DETECTING THE PRESENCE OF AN UNKNOWN UWB TOKEN

Description

[0001] The invention relates to a UWB monitoring system and a method for controlling a UWB monitoring system.

[0002] Surveillance systems use modern sensors to capture detailed, diverse, and extensive data for monitoring purposes, for example, of spatial areas. Electronic tools such as access cards or key cards are used to monitor access to buildings. Using such access cards or key cards, for example, it is possible to contactlessly monitor who enters or leaves the building and when. However, this requires that the corresponding access card or key card is a valid access card.

[0003] Key cards must be known to the surveillance system and use a communication channel compatible with the surveillance system for data transmission. If this is not the case, the surveillance system cannot detect the access cards or key cards.

[0004] WO 2014 / 009981 A1 describes a UWB real-time location system in which UWB readers are synchronized by adjusting a clock of a UWB slave reader until the UWB reader receives each UWB pulse of a train of UWB pulses having a predetermined pulse period and encoding a unique identifier of the master UWB reader in an expected time window within each predetermined pulse period, wherein the expected time window is related to a distance between the UWB tag reader and a master UWB reader.

[0005] US 2006 / 291537 A1 describes transmitting time from an ultra-wideband (UWB) transmitter to a UWB receiver by transmitting a signal structure with an associated time reference point along with a time value for the time reference point. The UWB receiver receives the time signal structure by synchronizing a receiver timebase with the signal structure, demodulating the time value information, and using the demodulated time value information to adjust a receiver clock value. Propagation delay information is used to adjust the receiver clock value by incrementing the receiver clock value to account for the propagation delay. The propagation delay is determined from a known distance between the transmitter and receiver, or the transmitter and receiver are part of a two-way link, where the propagation delay is measured by round-trip timing measurements.

[0006] US 2016 / 349362 A1 describes mobile localization of an object with a reference frame of the object's position using sparse time-of-flight data and dead reckoning. This is achieved by generating a dead reckoning local reference frame, including an estimate of the object's position relative to known locations from one or more ultra-wideband transceivers. As the object moves along its path, a determination is made using the dead reckoning local reference frame. When the object is within a predetermined range of one or more of the ultra-wideband transceivers, a "conversation" is initiated and range data is collected between the object and the UWB transceiver(s). The system uses multiple conversations to determine accurate range and bearing information and updates the object's position based on the collected data.

[0007] US 2014 / 277837 A1 describes a mobile device that enables one or more processors to receive vehicle key security codes from a vehicle key. The mobile device receives a signal from a transmitter associated with a vehicle key, the signal indicative of one or more security codes associated with the vehicle key. The mobile device stores the one or more security codes in a memory and configures a mobile device application to implement one or more vehicle control functions using the security codes. The mobile device wirelessly transmits commands for implementing the one or more vehicle control functions using the security codes to a vehicle associated with the key. The wireless transmission of commands comprises short-range wireless communication.

[0008] WO 2013 / 166096 A1 describes a system and method for distributed positioning and collaborative behavior determination among a group of objects. Interactive tags assigned to each of a plurality of objects provide each object with relative position data and state information regarding other nearby objects. Using this information, each object develops spatial awareness of its environment, including the position and action of nearby objects, to modify its behavior as needed to more effectively achieve a goal.

[0009] EP 3 471 068 A1 describes a system for managing personal data. The system has a first security device and a second security device. The security devices are arranged spatially separately and are each configured to capture personal data and assign the captured personal data to identities. The system further comprises a management system configured to manage authorizations for the identities. The first security device and the second security device each anonymize the captured personal data and allow access to the personal data if authorization to access personal data exists, which is assigned to the identity assigned to the personal data.

[0010] The invention is based on the object of providing an improved UWB monitoring system for detecting the presence of UWB tokens.

[0011] The object underlying the invention is solved by the features of the independent patent claims. Embodiments of the invention are specified in the dependent patent claims.

[0012] Embodiments include a UWB monitoring system for monitoring a spatial area. The UWB monitoring system includes a plurality of UWB sensors distributed throughout the spatial area. The UWB sensors are configured for communication via UWB.

[0013] The plurality of UWB sensors includes a plurality of localization sensors for determining position data of mobile, wearable UWB tokens within the spatial area. Determining the position data includes time-of-flight measurements of UWB signals between the localization sensors and the UWB tokens.

[0014] The UWB monitoring system is configured to detect the presence of an unknown UWB token in the spatial area. The unknown UWB token transmits a first UWB payload signal. The transmitted first UWB payload signal is encoded according to a first UWB data encoding scheme unknown to the monitoring system.

[0015] Detecting the presence of the unknown UWB token includes: Detecting a plurality of sensor signals by the spatially distributed plurality of localization sensors, wherein the detected sensor signals each comprise a noise signal and a first UWB useful signal transmitted by the unknown UWB token, with which the noise signal is superimposed, wherein the useful signal occurs in the signals detected by the individual localization sensors with a sensor-dependent first temporal shift due to the spatial distribution of the localization sensors, amplifying the first UWB useful signal relative to the noise signal, wherein the amplification comprises combining the detected sensor signals with one another, wherein the detected sensor signals are each temporally shifted using a sensor-dependent second temporal shift for combining,wherein the second temporal shifts of the detected sensor signals used are each inverse to the first temporal shift of the corresponding sensor signal and compensate for the corresponding first temporal shift, detecting the amplified first UWB useful signal using the combined sensor signals. ,

[0016] Unknown UWB tokens that transmit UWB payloads encoded according to a UWB data coding scheme unknown to the UWB monitoring system are generally not detected by a UWB monitoring system. If the UWB monitoring system does not have the UWB data coding scheme used for encoding, the UWB monitoring system will not be addressed because it will not recognize that a UWB signal was transmitted by the unknown UWB token. Therefore, the UWB monitoring system can neither detect the presence of the unknown UWB token in the spatial area nor determine its position data. Due to the wide frequency band used by UWB, a transmitted UWB payload is difficult to distinguish from omnipresent background noise.

[0017] Embodiments may have the advantage of enabling detection of the presence of the unknown UWB token in the spatial area. As soon as the unknown UWB token initiates UWB communication or transmits a UWB signal, this UWB signal arrives at the localization sensors of the UWB monitoring system as a superposition of a noise signal. The UWB signal cannot be separated from the noise signal at the individual localization sensors. This noise signal includes, for example, the ambient noise of the UWB monitoring system as well as the ubiquitous background noise of the components of the UWB monitoring system.However, since the UWB signal generally arrives at the spatially distributed localization sensors with a temporal offset, the sensor signals of the individual localization sensors can be combined using a temporal shift, so that the resulting superposition allows the UWB signal of the foreign UWB transmitter sent by the unknown UWB token to be amplified, e.g., added, and thus its presence can be detected.

[0018] According to embodiments, for example, the sensor signals from three, four or more spatially distributed localization sensors are combined.

[0019] Common mobile communication technologies, such as Bluetooth, Wi-Fi, or even GSM, can be attacked or disrupted in a variety of ways. For example, if one channel of a common mobile communication technology fails, communication, location, notification, etc., via the corresponding communication technology are no longer possible. Furthermore, there is a high degree of dependence on the respective provider or operator of the infrastructure or network of the corresponding communication technology.

[0020] Embodiments may have the advantage of providing a broadband, non-detectable, non-jammable, multi-channel local communication link using UWB technology.

[0021] Suppressing the UWB radio signal is not easily possible because the UWB radio signal is transmitted simultaneously on different frequencies. This transmission pattern changes dynamically, is encoded with UWB data coding according to a UWB data coding scheme, and is known only to authorized communication parties. Furthermore, unlike radio signals in the case of Bluetooth, WLAN, WiFi, GSM, and others, the UWB radio signal cannot be located based on the presence of a signal carrier in the corresponding frequency range, because without knowledge of the UWB data coding scheme used for UWB data coding, the UWB radio signal essentially represents statistical noise.

[0022] A UWB token is a hardware token in the form of a mobile, portable electronic device configured for wireless communication via UWB. A UWB token can also be configured to determine position data based on a time-of-flight measurement and triangulation of UWB signals received from localization sensors of the UWB surveillance system. For example, the UWB token can be designed as a document, in particular a valuable or security document. A "document" refers to paper-based and / or plastic-based documents, such as electronic identification documents, in particular passports, identity cards, visas, driver's licenses, vehicle registration documents, vehicle registration documents, company ID cards, health cards, or other ID documents, as well as chip cards, means of payment, in particular banknotes, bank cards, and credit cards, waybills, or other proof of authorization.For example, one or more attributes of a user or object associated with the document are stored in a memory of such a document.

[0023] UWB ("Ultra Wideband") refers to the wireless transmission of electromagnetic pulsed signals over a plurality of parallel radio channels with low transmission power, e.g., up to a maximum of 1 mW. This involves using frequency ranges with a bandwidth of at least 500 MHz and / or at least 20% of the arithmetic mean of the lower and upper limit frequencies of the used frequency band.

[0024] UWB is based on the generation of pulses with the shortest possible pulse duration, which is why the spectrum emitted or received via the UWB antenna is larger or wider, according to the laws of Fourier transformation, the shorter the pulse duration.

[0025] The product of the pulse's temporal and spectral width remains constant. The total transmission power of a few milliwatts or less is distributed over such a wide frequency range that no interference is expected for radio operation using narrowband transmission methods. Therefore, it is difficult or impossible to detect that UWB transmission is taking place at all. To a narrowband receiver, a UWB signal appears more like noise. This enables communication that is almost impossible to locate and can be used in the same frequency range as conventional transmission methods.

[0026] UWB does not use a fixed carrier frequency that is modulated. Instead, data transmission is based on pulse phase modulation or pulse position modulation (PPM), for example, using a plurality of individual pulses. Another option for data transmission using UWB is modulation of the polarity and / or amplitude of the pulses. If the timing of the individual pulses differs sufficiently, multiple UWB transmission channels can be operated in the same spatial area without mutual interference.

