal sensor data recorded in this time window is relevant in the context of the detected exceptional event. According to embodiments, the limited time window ends, for example, when the exceptional event is no longer detected or can no longer be detected. In the case of a possible fire as an exceptional event, the exceptional event can be detected, for example, in the form of smoke being detected by a UWB sensor of the monitoring system designed as a smoke detector. If the exceptional event is no longer detected, i.e. no more smoke is detected, the suspension of anonymization is ended, for example.According to embodiments, at the end of the predetermined period of time, a check is made to determine whether the exceptional event is still detectable and / or whether further requirements are met. If the exceptional event is no longer detectable and, if applicable, the further requirements are met, the suspension of anonymization is terminated. Otherwise, the suspension is repeated or continued for the predetermined period of time. Further requirements include, for example, logging a confirmation in the UWB monitoring system that the exceptional event has been verified and no further measures are necessary or that all necessary measures have been taken. Alternatively or additionally, the further requirements can include, for example, logging a confirmation in the UWB monitoring system that the suspension of anonymization is not and / or no longer necessary.The predetermined time period may, for example, be seconds and / or minutes.

[0085] According to embodiments, the personal sensor data is deleted by the UWB sensor that records the personal sensor data to be deleted. According to embodiments, the storage of the personal sensor data comprises transmitting the personal sensor data by the UWB sensor that records the personal sensor data to be stored, at least partially and / or completely, via UWB, to a memory module of the UWB monitoring system. According to embodiments, the storage of the personal sensor data comprises transmitting the personal sensor data by the UWB sensor that records the personal sensor data to be stored, at least partially and / or completely, via a wired data connection, to a memory module of the UWB monitoring system.

[0086] Embodiments may have the advantage that, when deleted directly by the sensing UWB sensor, it can be ensured that the personal sensor data to be deleted does not reach beyond the sensing UWB sensor within the monitoring system. This effectively prevents anyone from gaining unauthorized access to the personal sensor data. Embodiments may further have the advantage that the personal sensor data stored in the memory module can be used, if necessary, to handle and / or resolve the exception event. For example, the stored personal sensor data can be analyzed to determine which individuals are and / or could be involved in the exception event.The storage module may be a local storage module of a plurality of storage modules distributed decentrally across the UWB monitoring system or a central storage module of the UWB monitoring system.

[0087] According to embodiments, anonymization by the anonymization filter comprises encrypting at least a portion of the personal sensor data. According to embodiments, the temporary suspension of anonymization comprises a temporary provision of the corresponding personal sensor data in unencrypted form.

[0088] Embodiments can have the advantage that encrypting the personal sensor data can effectively prevent access to the personal sensor data. On the other hand, in the event of an exceptional event, access to previously recorded personal sensor data can be enabled by decrypting it. For example, the personal sensor data is only made available in decrypted form for a limited time.

[0089] According to embodiments, the encryption of the personal sensor data is carried out by the UWB sensor that collects the personal sensor data to be encrypted.

[0090] Embodiments can have the advantage that the personal sensor data is encrypted directly upon capture and further processed by the UWB monitoring system only in encrypted form. Encryption can be performed, for example, using a public cryptographic key of an asymmetric key pair, so that it can be decrypted by an owner of the associated secret cryptographic key of the corresponding asymmetric key pair. The corresponding owner is, for example, a central or decentralized control module of the UWB monitoring system. The secret cryptographic keys are stored, for example, in a protected memory area of ​​a memory module assigned to the corresponding control module.According to embodiments, the control module provides all UWB sensors, or at least all UWB sensors configured to capture personal sensor data, with a uniform public cryptographic key for encryption. According to embodiments, the control module provides all UWB sensors, or at least all UWB sensors configured to capture personal sensor data, with an individual public cryptographic key for encryption assigned to the corresponding UWB sensor. According to embodiments, the control module provides the UWB sensors, or at least the UWB sensors configured to capture personal sensor data, with an individual, uniform public cryptographic key for encryption assigned to the corresponding group.The groups can be divided in such a way that they each comprise UWB sensors which are assigned to the same spatial section of the spatial area, which are the same type of UWB sensor or which are configured to collect the same type of personal sensor data.

[0091] According to embodiments, providing the personal sensor data in unencrypted form comprises suspending the encryption of the personal sensor data that is captured within a limited time window. Embodiments may have the advantage that the effort required to decrypt the corresponding personal sensor data can be avoided, and these personal sensor data also remain unencrypted. According to embodiments, providing the personal sensor data in unencrypted form comprises decrypting encrypted personal sensor data that is captured within the limited time window. Embodiments may have the advantage that the personal sensor data is stored exclusively in encrypted form, even in the event of an exceptional event.The provision of personal sensor data in unencrypted form can thus be effectively limited in time.

[0092] According to embodiments, the limited time window begins a predetermined period of time before the detection of the exceptional event or with the detection of the exceptional event. According to embodiments, the limited time window ends with the expiration of a predetermined period of time after the detection of the exceptional event or with the end of the detection of the exceptional event.

[0093] Embodiments can have the advantage that the provision of the personal sensor data in unencrypted form remains limited in time to a time window that is related to the detected exceptional event. It can be assumed, for example, that only personal sensor data recorded in this time window is relevant in the context of the detected exceptional event. According to embodiments, the limited time window ends, for example, when the exceptional event is no longer detected or can no longer be detected. In the case of a possible fire as an exceptional event, the exceptional event can be detected, for example, in the form of smoke being detected by a UWB sensor of the monitoring system designed as a smoke detector. If the exceptional event is no longer detected, i.e., no longer smoke is detected, the suspension of encryption is ended, for example.According to embodiments, at the end of the predetermined time period, a check is made to determine whether the exceptional event is still detectable and / or whether further requirements are met. If the exceptional event is no longer detectable and, if applicable, the further requirements are met, the suspension of encryption is terminated. Otherwise, the suspension is repeated or continued for the predetermined time period. Further requirements include, for example, logging a confirmation in the UWB monitoring system that the exceptional event has been verified and no further measures are necessary or that all necessary measures have been taken. Alternatively or additionally, the further requirements may include, for example, logging a confirmation in the UWB monitoring system that the suspension of encryption is not and / or no longer necessary.The predetermined time period can, for example, be seconds and / or minutes long. Starting the limited time window a predetermined period before the exceptional event is detected can have the advantage that relevant personal sensor data collected prior to the exceptional event can also be provided in unencrypted form.

[0094] According to embodiments, the UWB monitoring system is further configured to Receiving a request to release collected sensor data, checking a credential included in the request to access the requested sensor data, upon successful verification of the credential, releasing access to the requested sensor data.

