Method for driving approval of a vehicle for a driver

Abstract

The invention relates to a method (3) for driving approval of a vehicle (1) for a driver by means of a control device (2). When, in the method (3), touching of the steering wheel (6) is determined, identification of the current driver takes place. If the current driver is authorized for driving, driving approval is granted for a period of time. Only when the steering wheel (6) is touched in the period of time is the engine started. The invention also relates to the control device (2) for carrying out the method (3).

Description

[0001] Procedure for releasing a vehicle for a driver

[0002] The invention relates to a method for enabling a driver to drive a vehicle by means of a control device according to the preamble of claim 1. The invention also relates to the control device for carrying out the method.

[0003] It is already known from the prior art to collect data via a vehicle's steering wheel. US 8 725 230 B2 describes a steering wheel for a vehicle with a sensor arrangement that can measure a biological parameter of the vehicle's driver. DE 102020 005758 A1 describes a method for authorizing a driver to drive a vehicle. After touching the steering wheel of the motor vehicle, the driver is authorized, and a timer is then started with a predetermined time period. If the driver confirms their driving request within the predetermined time period, the vehicle is started. The driver can confirm their driving request, for example, by pressing the brake pedal and / or the gear selector lever of the motor vehicle. Accordingly, the vehicle must be provided with systems for detecting and evaluating signals from the brake pedal and / or the gear selector lever of the motor vehicle.This causes additional costs and additional control effort.

[0004] US 6 898299 B1 discloses a method and device for authenticating a specific person. Unique internal electrical, magnetic, or acoustic properties of several different body parts of that person can be determined, and based on these properties, a current biometric signature of that person can be generated. The biometric signature can then be used to identify the person.

[0005] DE 10 2017211 545 A1 discloses a device and a method for determining whether a driver has removed their hands from the steering wheel. A reference torque signal and a measurement torque signal present during a reference oscillation of the steering wheel are measured and evaluated.

[0006] DE 10 2007 005627 A1 discloses a system for providing vehicle guest service information. The system can determine a user's biological characteristics. Based on these biological characteristics, the system can support the use of the vehicle or entertain the user. The characteristics can be stored and retrieved in the system.

[0007] DE 11 2020 003270 T5 discloses a device and a method for detecting the position of a driver's hands on the steering wheel. For this purpose, two independent impedance measurements are performed using two electrodes, and the position of the driver's hands is calculated or determined from these measurements.

[0008] The object of the invention is therefore to provide an improved or at least alternative embodiment for a method of the generic type, in which the described disadvantages are overcome. The object of the invention is also to provide a control arrangement for carrying out the method.

[0009] This object is achieved according to the invention by the subject matter of the independent claims. Advantageous embodiments are the subject matter of the dependent claims.

[0010] The present invention is based on the general idea of ​​controlling a start-stop function in a vehicle by touching the steering wheel.

[0011] The method according to the invention is provided or designed for authorizing a driver to drive a vehicle using a control device. In the method, the control device, when it detects a touch of a steering wheel of the vehicle by a current driver, identifies the current driver. If the control device identifies the current driver as an authorized driver, the control device grants drive authorization for a predefined time interval. If the control device then detects a touch of the steering wheel of the vehicle by the driver identified as authorized within the predefined time interval, it starts the vehicle's engine. If the control device does not detect a touch of the steering wheel of the vehicle by the driver identified as authorized within the predefined time interval, it does not start the vehicle's engine.

[0012] In the present invention, the terms "authorized driver" and "current driver" and "identified as authorized driver" and "identified as unauthorized driver" are distinguished from one another. The authorized driver is a "virtual" driver characterized by a user profile. The user profile is pre-created and saved, as described in more detail below. The current driver is the driver currently behind the wheel of the vehicle. The current driver may or may not be authorized to drive. If the current driver is authorized to drive, they are referred to as the identified as authorized driver. If the current driver is not authorized to drive, they are referred to as the identified as unauthorized driver.