[0027] With increasing bandwidth, transmission capacity increases, allowing UWB systems to deliver useful bit rates up to the Gbit / s range. UWB transmission ranges can range from a few meters to hundreds of meters.

[0028] A UWB data coding scheme specifies modulation parameters for the pulses used. The modulation parameters define how pulses are to be modulated so that they transmit information, and thus data.

[0029] UWB technology utilizes a broad range of the electromagnetic spectrum, from 3 to 9 GHz, for example, and simultaneously transmits a type of bit pattern encoded according to a specific UWB data coding scheme on a multitude of channels. If a communication partner knows the UWB data coding scheme used, it can detect an offered UWB communication channel and participate in the communication. If several such UWB data coding schemes are used simultaneously to encode multiple simultaneous communication channels, these simultaneous communication channels can be maintained in parallel.

[0030] Depending on the embodiment, the spatial area is, for example, a restricted-access spatial area, such as a restricted-access security area. The restricted-access spatial area is, for example, demarcated from the surrounding area and, as intended, can only be accessed via one or more entrances or exits. For example, the restricted-access spatial area is an indoor area.

[0031] UWB technology also enables the implementation of a radar method using UWB radar sensors. As with UWB data transmission, a wide-bandwidth alternating electromagnetic field with low field strengths is generated. Depending on the nature of objects within the propagation range of the alternating electromagnetic field, this will deform the alternating field. The resulting field can be detected by a UWB sensor. Knowing both the initial field and the resulting field allows conclusions to be drawn about the cause of the detected deformation and thus the type and geometry of the object(s) within the propagation range of the alternating electromagnetic field.

[0032] UWB radar sensors, for example, operate at frequencies between 30 MHz and 12.4 GHz. Depending on the application, resolutions ranging from centimeters to a few millimeters can be achieved with operating bandwidths of 5 GHz.

[0033] In a radar technique, short pulses are emitted and compared with the pulse patterns reflected by the object(s). This allows geometric parameters such as distance, thickness, length, position, body shape, movement, and / or speed to be determined. Objects can also be detected through clothing and walls. The properties of the propagation medium for the electromagnetic fields are assumed to be known.

[0034] UWB can prevent the tracking of mobile devices because devices communicating via UWB, such as UWB tokens, cannot be located without knowledge of the UWB coding used. Furthermore, the relatively short range of UWB ensures that remote tracking and / or eavesdropping can be effectively prevented. Furthermore, UWB coding provides independent, instantaneous encryption of the transmitted data, thus protecting it against eavesdropping. Furthermore, due to its wide frequency band, UWB is highly resistant to jamming. Due to these special technical properties, which are advantageous for security applications, a monitoring system can be implemented using UWB that can guarantee a high level of protection for processes and the sensor data contained or used therein, especially in connection with personal sensor data of participants.In particular, a high level of data transmission security can be ensured using UWB.

[0035] Since UWB technology also allows higher data rates, it can be particularly advantageous for transmitting sensor data in the form of video data, audio data and / or other extensive sensory measurements.

[0036] However, the advantages of UWB technology have so far been offset by the disadvantage that, for example, only known UWB tokens could be detected by a UWB monitoring system. Embodiments can have the advantage of eliminating this disadvantage. Thus, the UWB monitoring system can simultaneously utilize the advantages of secure data transmission via UWB and be capable of independently detecting unknown UWB tokens.

[0037] A UWB sensor is understood to be a sensor or armature that is configured to transmit acquired data, e.g., sensor data, via UWB. Furthermore, a UWB sensor, such as a UWB radar sensor or a UWB localization sensor, can be configured to capture sensor data via UWB. Alternatively, a UWB sensor can be configured to capture the sensor data using a UWB-independent method, such as an optical, acoustic, chemical, thermal, electromagnetic, and / or vibration-based method. According to embodiments, the UWB sensors are configured for data transmission exclusively via UWB. According to embodiments, one or more of the UWB sensors can additionally be configured to transmit acquired data via a wired data connection.According to embodiments, some of the UWB sensors of the UWB monitoring system are configured to transmit acquired data via a wired data connection. According to embodiments, all of the UWB sensors of the UWB monitoring system are configured to transmit acquired data via a wired data connection.

[0038] Sensor data refers to data acquired by one of the UWB sensors, i.e., for example, optical, acoustic, chemical, thermal, electromagnetic, and / or vibration-based data. The sensor data is transmitted by the sensing UWB sensors within the UWB monitoring system via UWB. According to embodiments, one or more of the UWB sensors can additionally be configured to transmit acquired data via a wired data connection. The sensor data can also be data acquired by the UWB sensors via UWB. For example, the sensor data is sensor data from a UWB radar sensor or a UWB localization sensor.

[0039] According to embodiments, combining the acquired sensor signals comprises adding the acquired sensor signals using the sensor-dependent second temporal shifts or applying another mathematical operation. Embodiments may have the advantage that the signal-to-noise ratio of the UWB signal can be increased. The temporally offset reception of the UWB signal by the various localization sensors corresponds, for example, to multiple transmissions of the corresponding UWB signal. By transmitting a signal multiple times in this way, the noise can be reduced. Since noise occurs stochastically, the standard deviation of the noise signal decreases by a factor of n while the signal increases by a factor of n. The signal-to-noise ratio (SNR) related to the signal amplitudes therefore increases by n / n = n .

[0040] According to embodiments, combining the acquired sensor signals comprises adjusting the sensor-dependent second temporal shifts until the sensor-dependent second temporal shifts each compensate for the first temporal shifts. Embodiments may have the advantage that the sensor-dependent second temporal shifts can be adjusted from initial values ​​until they each compensate for the first temporal shifts. This allows the gain of the UWB signal to be maximized.

[0041] According to embodiments, the individual sensor-dependent second temporal shifts are adjusted successively, sensor signal by sensor signal. Embodiments can have the advantage that with each additional sensor signal added to the combination, the gain of the UWB signal increases. For each addition, the sensor-dependent second temporal shift for the corresponding sensor signal can be adjusted starting from an initial value until the gain reaches a maximum value. According to embodiments, the combined sensor signals are combined successively, sensor signal by sensor signal, starting from a combination of two first sensor signals of the plurality of sensor signals.

[0042] According to embodiments, the sensor-dependent second temporal shifts for the individual sensor signals are selected depending on a distance of the respective localization sensor from an access to the spatial area within UWB signal range of the localization sensors. According to embodiments, the sensor-dependent second temporal shifts for the individual sensor signals are selected depending on a distance of the respective localization sensor from an access to a predefined spatial section of the spatial area within UWB signal range of the localization sensors. The first temporal shifts are proportional to the distances of the localization sensors from the origin of the UWB signal.Embodiments may have the advantage of taking advantage of the fact that, in the case of a spatial area with fixedly defined entrances and / or a predefined spatial section of the spatial area with fixedly defined entrances, an unknown UWB token becomes detectable for the first time when it passes one of the fixedly defined entrances. Since the distances of stationary localization sensors to these entrances are known, the expected first temporal shifts when the UWB token passes the entrances are also known. Thus, the second temporal shifts to compensate for the first temporal shifts can also be determined directly.

[0043] According to embodiments, the detected sensor signals comprise one or more second UWB payload signals encoded according to second UWB data encoding schemes known to the monitoring system. Detecting the presence of the unknown UWB token further comprises filtering out the second UWB payload signals from the detected sensor signals. Embodiments may have the advantage that known UWB signals can be effectively filtered out from the sensor signals or noise signals of the sensor signals.

[0044] According to embodiments, detecting the presence of the unknown UWB token further comprises determining the first UWB data encoding scheme unknown to the UWB monitoring system using the detected, amplified first UWB payload signal. According to embodiments, the UWB monitoring system is configured to perform a first UWB communication with the UWB token encoded according to the determined first UWB data encoding scheme.

[0045] Embodiments may have the advantage that a communication scheme to be selected can be determined. After determining the unknown first UWB data encoding scheme, i.e., the communication scheme to be selected, a UWB communication is enabled between the UWB monitoring system and the unknown UWB token, which is encoded according to the determined first UWB data encoding scheme. Via this UWB communication, the UWB token and / or the UWB monitoring system can each identify and / or authenticate themselves to the other. Furthermore, cryptographic keys for encrypting other communication channels, in particular other non-UWB-encoded communication channels, can be exchanged in a secure manner.

[0046] According to embodiments, for example, in a monitoring mode, it is checked whether an unknown UWB token or a non-system UWB token is located within the UWB monitoring system. The non-system UWB token is, for example, a UWB token that transmits a UWB payload signal that is not used by the monitoring system, not for current use, not for use by this UWB token, and not intended for use within the corresponding spatial area. If the presence of a non-system UWB token is detected, the UWB data encoding scheme used by the corresponding UWB token is determined. According to embodiments, the UWB monitoring system then switches from a monitoring mode to an integration mode for integrating the non-system UWB token into the UWB monitoring system.As a prerequisite for integration, for example, the authentication of the non-system UWB token is verified. During the integration process, the UBW token is informed of a UWB data encoding scheme to be used for communication within the surveillance system and / or one or more cryptographic keys are transferred to the UBW token to be integrated.

[0047] According to embodiments, the UWB monitoring system is further configured to Receiving a credential of the UWB token to access and / or stay in the spatial area, validating the received credential.

[0048] Embodiments may have the advantage of being able to check whether the unknown UWB token is authorized to access and / or stay in the spatial area.

[0049] According to embodiments, the UWB monitoring system is further configured upon successful validation of the credential, sending one of the second UWB data encoding schemes known to the UWB monitoring system to the UWB token using the first UWB communication, performing a second UWB communication with the UWB token encoded according to the second UWB data encoding scheme sent to the UWB token.