[0095] Embodiments can have the advantage that captured sensor data, in particular personal sensor data, is only made available to authorized persons. Release of sensor data, such as position data and / or other data, occurs, for example, according to an authorization profile of the requester. This allows an effective data protection layer to be integrated into the UWB monitoring system. Proof of authorization can be provided, for example, in the form of an authorization certificate. According to embodiments, the request is received and checked, for example, by a decentralized or central control module of the UWB monitoring system. In the event of a successful check, the corresponding control module also releases the data. For example, the requested sensor data is sent to the sender of the request in response to the request or displayed on a display device of the UWB monitoring system.The requested sensor data is transmitted, for example, in encrypted form; in particular, it can be transmitted using end-to-end encryption.

[0096] According to embodiments, the collected sensor data are divided into categories and checking the credentials includes checking whether the credentials authorize access to sensor data of the category to which the requested sensor data is assigned.

[0097] Embodiments may have the advantage of allowing permissions to be granted on a category-by-category basis, so that credentials can be restricted to one or more of the categories.

[0098] According to embodiments, the collected personal sensor data are divided into categories and the suspension of anonymization occurs selectively only for one or more selected categories, for example depending on the type of exceptional event detected.

[0099] According to embodiments, the access authorization of the credential is temporarily extended upon detection of the exception event. An extension of the credential means that, with a given credential, more categories may be viewed in the event of an exception event being detected than if no exception event is detected. According to embodiments, the scope of the extension depends on the type of detected exception event. According to embodiments, upon detection of an exception event, the access authorization for all valid credentials for access to at least one category of sensor data is temporarily extended to all categories of sensor data.

[0100] Embodiments can have the advantage that, for example, depending on the sensitivity of the sensor data, different authorization credentials are required for access to the corresponding sensor data. Thus, it is possible to control who is granted access rights to the acquired sensor data of the UWB monitoring system and to what extent. This allows adaptation of data release to the current threat situation, for example, through the requester's authorization profile.

[0101] Depending on the embodiment, source IDs are assigned to each of the acquired sensor data. A prerequisite for successfully verifying the authorization credentials includes valid confirmation of the authorization credentials for accessing the requested sensor data by one or more instances assigned to the source IDs of the requested sensor data.

[0102] Embodiments may have the advantage that access to the acquired sensor data requires authorization from one or more instances associated with the source IDs, i.e., the source of the requested sensor data. According to embodiments, the source IDs each identify the UWB sensor that acquired the corresponding sensor data and / or the UWB token that was sensed by the corresponding sensor data. According to embodiments, the corresponding instances are each the corresponding UWB sensors, UWB tokens, or users or administrators associated with the corresponding UWB sensors or UWB tokens.

[0103] For example, each localized position, i.e., recorded sensor data used to locate UWB tokens, is imprinted with secure information from the UWB token, so that the origin and owner of the corresponding sensor data are always known. In this case, requests regarding a position or data from a UWB token must always first be authorized by the affected UWB token or a bearer and / or representative of the same.

[0104] According to embodiments, if the requested sensor data is released, the type, time, location, recipient and / or use of the released sensor data are logged.

[0105] Embodiments can have the advantage that, based on the corresponding protocols, it is possible to precisely trace what happens with the recorded sensor data, especially who has access to it. According to embodiments, logging takes place in a blockchain. A blockchain can have the advantage of providing a tamper-proof storage structure for storing the data to be logged.

[0106] According to embodiments, the UWB monitoring system comprises one or more pre-trained machine learning modules, each trained to detect exceptional events based on anomalies in the acquired sensor data. Embodiments may have the advantage of enabling automated detection of exceptional events.

[0107] According to embodiments, the plurality of UWB sensors comprises a plurality of localization sensors configured to determine the position of UWB tokens within the spatial area. The position determination is performed using time-of-flight measurements of UWB signals between UWB tokens and / or localization sensors.

[0108] Embodiments can have the advantage that, using UWB tokens, the location of authorized persons within the spatial area can be effectively monitored. For example, each person entering the spatial area, such as a restricted-access spatial area, receives a corresponding UWB token. If data relating to the assignment of a UWB token to a specific person is not stored or is stored cryptographically secured, e.g., in encrypted form, monitoring the UWB tokens enables anonymized monitoring of the UWB token holders. For example, a necessary prerequisite for decrypting the assignment data is detecting an exception event.

[0109] UWB tokens are localized, for example, by triangulation using at least two or three localization sensors in the form of UWB antennas. The triangulation signals can be sent by the UWB token and / or the UWB antennas. The triangulation signals can be evaluated by the UWB token and / or the UWB antennas and / or an evaluation module of the monitoring system.

[0110] According to embodiments, the UWB monitoring system transmits an activation code. The UWB tokens are activated upon receipt of the activation code upon entering the transmission range of the UWB monitoring system, and deactivated upon leaving the transmission range of the UWB monitoring system upon failure to receive the activation code.

[0111] Embodiments may have the advantage that the UWB token actively transmits signals using UWB only within the spatial area or within the transmission range of the UWB monitoring system and is thus detectable at all.

[0112] According to embodiments, activating the UWB tokens comprises activating the transmission of UWB signals by the respective UWB token, in particular activating the transmission of UWB signals to the monitoring system. Activating the UWB token makes the corresponding UWB token visible to the monitoring system. According to embodiments, deactivating the UWB tokens comprises deactivating the transmission of UWB signals by the respective UWB token, in particular deactivating the transmission of UWB signals to the monitoring system. Deactivating the corresponding UWB token makes the corresponding UWB token invisible to the monitoring system.

[0113] According to embodiments, access authorizations to and / or residence authorizations in a spatial area, which is a restricted access spatial area, are proven using the UWB tokens.

[0114] Embodiments can have the advantage that the UWB tokens can not only be used to track the movements of the wearer within a restricted-access spatial area, but can also be used to check whether access authorization and / or residence authorization to or in the restricted-access spatial area and / or certain spatial sections thereof exists. Based on this, it can be detected whether a wearer of a UWB token is legitimately present in the restricted-access spatial area and / or a spatial section thereof. For example, access barriers, such as doors to the restricted-access spatial area and / or a spatial section thereof, can open automatically when a wearer of a UWB token with valid access authorization approaches the access barrier.Depending on the embodiment, different access authorizations may be necessary for different spatial sections of the restricted access spatial area.