[0013] The method allows direct access to the vehicle's start-stop function. The driver, identified as authorized, can start the vehicle's engine by placing their hands on the steering wheel, and can prevent the engine from starting by removing their hands from the steering wheel. Existing start-stop systems can be enhanced with a convenience function or largely replaced using the method according to the invention. Furthermore, the vehicle's starting process can be made easier. Compared to conventional methods or conventional vehicles, the detection and evaluation of signals from the brake pedal and / or the gear selector lever of the motor vehicle can be eliminated. This reduces additional costs and additional control effort.

[0014] After the vehicle has been authorized to drive, the control device can also load the individual driver settings of the driver identified as authorized. The individual driver settings can include, for example, a seat adjustment and / or a mirror adjustment and / or a driving dynamics setting and / or a valet service and / or a driving space initiation.

[0015] If the control device does not identify the current driver as the authorized driver, the control device can only grant travel authorization with restrictions or not at all. Restricted travel authorization can be granted, for example, if a valet service is permitted for the vehicle. Since the vehicle is authorized to travel while the vehicle is stationary and before the journey begins, an error reaction by the driver cannot lead to any safety-critical events. In addition, the control device can also initiate a safety measure. The safety measure can be implemented, for example, by an entry in an error memory (a so-called security event log) and / or by deactivating the vehicle and / or by contacting a security system (a so-called incident response system) and / or by an acoustic and / or visual warning inside and / or outside the vehicle.

[0016] In order to identify the current driver, the control device can predetermine the impedance of the authorized driver via their hands on the steering wheel of the vehicle once. Then, upon identifying the current driver, the control device can determine the impedance of the current driver via their hands on the steering wheel of the vehicle. The control device can then determine a deviation between the impedance of the current driver and the predetermined impedance of the authorized driver. If the deviation lies within a predetermined tolerance range, the control device can identify the current driver as the authorized driver. However, if the deviation lies outside the predetermined tolerance range, the control device can identify the current driver as the unauthorized driver. The tolerance range can be fixed and predefined.

[0017] It is understood that the control device can also predetermine the impedance of multiple authorized drivers. Upon identifying the current driver, the control device can then scan through the user profiles of all authorized drivers until the current driver is identified as the authorized driver or is not identified. The control device can scan through the corresponding user profiles one by one or start the identification process with the user profile of the last driver.

[0018] The impedance of human skin can be measured in a manner known to those skilled in the art. For this purpose, the control device can have a measuring unit with a measuring circuit and a measuring surface. The measuring surface can be arranged on the steering wheel of the vehicle so that the driver can grasp or touch it and be electrically connected to the measuring circuit. Two electrodes can be provided in the measuring surface, onto which the measuring unit applies a current or voltage and records the voltage response or current response. If the driver's hands are placed on the measuring surface, the impedance of their skin can be measured. The measured impedance depends on the frequency of the applied current or voltage and is typically between 1.22 kHz and 1 MHz. It is understood that the impedance is what is known as electrochemical impedance.

[0019] Overall, the driver can steer the vehicle by placing their hands on the steering wheel. By determining the steering wheel's impedance, touches to the steering wheel can be detected, the current driver identified, and the vehicle started. This can simplify the vehicle starting process.

[0020] When determining the impedance of the current driver and / or when predetermining the impedance of the authorized driver, the control device can detect at least one environmental parameter and determine the impedance of the current driver and / or the predetermined impedance of the authorized driver taking into account the at least one environmental parameter. For this purpose, an environment-dependent tolerance range for the impedance can be defined. Since the impedance depends on the environmental parameters, this can prevent incorrect identification of the current driver. The environmental parameter can be humidity and / or temperature. The change in impedance due to humidity can be compensated, for example, using a sweat pore model. The change in impedance due to temperature can be compensated, for example, using the Arrhenius equation.