[0050] Embodiments may have the advantage that, in the event of valid authorization to access and / or stay in the spatial area, the previously unknown UWB token is provided with a second UWB data encoding scheme known to the UWB monitoring system, by means of which the UWB token can establish a second UWB communication with the UWB monitoring system, i.e., obtain access to the UWB monitoring system. According to embodiments, a UWB channel encoded using this second UWB data encoding scheme can be used for secure data exchange. For example, the UWB channel can be used to securely exchange cryptographic keys for encrypting other communication channels, in particular other non-UWB-encoded communication channels.

[0051] According to embodiments, the first and second UWB data encoding schemes use one or more of the following encoding techniques: pulse position modulation, pulse polarity modulation, pulse amplitude modulation, and orthogonal pulse shape modulation. Embodiments may have the advantage of providing an effective and / or efficient encoding technique.

[0052] Pulse position modulation (PPM) is a modulation technique for data transmission using discrete-time sampled signals. A pulse is shifted in its temporal position, i.e., phase, relative to a constant reference clock. This phase shift encodes the data to be transmitted, while the pulse period and amplitude remain constant. If the timing of the individual pulses differs sufficiently, multiple UWB communications or UWB communication channels can operate in the same spatial area without mutual interference.

[0053] In pulse polarity modulation, the polarity of the transmitted pulses is modulated or changed. This polarity modulation encodes the data to be transmitted. In pulse amplitude modulation, the amplitude of the transmitted pulses is modulated or changed. This amplitude modulation encodes the data to be transmitted. Orthogonal pulse shape modulation uses two orthogonal UWB pulse shapes, which are additionally polarity modulated. With this type of modulation, the pulses can be transmitted continuously as a continuous stream, allowing the bit rate to be equal to the pulse rate.

[0054] According to embodiments, the one or more additional UWB sensors comprise sensors for acquiring optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data.

[0055] Embodiments can have the advantage that, using the corresponding sensors, a multitude of different sensor data can be captured and thus a multitude of different situations or conditions within the spatial area can be detected. The UWB sensors include, for example, one or more UWB radar sensors, glass breakage sensors, impact sound sensors, gas sensors, motion detectors, video sensors, infrared sensors, temperature sensors, and / or smoke sensors.

[0056] Position data of the UWB tokens is recorded, for example, using localization sensors. Sensor data indicative of a person's presence can be recorded, for example, using UWB radar, high-frequency radiation, microwave radiation, Doppler radar, laser, ultrasound, infrasound, infrared radiation, vibration measurements, or gas concentration measurements. If a person is within the detection range of a sensor, they reflect, scatter, or interrupt radiation or waves emitted by the sensor, such as UWB radar, high-frequency radiation, microwave radiation, Doppler radar, laser beams, ultrasound, or generate measurable radiation, waves, or other influences, such as infrared radiation, vibrations, e.g., impact sound, infrasound, or changes in gas concentration, e.g., an increase in carbon dioxide concentration.

[0057] According to embodiments, the acquired sensor data comprises personal sensor data and the UWB monitoring system is configured to Capturing sensor data in the spatial area using the UWB sensors, wherein the captured sensor data comprises personal sensor data, filtering the captured sensor data using an anonymization filter, wherein the anonymization filter is configured to anonymize the personal sensor data, evaluating the captured sensor data to detect an exceptional event, upon detection of the exceptional event, temporarily suspending the anonymization of the personal sensor data.

[0058] Embodiments can have the advantage of ensuring that personal sensor data, to the extent that it is captured by the UWB sensors, is not made available as a result of anonymization, or is only made available in such a form that no conclusions can be drawn about the identity of the persons to whom the personal data relates. According to embodiments, anonymization particularly includes altering personal sensor data in such a way that individual details about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or can only be assigned with a disproportionately large expenditure of time, cost, and labor. Altering includes, for example, redesigning the content of captured personal sensor data, including deleting it.Deletion refers, for example, to making personal sensor data unrecognizable or even completely removing the corresponding personal sensor data from a storage used to store recorded sensor data. This storage can be, for example, a local or central storage of the UWB monitoring system.

[0059] Personal sensor data refers to sensor data that enables the identification of a person or can be assigned to a person to whom the personal sensor data relates. In particular, personal sensor data includes, for example, individual details about the personal or factual circumstances of a specific or identifiable natural person, recorded using one of the UWB sensors. For example, personal sensor data includes visual sensor data, such as video and / or photo data, from which a person can be recognized. This is particularly the case if a person's face can be recognized based on the video and / or photo data.

[0060] An anonymization filter is configured to selectively anonymize personal data. For example, the anonymization filter can be configured to anonymize sensor data collected by certain UWB sensors or a specific type of UWB sensor in the UWB surveillance system. This includes, for example, video and / or image data collected using a surveillance camera, in which individual persons can be identified.

[0061] An exception event refers to an anomaly in the acquired sensor data, i.e., a data constellation that is not expected under predefined operating conditions. In particular, the anomaly can be an emergency situation, such as a fire or unauthorized intrusion into and / or movement within the spatial area.

[0062] According to embodiments, the exception event is a successful detection of the presence of the unknown UWB token. According to embodiments, the exception event is a lack of a valid credential of the detected unknown UWB token.

[0063] According to embodiments, the exception event is a failure of the second UWB communication with the UWB token.

[0064] According to embodiments, the suspension of anonymization is limited to personal sensor data acquired by UWB sensors that have a predefined relationship to the detected exceptional event. For example, a predefined relationship consists in the UWB sensors for whose personal sensor data anonymization is suspended being assigned to the same spatial section of the spatial area as the UWB sensor(s) in whose acquired sensor data the exceptional event is detected. Embodiments can have the advantage that the suspension of anonymization is limited not only temporally but also spatially. Thus, an unnecessary suspension of anonymization, e.g., for personal data that has nothing to do with the exceptional event, can be avoided.According to embodiments, the predefined reference additionally or alternatively consists in the fact that UWB sensors, for whose personal sensor data anonymization is suspended, are assigned to predefined spatial sections of the spatial area. The corresponding spatial sections are, for example, entrances and exits of a restricted-access area. In the event of a possible unauthorized intrusion into the restricted-access spatial area or in the event of a possible emergency, such as a fire alarm, it may be advantageous to record who enters and / or leaves the restricted-access spatial area or who attempts to enter and / or leave the restricted-access spatial area.

[0065] According to embodiments, the anonymization of all personal sensor data collected by the UWB monitoring system is temporarily suspended. Embodiments may have the advantage of ensuring that no personal sensor data relevant and / or necessary for handling and / or resolving the exception event is missing due to the anonymization.

[0066] According to embodiments, anonymization by the anonymization filter comprises deleting at least a portion of the personal sensor data. Temporarily suspending anonymization comprises storing the personal sensor data collected within a limited time window.

[0067] Embodiments may have the advantage that in the event of deletion, i.e., complete removal of personal sensor data from local and / or central storage of the UWB monitoring system, it can be ensured that no one can gain access to this data. However, if an exceptional event occurs, personal sensor data, such as video and / or image data, is stored for a limited time only for this specific case. According to embodiments, the stored data is provided for the purpose of data analysis, in particular for the purpose of identifying individuals to whom the stored personal sensor data relates.

[0068] Depending on the embodiments, the storage is temporary. For example, the stored personal sensor data is deleted after its evaluation and / or upon the end of the exceptional situation. Depending on the embodiments, the storage is permanent.

[0069] According to embodiments, the limited time window begins with the detection of the exception event. According to embodiments, the limited time window ends with the expiration of a predetermined period of time or the end of the detection of the exception event.

[0070] Embodiments can have the advantage that the storage of the personal sensor data remains limited in time to a time window that is related to the detected exceptional event. It can be assumed, for example, that only personal sensor data recorded in this time window is relevant in the context of the detected exceptional event. According to embodiments, the limited time window ends, for example, when the exceptional event is no longer detected or can no longer be detected. In the case of a possible fire as an exceptional event, the exceptional event can be detected, for example, in the form of smoke being detected by a UWB sensor of the monitoring system designed as a smoke detector. If the exceptional event is no longer detected, i.e. no more smoke is detected, the suspension of anonymization is ended, for example.According to embodiments, at the end of the predetermined time period, a check is made to determine whether the exceptional event is still detectable and / or whether further requirements are met. If the exceptional event is no longer detectable and, if applicable, the further requirements are met, the suspension of anonymization is terminated. Otherwise, the suspension is repeated or continued for the predetermined time period. Further requirements include, for example, logging a confirmation in the UWB monitoring system that the exceptional event has been verified and no further measures are necessary or that all necessary measures have been taken. Alternatively or additionally, the further requirements can include, for example, logging a confirmation in the UWB monitoring system that the suspension of anonymization is not and / or no longer necessary.The predetermined time period may, for example, be seconds and / or minutes.

[0071] According to embodiments, the personal sensor data is deleted by the UWB sensor that captures the personal sensor data to be deleted. According to embodiments, the storage of the personal sensor data comprises transmitting the personal sensor data by the UWB sensor that captures the personal sensor data to be stored, at least partially and / or completely, via UWB, to a memory module of the UWB monitoring system. According to embodiments, the storage of the personal sensor data comprises transmitting the personal sensor data by the UWB sensor that captures the personal sensor data to be stored, at least partially and / or completely, via a wired data connection, to a memory module of the UWB monitoring system.

[0072] Embodiments may have the advantage that, when deleted directly by the detecting UWB sensor, it can be ensured that the personal sensor data to be deleted does not reach beyond the detecting UWB sensor within the monitoring system. This effectively prevents anyone from gaining unauthorized access to the personal sensor data. Embodiments may further have the advantage that the personal sensor data stored in the memory module can be used, if necessary, to handle and / or resolve the exception event. For example, the stored personal sensor data can be analyzed to determine which individuals are and / or could be involved in the exception event.The storage module may be a local storage module of a plurality of storage modules distributed decentrally across the UWB monitoring system or a central storage module of the UWB monitoring system.