[0115] According to embodiments, access authorizations and / or residence authorizations are verified by possession of the UWB token. According to embodiments, access authorizations and / or residence authorizations are verified by authorization certificates. An authorization certificate is a digital certificate that assigns access authorization and / or residence authorization to a UWB token and / or a user of the corresponding UWB token. For example, an authorization certificate defines access authorizations and / or residence authorizations, comprises a public cryptographic key of an asymmetric cryptographic key pair assigned to the UWB token, a token ID, information about the issuer of the authorization certificate, and / or a digital signature of an issuer.The issuer can be, for example, an external entity, a decentralized or centralized control module of the UWB surveillance system, or another UWB token that itself holds the granted access authorizations and / or residence authorizations. Access authorizations and / or residence authorizations can be issued, for example, using the authorization certificate in conjunction with a signature of the UWB token using a private cryptographic key from the asymmetric cryptographic key pair assigned to the UWB token. Using the public cryptographic key provided by the authorization certificate, the signature can be verified, thus verifying the UWB token's possession of the private cryptographic key.For example, the authorization certificate defines access authorizations and / or residence authorizations granted to the owner of the private cryptographic key by the issuer of the authorization certificate. According to embodiments, the access authorizations and / or residence authorizations are time-limited. For example, a time limitation is defined by an expiration date and / or expiration time of the authorization certificate.

[0116] According to embodiments, detecting the exceptional event comprises detecting a number of persons in the spatial area, such as a restricted access spatial area, using the UWB sensors, which at least locally differs from the number of persons authorized to access detected in the spatial area using the UWB tokens.

[0117] Embodiments may have the advantage that attempts to gain access to the restricted spatial area or sections thereof without access authorization and / or attempts to evade movement monitoring by the UWB surveillance system within the restricted spatial area can be effectively detected.

[0118] According to embodiments, each of the UWB tokens is assigned to a user. For example, one or more reference values ​​for personal sensor data for authenticating the assigned user, i.e., authentication data, are stored in the UWB tokens. Proving access authorization and / or residency authorization using one of the UWB tokens includes, for example, confirming an authentication of the user assigned to the corresponding UWB token using the UWB token. Authentication by the UWB token includes, for example, locally validating authentication data by the UWB token using the one or more reference values ​​stored in the UWB token.

[0119] According to embodiments, the UWB tokens each comprise, for example, a sensor for capturing the authentication data. According to embodiments, the user's authentication data is, for example, captured by a sensor of the UWB token. According to embodiments, the authentication data is captured, for example, by a local sensor of the UWB monitoring system and sent to the UWB token for validation. According to embodiments, the captured authentication data is sent in encrypted form. According to embodiments, the reference values ​​are stored in encrypted form, and the local validation of the captured authentication data is carried out in encrypted form.

[0120] According to embodiments, the authentication data includes biometric data of the user, which is captured using a biometric sensor. Biometric data may include, for example, DNA data, fingerprint data, body geometry data / anthropometric data, such as facial, hand, and ear geometry data, palmar structure data, vein structure data, such as palm vein structure data, iris data, retinal data, voice recognition data, nail bed pattern, and tooth pattern data.

[0121] According to embodiments, the authentication data comprises behavior-based data of the user. Behavior-based data is data based on the user's intrinsic behavior and can include, for example, movement patterns, gait patterns, arm, hand, and finger movement patterns, and lip movement patterns. Using behavior-based data to authenticate the user can have the advantage that the user can continue their usual, characteristic behavior for the purpose of authentication without requiring additional, atypical actions. In particular, the user does not have to interrupt their usual behavior.

[0122] A sensor for capturing behavior-based data is used to capture the behavior-based data. The behavior-based data can be, for example, movement data captured using an authentication sensor configured as a motion sensor. The motion sensor can, for example, comprise an acceleration sensor. A movement can be calculated, for example, by integrating acceleration measurements captured by the acceleration sensor. The motion sensor can, for example, also detect its position in space and / or changes in position. For example, the motion sensor comprises a gyroscope. The movement data captured by the motion sensor can be, for example, acceleration, inclination, and / or position data.

[0123] Recorded movement data includes, for example, data on movements of the UWB token caused by the user carrying the UWB token, for example, wearing it on their body. The user's characteristic movements cause the UWB token to move in a manner that is characteristic of the user. This is the case even if the user does not actively interact with the UWB token, e.g., does not use a user interface of the UWB token, such as a key, keyboard, touchscreen, or microphone.

[0124] According to embodiments, the UWB token comprises a classification module configured to recognize one or more generic movement patterns using movement data. The movement patterns can, for example, be gross and / or fine motor movements of the UWB token, such as those characteristic of a use of the UWB token by an individual user, such as carrying and / or wearing it on the body. For example, the classification module is pre-trained to recognize the generic movement patterns using training data sets with movement data from a user cohort.

[0125] According to embodiments, the user is registered as a user of the UWB token during a learning phase. According to embodiments, the learning phase includes capturing the user's movement data using an authentication sensor in the form of a motion sensor of the UWB token and extracting one or more reference values ​​characteristic of the user to be registered.

[0126] According to embodiments, behavior-based authentication of a user using the UWB token comprises the following steps: Capturing movement data by an authentication sensor in the form of a motion sensor of the UWB token, inputting the captured movement data into the classification module, generating a classification result by the classification module as to whether the current user is a user registered in the UWB token, generating an authentication signal if the classification result meets a test criterion, wherein the authentication signal signals successful authentication of the current user.

[0127] The verification criterion may, for example, include a sufficiently high degree of agreement between the recorded movement data and one or more reference values ​​stored for the registered user. Furthermore, the verification criterion may include that the recorded movement data and / or the one or more reference values ​​used do not exceed a maximum age.

[0128] According to embodiments, the aforementioned steps of capturing the movement data, entering the movement data, and generating the classification result are repeatedly executed one after the other. Furthermore, in addition to the step of generating the classification result, the following step is executed: Storing the classification result in the memory of the UWB token.

[0129] Generating an authentication signal includes, for example: in response to an authentication request, accessing the memory of the UWB token to read the stored classification result, for example the last stored classification result, reading and evaluating the classification result according to the verification criterion.

[0130] According to embodiments, recorded movement data can be used to adapt and / or improve the reference values ​​stored for the corresponding user in the event of successful user authentication.

[0131] According to some embodiments, authentication is knowledge-based. For example, the authentication data includes the user's personal password. The password can be an alphanumeric string, for example.

[0132] According to embodiments, authentication is possession-based. According to embodiments, the authentication data comprises signed data from one or more other electronic devices assigned to the user, in particular mobile, portable electronic devices. The corresponding electronic devices are, for example, smart devices that the user carries with them, such as smartphones, smartwatches, smart glasses, phablets, tablets, smart bands, smart keychains, smart cards, etc. These electronic devices transmit a range-limited signal that signals their presence. For example, the signal comprises an ID of the corresponding electronic device. For example, the signal is signed with a cryptographic signature key of the corresponding electronic device. The signal can be, for example, a Bluetooth or a UWB signal.When using a UWB signal, the majority of electronic devices are a plurality of UWB tokens. Successful authentication of a user may require that the user carry a certain number of associated electronic devices. An electronic device may be stolen, but the higher the number of electronic devices required for successful authentication, the lower the likelihood that the device will be carried by someone other than the registered user, for example, as a result of theft.