[0021] The following is advantageous: To keep the temperature at the electrodes, and thus for the driver, as constant as possible, it is advisable to integrate temperature-regulating elements into the electrodes to ensure a consistent temperature (even across multiple measurement cycles). These can be either cooling elements or heating elements that operate in the body temperature range of approximately 37°C.

[0022] The control device can parameterize the predetermined impedance of the authorized driver using a mathematical model and thereby determine at least one parameter specific to the authorized driver. Similarly, the control device can also parameterize the impedance of the current driver using the mathematical model and thereby determine at least one parameter specific to the current driver. Subsequently, when determining the deviation between the impedances, the control device can compare the respective parameter specific to the current driver and the respective parameter specific to the authorized driver. In other words, when determining the deviation between the impedances, the deviation between the parameters determined using the model is determined or calculated.

[0023] When determining the specific parameters, the same model is used for the respective purpose. Each model represents the impedance of human skin using the respective specific parameters. The respective specific parameters describe characteristic properties of the skin and differ accordingly from person to person. These parameters can therefore be used to identify the person. The models for parameterizing the impedance of human skin are already known to those skilled in the art and will not be described further here. For example, human skin can be described using the Treagear model, the Montague model, or the CPE-based model. Furthermore, human skin can be approximated as a distribution of Debye relaxations and a fractal expression. This model is often referred to as the Distribution of Relaxation Times model.The parameterization itself can be done, for example, using the least-squares method (LSS) or the particle swarm optimization method (Particle Swarm Optimization) or similar methods.

[0024] The pre-determination of the impedance of the authorized driver takes place before the current driver is identified. The pre-determination of the impedance of the authorized driver can take place once and independently of the current driver's identification. In other words, the impedance of the authorized driver can take place once and several hours, days, or weeks before the current driver is first identified. The pre-determination of the impedance of the authorized driver can basically be regarded as a learning process of the control device. The pre-determination of the impedance of the authorized driver can take place, for example, when the control device is put into operation or before the first drive. In principle, however, it is conceivable that the impedance of the authorized driver can be pre-determined again or the impedance of another authorized driver can be pre-determined for the first time at a later date. The pre-determination of the impedance orThe learning process can, for example, be initiated manually at any time in a further step of the method. The control device can create a user profile for the authorized driver and store it in a non-volatile security module. The user profile can include at least the predetermined impedance of the authorized driver and / or the respective parameters specific to the authorized driver. The security module can, for example, be a specially protected component such as a so-called security IC – for example, NXP Phantom NCJ38A0HN or similar. The security module can also be a hardware security module of a microcontroller – for example, Infineon Aurix. The security module can, in particular, be an integral and hard-to-reach control unit of an electronic ignition lock.By storing the data in the security module in a non-volatile manner, the user profile can be protected from misuse, such as unauthorized deletion.

[0025] The control device can create a personal identification number for the created user profile and store the personal identification number in the security module together with the user profile in a non-volatile manner. Changes to the saved user profile can then only be authorized by the control device after the correct personal identification number has been entered. The personal identification number or PIN can be used to protect the user profile from misuse—such as unauthorized deletion. The personal identification number can be queried or entered, for example, via a monitor on the control device or via a mobile device. The personal identification number is required, in particular, when creating and deleting the user profile.

[0026] The control device can determine the impedance of the current driver using a measuring unit, as described above. The control device can determine the deviation and compare it with the specified tolerance range in a safety module physically separate from the measuring unit. The safety module can be designed as described above.

[0027] To increase the safety of the method, the control device can determine the impedance of an identification circuit with the impedance of the current driver, or separately. The control device can then compare a deviation between the currently determined impedance of the identification circuit and a predetermined impedance of the identification circuit. If the deviation lies within a specified tolerance range, tampering with the identification circuit is assumed to be absent, and travel authorization is granted. If the deviation lies outside the specified tolerance range, tampering with the identification circuit is assumed to be present, and travel authorization is granted only to a limited extent or not at all.