[0073] According to embodiments, anonymization by the anonymization filter comprises encrypting at least a portion of the personal sensor data. According to embodiments, the temporary suspension of anonymization comprises a temporary provision of the corresponding personal sensor data in unencrypted form.

[0074] Embodiments may have the advantage that encrypting the personal sensor data can effectively prevent access to the personal sensor data. On the other hand, in the event of an exceptional event, access to previously recorded personal sensor data can be enabled by decrypting it. For example, the personal sensor data is only made available in decrypted form for a limited time.

[0075] According to embodiments, the encryption of the personal sensor data is carried out by the UWB sensor that captures the personal sensor data to be encrypted.

[0076] Embodiments may have the advantage that the personal sensor data is encrypted directly upon capture and further processed by the UWB monitoring system only in encrypted form. Encryption can be performed, for example, using a public cryptographic key of an asymmetric key pair, so that it can be decrypted by an owner of the associated secret cryptographic key of the corresponding asymmetric key pair. The corresponding owner is, for example, a central or decentralized control module of the UWB monitoring system. The secret cryptographic keys are stored, for example, in a protected memory area of ​​a memory module assigned to the corresponding control module.According to embodiments, the control module provides all UWB sensors, or at least all UWB sensors configured to capture personal sensor data, with a uniform public cryptographic key for encryption. According to embodiments, the control module provides all UWB sensors, or at least all UWB sensors configured to capture personal sensor data, with an individual public cryptographic key for encryption assigned to the corresponding UWB sensor. According to embodiments, the control module provides the UWB sensors, or at least the UWB sensors configured to capture personal sensor data, with an individual, uniform public cryptographic key for encryption assigned to the corresponding group.The groups can be divided in such a way that they each comprise UWB sensors which are assigned to the same spatial section of the spatial area, which are the same type of UWB sensor or which are configured to collect the same type of personal sensor data.

[0077] According to embodiments, providing the personal sensor data in unencrypted form comprises suspending the encryption of the personal sensor data that is captured within a limited time window. Embodiments may have the advantage that the effort required to decrypt the corresponding personal sensor data can be avoided and that this personal sensor data also remains unencrypted. According to embodiments, providing the personal sensor data in unencrypted form comprises decrypting encrypted personal sensor data that is captured within the limited time window. Embodiments may have the advantage that the personal sensor data is stored exclusively in encrypted form even in the event of an exceptional event.The provision of personal sensor data in unencrypted form can thus be effectively limited in time.

[0078] According to embodiments, the limited time window begins a predetermined period of time before the detection of the exceptional event or with the detection of the exceptional event. According to embodiments, the limited time window ends with the expiration of a predetermined period of time after the detection of the exceptional event or with the end of the detection of the exceptional event.

[0079] Embodiments can have the advantage that the provision of the personal sensor data in unencrypted form remains limited in time to a time window that is related to the detected exceptional event. It can be assumed, for example, that only personal sensor data recorded in this time window are relevant in the context of the detected exceptional event. According to embodiments, the limited time window ends, for example, when the exceptional event is no longer detected or can no longer be detected. In the case of a possible fire as an exceptional event, the exceptional event can be detected, for example, in the form of smoke being detected by a UWB sensor of the monitoring system designed as a smoke detector. If the exceptional event is no longer detected, i.e., no more smoke is detected, the suspension of encryption is ended, for example.According to embodiments, at the end of the predetermined time period, a check is made to determine whether the exceptional event is still detectable and / or whether further requirements are met. If the exceptional event is no longer detectable and, if applicable, the further requirements are met, the suspension of encryption is terminated. Otherwise, the suspension is repeated or continued for the predetermined time period. Further requirements include, for example, logging a confirmation in the UWB monitoring system that the exceptional event has been verified and no further measures are necessary or that all necessary measures have been taken. Alternatively or additionally, the further requirements can include, for example, logging a confirmation in the UWB monitoring system that the suspension of encryption is not and / or no longer necessary.The predetermined time period can, for example, be seconds and / or minutes long. Starting the limited time window a predetermined period before the detection of the exceptional event can have the advantage that relevant personal sensor data collected prior to the exceptional event can also be provided in unencrypted form.

[0080] According to embodiments, the UWB monitoring system is further configured to Receiving a request to release collected sensor data, checking a credential included in the request to access the requested sensor data, upon successful verification of the credential, releasing access to the requested sensor data.

[0081] Embodiments can have the advantage that captured sensor data, in particular personal sensor data, is only made available to authorized persons. Release of sensor data, such as position data and / or other data, occurs, for example, according to an authorization profile of the requester. This allows an effective data protection layer to be integrated into the UWB monitoring system. Proof of authorization can be provided, for example, in the form of an authorization certificate. According to embodiments, the request is received and checked, for example, by a decentralized or central control module of the UWB monitoring system. In the event of a successful check, the corresponding control module also releases the data. For example, the requested sensor data is sent to the sender of the request in response to the request or displayed on a display device of the UWB monitoring system.The requested sensor data is transmitted, for example, in encrypted form; in particular, it can be transmitted using end-to-end encryption.

[0082] According to embodiments, the collected sensor data are divided into categories and checking the credentials includes checking whether the credentials authorize access to sensor data of the category to which the requested sensor data is assigned.

[0083] Embodiments may have the advantage of allowing permissions to be granted on a category-by-category basis, so that credentials can be restricted to one or more of the categories.

[0084] According to embodiments, the collected personal sensor data are divided into categories and the suspension of anonymization occurs selectively only for one or more selected categories, for example depending on the type of exceptional event detected.

[0085] According to embodiments, the access authorization of the credential is temporarily extended upon detection of the exception event. An extension of the credential means that, with a given credential, more categories may be viewed in the event of an exception event being detected than if no exception event is detected. According to embodiments, the scope of the extension depends on the type of detected exception event. According to embodiments, in the event of an exception event being detected, the access authorization for all valid credentials is temporarily extended to all categories of sensor data for access to at least one category of sensor data.

[0086] Embodiments can have the advantage that, for example, depending on the sensitivity of the sensor data, different authorization credentials are required for access to the corresponding sensor data. Thus, it is possible to control who is granted access rights to the acquired sensor data of the UWB monitoring system and to what extent. Thus, data release can be adapted to the current danger situation, for example, through the requester's authorization profile.

[0087] Depending on the embodiment, source IDs are assigned to each of the acquired sensor data. A prerequisite for successfully verifying the credentials includes valid confirmation of the credentials for accessing the requested sensor data by one or more instances associated with the source IDs of the requested sensor data.

[0088] Embodiments may have the advantage that access to the acquired sensor data requires authorization by one or more instances associated with the source IDs, i.e., the origin, of the requested sensor data. According to embodiments, the source IDs each identify the UWB sensor that acquired the corresponding sensor data and / or the UWB token that was sensed by the corresponding sensor data. According to embodiments, the corresponding instances are each the corresponding UWB sensors, UWB tokens, or users or administrators associated with the corresponding UWB sensors or UWB tokens.

[0089] For example, each localized position, i.e., recorded sensor data for localizing UWB tokens, is imprinted with secure information from the UWB token, so that the origin and owner of the corresponding sensor data are always known. In this case, requests regarding a position or data from a UWB token must always first be authorized by the affected UWB token or a bearer and / or representative of the same.

[0090] According to embodiments, if the requested sensor data is released, the type, time, location, recipient and / or use of the released sensor data are logged.

[0091] Embodiments can have the advantage that, based on the corresponding protocols, it is possible to precisely trace what happens with the recorded sensor data, in particular who has access to it. According to embodiments, logging takes place in a blockchain. A blockchain can have the advantage of providing a tamper-proof storage structure for storing the data to be logged.

[0092] According to embodiments, the UWB monitoring system comprises one or more pre-trained machine learning modules, each of which is trained to detect exceptional events based on anomalies in the acquired sensor data. Embodiments may have the advantage of enabling automated detection of exceptional events.

[0093] According to embodiments, the plurality of UWB sensors comprises a plurality of localization sensors configured to determine the position of UWB tokens within the spatial area. The position determination is performed using time-of-flight measurements of UWB signals between UWB tokens and / or localization sensors.

[0094] Embodiments may have the advantage that, using UWB tokens, the location of authorized persons within the spatial area can be effectively monitored. For example, each person who enters the spatial area, such as a restricted-access spatial area, receives a corresponding UWB token. If data for assigning a token ID to a specific person is not stored or is stored cryptographically secured, e.g., in encrypted form, monitoring the UWB tokens enables anonymized monitoring of the UWB token holders. For example, a necessary prerequisite for decrypting the assignment data is detecting an exception event.

[0095] UWB tokens are localized, for example, by triangulation using at least two or three localization sensors in the form of UWB antennas. The triangulation signals can be sent by the UWB token and / or the UWB antennas. The triangulation signals can be evaluated by the UWB token and / or the UWB antennas and / or an evaluation module of the monitoring system.

[0096] According to embodiments, the UWB monitoring system transmits an activation code. The UWB tokens are activated upon receipt of the activation code upon entering the transmission range of the UWB monitoring system, and deactivated upon leaving the transmission range of the UWB monitoring system upon failure to receive the activation code.

[0097] Embodiments may have the advantage that the UWB token actively transmits signals using UWB only within the spatial area or within the transmission range of the UWB monitoring system and is thus detectable at all.

[0098] According to embodiments, activating the UWB tokens each comprises activating the transmission of UWB signals by the respective UWB token, in particular activating the transmission of UWB signals to the monitoring system. Activating the UWB token makes the corresponding UWB token visible to the monitoring system. According to embodiments, deactivating the UWB tokens each comprises deactivating the transmission of UWB signals by the respective UWB token, in particular deactivating the transmission of UWB signals to the monitoring system. Deactivating the corresponding UWB token makes the corresponding UWB token invisible to the monitoring system.