[0133] According to embodiments, each of the UWB tokens is assigned to a user. One or more reference values ​​for personal sensor data are stored in each UWB token to authenticate the assigned user. Verifying access authorization and / or residency authorization using one of the UWB tokens comprises confirming the authentication of the user assigned to the corresponding UWB token using the UWB token. Authentication using the UWB token comprises locally validating personal sensor data using the UWB token using the one or more reference values ​​stored in the UWB token.

[0134] If one or more UWB sensors, such as impact sound sensors, motion detectors, light barriers, or gas detectors, detect the presence of a person in a spatial section of the area where no UWB token is detected, this is an indication of an attempted intrusion. Likewise, differences in the movement patterns of UWB tokens and detected persons can indicate unauthorized activity, for example, if a UWB token remains stationary in one place while a person's movements are detected based on the recorded sensor data.

[0135] According to embodiments, an exception event includes, for example, detecting a number of persons that at least locally exceeds the number of detected persons authorized to access or the detected UWB tokens.

[0136] According to embodiments, detecting the exception event comprises detecting a UWB token in a spatial portion of the spatial area, such as a restricted access spatial area for which the corresponding UWB token has no access authorization.

[0137] According to embodiments, detecting the exception event comprises collecting non-personal sensor data that exceeds a predefined threshold.

[0138] Embodiments can have the advantage of being able to effectively detect emergency situations, such as a fire using a UWB sensor configured as a smoke detector or a break-in using a UWB sensor configured as a glass break. For example, increased movement activity and a simultaneous rise in temperature can initially be interpreted as an unclear exceptional event or even as a dangerous situation.

[0139] According to embodiments, the plurality of UWB sensors comprise sensors for acquiring optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data.

[0140] Embodiments can have the advantage that, using the corresponding sensors, a multitude of different sensor data can be acquired, thus allowing a multitude of different situations or conditions within the spatial area to be detected. The UWB sensors include, for example, one or more UWB radar sensors, glass breakage sensors, impact sound sensors, gas sensors, motion detectors, video sensors, infrared sensors, temperature sensors, and / or smoke sensors.

[0141] Position data of the UWB tokens is recorded, for example, using localization sensors. Sensor data indicative of a person's presence can be recorded, for example, using UWB radar, high-frequency radiation, microwave radiation, Doppler radar, laser, ultrasound, infrasound, infrared radiation, vibration measurements, or gas concentration measurements. If a person is within the detection range of a sensor, they reflect, scatter, or interrupt radiation or waves emitted by the sensor, such as UWB radar, high-frequency radiation, microwave radiation, Doppler radar, laser beams, ultrasound, or generate measurable radiation, waves, or other influences, such as infrared radiation, vibrations, e.g., impact sound, infrasound, or changes in gas concentration, e.g., an increase in carbon dioxide concentration.

[0142] According to embodiments, the UWB monitoring system comprises a digital radio network with a mesh topology configured to transmit the acquired sensor data using UWB.

[0143] Embodiments may have the advantage that acquired sensor data can be effectively transmitted via the UWB monitoring system. Furthermore, a mesh topology offers high reliability, since in the event of a failure of individual components of the mesh topology, data transmission remains possible via alternative routes. Furthermore, in the event of a failure of a portion of the mesh topology, operation can be maintained with the remaining part of the mesh topology.

[0144] According to embodiments, position data can be provided or determined for several and / or all network nodes, i.e., UWB sensors and / or UWB tokens, in the UWB-based radio network with a mesh topology. Position data can be determined, for example, using a triangulation method based on time-of-flight measurements of UWB signals. The position data can be relative and / or absolute position data. To determine absolute position data, position data for at least one or more stationary reference points must be known.Embodiments may have the advantage that a position-based routing method can be used for targeted forwarding of data in the UWB-based radio network with mesh topology in order to determine a shortest or otherwise best path between a source node and a destination node within the radio network using the position data determined by means of UWB.

[0145] According to embodiments, one or more of the UWB sensors are configured as UWB transceivers for forwarding UWB transmission signals. According to embodiments, the UWB monitoring system comprises, in addition to the UWB sensors, one or more UWB transceivers configured to forward the UWB transmission signals.

[0146] Embodiments may have the advantage that UWB data forwarding may be effectively implemented using the UWB sensors and / or additional UWB transceivers.

[0147] Embodiments further include a method for controlling a UWB monitoring system for monitoring a spatial area. The UWB monitoring system comprises a plurality of UWB sensors distributed throughout the spatial area and configured to collect sensor data. The UWB sensors are further configured for communication via UWB. The plurality of UWB sensors comprises one or more UWB identification sensors configured to identify at least one UWB token according to one of the preceding embodiments. A plurality of reference patterns, each associated with a UWB token, are stored in a memory of the UWB monitoring system. The method for identifying the UWB token comprises: Acquiring sensor data by one of the identification sensors in the form of receiving a UWB signal transmitted by the UWB token, which signal has an individual resonance pattern identifying the UWB token as a result of a geometric coding of antenna structures of a UWB antenna used for transmission, determining the individual resonance pattern, comparing the determined individual resonance pattern with the reference patterns of the plurality of reference patterns, in the event that a match between the determined individual resonance pattern and one of the reference patterns exceeds a predefined threshold, identifying the UWB token associated with the corresponding reference pattern as the transmitting UWB token.

[0148] According to embodiments, the method for controlling the UWB monitoring system is configured to control any of the previously described embodiments of the UWB monitoring system.

[0149] According to embodiments, the method for controlling the UWB monitoring system further comprises: Capturing sensor data in the spatial area which includes personal sensor data, filtering the captured sensor data using an anonymization filter, wherein the anonymization filter is configured to anonymize the personal sensor data, evaluating the captured sensor data to detect an exceptional event, upon detection of the exceptional event, temporarily suspending the anonymization of the personal sensor data.

