METHOD FOR ACCESS CONTROL ON A MOTOR VEHICLE

Description

[0001] The invention relates to a method for access control to motor vehicles. In particular, the invention relates to a method in which access control to motor vehicles is carried out using biometric data.

[0002] Various methods for access control in motor vehicles are known. Carrying a suitable key device is often sufficient to prove authorization to access a motor vehicle. This can be a mechanical key, but more commonly it is a remote control key, in which identification information is stored as coded data and transmitted wirelessly to a vehicle. Such systems exist with both actively operated keys and so-called passive entry systems, which independently handle communication between the mobile vehicle key and the vehicle. In addition, there are increasingly methods in which electronic communication devices are used to function as vehicle keys.For example, systems are known in which data is stored on a mobile phone / smartphone and transmitted to a corresponding control device in a vehicle, where it is verified and vehicle access is granted depending on the test.

[0003] The use of biometric data to verify access authorization to a vehicle is also known. However, it should be noted that the verification of biometric data represents a fundamental change in principle compared to key-based systems, since in this case, a transferable means of authorization is no longer verified; instead, the identity of an authorized person itself serves as the authentication. Authorization to use is thus linked to identified individuals, as opposed to the original link with authorized keys that can be passed between individuals.

[0004] Document DE 102018220433 A1 discloses the recording of data from the user's driver's license in the vehicle. The recorded data is automatically verified, and before each use of the car-sharing vehicle, the driver's license holder's biometric data is recorded while the user is within the car-sharing vehicle's range.

[0005] Document DE 10341691 A1 describes a vehicle key with biometric data capture. Biometric information, such as a user's facial contour, is captured, and an internal image analysis unit is responsible for generating the relevant biometric data from the graphic data of the image. A pattern recognition unit compares and recognizes the biometric data with stored comparison data.

[0006] A system is known from US20140152422A1 in which a braking system is unlocked depending on biometric data.

[0007] US 20170180539 A1 discloses electronic locks used for physical access control. These locks can communicate wirelessly with a smartphone to perform selectable multi-factor authentication using technologies and components built into smartphones. The systems and methods utilize the phone's biometric pattern information comparison feature to set authentication parameters and unlock the door.

[0008] It is generally accepted that the use of biometric data, especially the everyday use of such data, requires high standards of data security and data protection.

[0009] The object of the invention is to provide a data-saving and secure method for access control on vehicles using and verifying biometric data.

[0010] This problem is solved by a method having the features of patent claim 1.

[0011] According to the method, a mobile communication device carried by a vehicle user is used. If a vehicle user approaches a vehicle with such a mobile communication device, a connection is established between the mobile communication device and a vehicle-mounted communication device according to the method according to the invention. The establishment of this connection can generally be user-activated, but it is also possible to establish such a connection automatically. This applies in particular if the mobile communication device and the vehicle-mounted communication device already know each other, for example, if they were coupled in previous steps. The coupling of multiple communication devices for subsequent automated connection establishment is known in a wide variety of standard and proprietary protocols.

[0012] Once the communication connection between the mobile communication device and the vehicle-mounted communication device is established, initial data is transmitted from the mobile communication device to the vehicle-mounted communication device. A vehicle-mounted control device is coupled to the vehicle-mounted communication device. This vehicle-mounted control device can, for example, be a central control unit of the vehicle, but it can also be a decentralized control device intended exclusively for processing corresponding access controls. The initial data is checked in the vehicle-mounted control device. This check determines whether the access dialog should be continued or aborted at this point.In particular, it can be provided to check whether it can be determined from the first data that the mobile communications device is fundamentally authorized to access the vehicle. For example, the content of the first data can be checked, which may contain an identifier for the mobile communications device or a general identifier that signals legitimate access to the vehicle. For example, a vehicle-specific data identifier may be included in the first data, such as is loaded onto the mobile communications device of the renter of a vehicle for access to the vehicle or is entered by the renter. If, on the other hand, the first data is data that does not have any authorization or suitability for access to the vehicle, the method according to the invention is aborted at this point.