[0099] According to embodiments, access authorizations to and / or residence authorizations in a spatial area, which is a restricted access spatial area, are proven using the UWB tokens.

[0100] Embodiments can have the advantage that the UWB tokens can not only be used to track the movements of the wearer within a restricted-access spatial area, but can also be used to check whether access authorization and / or residence authorization to or in the restricted-access spatial area and / or certain spatial sections thereof exists. Based on this, it can be detected whether a wearer of a UWB token is legitimately present in the restricted-access spatial area and / or a spatial section thereof. For example, access barriers, such as doors to the restricted-access spatial area and / or a spatial section thereof, can open automatically when a wearer of a UWB token with valid access authorization approaches the access barrier.Depending on the embodiment, different access authorizations may be necessary for different spatial sections of the restricted access spatial area.

[0101] According to embodiments, access authorizations and / or residence authorizations are verified by possession of the UWB token. According to embodiments, access authorizations and / or residence authorizations are verified by authorization certificates. An authorization certificate is a digital certificate that assigns access authorization and / or residence authorization to a UWB token and / or a user of the corresponding UWB token. For example, an authorization certificate defines access authorizations and / or residence authorizations, comprises a public cryptographic key of an asymmetric cryptographic key pair assigned to the UWB token, a token ID, information about the issuer of the authorization certificate, and / or a digital signature of an issuer.The issuer can be, for example, an external entity, a decentralized or centralized control module of the UWB surveillance system, or another UWB token that itself holds the granted access authorizations and / or residence authorizations. Access authorizations and / or residence authorizations can be issued, for example, using the authorization certificate in conjunction with a signature of the UWB token using a private cryptographic key from the asymmetric cryptographic key pair assigned to the UWB token. Using the public cryptographic key provided by the authorization certificate, the signature can be verified, thus verifying the UWB token's possession of the private cryptographic key.For example, the authorization certificate defines access authorizations and / or residence authorizations granted to the owner of the private cryptographic key by the issuer of the authorization certificate. According to embodiments, the access authorizations and / or residence authorizations are time-limited. For example, a time limitation is defined by an expiration date and / or expiration time of the authorization certificate.

[0102] According to embodiments, detecting the exceptional event comprises detecting a number of persons in the spatial area, such as a restricted access spatial area, using the UWB sensors, which at least locally differs from the number of persons authorized to access detected in the spatial area using the UWB tokens.

[0103] Embodiments may have the advantage that attempts to gain access to the restricted spatial area or sections thereof without access authorization and / or attempts to evade movement monitoring by the UWB surveillance system within the restricted spatial area can be effectively detected.

[0104] According to embodiments, each of the UWB tokens is assigned to a user. For example, one or more reference values ​​for personal sensor data for authenticating the assigned user, i.e., authentication data, are stored in the UWB tokens. Proving access authorization and / or residency authorization using one of the UWB tokens includes, for example, confirming authentication of the user assigned to the corresponding UWB token using the UWB token. Authentication by the UWB token includes, for example, locally validating authentication data by the UWB token using the one or more reference values ​​stored in the UWB token.

[0105] According to embodiments, the UWB tokens each comprise, for example, a sensor for capturing the authentication data. According to embodiments, the user's authentication data is, for example, captured by a sensor of the UWB token. According to embodiments, the authentication data is captured, for example, by a local sensor of the UWB monitoring system and sent to the UWB token for validation. According to embodiments, the captured authentication data is sent in encrypted form. According to embodiments, the reference values ​​are stored in encrypted form, and the local validation of the captured authentication data is carried out in encrypted form.

[0106] According to embodiments, the authentication data includes biometric data of the user, which is captured using a biometric sensor. Biometric data may include, for example, DNA data, fingerprint data, body geometry data / anthropometric data, such as facial, hand, and ear geometry data, palmar structure data, vein structure data, such as palm vein structure data, iris data, retina data, voice recognition data, nail bed pattern, and tooth pattern data.

[0107] According to embodiments, the authentication data includes behavior-based data of the user. Behavior-based data is data based on the user's intrinsic behavior and can include, for example, movement patterns, gait patterns, arm, hand, and finger movement patterns, and lip movement patterns. Using behavior-based data to authenticate the user can have the advantage that the user can continue their usual, characteristic behavior for the purpose of authentication without requiring additional actions that are atypical for them. In particular, the user does not have to interrupt their usual behavior.

[0108] A sensor for capturing behavior-based data is used to capture the behavior-based data. The behavior-based data is, for example, movement data captured using an authentication sensor configured as a motion sensor. The motion sensor can, for example, comprise an acceleration sensor. A movement can, for example, be calculated by integrating acceleration measurements captured by the acceleration sensor. The motion sensor can, for example, also detect its position in space and / or changes in position. For example, the motion sensor comprises a gyroscope. The movement data captured by the motion sensor is, for example, acceleration, inclination, and / or position data.

[0109] Captured movement data includes, for example, data on movements of the UWB token caused by the user carrying the UWB token, e.g., wearing it on their body. The user's characteristic movements cause the UWB token to move in a manner characteristic of the user. This is the case even if the user does not actively interact with the UWB token, e.g., does not use any user interface of the UWB token, such as a key, keyboard, touchscreen, or microphone.

[0110] According to embodiments, the UWB token comprises a classification module configured to recognize one or more generic movement patterns using movement data. The movement patterns can, for example, be gross and / or fine motor movements of the UWB token, such as those characteristic of a use of the UWB token by an individual user, such as carrying and / or wearing it on the body. For example, the classification module is pre-trained to recognize the generic movement patterns using training data sets with movement data from a user cohort.

[0111] According to embodiments, the user is registered as a user of the UWB token during a learning phase. According to embodiments, the learning phase comprises capturing the user's movement data using an authentication sensor in the form of a motion sensor of the UWB token and extracting one or more reference values ​​characteristic of the user to be registered.

[0112] According to embodiments, behavior-based authentication of a user using the UWB token comprises the following steps: Capturing movement data by an authentication sensor in the form of a motion sensor of the UWB token, inputting the captured movement data into the classification module, generating a classification result by the classification module as to whether the current user is a user registered in the UWB token, generating an authentication signal if the classification result meets a verification criterion, wherein the authentication signal signals successful authentication of the current user.

[0113] The verification criterion may, for example, include a sufficiently high degree of agreement between the recorded movement data and one or more reference values ​​stored for the registered user. Furthermore, the verification criterion may include that the recorded movement data and / or the one or more reference values ​​used do not exceed a maximum age.

[0114] According to embodiments, the aforementioned steps of capturing the movement data, entering the movement data, and generating the classification result are repeatedly executed one after the other. Furthermore, in addition to the step of generating the classification result, the following step is executed: Storing the classification result in the memory of the UWB token.

[0115] Generating an authentication signal includes, for example: in response to an authentication request, accessing the memory of the UWB token to read the stored classification result, for example the last stored classification result, reading and evaluating the classification result according to the verification criterion.

[0116] According to embodiments, recorded movement data can be used to adapt and / or improve the reference values ​​stored for the corresponding user in the event of successful user authentication.

[0117] According to some embodiments, authentication is knowledge-based. For example, the authentication data includes the user's personal password. The password can be, for example, an alphanumeric string.

[0118] According to embodiments, the authentication is possession-based. According to embodiments, the authentication data comprises signed data from one or more other electronic devices assigned to the user, in particular mobile, portable electronic devices. The corresponding electronic devices are, for example, smart devices that the user carries with them, such as smartphones, smartwatches, smart glasses, phablets, tablets, smart bands, smart keychains, smart cards, etc. These electronic devices transmit a range-limited signal that signals their presence. For example, the signal comprises an ID of the corresponding electronic device. For example, the signal is signed with a cryptographic signature key of the corresponding electronic device. The signal can be, for example, a Bluetooth or a UWB signal.When using a UWB signal, the majority of electronic devices are a plurality of UWB tokens. Successful authentication of a user may require that the user carry a certain number of associated electronic devices. An electronic device may be stolen, but the higher the number of electronic devices required for successful authentication, the lower the likelihood that the device will be carried by someone other than the registered user, for example, as a result of theft.

[0119] According to embodiments, each of the UWB tokens is assigned to a user. One or more reference values ​​for personal sensor data for authenticating the assigned user are stored in each UWB token. Verifying access authorization and / or residency authorization using one of the UWB tokens comprises confirming an authentication of the user assigned to the corresponding UWB token using the UWB token. Authentication by the UWB token comprises locally validating personal sensor data by the UWB token using the one or more reference values ​​stored in the UWB token.

[0120] If one or more UWB sensors, such as impact sound sensors, motion detectors, light barriers, or gas detectors, detect the presence of a person in a spatial section of the spatial area where no UWB token is detected, this is an indication of an attempted unauthorized intrusion. Likewise, differences in the movement patterns of UWB tokens and detected persons can indicate unauthorized activity, for example, if a UWB token remains stationary in one place while a person's movements are detected based on the recorded sensor data.

[0121] According to embodiments, an exception event includes, for example, detecting a number of persons that at least locally exceeds the number of detected persons authorized to access or the detected UWB tokens.

[0122] According to embodiments, detecting the exception event comprises detecting a UWB token in a spatial portion of the spatial area, such as a restricted access spatial area, for which the corresponding UWB token has no access authorization.

[0123] According to embodiments, detecting the exception event comprises collecting non-personal sensor data that exceeds a predefined threshold.

[0124] Embodiments may have the advantage of being able to effectively detect emergency situations, such as a fire using a UWB sensor configured as a smoke detector or a break-in using a UWB sensor configured as a glass breakage. For example, increased movement activity and a simultaneous temperature increase can initially be interpreted as an unclear exceptional event or even as a dangerous situation.

[0125] According to embodiments, the plurality of UWB sensors comprise sensors for acquiring optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data.