[0150] Embodiments of the invention will be explained in more detail below with reference to the drawings. They show: Figure 1 shows a schematic diagram of an exemplary UWB token, Figure 2 shows a schematic diagram of exemplary antenna structures of a UWB antenna, Figure 3 shows a schematic diagram of an exemplary UWB token, Figure 4 shows a schematic diagram of an exemplary UWB token, Figure 5 shows a schematic diagram of an exemplary UWB monitoring system, Figure 6 shows a schematic diagram of an exemplary UWB monitoring system, Figure 7 shows a schematic diagram of an exemplary UWB sensor, Figure 8 shows a flowchart of an exemplary method for controlling a UWB monitoring system, Figure 9 shows a flowchart of an exemplary method for controlling a UWB monitoring system, Figure 10 shows a flowchart of an exemplary method for authenticating a user of a UWB token, Figure 11 shows a flowchart of an exemplary method for authenticating a user of a UWB tokens,Figure 12 is a flowchart of an exemplary method for controlling a UWB monitoring system, and Figure 13 is a flowchart of an exemplary method for controlling a UWB monitoring system.

[0151] Elements of the following embodiments that correspond to one another are identified by the same reference numerals.

[0152] Figure 1shows an exemplary UBW token 112, which includes a processor 130, a memory 132, and a UWB antenna 134. The processor 130 is configured to control the UBW token 112 by executing program instructions, which are stored, for example, in the memory 132. The UBW token 112 is configured to transmit and receive UWB signals via the UWB antenna 134. The UWB antenna 134 includes a plurality of conductive antenna structures having a geometric coding with an individual resonance pattern that identifies the UWB token 112. The conductive antenna structures can include strip-shaped and / or planar antenna elements. In particular, the antenna structures can include a plurality of tuned individual antennas that form a patch antenna.Based on the resulting resonance pattern, the UBW token 112 can be identified, for example, by a UWB monitoring system receiving the UWB signal from the UBW token 112. For example, the UBW token 112 transmits UWB signals that include a timestamp. Based on these UWB signals from the UBW token 112 or UWB signals from UWB antennas or UWB sensors of the UWB monitoring system, the UBW token 112 can be located and / or identified by the UWB monitoring system. Furthermore, the UBW token 112 can be an authentication module 138, which includes a sensor element 139 for capturing user authentication data. The sensor element 139 is, for example, a motion sensor for capturing movement data of the UWB token 112, which is, for example, attached to a band or integrated into a band, when the UWB token 112 is worn by the user. The motion data includes data from pendulum movements of the UWB token 112 while worn.The authentication module 138 is configured for behavior-based authentication of the user wearing the UWB token 112 using the movement data captured by the sensor element 139. Furthermore, the UWB token 112 can comprise an energy harvesting module 136, which is configured to harvest electrical energy for operating the UWB token 112 by converting kinetic energy into electrical energy. The conversion of the kinetic energy into electrical energy can be carried out, for example, using an electromagnetic, piezoelectric, and / or electrostatic method. The converted kinetic energy includes, for example, kinetic energy from the pendulum movement of the band when wearing the UWB token 112. For example, the UWB token is a lanyard. According to further embodiments, the UWB token 112 can be configured, for example, as a document or a smart device, e.g.a smartphone, a smartwatch, smartglasses, a phablet, a tablet, a smartband, a smartkeychain, a smartcard.

[0153] Figures 2A and 2B each show exemplary antenna structures 142 of the UWB antenna of a UWB token. The antenna structures 142 each comprise a plurality of antenna elements 144, which in the case of Figure 2A strip-shaped and, in the case of Figure 2B, flat. The antenna elements are, for example, individual antennas that are tuned to one another and form a patch antenna. The antenna structures 142 each have a geometric coding with an individual resonance pattern that identifies the UWB token.

[0154] Figure 3shows an exemplary UWB token 112, which comprises a lanyard 140 for carrying the UWB token 112, for example, around the neck of a user 150. The UWB antenna of the UWB token 112 is, for example, integrated into the lanyard 140. The UWB antenna comprises a plurality of conductive antenna structures, which have a geometric coding with an individual resonance pattern that identifies the UWB token 112. For example, strip-shaped and / or planar antenna elements of the antenna structures are arranged distributed along the extension direction of the lanyard 140. For example, the strip-shaped and / or planar antenna elements extend along the extension direction of the lanyard 140. As a result of movements of the user 150, the UWB token 112 is set in motion. The movement of the UWB token 112 includes pendulum movements 152 which are characteristic of the individual user 150 of the UWB token 112.These pendulum movements 152 can be used to authenticate the user 150 using an authentication module of the UWB token 112 and / or to generate energy, for example by converting kinetic energy into electrical energy using an energy generation module of the UWB token 112.

[0155] Figure 4shows an exemplary UWB token 112 in the form of a band, which includes one or more sensors 154. The sensors 154 can, for example, comprise a motion sensor and / or sensors for detecting vital functions of a wearer of the band, such as pulse and / or respiration. Using the sensors, it can be determined, for example, whether the UWB token 112 is being worn, and / or the wearer of the UWB token 112 can be authenticated, for example, using a movement pattern of the UWB token 112 detected by the sensors 154 while worn by the wearer, a pulse pattern of the wearer detected by the sensors 154, and / or a breathing pattern of the wearer detected by the sensors 154.

[0156] According to embodiments, the band comprises a display device 156, which, for example, comprises a display and / or one or more LEDs 158. The display device 156 can, for example, display a result of an authentication, e.g., its success, using the one or more sensors 154. Furthermore, the display device 156 can, for example, display a charging status of an energy storage module, e.g., an accumulator, and / or an energy harvesting status of an energy harvesting module of the UWB token 112.

[0157] Figure 5shows an exemplary UWB surveillance system 100 for monitoring a spatial area 102, such as a restricted-access spatial area. If the spatial area 102 is a restricted-access spatial area, this restricted-access spatial area is, for example, delimited from the surroundings and is intended to be accessible only via one or more entrances or exits 104. For example, the spatial area is an indoor area within a building. Alternatively or additionally, the spatial area can also include an outdoor area outside a building. For example, this outdoor area can be a restricted-access area that is enclosed. An enclosure can, for example, include a fence, a wall, and / or a hedge.A restricted-access spatial area 102 can, for example, be divided into a plurality of spatial sections 106, each of which can be entered only via one or more entrances or exits 108.

