Backend device

Abstract

The invention relates to a backend device, comprising: a communications unit, which is configured to receive infrastructure assistance data for a motor vehicle travelling in an at least partially automated manner inside an infrastructure, from at least one infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated travel through the infrastructure, wherein the communication unit is configured to forward the received infrastructure assistance data to the motor vehicle in accordance with a safety specification, wherein the safety specification indicates that infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated travel through an infrastructure must be forwarded unchanged and directly to the motor vehicle. The invention relates to a method for operating a backend device, a computer program and a machine-readable storage medium.

Description

[0001] Description

[0002] title

[0003] Backend device

[0004] The invention relates to a backend device, a method for operating a backend device, a computer program and a machine-readable storage medium.

[0005] State of the art

[0006] The published patent application US 2021 / 0389137 A1 discloses a method for coordinating multimodal transport services.

[0007] The published patent application US 2022 / 0185315 A1 discloses a method for authenticating autonomous vehicle traffic networks.

[0008] The published patent application DE 10 2018216 492 A1 discloses a backend device.

[0009] Disclosure of the invention

[0010] The object underlying the invention is to provide a concept for the efficient forwarding of infrastructure assistance data to a motor vehicle.

[0011] This object is achieved by means of the respective subject matter of the independent claims. Advantageous embodiments of the invention are the subject matter of the respective dependent subclaims.According to a first aspect, a backend device is provided, comprising: a communication device which is configured to receive infrastructure assistance data for a motor vehicle driving at least partially automatically within an infrastructure from at least one infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated journey through the infrastructure, wherein the communication device is configured to forward the received infrastructure assistance data to the motor vehicle in accordance with a safety specification, wherein the safety specification specifies that infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure must be forwarded unchanged and directly to the motor vehicle.

[0012] According to a second aspect, a method for operating a backend device according to the first aspect is provided, comprising the following steps:

[0013] Receiving infrastructure assistance data for a motor vehicle driving at least partially automated within an infrastructure from at least one infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated journey through the infrastructure by the communication device,

[0014] Forwarding the received infrastructure assistance data to the motor vehicle by the communication device in accordance with a safety requirement, wherein the safety requirement specifies that infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure must be forwarded unchanged and directly to the motor vehicle.

[0015] According to a third aspect, a computer program is provided which comprises instructions which, when the computer program is executed by a computer, for example by the backend device according to the first aspect, cause the computer to carry out a method according to the second aspect.

[0016] According to a fourth aspect, a machine-readable storage medium is provided on which the computer program according to the third aspect is stored.

[0017] The invention is based on and incorporates the finding that the above-mentioned object is achieved by the backend device forwarding the infrastructure assistance data unchanged and directly to the motor vehicle. This means that no unnecessary delays occur on the backend device side when forwarding the infrastructure assistance data to the motor vehicle. The fact that the infrastructure assistance data is forwarded unchanged, i.e., not modified, results in the technical advantage, for example, that specified safety requirements can be met efficiently.

[0018] This results in the technical advantage that the infrastructure assistance data can be efficiently forwarded to the motor vehicle via the backend device.

[0019] The concept described here therefore specifically provides that the infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated journey through the infrastructure does not send the infrastructure assistance data directly to the motor vehicle. Rather, it is specifically provided that the infrastructure system sends the infrastructure assistance data to the backend device, which then forwards the received infrastructure assistance data to the motor vehicle unaltered and directly.

[0020] To date, such infrastructure systems have sent their infrastructure assistance data directly to the motor vehicle. With an increasing number of such infrastructure systems, a corresponding number of infrastructure systems would communicate directly with the motor vehicle, in particular sending infrastructure assistance data to it. This can generate considerable technical effort on the part of a motor vehicle manufacturer or an OEM ("original equipment manufacturer"), which may be due, for example, to the need to implement and maintain communication interfaces on the motor vehicle side for communication with the infrastructure systems. A motor vehicle manufacturer or an OEM can therefore decide, for example, to restrict external access to the motor vehicle to a backend device.This means, for example, that communication with the motor vehicle is only possible via such a backend device.