[0126] Embodiments can have the advantage that, using the corresponding sensors, a multitude of different sensor data can be captured and thus a multitude of different situations or conditions within the spatial area can be detected. The UWB sensors include, for example, one or more UWB radar sensors, glass breakage sensors, impact sound sensors, gas sensors, motion detectors, video sensors, infrared sensors, temperature sensors, and / or smoke sensors.

[0127] According to embodiments, the UWB monitoring system comprises a digital radio network with a mesh topology configured to transmit the acquired sensor data using UWB.

[0128] Embodiments may have the advantage that acquired sensor data can be effectively transmitted via the UWB monitoring system. Furthermore, a mesh topology offers high reliability, since in the event of a failure of individual components of the mesh topology, data transmission remains possible via alternative routes. Furthermore, in the event of a failure of a portion of the mesh topology, operation can be maintained with the remaining part of the mesh topology.

[0129] Embodiments may have the advantage that, in the UWB-based radio network with a mesh topology, position data for several and / or all network nodes, i.e., UWB sensors and / or UWB tokens, can be provided or determined. Position data can be determined, for example, using a triangulation method based on time-of-flight measurements of UWB signals. The position data can be relative and / or absolute position data. To determine absolute position data, position data for at least one or more stationary reference points must be known.Embodiments may have the advantage that a position-based routing method can be used for targeted forwarding of data in the UWB-based radio network with mesh topology in order to determine a shortest or otherwise best path between a source node and a destination node within the radio network using the position data determined by means of UWB.

[0130] According to embodiments, one or more of the UWB sensors are configured as UWB transceivers for forwarding UWB transmission signals. According to embodiments, the UWB monitoring system comprises, in addition to the UWB sensors, one or more UWB transceivers configured to forward the UWB transmission signals.

[0131] Embodiments may have the advantage that UWB data forwarding may be effectively implemented using the UWB sensors and / or additional UWB transceivers.

[0132] Embodiments further include a method for controlling a UWB monitoring system for monitoring a spatial area. The UWB monitoring system comprises a plurality of UWB sensors spatially distributed in the spatial area. The UWB sensors are configured to acquire sensor data and to transmit the acquired sensor data via UWB.

[0133] Embodiments further include a method for controlling a UWB monitoring system for monitoring a spatial area. The UWB monitoring system comprises a plurality of UWB sensors distributed throughout the spatial area. The UWB sensors are configured for communication via UWB.

[0134] The plurality of UWB sensors includes a plurality of localization sensors for determining position data of mobile, wearable UWB tokens within the spatial area. Determining the position data includes time-of-flight measurements of UWB signals between the localization sensors and the UWB tokens.

[0135] The UWB monitoring system is configured to detect the presence of an unknown UWB token in the spatial area. The unknown UWB token transmits a first UWB payload signal. The transmitted first UWB payload signal is encoded according to a first UWB data encoding scheme unknown to the monitoring system.

[0136] The method for detecting the presence of the unknown UWB token includes: Detecting a plurality of sensor signals by the spatially distributed plurality of localization sensors, wherein the detected sensor signals each comprise a noise signal and a first UWB useful signal transmitted by the unknown UWB token, with which the noise signal is superimposed, wherein the useful signal occurs in the signals detected by the individual localization sensors with a sensor-dependent first temporal shift due to the spatial distribution of the localization sensors, amplifying the first UWB useful signal relative to the noise signal, wherein the amplification comprises combining the detected sensor signals with one another, wherein the detected sensor signals are each temporally shifted using a sensor-dependent second temporal shift for combining,wherein the second temporal shifts of the detected sensor signals used are each inverse to the first temporal shift of the corresponding sensor signal and compensate for the corresponding first temporal shift, detecting the amplified first UWB useful signal using the combined sensor signals. ,

[0137] According to embodiments, the method for controlling the UWB monitoring system is configured to control any of the previously described embodiments of the UWB monitoring system.

[0138] The procedure also includes: Capturing sensor data in the spatial area using the UWB sensors, wherein the captured sensor data comprises personal sensor data, filtering the captured sensor data using an anonymization filter, wherein the anonymization filter is configured to anonymize the personal sensor data, evaluating the captured sensor data to detect an exceptional event, upon detection of the exceptional event, temporarily suspending the anonymization of the personal sensor data.

[0139] Embodiments of the invention will be explained in more detail below with reference to the drawings. They show: Figure 1 shows a schematic diagram of an exemplary UWB token, Figure 2 shows a schematic diagram of an exemplary UWB sensor, Figure 3 shows schematic diagrams of exemplary UWB signals in the time and frequency domain, Figure 4 shows schematic diagrams of exemplary UWB data encodings, Figure 5 shows a schematic diagram of an exemplary UWB monitoring system, Figure 6 shows a flowchart of an exemplary method for controlling a UWB monitoring system, Figure 7 shows a flowchart of an exemplary method for controlling a UWB monitoring system, Figure 8 shows a schematic diagram of an exemplary UWB monitoring system, Figure 9 shows a schematic diagram of an exemplary UWB sensor, Figure 10 shows a flowchart of an exemplary method for controlling a UWB monitoring system, and Figure 11 shows a flowchart of an exemplary method for controlling a UWB monitoring system.

[0140] Elements of the following embodiments that correspond to one another are identified by the same reference numerals.

[0141] Figure 1shows an exemplary UWB token 112, which includes a processor 130, a memory 132, and a communication interface in the form of a UWB antenna 134. The processor 130 is configured to control the UWB token 112 by executing program instructions, which are stored, for example, in the memory 132. A token ID, for example, can also be stored in the memory 132. The UWB token 112 is configured to send and receive UWB signals via the UWB antenna 134. For example, the UWB token 112 sends UWB signals that include a timestamp and / or the token ID. Furthermore, the memory 132 contains, for example, a UWB data encoding scheme 152. The UWB token 112 is configured to transmit a UWB signal encoded according to the UWB data encoding scheme 152.If this UWB data encoding scheme 152 is unknown to a UWB monitoring system, it cannot readily detect UWB communication from the UWB token 112. If the UWB monitoring system does not detect the UWB signals from the UWB token 112, it cannot detect its presence.

[0142] According to embodiments, the communication interface 134 of the UWB token 112 can be further configured for additional wireless, UWB-less communication, such as Bluetooth, WLAN, WiFi, or GSM. Data is transmitted using the additional communication, for example, encrypted with a cryptographic key, such as a symmetric key and / or a private or public key of an asymmetric key pair. For example, using the cryptographic key, end-to-end encryption is established between the UWB token 112 and an external communication device sending or receiving the encrypted data, such as a remote server. The cryptographic key is provided, for example, via a UWB communication channel, e.g., sent to and / or from the UWB token 112. The cryptographic key is oris stored, for example, in the memory 132 of the UWB token 112, in particular in a protected memory area of ​​the memory 132.

[0143] Figure 2shows an exemplary UBW sensor 110 of a UWB monitoring system 100, which is, for example, a localization sensor. In general, a UWB sensor can be a stationary UWB antenna or a stationary UWB anchor, or even a UWB token. This UBW sensor 110 comprises a processor 120, which executes program instructions stored, for example, in a memory 124 of the UBW sensor 110, and controls the UBW sensor 110 according to the program instructions. Furthermore, the UWB sensor 110 comprises a communication interface in the form of a UWB antenna 126 for transmitting and receiving data via UWB.A UWB data coding scheme 154 is stored in the memory 124, for example in a protected memory area of ​​the memory 124, for encoding and / or decoding UWB signals that are transmitted and / or received via the communication interface 126 using a UWB data coding according to the UWB data coding scheme. Corresponding UWB signals are, for example, localization signals for determining position data of UWB tokens. If, for example, the UWB sensor 110 only knows the UWB data coding scheme 154, it can only detect UWB signals that are encoded with this UWB data coding scheme 154. In order to detect UWB signals that are encrypted with a different UWB data coding scheme, the received signals from a plurality of spatially distributed UWB sensors 110 must be combined with one another.For example, executing the program instructions by processor 120 results in such a combination. If a UWB signal encoded with a different UWB data encoding scheme and thus the presence of an unknown UWB token is detected, UWB sensor 110 can attempt to communicate with it. For example, the different UWB data encoding scheme used can be determined and used for further communication between UWB sensor 110 and UWB token.

[0144] According to embodiments, the communication interface 126 of the UWB sensor 110 can further be configured for additional wireless, UWB-less communication, such as Bluetooth, WLAN, WiFi, or GSM. Data is transmitted using the additional communication, for example, encrypted with a cryptographic key, such as a symmetric key and / or a private or public key of an asymmetric key pair. For example, end-to-end encryption is established between the UWB sensor 110 and a UWB token using the cryptographic key. The cryptographic key is provided, for example, via a UWB communication channel, i.e., sent, for example, to and / or from the UWB token 110. The cryptographic key is stored, for example, in the memory 124 of the UWB sensor 110, in particular in a protected memory area of ​​the memory 124.

[0145] Figures 3A and 3B show exemplary UWB signals in the time domain and in the frequency domain. Figure 3A shows a schematic diagram of a UWB signal, for example "1 0 1", by generating pulses 402 with the shortest possible pulse duration in the time domain 400. According to the laws of Fourier transformation, the Figure 3BThe spectrum 406 shown, which is transmitted or received via the UWB antenna, is larger or wider in the frequency domain 404, the shorter the pulse duration of the pulses 402. The product of the temporal and spectral width of the pulse is constant. During transmission of the UWB signal, the entire transmission power is distributed over such a large frequency range that no interference is to be expected for the radio operation of narrowband transmission methods. Consequently, it is not or only with difficulty recognizable that a UWB transmission is taking place at all. For a narrowband receiver, a UWB signal appears more like statistical noise.