[0013] If the process is continued, the vehicle-side control device activates a vehicle-side biometric data capture device.

[0014] Depending on the intended identification detection method, the vehicle-side detection device can be located outside the vehicle; however, when accessing functions inside the vehicle, a detection device can also be a biometric detection device inside the vehicle.

[0015] Cameras are particularly suitable as biometric data capture devices, but fingerprint scanners, vein scanners, and other common types of biometric data capture devices are also suitable. Camera devices can be individual cameras or camera combinations, for example, cameras that capture images in the visible range of the spectrum combined with cameras that receive infrared signals. Such cameras or camera combinations, or cameras with suitable filters, are already being used for biometric access control in modern laptops and mobile phones.

[0016] If a camera is used, it can be installed, for example, in a side panel or behind a window pane of the vehicle and view an area where a user is expected to be, such as the area in front of the driver's door. Biometric data capture refers to the recording of a data set, which can vary depending on the type of capture device used. When cameras are used, image information is typically recorded, possibly supplemented with pixel-specific depth or distance information, depending on the camera device.

[0017] The image information is fed into facial recognition. There are different approaches to facial recognition, all of which utilize certain key elements. Most facial recognition methods determine the characteristic features of the facial features of the digitized image. Primarily, those facial features that do not constantly change due to facial expressions are used, such as the upper edges of the eye sockets, the areas around the cheekbones, and the sides of the mouth. Depending on the design of the invention, such abstraction of features from the image data can be performed on-board, provided the raw image data is not subjected to further processing.

[0018] At least some of the captured biometric data, for example, the raw image data or fingerprint scans, or biometric identification data abstracted / derived therefrom, is transmitted from the vehicle-based device to the mobile communications device as second data. According to the method according to the invention, the vehicle does not have comparison data to perform an authentication check based on the captured biometric data. Such comparison data is stored exclusively in the user's mobile communications device. After receiving second data containing the biometric data in the mobile communications device, the second data is verified in the mobile communications device, using biometric comparison data stored in the mobile communications device.According to the procedure, the biometric data is captured on the vehicle side, but compared on the mobile communication device side with reference data for legitimacy verification and identity verification. The vehicle does not receive the reference data (identity data), as this remains in the mobile communication device. Depending on the result of the verification, third data is generated in the mobile communication device and sent to the vehicle-side communication device. From there, the third data is sent to the vehicle-side control unit, where it is verified and, depending on the verification, a vehicle function is enabled.

[0019] According to the invention, the access verification process involves multiple changes between the mobile communications device and the vehicle, with the vehicle controlling the acquisition of the biometric data, while the mobile communications device retains control over the evaluation of the data based on comparison data. The security of the process is guaranteed because none of the participating units can unilaterally manipulate the process. Some of the other process steps are performed by another unit, and the key data—namely, the currently acquired biometric information on the one hand and the stored biometric comparison information on the other—are generated or stored on different units.

[0020] Accordingly, the method according to the invention can also be applied without problems to rental cars or other vehicles, since the vehicles themselves do not come into possession of the biometric comparison information.

[0021] In a preferred embodiment of the invention, a vehicle-mounted camera is provided as the vehicle-mounted detection device.

[0022] Cameras are already factory-installed on various types of vehicles, so existing cameras can be used to capture biometric data. Alternatively, or in addition, cameras can also be used solely for access control purposes. Cameras are particularly flexible when capturing biometric data because they are generally tolerant of recording positions and orientations and do not require contact or manipulation of the vehicle. Instead, captures can be performed even when a user is still at a distance from the vehicle.

[0023] In an alternative design, a vehicle-mounted fingerprint scanner is used as the detection device.

[0024] Fingerprint sensors are commercially available in particularly affordable designs. They also ensure that a user seeking access to a vehicle is in close proximity to the vehicle, namely in physical contact with the fingerprint scanner. This type of design is always useful when image capture is not advisable due to lighting conditions or the usage situation. The various types of biometric data capture can also be offered in combination or as alternatives.