[0021] An infrastructure system for infrastructure-supported assistance of a motor vehicle during at least partially automated travel through an infrastructure depends on certain safety requirements being met. For example, the transmission times for infrastructure assistance data to the vehicle must not be excessive. For example, it must be ensured that the infrastructure assistance data is not altered en route to the vehicle.

[0022] Safety requirements are defined or specified, for example, according to ASIL and / or SIL.

[0023] The abbreviation "ASIL" stands for "Automotive Safety Integrity Level." "Automotive Safety Integrity Level" is a key component of the ISO 26262 standard. ASIL distinguishes between four different ASIL risk levels, designated ASIL-A, ASIL-B, ASIL-C, and ASIL-D.

[0024] The abbreviation "SIL" stands for "Safety Integrity Level." "Safety Integrity Level" is a key component of the IEC EN 61508 standard. SIL distinguishes between four different SIL risk levels, designated SIL-1, SIL-2, SIL-3, and SIL-4. By ensuring that the backend device forwards the infrastructure assistance data sent by the infrastructure system to the vehicle unaltered and immediately, it is possible to efficiently and advantageously ensure that such safety requirements are met according to ASIL and / or SIL.

[0025] For example, at least partially automated driving functions of a motor vehicle rely on certain infrastructure assistance data being as up-to-date as possible. In particular, such a partially automated driving function of a motor vehicle relies on the infrastructure assistance data not being modified after it has been generated and sent by the infrastructure system, since, for example, the at least partially automated driving function expects this infrastructure assistance data in a specific format in order to be able to process it accordingly. The concept described here thus advantageously enables an at least partially automated driving function of a motor vehicle to work efficiently and safely with such infrastructure assistance data.

[0026] An infrastructure system, for example, is an AVP system. An infrastructure system, for example, is an IAD system.

[0027] The abbreviation "AVP" stands for "Automated Valid Parking" and can be translated as "automatic parking." The abbreviation "IAD" stands for "Infrastructure Assisted Driving" and can be translated as "infrastructure-supported driving" or "infrastructure-assisted driving."

[0028] An infrastructure system is therefore a system that assists a motor vehicle during its at least partially automated journey through an infrastructure. The vehicle thus receives assistance from the infrastructure during its at least partially automated journey through the infrastructure.

[0029] For this purpose, the infrastructure system generates infrastructure assistance data, based on which the vehicle can, for example, drive at least partially autonomously. Infrastructure-supported assistance of the vehicle specifically means that infrastructure assistance data is made available to the vehicle. The vehicle can, for example, derive instructions based on the infrastructure assistance data. The vehicle can, for example, decide for itself what to do based on the infrastructure assistance data.

[0030] Infrastructure assistance data includes, for example, one or more of the following data elements: control command for at least partially automated control of lateral and / or longitudinal guidance of the motor vehicle, remote control command for at least partially automated remote control of lateral and / or longitudinal guidance of the motor vehicle, release command for releasing at least partially automated, in particular fully automated, travel of the motor vehicle for a specific time in a specific area of ​​the parking lot (general infrastructure), target trajectory for the motor vehicle, target position within the parking lot (general infrastructure), environmental data representing the environment of the motor vehicle, and a specification of what the motor vehicle should do. The specification specifies, for example, whether the motor vehicle is permitted to drive or must stop.

[0031] An at least partially automated journey of a motor vehicle within an infrastructure is therefore a journey of the motor vehicle in which the vehicle is driven at least partially automatically. The vehicle is driven at least partially automatically within the infrastructure.