[0028] The identification circuit can be part of the measuring unit of the safety device described above and can be measured alone or in series with the measuring surface. For this purpose, the measuring unit can have an appropriately wired switch. In one position of the switch, the measuring surface on the vehicle's steering wheel and the identification circuit can be connected in series with each other and with the measuring circuit, while in the other position of the switch, only the identification circuit can be connected in series with the measuring circuit. The switch can be a transistor, a MOSFET, a relay, or another electrical switch. Since the change in impedance detected by the measuring circuit at the measuring surface is small, a relay can be particularly suitable for this purpose.

[0029] The impedance of the identification circuit can be parameterized using a mathematical model—for example, using a distribution of Debye relaxations—and the identification features of the identification circuit can be determined from the model. This utilizes the fact that identical circuits, or circuits with identical elements, have different identification features and can thus be clearly distinguished from one another. The identification circuit can comprise at least two elements—for example, a coil and / or a resistor and / or a capacitor—that can be interconnected in any desired manner. In particular, the identification circuit can comprise an resistor and a capacitor, which together represent a distribution of Debye relaxations and are particularly easy to identify.In particular, the elements can be chosen so that the distribution of Debye relaxations of these elements is characterized by frequencies two to three decades before and / or after the usual values ​​of the impedance of the current driver.

[0030] The impedance or the unique identification features of the identification circuit can be predetermined at the factory and stored in a non-volatile manner in the control device—for example, in the security module described above. According to the invention, the identification circuit is designed to be physically difficult to access, for example, encapsulated. According to the invention, the identification circuit is installed in the vehicle's steering wheel. The identification circuit then detects both tampering with the identification circuit and swapping the steering wheel with the identification circuit.

[0031] According to the invention, after the vehicle has been authorized to drive during ferry operation, the control device continuously determines the impedance of the driver identified as authorized. The user profile of the authorized driver can then be continuously adjusted according to the determined impedance. This allows a temporal change in the authorized driver's impedance to be taken into account and increases the robustness of the identification process.

[0032] The invention also relates to a control device for a vehicle, wherein the control device is designed to carry out the method described above. The control device can have a measuring unit for determining the impedance. The measuring unit can have a measuring circuit and a measuring surface. In addition, the measuring unit can also have an identification circuit and an electrical switch. The switch can be switchable such that the measuring surface and the identification circuit are connected in series with each other and with the measuring circuit, or only the identification circuit is connected in series with the measuring circuit. The control device can have a security module. To avoid repetition, reference is made here to the above explanations.

[0033] Further important features and advantages of the invention emerge from the subclaims, from the drawings and from the associated description of the figures based on the drawings.

[0034] It is understood that the features mentioned above and those to be explained below can be used not only in the respective combinations specified, but also in other combinations or on their own, without departing from the scope of the present invention. Preferred embodiments of the invention are illustrated in the drawings and explained in more detail in the following description, wherein like reference numerals refer to identical or similar or functionally identical components.

[0035] Showing schematically:

[0036] Fig. 1 is a view of a vehicle with a control device according to the invention;

[0037] Fig. 2 is a circuit diagram of a measuring unit of the control device according to the invention;

[0038] Fig. 3 shows a diagram of a learning process in a method according to the invention; Fig. 4 shows a general diagram of the method according to the invention.

[0039] Fig. 1 shows a view of a vehicle 1 with a control device 2 according to the invention. The control device 2 is designed to carry out a method 3 according to the invention for enabling a driver to drive the vehicle 1. The method 3 is explained in more detail below with reference to Fig. 3 and Fig. 4. The control device 2 comprises a measuring unit 4 with a measuring surface 5, which is arranged on a steering wheel 6 of the vehicle 1. If the driver's hands are on the measuring surface 5 of the measuring unit, the measuring unit 4 can detect contact with the steering wheel 6 and record the driver's impedance. The measuring unit 4 is explained in more detail below with reference to Fig. 2. The control device 2 also comprises a security module 7, which is difficult to reach and tamper-proof. The security module 7 is designed in particular for storing and processing security-relevant data in the method 3.