[0025] According to a preferred embodiment of the invention, the mobile communication device and the vehicle-side communication device are coupled according to a Bluetooth standard and the communication with data exchange takes place via the Bluetooth coupling or the connection based thereon.

[0026] The Bluetooth standard is established in numerous mobile communication devices and is activated by default. Furthermore, the Bluetooth protocol allows the connection between paired communication devices without active user access. For example, a user can carry their mobile device in a pocket. When the user approaches the vehicle's communication device, the mobile communication device automatically establishes contact and sends the initial data to the vehicle's communication device. Once the user enters the detection range of the vehicle's communication device, the authentication process can continue, with the Bluetooth connection maintained throughout.

[0027] It is particularly preferred if identification information and associated biometric data are stored in the mobile communication device, wherein the mobile communication device transmits the associated identification information as part of the third data to the vehicle-side control device after checking the biometric data.

[0028] Identification information refers to a user's individual identifier, which is also known within the vehicle. For example, in a household where multiple users have access rights to the vehicle, unique, possibly anonymized, identification information can be stored for each user in the mobile phone. After the biometric data is compared in the mobile communications device, the associated identification information is sent to the vehicle as part of the third data, which then knows which personalized settings need to be activated in the vehicle, for example, seat settings, mirror settings, temperature settings, entertainment system settings, etc.

[0029] It is particularly preferred if a plurality of identification information items with associated authorization data are stored in the vehicle-side control device, wherein the release of vehicle functions takes place according to the authorization data which corresponds to the contained identification information.

[0030] According to this embodiment, authorization profiles can be stored in the vehicle and linked to corresponding identities. For example, a household can specify that younger household members are allowed to unlock the vehicle but not start it; others are allowed to drive the vehicle but only at a limited speed, etc.

[0031] In a preferred embodiment of the invention, after the biometric data has been captured by the vehicle-based capture device, the vehicle-mounted control device evaluates the biometric data and sends biometric data abstracted from the raw data to the mobile communication device. Thus, complete image data or other complete raw data are not transmitted; instead, characteristic biometric data are abstracted from the captured raw data, as is known and common practice, for example, in facial recognition. This has the advantage of reducing the transmitted data and, moreover, achieving greater data economy with regard to the transmitted data, since the complete raw data is not transmitted over the communication connection.

[0032] The invention will now be explained in more detail with reference to the accompanying drawings.