[0032] The term "at least partially automated driving" encompasses one or more of the following cases: assisted driving, partially automated driving, highly automated driving, or fully automated driving. The term "at least partially automated" therefore encompasses one or more of the following cases: assisted, partially automated, highly automated, or fully automated. At least partially automated driving of a motor vehicle therefore encompasses at least partially automated control of the lateral and / or longitudinal guidance of the motor vehicle. Assisted driving means that a driver of the motor vehicle continuously performs either the lateral or longitudinal guidance of the motor vehicle. The other driving task (i.e., controlling the longitudinal or lateral guidance of the motor vehicle) is performed automatically. This means that with assisted driving of the motor vehicle, either the lateral or longitudinal guidance is controlled automatically.

[0033] Partially automated guidance means that the longitudinal and lateral guidance of the vehicle is automatically controlled in a specific situation (for example, driving on a highway, driving within a parking lot, overtaking an object, driving within a lane defined by lane markings) and / or for a specific period of time. The driver of the vehicle does not have to manually control the longitudinal and lateral guidance of the vehicle. However, the driver must continuously monitor the automatic control of the longitudinal and lateral guidance in order to intervene manually if necessary. The driver must be ready to fully assume control of the vehicle at any time.

[0034] Highly automated guidance means that for a certain period of time in a specific situation (e.g. driving on a motorway, driving in a parking lot, overtaking an object, driving in a lane defined by lane markings), the longitudinal and lateral guidance of the motor vehicle are automatically controlled. The driver of the motor vehicle does not have to manually control the longitudinal and lateral guidance of the vehicle. The driver does not have to constantly monitor the automatic control of the longitudinal and lateral guidance in order to be able to intervene manually if necessary. If necessary, a takeover request is automatically issued to the driver to take over control of the longitudinal and lateral guidance, in particular with a sufficient time reserve. The driver must therefore potentially be able to take over control of the longitudinal and lateral guidance.Limits of the automatic control of lateral and longitudinal guidance are automatically detected. With highly automated guidance, it is not possible to automatically bring about a risk-minimal state in every initial situation. Fully automated guidance means that in a specific situation (for example: driving on a highway, driving within a parking lot, overtaking an object, driving within a lane defined by lane markings), the longitudinal and lateral guidance of the vehicle are automatically controlled. A driver of the vehicle does not have to manually control the longitudinal and lateral guidance of the vehicle. The driver does not have to monitor the automatic control of the longitudinal and lateral guidance in order to be able to intervene manually if necessary.Before the automatic control of lateral and longitudinal guidance is terminated, the driver is automatically prompted to take over the driving task (controlling the lateral and longitudinal guidance of the vehicle), particularly with sufficient time in reserve. If the driver does not take over the driving task, the system automatically returns to a risk-minimal state. Limits of the automatic control of lateral and longitudinal guidance are automatically detected. In all situations, it is possible to automatically return to a risk-minimal system state.

[0035] The terms “assist” and “support” can be used synonymously.

[0036] The abbreviation "at least one" means "one or more".

[0037] For example, it is envisaged that one or more environmental sensors are spatially distributed within the infrastructure and that they sensorically detect their respective surroundings and output environmental data corresponding to or based on the sensory detection, which describes the respective environment of the environmental sensors. The infrastructure system, for example, generates the infrastructure assistance data based on such environmental data.

[0038] An environmental sensor is, for example, one of the following environmental sensors: radar sensor, ultrasonic sensor, LIDAR sensor, magnetic field sensor, infrared sensor, image sensor, in particular a video camera image sensor, chemical sensor, temperature sensor, acoustic sensor, for example a microphone, gas sensor, for example a carbon monoxide sensor or carbon dioxide sensor. In one embodiment of the backend device, the security requirement is implemented in the communication device.

[0039] This provides the technical advantage, for example, that the communication device is efficiently informed about the security requirement.

[0040] In one embodiment of the backend device, it is provided that it comprises a control device which is configured to control the communication device based on the safety specification in such a way that it forwards infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure unchanged and directly to the motor vehicle.

[0041] This provides the technical advantage, for example, that the safety requirement can be met efficiently.

[0042] For example, the safety requirement is implemented in the control device.