[0040] Fig. 2 shows a circuit diagram of the measuring unit 4 of the control device 2 according to the invention. As already described above, the measuring unit 4 has the measuring surface 5 for determining the driver's impedance. Furthermore, the measuring unit 4 has a measuring circuit 8 and an identification circuit 9. In addition, an electrical switch 10 is provided in the measuring unit 4, which is, for example, a transistor or a MOSFET or a relay or another electrical switch. In a position A, the switch 10 connects the measuring surface 5, the measuring circuit 8, and the identification circuit 9 in series with one another. In a position B, the switch 10 connects the measuring circuit 8 and the identification circuit 9 in series with one another. The measuring surface 5 remains switched off. In the identification circuit 9, several elements—for example, an ohmic resistor and / or a coil and / or a capacitor—can be interconnected as desired.As a result, the identification circuit 9 has unique identification features 11a, 11b, 11c and can be uniquely identified. The identification features 11a, 11b, 11c can be determined from the impedance of the identification circuit 9 using a model—for example, using a distribution of Debye relaxations. The identification circuit 9 is designed to be difficult to access from the outside—for example, it is encapsulated.

[0041] Fig. 3 shows a diagram of the pre-determination of an impedance of the authorized driver or a learning process of the control device 2 in the method 3 according to the invention. In step A, the learning process is started. In step B, an impedance F of the authorized driver is measured by means of the measuring unit 4. In addition, the environmental parameters such as humidity and temperature can also be recorded and their influence on the measured impedance F of the authorized driver can be calculated out. In step C, the measured impedance F of the authorized driver is parameterized in a mathematical model and at least one parameter specific to the authorized driver is determined. In step D, a user profile is created for the authorized driver and a personal identification number is created for the user profile. In step E, the user profile is assigned the impedance F orwith the respective specific parameter of impedance F and the personal identification number are stored non-volatilely in the security module 7 of the control device 2. The user profile can only be changed after entering the correct identification number.

[0042] Fig. 4 shows a general diagram of the method 3 according to the invention. In step G, the method 3 is started, for example, by placing hands on the steering wheel 6 of the vehicle 1. In step H, an impedance of the current driver is measured using the measuring unit 4. In addition, the environmental parameters such as humidity and temperature can also be recorded and their influence on the measured impedance of the current driver can be taken into account. In step J, the measured impedance of the current driver is compared with the predetermined impedance F of the authorized driver. If the deviation between the measured impedance of the current driver and the predetermined impedance F of the authorized driver lies outside a tolerance range, the current driver is recognized as the unauthorized driver in step K and travel authorization is only granted to a limited extent or not at all.If the deviation between the measured impedance of the current driver and the predetermined impedance F of the authorized driver lies within the tolerance range, the current driver is identified as the authorized driver in step L, and the journey is authorized. In step J, multiple user profiles can also be checked consecutively, or the measured impedance of the current driver can be compared with predetermined impedances F from multiple pre-stored user profiles. Subsequently, in step M, the control device 2 can load the individual driver settings—for example, a seat adjustment and / or a mirror adjustment and / or a driving dynamics and / or a valet service and / or a driving space initiation—of the driver identified as authorized.

[0043] The learning process or the pre-determination of the impedance of the authorized driver in steps A to E according to Fig. 3 is carried out in method 3 before the further steps G to L according to Fig. 4. In other words, to execute steps G to L according to Fig. 4, at least one user profile created in steps A to E according to Fig. 3 must be present in the security module 7. However, additional user profiles can be created at any time and stored in the security module 7.