[0158] The UWB monitoring system 100 comprises a plurality of UWB sensors 110 distributed across the spatial area 102. The UWB sensors 110 are configured to acquire sensor data, such as position data, motion data, image data, sound data, vibration data, temperature data, structural data, gas concentration data, particle concentration data, etc. Furthermore, the UWB sensors 110 are configured to transmit the acquired sensor data via UWB, i.e., via a UWB network provided by the UWB monitoring system 100. The UWB sensors 110 can be configured as UWB transceivers for forwarding UWB transmission signals within the monitoring system 100. Furthermore, in addition to the UWB sensors 110, the UWB monitoring system 100 may comprise one or more UWB transceivers 111 configured to forward the UWB transmission signals.The UWB network implemented by the monitoring system 100 is, for example, a digital radio network with a mesh topology, which is configured to transmit the acquired sensor data using UWB. For example, sensor data is transmitted within the UWB-based radio network with mesh topology using a position-based routing method. According to embodiments, data transmission of the UWB sensors 110 occurs exclusively via UWB. According to embodiments, one or more of the UWB sensors 110 are additionally configured for at least partially and / or completely wired transmission of the acquired sensor data. According to embodiments, all UWB sensors 110 are additionally configured for at least partially and / or completely wired transmission of the acquired sensor data.For example, a UWB radar functionality can also be integrated and / or implemented for the detection of persons who do not carry a UWB token.

[0159] The UWB sensors 110 include, for example, anonymization filters configured to filter the acquired sensor data. During the filtering process, personal sensor data is anonymized. Personal sensor data includes, for example, image data from which individuals can be identified. The filtered sensor data is transmitted, for example, via the UWB network to a control module 116. The control module 116 can be a central control module or a decentralized control module. The control module 116 is configured, for example, to evaluate the sensor data acquired by the UWB sensors 110 to detect exceptional events, such as a dangerous situation or unauthorized access to the spatial area 102. Upon detection of an exceptional event, the anonymization of the personal sensor data is temporarily suspended.

[0160] The control module 116 is further configured, for example, to receive requests for acquired sensor data, to check authorization credentials for access to the corresponding sensor data, and, in the event of a successful check, to grant access to the requested sensor data. In the event of a detected exceptional event, for example, access to personal sensor data is also granted, the anonymization of which is temporarily suspended. The authorization credentials can be based, for example, on authorization certificates and / or authorization profiles of the requesters, which define the access authorizations of the requesters. For example, all access authorizations assigned to a user and / or UWB token are stored in an authorization profile assigned to a user and / or UWB token. The scope of the granted access authorization can, according to embodiments, depend, for example, on whether an exceptional situation is detected.

[0161] The monitoring system 100 can further be configured to identify and localize UWB tokens 112 within the spatial area 102 using UWB sensors 110. Identification occurs, for example, based on UWB signals from the UWB tokens 112, each of which has an individual resonance pattern, which the UWB sensors 110 can use to identify the UWB tokens 112. For localization, for example, UWB localization signals 107 are used, which are sent from the UWB antennas 110 to the corresponding UWB tokens 112 and vice versa. Based on propagation time differences of the transmitted signals, the relative positions of the UBW tokens 112 to the permanently installed UWB antennas 110, and thus the positions of the UBW tokens 112 in the spatial area 102, can be precisely determined, for example by triangulation.Since the transmitted UWB localization signals 107 are barely distinguishable from background noise without knowledge of the UWB coding used and are thus effectively obfuscated, attempts at unauthorized localization of the UWB tokens 112 in the course of unauthorized spying attempts can be effectively prevented. This is further supported by the relatively short range of the UWB signals, which effectively counter remote spying attempts. The UWB tokens 112 identify, for example, users or wearers with access authorization to the spatial area 102 if this is a restricted-access spatial area. Furthermore, the UWB tokens 112 can define wearer-specific access authorizations if different access authorizations are required for individual spatial sections of the spatial area 102. The UWB tokens 112 can thus be used to determine the location of persons with access authorization.If persons are detected to whom no UWB token 112 can be assigned, this is an indication of an attempt at unauthorized intrusion, which is detected, for example, as an exception event.

[0162] The UWB tokens 112 can further be configured as authentication modules and include an authentication sensor in the form of a motion sensor for capturing authentication data of the user of the UWB token 112 in the form of movement data of the UWB token 112. The user of the UWB token 112 can be authenticated using the captured authentication data. In the event of successful authentication, the user of the UWB token 112 is the user assigned to the UWB token 112. Thus, the position data of the UWB token 112 can be used as the position data of the corresponding user. In the event of unsuccessful authentication, the user of the UWB token 112 is not the assigned user. Thus, a manipulation attempt has occurred, which can be effectively detected in this way.

[0163] Figure 6shows an exemplary UWB monitoring system 100 for monitoring a spatial area 102. The UWB monitoring system shown largely corresponds to the one in Figure 5The UWB monitoring system 100 is similar to the UWB monitoring system shown, however, communication within the UWB monitoring system 100 is wired using a LAN network. According to embodiments, the use of UWB and LAN can also be combined. For example, both are used simultaneously, or UWB communication is implemented as failover protection in the event of a LAN network failure. The UWB monitoring system 100 comprises a plurality of UWB sensors 110 distributed across the spatial area 102. The UWB sensors 110 are configured to acquire sensor data, such as position data, motion data, image data, sound data, vibration data, temperature data, structural data, gas concentration data, particle concentration data, etc.The UWB sensors 110 are connected via LAN connections 115 for transmitting acquired sensor data to a local wired network with a control module 116 for controlling the operation of the UWB monitoring system 100. The control module 116 is configured to control the UWB monitoring system 100. Some UWB sensors of the plurality of UWB sensors 110 include a control module with an emergency function. The emergency function includes control functions for locally operating at least part of the UWB monitoring system 100 using a UWB mesh network. According to embodiments, for example, only the UWB sensors 110 with the control module can be connected to the local wired network via LAN connections 115. In this case, the additional UWB sensors 110 can be connected to the control module 116, for example, via UWB connections via the UWB sensors 110 with control module.

[0164] The monitoring system 100 can further be configured to use the UWB sensors 110 to locate UWB tokens 112 within the spatial area 102. For this purpose, for example, UBW localization signals 107 are used, which are sent from UWB sensors 110 configured as localization sensors to the corresponding UWB tokens 112 and vice versa. Based on propagation time differences of the transmitted signals, the relative positions of the UBW tokens 112 to the UWB antennas of the permanently installed UWB sensors 110, and thus the positions of the UBW tokens 112 in the spatial area 102, can be precisely determined, for example by triangulation. The local wired network can have any network topology. The UWB tokens 112 can each comprise an authentication module.