[0043] For example, the infrastructure assistance data is included in a message.

[0044] For example, the security requirement is implemented in a respective firmware, in particular a firmware of the backend device and / or the communication device and / or the control device and / or the testing device described below and / or a communication interface of the communication device.

[0045] In one embodiment of the backend device, the security requirement is integrated into a message comprising the infrastructure assistance data, wherein the communication device is configured to receive the message from the infrastructure system and read the security requirement from the message. This provides, for example, the technical advantage that the communication device can be efficiently informed about the security requirement that must be met.

[0046] According to this embodiment, it is therefore provided that the infrastructure system generates a message and sends it to the backend device, wherein this message comprises the infrastructure assistance data and wherein the security requirement is integrated in this message.

[0047] In one embodiment of the backend device, it is provided that the security requirement is integrated at a predetermined position in the message, wherein the communication device is configured to read out the security requirement at the predetermined position.

[0048] This provides the technical advantage, for example, that the communication device can efficiently read the security specification from the message.

[0049] In one embodiment of the backend device, it is provided that the communication device has a plurality of communication interfaces, wherein at least one of the plurality of communication interfaces is provided for receiving infrastructure assistance data from an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure, so that the communication device is configured, upon receipt of infrastructure assistance data, in particular a message comprising the infrastructure assistance data, from an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure, to forward the received infrastructure assistance data unchanged and directly to the motor vehicle via the at least one of the plurality of communication interfaces.

[0050] This provides, for example, the technical advantage that the safety requirement can be met efficiently. According to this embodiment, it is therefore particularly provided that it is or will be specified that data received through the at least one of the multiple communication interfaces is forwarded unchanged and directly to the motor vehicle. The safety requirement is therefore implemented in particular in the at least one of the multiple communication interfaces.

[0051] In one embodiment of the backend device, it is provided that the communication device is configured to receive an announcement message from an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure, which announcement message announces infrastructure assistance data of the infrastructure system for a motor vehicle, wherein the communication device is configured, upon receipt of the infrastructure assistance data of the infrastructure system for the motor vehicle, to forward the received infrastructure assistance data unchanged and directly to the motor vehicle based on the announcement message.

[0052] This provides the technical advantage, for example, that the safety requirement can be met efficiently.

[0053] According to this embodiment, it is therefore provided in particular that the infrastructure system announces that it is sending infrastructure assistance data.

[0054] The announcement message specifies, for example, a future period within which the infrastructure system sends infrastructure assistance data, so that infrastructure assistance data received by the communication device within the period is forwarded unchanged and immediately to the motor vehicle.

[0055] For example, an infrastructure system sends an announcement message before each infrastructure assistance data transmission. This means, for example, that infrastructure assistance data is announced by an infrastructure system each time.

[0056] The announcement message is received, for example, on the same communication interface that also receives the infrastructure assistance data, or on a different communication interface of the communication device.

[0057] In general, the communication device comprises one or more communication interfaces, for example the first and second communication interfaces described below.

[0058] In one embodiment of the backend device, it is provided that the communication device has a first communication interface and a second communication interface, wherein the first communication interface is configured to receive the infrastructure assistance data from the infrastructure system, and wherein the second communication interface is configured to forward the received infrastructure assistance data to the motor vehicle in accordance with the safety specification.

[0059] This provides, for example, the technical advantage that the infrastructure assistance data can be efficiently received and forwarded. According to this embodiment, two communication interfaces are provided on the backend device side. A first communication interface is provided for communication between the backend device and the infrastructure system. A second communication interface is provided for communication between the backend device and the motor vehicle.

[0060] The communication device is configured, for example, to communicate via a wireless communication network. Thus, for example, the infrastructure assistance data can be received from the infrastructure system via a wireless communication network. Thus, for example, the infrastructure assistance data can be forwarded to the motor vehicle via a wireless communication network.

[0061] A wireless communications network includes, for example, a cellular network and / or a WLAN network.