[0033] Figure 1shows a schematic view of a situation in which a method according to the invention is carried out. A user 1 approaches a vehicle 2, the user 1 carrying a mobile communications device 3 with them. The mobile communications device 3 in the form of a smartphone couples, in accordance with the Bluetooth standard, to a vehicle-mounted communications device which is located, for example, in the door handle of the vehicle. The mobile communications device 3 then transmits first data 4 to the vehicle-mounted communications device, which in turn forwards the first data to a vehicle-mounted control device. In this exemplary embodiment, the first data 4 contain a rental identifier which was communicated to the user 1 by a vehicle rental company and which this user 1 entered into their mobile communications device 3. The vehicle 2 was rented by the rental company orprogrammed by the manufacturer of the vehicle in such a way that the rental identifier is recognized in the control device as identification for a fundamentally legitimate means of access for the vehicle 2. Alternatively or additionally, signatures or encryptions can also be used for some or all communications within the scope of the method according to the invention, which secure the connection and enable the control device in the vehicle to verify received data. For this purpose, data can, for example, have been previously stored in the vehicle that enables the signature of received data to be verified, for example by a vehicle rental company. On the vehicle side, the vehicle-side control device activates a camera 5 in the B-pillar of the vehicle, which then takes a picture of the approaching user 1.In principle, a direction selection can also be made depending on a detected communication device between the vehicle-side communication device and the mobile communication device. In the example shown, a user 1 approaches from the driver's side of the vehicle 2, so that a camera 5 on the driver's side is activated. The recorded image is evaluated by the vehicle to such an extent that biometric identification data from the face of the user 1 is abstracted and transmitted as a message 6 with second data containing biometric data from the captured image to the vehicle's mobile communication device. In the mobile communication device 3, the received biometric data from the message 6 is then compared with stored biometric comparison data.This comparison data may, for example, have been captured when the user initiated a rental transaction with a car rental company and a photo was taken of the user 1 with the mobile communications device 3 during the rental. Creating such a comparison view, from which biometric data can be extracted, may be a mandatory component of a rental transaction, although the image data remains on the mobile communications device 3 at all times. The mobile communications device 3 abstracts the biometric data from the stored comparison data using the same or comparable algorithms as the control device in the vehicle 2 and compares it with the transmitted biometric data 6.If it is determined that the biometric data captured on the vehicle side matches the stored biometric data, a message 7 with third data is generated by the mobile communication device, which confirms to the control device in the vehicle that the photographed user is indeed the user stored as a legitimate user in the mobile communication device 3. To further secure this communication, it can be provided that the message is encrypted with a one-time key that the control device on the vehicle side has generated taking the biometric data into account and has previously transmitted to the mobile communication device as part of the second data 6. This prevents a corresponding confirmation message 7 from being prepared or generated independently of the verification.

[0034] In Figure 2The components involved in the process are shown schematically. The mobile communication device 3 is in wireless radio connection with the vehicle-side communication device 10. The vehicle-side communication device 10 is coupled to the vehicle-side control device 11, which in turn controls the vehicle-side detection device in the form of the camera 5. This illustration once again makes it clear that the entire authentication process is based on two systems that operate completely separately from one another and both carry some of the information required for successful authentication. The required comparison data for access control is stored in the mobile communication device 3, and the current biometric data used for comparison is recorded on the vehicle side 2.The check can therefore be carried out with a high degree of security, although the data protection-relevant comparison data 3, which may provide information about the actual identity of a user, can remain in the mobile communication device 3.

Claims

1. Method for controlling access to motor vehicles, comprising the steps of sending first data (4) from a mobile communication device (3) to a vehicle-based communication device (10), checking the first data (4) in a vehicle-based control device (11) which is coupled to the vehicle-based communication device (10), activating a vehicle-based acquisition device (5) for biometric data by means of the vehicle-based control device (11) depending on the checking of the first data, acquisition of biometric data of a user with the aid of the vehicle-based acquisition device (5), characterised by the following steps: sending at least part of the acquired biometric data to the mobile communication device (3) as second data (6) using the vehicle-based communication device (10), receiving the second data (6) in the mobile communication device (3) and checking the second data (6) using biometric comparison data stored in the mobile communication device, generating third data (7) in the mobile communication device (3) depending on the check of the second data (6) and sending the third data (7) from the mobile communication device (3) to the vehicle-based communication device (10), checking the third data (7) in the vehicle-based control device, enabling a vehicle function depending on the check of the third data (7).

2. Method according to claim 1, wherein a vehicle-based camera (5) is used as the vehicle-based acquisition device.

3. Method according to claim 1, wherein a fingerprint scanner in the vehicle is used as the vehicle-based acquisition device.

4. Method according to one of the preceding patent claims, wherein the mobile communication device is coupled to the vehicle-based communication device according to a Bluetooth standard and wherein the communication is carried out via the Bluetooth coupling.

5. Method according to one of the preceding patent claims, wherein identification information and associated biometric data are stored in the mobile communication device, wherein the mobile communication device transmits the associated identification information as part of the second data to the vehicle-based control device after checking the biometric data.

6. Method according to claim 5, wherein a plurality of items of identification information with associated authorisation data are stored in the vehicles-based control device, wherein the enabling of vehicle functions is carried out in accordance with the authorisation data associated with the received identification information.