Claims

Patent claims Method (3) for enabling a vehicle (1) to drive for a driver by means of a control device (2), - wherein the control device (2), when it detects a touch of a steering wheel (6) of the vehicle (1) by a current driver, carries out an identification of the current driver; - wherein the control device (2), when identifying the current driver as an authorized driver, grants a travel authorization for a predefined time interval; - wherein the control device (2), when it detects a touch of the steering wheel (6) of the vehicle (1) by the driver identified as authorized within the predetermined time interval, starts the engine of the vehicle (1), and - wherein the control device (2) does not start the engine of the vehicle (1) if it does not detect a touch of the steering wheel (6) of the vehicle (1) by the driver identified as authorized within the predetermined time interval, characterized in that the control device (2), after the drive has been enabled in a driving operation of the vehicle (1), continuously determines an impedance of the driver identified as authorized and continuously adapts a user profile of the authorized driver according to the determined impedance; and in that the security device (2) detects a manipulation of the identification circuit (9) and / or an exchange of the steering wheel (6) with the identification circuit (9) by means of an identification circuit (9) which is physically difficult to reach and is installed in the steering wheel (6) of the vehicle (1). Method according to claim 1, characterized in that the control device (2) predetermines an impedance (F) of the authorized driver via his hands on the steering wheel (6) of the vehicle (1) once; that the control device (2) determines an impedance of the current driver via his hands on the steering wheel (6) of the vehicle (1) when identifying the current driver; that the control device (2) determines a deviation between the impedance of the current driver and the predetermined impedance (F) of the authorized driver; that the control device (2), if the deviation lies within a predetermined tolerance range, identifies the current driver as the authorized driver; that the control device (2), if the deviation lies outside the predetermined tolerance range, identifies the current driver as the unauthorized driver.Method according to claim 2, characterized in that the control device (2) detects at least one environmental parameter when determining the impedance of the current driver and / or when pre-determining the impedance (F) of the authorized driver and determines the impedance of the current driver and / or the pre-determined impedance (F) of the authorized driver taking into account the at least one environmental parameter.Method according to claim 2 or 3, characterized in that the control device (2) parameterizes the predetermined impedance (F) of the authorized driver by means of a mathematical model and thereby determines at least one parameter specific to the authorized driver; that the control device (2) parameterizes the impedance of the current driver by means of the mathematical model and thereby determines at least one parameter specific to the current driver; and that the control device (2) determines the respective parameter specific to the current driver when determining the deviation between the impedances. and compares the respective parameters specific to the authorized driver with each other. Method according to one of claims 2 to 4, characterized in that the control device (2) creates a user profile for the authorized driver and stores it in a non-volatile manner in a security module (7), wherein the user profile comprises at least the predetermined impedance (F) of the authorized driver and / or the respective parameters specific to the authorized driver. Method according to claim 5, characterized in that the control device (2) creates a personal identification number for the created user profile and stores the personal identification number in the security module (7) together with the user profile in a non-volatile manner; and in that the control device (2) only enables a change to the stored user profile after the correct personal identification number has been entered.Method according to one of claims 2 to 6, characterized in that the control device (2) determines the impedance of the current driver using a measuring unit (4); and in that the control device (2) determines the deviation and compares the deviation with the predetermined tolerance range in a safety module (7) physically separate from the measuring unit (4). Method according to one of claims 2 to 7, characterized in that the control device (2) determines an impedance of the identification circuit (9) using the impedance of the current driver or separately; in that the control device (2) determines a deviation between the currently determined impedance of the identification circuit (9) and a predetermined impedance of the identification circuit (9). that, if the deviation lies within a predetermined tolerance range, the control device (2) assumes that the identification circuit (9) has not been tampered with and grants travel authorization; that, if the deviation lies outside the predetermined tolerance range, the control device (2) assumes that the identification circuit (9) has been tampered with and grants travel authorization only to a limited extent or not at all. A control device (2) for a vehicle (1), characterized in that the control device (2) is designed to carry out the method (3) according to one of the preceding claims.

Images