[0165] Figure 7shows an exemplary UBW sensor 110. This UBW sensor 110 includes a processor 120, which executes program instructions stored, for example, in a memory 124 of the UBW sensor 110, and controls the UBW sensor 110 according to the program instructions. The UBW sensor 110 further includes a sensor element 122, which is configured, for example, to acquire optical, acoustic, chemical, thermal, electromagnetic, and / or vibration-based sensor data. The acquired sensor data may, for example, include personal sensor data depending on the sensor element 122 used. If the UWB sensor 110 is configured to acquire personal sensor data, the UWB sensor 110 further includes an anonymization filter for anonymizing the personal sensor data; otherwise, it does not. Anonymizing may, for example, include deleting the acquired personal sensor data from the memory 124.Furthermore, anonymization may include, for example, encrypting the acquired personal sensor data. Finally, the UWB sensor 110 comprises a UWB antenna 126 for transmitting and receiving data via UWB. The acquired sensor data is, for example, a UWB signal from a UWB token. In this case, the sensor element may be identical to the UWB antenna. The received UWB signal may have an individual resonance pattern identifying the transmitting UWB token. Execution of the program instructions by the processor 120 may cause the UWB sensor 110 to determine the individual resonance pattern and identify it by comparing it with reference patterns 125 stored in the memory 124.

[0166] Figure 8shows an exemplary method for controlling a UWB monitoring system comprising a plurality of UWB sensors. The UWB sensors are configured for communication via UWB and include one or more UWB identification sensors configured to identify a UWB token. The method for identifying the UWB token comprises, in block 410, acquiring sensor data by one of the identification sensors in the form of receiving a UWB signal transmitted by the UWB token. The received UWB signal has an individual resonance pattern identifying the UWB token due to geometric coding of antenna structures of a UWB antenna of the UWB token used for transmission. In block 412, the individual resonance pattern of the received UWB signal is determined. In block 414, the determined individual resonance pattern is compared with reference patterns from a plurality of reference patterns.These reference patterns are stored, for example, in a memory of the UWB monitoring system and are each assigned to a UWB token. If a match between the determined individual resonance pattern and one of the reference patterns exceeds a predefined threshold, the UWB token assigned to the corresponding reference pattern is identified as the transmitting UWB token.

[0167] Figure 9shows an exemplary method for controlling a UWB surveillance system. In block 400, position data of the UWB token within the spatial area is determined using the localization sensors. For this purpose, a time-of-flight measurement of UWB signals between the localization sensors and the UWB token is performed, from which a current position of the UWB token can be determined, for example, using triangulation and knowledge of the positions of the localization sensors. This determination of the position data of the UWB token can be repeated, for example continuously, and movements of the UWB token through the spatial area 102 can be tracked. In block 402, an authentication request is sent to the authentication module to check the presence of the UWB token on the assigned user. For example, the UWB token comprises the authentication module, and the authentication request is sent to the UWB token.In block 404, upon successful authentication of the user of the UWB token, an authentication confirmation is received from the authentication module. This authentication confirmation confirms successful validation of the user's captured authentication data, which indicates the presence of the UWB token on the user. Successful validation requires a sufficient match between the captured authentication data and the reference value.

[0168] Figure 10shows an exemplary method for authenticating a user of a UWB token. The authentication is behavior-based authentication using movement data of the UWB token, which is triggered by movements of the user carrying the UWB token. For example, the UWB token comprises a band with which it is attached around the neck or wrist of the user. In block 420, movement data of the UWB token is captured by a motion sensor of the UWB token. In block 422, the captured movement data is input to a classification module of the UWB token, which is configured or trained to recognize one or more generic movement patterns using movement data. In block 424, a classification result is generated by the classification module, indicating whether the user carrying the UWB token is a user registered in the UWB token.In block 426, an authentication signal is generated if the classification result meets a verification criterion. The verification criterion includes, for example, exceeding a threshold for the probability that the user of the UWB token is a registered user. To determine the probability, reference values ​​for movements of the registered user are stored in a memory of the UWB token. The authentication signal signals successful authentication of the user carrying the UWB token.

[0169] Figure 11 shows an exemplary method for authenticating a user of a UWB token. Steps 430 to 434 correspond to steps 420 to 424 of Figure 10and are executed, for example, repeatedly one after the other. After each repetition, in step 436, the classification result generated in step 434 is stored in a memory of the UWB token. In block 438, an authentication request is received. This authentication request can be received, for example, from a UWB monitoring system. Upon receipt of the authentication request, in block 440, the memory of the UWB token is accessed to read a stored classification result, and the classification result is read from the memory of the UWB token. For example, the most recently stored classification result is read. In block 442, the read classification result is evaluated using the test criterion, and if the classification result meets a test criterion, an authentication signal is generated in block 444.

[0170] Figure 12shows an exemplary method for controlling a UWB monitoring system. In block 200, sensor data in a spatial area is acquired by UWB sensors of the UWB monitoring system. The acquired sensor data may include personal sensor data. In block 202, the acquired sensor data is filtered using anonymization filters of the UWB sensors. In the process, personal sensor data is anonymized. Such anonymization includes, for example, deleting or encrypting the sensor data to be anonymized. In block 204, the acquired and filtered sensor data are evaluated to detect an exception event. This is done, for example, by a central or decentralized control module of the UWB monitoring system. In block 206, upon detection of an exception event, a temporary suspension of the anonymization of the personal sensor data is initiated, for example, by the control module.

[0171] Figure 13 shows an exemplary method for controlling a UWB monitoring system. In block 300, the UWB monitoring system, for example, a control module of the UWB monitoring system, receives a request to release acquired sensor data. In block 302, an authorization credential included in the request for access to the requested sensor data is checked, for example, by the control module. The authorization credential can be, for example, an authorization certificate or an identifier of a stored authorization profile of the requester. In block 304, upon successful verification of the authorization credential, access to the requested sensor data is granted. For example, the requested sensor data is sent to the requester or displayed on a local display device of the monitoring system. List of reference symbols

[0172] 100UWB surveillance system 102Spatial area 104Access / exit 106Spatial section 108Access / exit 107UWB localization signal 110UWB sensor 111UWB transceiver 112UWB token 114UWB connection 115LAN connection 116Control module 120Processor 122Sensor element 123Filter 124Memory 125Reference pattern 126UWB antenna 130Processor 132Memory 134UWB antenna 136Energy harvesting module 138Authentication module 139Authentication sensor 140Band 142Antenna structures 144Antenna elements 150User 152 154 156 158Pendulum motion

Claims

1. A UWB token (112) which comprises a UWB antenna (134) for transmitting and receiving UWB signals, wherein the UWB antenna (134) comprises a plurality of conductive antenna structures (142), wherein the antenna structures (142) have a geometric coding with an individual resonance pattern identifying the UWB token (112), characterised in that the UWB token (112) comprises a band (140), which is configured to support the UWB token (112), wherein the UWB antenna (134) is integrated at least partially into the band (140) and extends at least a part of the conductive antenna structures (142) along the band (140).

2. The UWB token (112) according to claim 1, wherein the conductive antenna structures (142) comprise strip-shaped and / or flat antenna elements (144), and / or wherein the antenna structures (142) comprise a plurality of mutually coordinated individual antennas which form a patch antenna.