[0146] Figure 4Ashows exemplary UWB data encodings. Four exemplary, identical time intervals 414 are shown. The data to be encoded is "1 1 0 0." The first row 410 shows an exemplary UWB data encoding according to a UWB data encoding scheme based on ON-OFF keying as the encoding method. A pulse 402 within one of the time intervals 414 is a "1," and no pulse within a time interval 414 is a "0." The second row 411 shows an exemplary UWB data encoding according to a UWB data encoding scheme based on Pulse Position Modulation (PPM) as the encoding method. A pulse 402 within one of the time intervals 414 at a first position is a "1," and a pulse 402 within a time interval 414 at a second position shifted relative to the first position is a "0."The third line 412 shows an exemplary UWB data coding according to a UWB data coding scheme based on Binary Phase Shift Keying (BSPK) as the coding method. A pulse 402 within one of the time intervals 414 with a first polarity is a "1," and a pulse 402 within a time interval 414 with a polarity mirrored relative to the first polarity is a "0." The fourth line 413 shows an exemplary UWB data coding according to a UWB data coding scheme based on Pulse Amplitude Modulation (PAM) as the coding method. A pulse 402 within one of the time intervals 414 with a first amplitude is a "1," and a pulse 402 within a time interval 414 with a second amplitude that is different from the first amplitude, for example, smaller, is a "0." The . Figure 4AThe useful signals shown arrive at spatially distributed UWB localization sensors with a time delay. When these incoming useful signals are combined using a shift that compensates for this temporal shift, they overlap and amplify each other.

[0147] As in Figure 4B As shown, if Binary Phase Shift Keying (BSPK) is used as the coding method, the pulses 402 can be transmitted continuously as a continuous stream. This allows the transmitted bit rate to be equal to the pulse rate.

[0148] Figure 5shows an exemplary UWB communication system 100 comprising a plurality of UWB sensors 110.1, 110.2, 110.3. The UWB sensors 110.1, 110.2, 110.3 each have a different distance D 1 , D 2 , D 3 to the access 104 to the spatial area 102. A UWB signal transmitted by the UWB token 112 upon passing through the access 104 arrives at the first UWB sensor 110.1 at time T 1 . The UWB signal arrives at the second UWB sensor 110.2 with a relative time shift Δ 2 = T 2 - T 1 . At the third UWB sensor 110.3, the UWB signal arrives with a relative time shift Δ 3 = T 3 - T 1. When combining the sensor signals detected by the UWB sensors 110.1, 110.2, 110.3, inverse time shifts -Δ 2 and -Δ 3 are calculated for the signals detected by the second UWB sensor 110.2 and the third UWB sensor 110.3 sensor signals are used, the UWB signal can be effectively amplified.

[0149] Figure 6shows an exemplary method for operating a UWB surveillance system 100 for monitoring a spatial area 102. In block 502, a plurality of sensor signals are acquired by the spatially distributed plurality of localization sensors. The acquired sensor signals each comprise a noise signal and an unknown UWB wanted signal transmitted by the unknown UWB token, with which the noise signal is superimposed. Due to the spatial distribution of the localization sensors, the wanted signal each arrives with a sensor-dependent first temporal shift in the signals acquired by the individual localization sensors. In block 504, the unknown UWB wanted signal is amplified relative to the noise signal. Amplifying comprises combining the acquired sensor signals with one another. The acquired sensor signals are each temporally shifted for combination using a sensor-dependent second temporal shift.The second temporal shifts used for the acquired sensor signals are each inverse to the first temporal shift of the corresponding sensor signal and compensate for the corresponding first temporal shift. In block 506, the amplified unknown UWB wanted signal is detected using the combined sensor signals.

[0150] Figure 7shows an exemplary method for operating a UWB monitoring system 100 for monitoring a spatial area 102. In block 510, using the detected unknown UWB payload signal, an unknown UWB data coding scheme with which the detected unknown UWB payload signal is encoded is determined and used in block 512 to encode a UWB communication between the UWB monitoring system and the unknown UWB token. In block 514, a credential of the unknown UWB token is received and validated in block 516. If the credential is valid, in block 518, a UWB data coding scheme known to and used by the UWB monitoring system is sent to the previously unknown UWB token using the UWB communication established in block 514. In block 520, the known UWB data encoding scheme sent in block 518 is used to encode a UWB communication between UWB monitoring system and UWB token.

[0151] Figure 8shows an exemplary UWB surveillance system 100 for monitoring a spatial area 102, such as a restricted-access spatial area. If the spatial area 102 is a restricted-access spatial area, this restricted-access spatial area is, for example, delimited from the surroundings and is intended to be accessible only via one or more entrances or exits 104. For example, the spatial area is an indoor area within a building. Alternatively or additionally, the spatial area can also include an outdoor area outside a building. For example, this outdoor area can be a restricted-access area that is enclosed. An enclosure can, for example, include a fence, a wall, and / or a hedge.A restricted-access spatial area 102 can, for example, be divided into a plurality of spatial sections 106, each of which can be entered only via one or more entrances or exits 108.

[0152] The UWB monitoring system 100 comprises a plurality of UWB sensors 110 distributed across the spatial area 102. The UWB sensors 110 are configured to acquire sensor data, such as position data, motion data, image data, sound data, vibration data, temperature data, structural data, gas concentration data, particle concentration data, etc. Furthermore, the UWB sensors 110 are configured to transmit the acquired sensor data via UWB, i.e., via a UWB network provided by the UWB monitoring system 100. The UWB sensors 110 can be configured as UWB transceivers for forwarding UWB transmission signals within the monitoring system 100. Furthermore, in addition to the UWB sensors 110, the UWB monitoring system 100 may comprise one or more UWB transceivers 111 configured to forward the UWB transmission signals.The UWB network implemented by the monitoring system 100 is, for example, a digital radio network with a mesh topology, which is configured to transmit the acquired sensor data using UWB. For example, sensor data is transmitted within the UWB-based radio network with mesh topology using a position-based routing method. According to embodiments, data transmission of the UWB sensors 110 takes place exclusively via UWB. According to embodiments, one or more of the UWB sensors 110 are additionally configured for at least partially and / or completely wired transmission of the acquired sensor data. According to embodiments, all UWB sensors 110 are additionally configured for at least partially and / or completely wired transmission of the acquired sensor data.For example, a UWB radar functionality can also be integrated and / or implemented for the detection of persons who do not carry a UWB token.

[0153] The UWB sensors 110 include, for example, anonymization filters configured to filter the acquired sensor data. During the filtering process, personal sensor data is anonymized. Personal sensor data includes, for example, image data from which individuals can be identified. The filtered sensor data is transmitted, for example, via the UWB network to a control module 116. The control module 116 can be a central control module or a decentralized control module. The control module 116 is configured, for example, to evaluate the sensor data acquired by the UWB sensors 110 to detect exceptional events, such as a dangerous situation or unauthorized access to the spatial area 102. Upon detection of an exceptional event, the anonymization of the personal sensor data is temporarily suspended.

[0154] The control module 116 is further configured, for example, to receive requests for acquired sensor data, to check authorization credentials for access to the corresponding sensor data, and, if the check is successful, to grant access to the requested sensor data. In the event of a detected exceptional event, for example, access to personal sensor data is also granted, the anonymization of which is temporarily suspended. The authorization credentials can be based, for example, on authorization certificates and / or authorization profiles of the requesters, which define the access authorizations of the requesters. For example, all access authorizations assigned to a user and / or UWB token are stored in an authorization profile assigned to a user and / or UWB token. The scope of the granted access authorization can, according to embodiments, depend, for example, on whether an exceptional situation is detected.

[0155] The monitoring system 100 can further be configured to use UWB sensors to locate UWB tokens 112 within the spatial area 102. For this purpose, UWB localization signals 107 are used, for example, which are sent from the UWB antennas 110 to the corresponding UWB tokens 112 and vice versa. Based on propagation time differences of the transmitted signals, the relative positions of the UBW tokens 112 to the permanently installed UWB antennas 110 and thus the positions of the UBW tokens 112 in the spatial area 102 can be precisely determined, for example by triangulation. Since the transmitted UBW localization signals 107 are hardly distinguishable from background noise without knowledge of the UWB coding used and are thus effectively obfuscated, attempts at unauthorized localization of the UWB tokens 112 in the course of unauthorized spying attempts can be effectively prevented.This is further supported by the relatively short range of the UWB signals, which effectively counter remote spying attempts. The UWB tokens 112, for example, identify users or wearers with access authorization to the spatial area 102 if this is a restricted spatial area. Furthermore, the UWB tokens 112 can define wearer-specific access authorizations if different access authorizations are required for individual spatial sections of the spatial area 102. The UWB tokens 112 can thus be used to determine the location of persons with access authorization. If persons are detected to whom no UWB token 112 can be assigned, this is an indication of an attempted unauthorized intrusion, which is detected, for example, as an exception event.

[0156] Figure 9shows an exemplary UBW sensor 110. For example, the UBW sensor includes all features of the UWB sensor of the Figure 2The UWB sensor 110 further comprises a sensor element 122, which is configured, for example, to capture optical, acoustic, chemical, thermal, electromagnetic, and / or vibration-based sensor data. The captured sensor data may, for example, include personal sensor data depending on the sensor element 122 used. If the UWB sensor 110 is configured to capture personal sensor data, the UWB sensor 110 further comprises an anonymization filter for anonymizing the personal sensor data; otherwise, it does not. Anonymizing may, for example, include deleting the captured personal sensor data from the memory 124. Furthermore, anonymizing may, for example, include encrypting the captured personal sensor data. Finally, the UWB sensor 110 comprises a UWB antenna 126 for transmitting and receiving data via UWB.According to embodiments, the UWB sensor 110 may, for example, additionally comprise a communication interface for wired data transmission.

[0157] Figure 10shows an exemplary method for controlling a UWB monitoring system. In block 200, sensor data in a spatial area is acquired by UWB sensors of the UWB monitoring system. The acquired sensor data may include personal sensor data. In block 202, the acquired sensor data is filtered using anonymization filters of the UWB sensors. In the process, personal sensor data is anonymized. Such anonymization includes, for example, deleting or encrypting the sensor data to be anonymized. In block 204, the acquired and filtered sensor data are evaluated to detect an exception event. This is done, for example, by a central or decentralized control module of the UWB monitoring system. In block 206, upon detection of an exception event, a temporary suspension of the anonymization of the personal sensor data is initiated, for example, by the control module.

[0158] Figure 11 shows an exemplary method for controlling a UWB monitoring system. In block 300, the UWB monitoring system, for example, a control module of the UWB monitoring system, receives a request to release acquired sensor data. In block 302, an authorization credential included in the request for access to the requested sensor data is checked, for example, by the control module. The authorization credential can be, for example, an authorization certificate or an identifier of a stored authorization profile of the requester. In block 304, upon successful verification of the authorization credential, access to the requested sensor data is granted. For example, the requested sensor data is sent to the requester or displayed on a local display device of the monitoring system. List of reference symbols

[0159] 100UWB surveillance system 102Spatial area 104Access / exit 106Spatial section 108Access / exit 107UWB localization signal 110UWB sensor 111UWB transceiver 112UWB token 114UWB communication channel 116Control module 120Processor 122Sensor element 123Filter 124Memory 126Communication interface 130Processor 132Memory 134Communication interface 152UWB data encoding scheme 154UWB data encoding scheme 400Time domain 402Pulse 404Frequency domain 406Spectrum 410ON-OFF keying 411Pulse position modulation 412Binary phase shift keying 413Pulse amplitude modulation 414Time interval

Claims

1. A UWB monitoring system (100) for monitoring a spatial area (102), wherein the UWB monitoring system (100) comprises a plurality of UWB sensors (110), which are arranged distributed in the spatial area (102), wherein the UWB sensors (110) are configured for communication by means of UWB, wherein the plurality of UWB sensors (110) comprises a plurality of localization sensors for determining positional data of mobile portable UWB tokens (112) within the spatial area (102), wherein determining the positional data includes time-of-flight measurements of UWB signals (107) between the localization sensors and the UWB tokens (112), wherein the UWB monitoring system (100) is configured for detecting a presence of an unknown UWB token (112) in the spatial area (102), wherein the unknown UWB token (112) sends a first UWB useful signal, wherein the sent first UWB useful signal is encoded according to a first UWB data encoding scheme (152) unknown to the monitoring system (100), wherein detecting the presence of the unknown UWB token (112) comprises: • detecting a plurality of sensor signals by way of the spatially distributed plurality of localization sensors, wherein the detected sensor signals respectively comprise a noise signal and a first UWB useful signal sent by the unknown UWB token (112) with which the noise signal is superimposed, wherein the useful signal, due to the spatial distribution of the localization sensors, appears with a sensor-dependent first time shift in the signals detected by the individual localization sensors, • amplifying the first UWB useful signal relative to the noise signal, wherein the amplification comprises combining the detected sensor signals with one another, wherein the detected sensor signals are shifted in time for combination respectively using a sensor-dependent second time shift, wherein the utilized second time shifts of the detected sensor signals are each inverse to the first time shift of the corresponding sensor signal and compensate for the corresponding first time shift, • detecting the amplified first UWB useful signal using the combined sensor signals.

2. The UWB monitoring system (100) according to claim 1, wherein combining the detected sensor signals comprises adding the detected sensor signals using the sensor-dependent second time shifts.

3. The UWB monitoring system (100) according to any one of the preceding claims, wherein combining the detected sensor signals comprises adjusting the sensor-dependent second time shifts until the sensor-dependent second time shifts respectively compensate for the first time shifts, wherein the adjustment of the individual sensor-dependent second time shifts is carried out for example successively sensor signal by sensor signal.

4. The UWB monitoring system (100) according to any one of the preceding claims, wherein combining the detected sensor signals is performed successively sensor signal by sensor signal based on a combination of two first sensor signals of the plurality of sensor signals, and / or wherein the sensor-dependent second time shifts for the individual sensor signals are selected as a function of the distance of the respective localization sensor from an access point (104) to the spatial area (102) in UWB signal range of the localization sensors, and / or wherein the sensor-dependent second time shifts for the individual sensor signals are selected as a function of a distance of the respective localization sensor from an access (108) to a predefined spatial section of the spatial area (102) within UWB signal range of the localization sensors and / or wherein the detected sensor signals comprise one or more second UWB useful signals, which are encoded according to the second UWB data encoding scheme (154) known to the monitoring system (100), wherein detecting the presence of the unknown UWB token (112) further comprises: filtering the second UWB useful signal out from the detected sensor signals.

5. The UWB monitoring system (100) according to any one of the preceding claims, wherein detecting the presence of the unknown UWB token (112) further comprises: determining the first UWB data encoding scheme (152) unknown to the UWB monitoring system (100) using the detected, amplified first UWB useful signal.

6. The UWB monitoring system (100) according to claim 5, wherein the UWB monitoring system (100) is configured for executing a first UWB communication with the UWB token (112), which is encoded according to the determined first UWB data encoding scheme (152).

7. The UWB monitoring system (100) according to claim 6, wherein the UWB- monitoring system (100) is further configured: • to receive a proof of authorization of the UWB token (112) for access to and / or entering the spatial area (102), • to validate the received proof of authorization, wherein the UWB monitoring system (100) is further configured for example, • after successfully validating the proof of authorization, to send one of the second UWB data encoding schemes (154) known to the UWB monitoring system (100) to the UWB token (112) using the first UWB communication, • performing a second UWB communication with the UWB token (112), which is encoded according to the second UWB data encoding scheme (154) sent to the UWB token.

8. The UWB monitoring system (100) according to any one of the preceding claims, wherein the first and second UWB data encoding schemes (152, 154) use one or more of the following encoding methods: pulse position modulation, pulse polarity modulation, pulse amplitude modulation, orthogonal pulse shape modulation.

9. The UWB monitoring system (100) according to any one of the preceding claims, wherein the plurality of UWB sensors (110) comprises, in addition to the localization sensors one or more additional UWB sensors, which are configured to acquire sensor data, wherein the one or more additional UWB sensors comprise(s) sensors (122) for detecting optical, acoustic, chemical, thermal, electromagnetic and / or vibration-based sensor data for example.

10. The UWB monitoring system (100) according to any one of the preceding claims, wherein the detected sensor data comprise personal sensor data and the UWB monitoring system (100) is configured for • detecting sensor data in the spatial area (102) using the UWB sensors, wherein the detected sensor data comprise personal sensor data, • filtering the detected sensor data using an anonymization filter (123), wherein the anonymization filter is configured to anonymize the personal sensor data, • evaluating the detected sensor data for detecting an exceptional event, • on detecting the exceptional event, temporarily suspending the anonymization of the personal sensor data.

11. The UWB monitoring system (100) according to claim 10, wherein the exceptional event is a successful detection of the presence of the unknown UWB token (112) or wherein the exceptional event is a failure of a valid proof of authorization of the detected unknown UWB token (112) or wherein the exceptional event is a failure of the second UWB communication with the UWB token (112).

12. The UWB monitoring system (100) according to any one of the claims 10 to 11, wherein the anonymization by the anonymization filter (123) comprises deleting at least a portion of the personal sensor data, wherein the time-limited suspension of the anonymization comprises storing the personal sensor data detected within a limited time window.

13. The UWB monitoring system (100) according to claim 12, wherein the limited time window begins with the detection of the exceptional event and ends with the expiry of a predetermined time period or an end of the detection of the exceptional event and / or wherein the deletion of the personal sensor data is carried out by the UWB sensor detecting the personal sensor data to be deleted, wherein the storage of the personal sensor data comprises transmitting the personal sensor data by the UWB sensor detecting the personal sensor data to be stored by means of UWB to a storage module of the UWB monitoring system (100).

14. The UWB monitoring system (100) according to any one of the claims 10 to 13, wherein the anonymization by the anonymization filter (123) comprises encrypting at least a portion of the personal sensor data, wherein the time limited suspension of the anonymization comprises a time limited provision of the corresponding personal sensor data in unencrypted form and / or wherein the UWB monitoring system (100) is further configured: • to receive a request to share detected sensor data, • to verify a proof of authorization in the request for access to the requested sensor data, • on successful verification of the proof of authorization, enabling access to the requested sensor data.

15. A method for controlling a UWB monitoring system (100) for monitoring a spatial area (102), wherein the UWB monitoring system (100) comprises a plurality of UWB sensors (110), which are arranged distributed in the spatial area (102), wherein the UWB sensors (110) are configured for communication by means of UWB, wherein the plurality of UWB sensors (110) comprises a plurality of localization sensors for determining positional data of mobile portable UWB tokens (112) within the spatial area (102), wherein determining the positional data comprises time-of-flight measurements of UWB signals (107) between the localization sensors and the UWB tokens (112), wherein the UWB monitoring system (100) is configured for detecting a presence of an unknown UWB token (112) in the spatial area (102), wherein the unknown UWB token (112) sends a first UWB useful signal, wherein the sent first UWB useful signal is encoded according to a first UWB data encoding scheme (152) unknown to the monitoring system (100), wherein the method for detecting the presence of the unknown UWB token (112) comprises: • detecting a plurality of sensor signals by way of the spatially distributed plurality of localization sensors, wherein the detected sensor signals respectively comprise a noise signal and a first UWB useful signal sent by the unknown UWB token (112) with which the noise signal is superimposed, wherein the useful signal, due to the spatial distribution of the localization sensors, appears with a sensor-dependent first time shift in the signals detected by the individual localization sensors, • amplifying the first UWB useful signal relative to the noise signal, wherein the amplification comprises combining the detected sensor signals with one another, wherein the detected sensor signals are shifted in time for combination respectively using a sensor-dependent second time shift, wherein the utilized second time shifts of the detected sensor signals are each inverse to the first time shift of the corresponding sensor signal and compensate for the corresponding first time shift, • detecting the amplified first UWB useful signal using the combined sensor signals.