3. The UWB token (112) according to any one of claims 1 to 2, wherein the UWB token (112) comprises an energy recovery module (136) which is configured to recover electrical energy for operation of the UWB token (112) by conversion of kinetic energy into electrical energy, wherein the converted kinetic energy for example comprises kinetic energy from oscillating motion (152) of the band (140) when the UWB token (112) is worn.

4. The UWB token (112) according to claim 3, wherein the energy recovery module (136) is configured to convert the kinetic energy into the electrical energy with use of an electromagnetic, piezoelectric and / or electrostatic method.

5. The UWB token (112) according to any one of claims 1 to 4, wherein the UWB token (112) comprises a motion sensor (139) for detecting motion data of the band (140) when the UWB token (112) is worn by the user (150), wherein the motion data of the band (140) comprise data of the oscillating movements (152) of the band (140) whilst being worn, wherein the UWB token (112) further comprises an authentication module (138) for behaviour-based authentication of the user (150), who is wearing the UWB token (112), with use of the detected motion data.

6. The UWB token (112) according to claim 5, wherein the authentication module (138) comprises a classification module, which is configured to identify one or more generic movement patterns using motion data, wherein the behaviour-based authentication of the user (150) by the UWB token (112) comprises the following steps: • detecting the motion data by the motion sensor (139) of the UWB token (112), • inputting the detected motion data into the classification module, • generating a classification result by the classification module as to whether the user (150) who is wearing the UWB token (112) is a user registered in the UWB token (112), • producing an authentication signal if the classification result satisfies a verification criterion, wherein the authentication signal signals successful authentication of the user (150) who is wearing the UWB token (112).

7. The UWB token (112) according to claim 6, wherein the UWB token (112) is configured to carry out repeatedly, one after the other, the steps of detecting the motion data, inputting the motion data and generating the classification result, wherein the behaviour-based authentication of the user (150) by the UWB token (112) further comprises a storing of the generated classification result in a memory of the UWB token (112), wherein the generation of the authentication signal comprises: • in response to an authentication request, accessing the memory of the UWB token (112) to read out the stored classification result, • reading out the classification result from the memory of the UWB token (112), • evaluating the read-out classification result with use of the verification criterion.

8. The UWB token (112) according to any one of claims 1 to 7, wherein the band (140) comprises a holding element which is configured to hold an object.

9. The UWB token (112) according to claim 1 to 8, wherein the band (140) is a lanyard which is configured such that the UWB token (112) may be worn around the neck of the user (150).

10. A UWB monitoring system (100) for monitoring a spatial area (102), wherein the UWB monitoring system (100) comprises a plurality of UWB sensors (110), which are arranged distributed in the spatial area (102) and are configured for the detection of sensor data, wherein the UWB sensors (110) are configured for communication by means of UWB, wherein the plurality of UWB sensors (110) comprises one or more UWB identification sensors which are configured to identify at least one UWB token (112) according to any one of claims 1 to 9, wherein a plurality of reference patterns (125) is stored in a memory (124) of the UWB monitoring system (100) and each of said patterns is associated with a UWB token, wherein the identification comprises: • detecting sensor data by one of the identification sensors in the form of the receiving of a UWB signal transmitted by the UWB token (112), which UWB signal comprises an individual resonance pattern identifying the UWB token (112) as the result of a geometric coding of antenna structures (142) of a UWB antenna (134) used for the transmission, • determining the individual resonance pattern, • comparing the determined individual resonance pattern with the reference patterns (125) of the plurality of reference patterns (125), • in the event that the concordance between the determined individual resonance patterns and one of the reference patterns exceeds a predefined threshold value, identifying the UWB token associated with the corresponding reference pattern as the transmitting UWB token (112).

11. The UWB monitoring system (100) according to claim 10, wherein the UWB monitoring system comprises the at least one UWB token (112) and / or wherein the plurality of UWB sensors (110) comprises a plurality of UWB identification sensors, which are further configured to determine position data of the UWB token (112) within the spatial area (102), wherein the determination of the position data comprises runtime measurements of UWB signals (107) between the UWB localisation sensors and the UWB token (112).

12. The UWB monitoring system (100) according to any one of claims 10 to 11, wherein the sensor data detected by the plurality of UWB sensors (110) comprise personal sensor data and the UWB monitoring system (100) is configured to • detect sensor data in the spatial area (102), said data comprising personal sensor data, • filter the detected sensor data using an anonymising filter (123), wherein the anonymising filter is configured to anonymise the personal sensor data, • evaluate the detected sensor data to detect an exceptional event, • in response to the detection of the exceptional event, suspend the anonymisation of the personal sensor data in a time-limited manner.

13. The UWB monitoring system (100) according to claim 12, wherein the exceptional event comprises a failed attempt to identify the UWB token (112).

14. The UWB monitoring system (100) according to any one of claims 12 to 13, wherein the anonymisation by the anonymising filter (123) comprises an encryption of at least some of the personal sensor data, wherein the time-limited suspension of the anonymisation comprises a time-limited provision of the corresponding personal sensor data in unencrypted form and / or wherein the UWB monitoring system (100) is further configured to • receive a request to release detected sensor data, • verify a proof of authorisation, included by the request, for access to the requested sensor data, • in response to a successful verification of the proof of authorisation, grant access to the requested sensor data.

15. A method for controlling a UWB monitoring system (100) for monitoring a spatial area (102), wherein the UWB monitoring system (100) comprises a plurality of UWB sensors (110) which are arranged distributed in the spatial area (102) and are configured to detect sensor data, wherein the UWB sensors (110) are configured for communication by means of UWB, wherein the plurality of UWB sensors (110) comprises one or more UWB identification sensors which are configured to identify at least one UWB token (112) according to any one of claims 1 to 9, wherein a plurality of reference patterns (125) is stored in a memory of the UWB monitoring system (100) and each of said reference patterns is associated with a UWB token (112), wherein the method for identifying the UWB token (112) comprises: • detecting sensor data by one of the identification sensors in the form of the receiving of a UWB signal transmitted by the UWB token (112), which UWB signal comprises an individual resonance pattern identifying the UWB token as the result of a geometric coding of antenna structures (142) of a UWB antenna (134) used for the transmission, • determining the individual resonance pattern, • comparing the determined individual resonance pattern with the reference patterns (125) of the plurality of reference patterns (125), • in the event that the concordance between the determined individual resonance patterns and one of the reference patterns exceeds a predefined threshold value, identifying the UWB token associated with the corresponding reference pattern as the transmitting UWB token (112).