[0062] The first communication interface and / or the second communication interface is, for example, a WLAN interface or a mobile network interface or comprises one or more such interfaces.

[0063] In one embodiment of the backend device, it is provided that the safety requirement is implemented in the communication device and / or is implemented in the backend device and / or is implemented in the control device and / or is implemented in one or more of the communication interfaces and / or is implemented or integrated in the message and / or is implemented in one of the firmware described above and / or is implemented in the testing device. Thus, there are several possibilities, for example, how the communication device is informed that it must forward infrastructure assistance data from an infrastructure system unchanged and directly to the motor vehicle, and / or how, for example, the backend device can work or be operated according to the safety requirement.

[0064] A communication interface of the communication device is, for example, a WLAN interface or a mobile network interface or comprises one or more such interfaces.

[0065] In one embodiment of the backend device, it is provided that it comprises a testing device which is configured to check whether the security requirement is met.

[0066] This provides the technical advantage, for example, of efficiently checking whether the safety requirement is met or not. For example, the communication device is configured to terminate or interrupt the forwarding of infrastructure assistance data if the test result indicates that the safety requirement is not met. This provides the technical advantage, for example, of efficiently ensuring that potentially unsafe data is not forwarded to the motor vehicle.

[0067] If no more infrastructure assistance data is forwarded to the motor vehicle, the vehicle will no longer receive any infrastructure assistance data. This is, for example, a signal to the motor vehicle that an error must have occurred on the backend device and / or the infrastructure system, allowing an emergency plan to be executed in the vehicle. For example, in such a case, the vehicle can be brought to a safe state, such as a standstill. For example, the vehicle can request a driver of the vehicle to take over control of the vehicle in such a case.

[0068] Features of the backend device apply analogously to the method, and vice versa. This means, in particular, that method features result from features of the backend device, and vice versa. Technical functionalities of the method thus result analogously from corresponding technical functionalities of the backend device, and vice versa.

[0069] In one embodiment of the method, it is provided that the security requirement is implemented in the communication device.

[0070] In one embodiment of the method, the security requirement is integrated into a message comprising the infrastructure assistance data, wherein the message is received from the infrastructure system by the communication device, and the security requirement is read from the message by the communication device. In one embodiment of the method, the security requirement is integrated at a predetermined position in the message, wherein the security requirement is read at the predetermined position by the communication device.

[0071] In one embodiment of the method, it is provided that the communication device has a first communication interface and a second communication interface, wherein the infrastructure assistance data are received from the infrastructure system through the first communication interface, wherein the received infrastructure assistance data are forwarded to the motor vehicle through the second communication interface in accordance with the safety specification.

[0072] In one embodiment of the method, it is provided that the backend device comprises a testing device, wherein the testing device checks whether the security requirement is met.

[0073] In one embodiment of the backend device, it is provided that it is program-technically configured to execute the computer program according to the third aspect.

[0074] In one embodiment of the backend device, it is provided that it is configured to carry out the method according to the second aspect.

[0075] The method according to the second aspect is, for example, a computer-implemented method. For example, the method according to the second aspect is implemented on the backend device or is implemented on the backend device.

[0076] The infrastructure includes, for example, one or more of the following infrastructure elements: parking lot, highway, junction, intersection, entrance, exit, roundabout, road, intersection, junction, highway entrance, highway exit, tunnel, tunnel entrance, tunnel exit, construction site, lane narrowing, bridge, bridge crossing. The invention is explained in more detail below using preferred embodiments. Herein:

[0077] Fig. 1 a first backend device,

[0078] Fig. 2 a second backend device,

[0079] Fig. 3 is a flowchart of a method for operating a backend device,

[0080] Fig. 4 a machine-readable storage medium,

[0081] Fig. 5 shows a communication between a motor vehicle, a third backend device and an infrastructure system and

[0082] Fig. 6 shows an exemplary forwarding of a message comprising infrastructure assistance data by the third backend device according to Fig. 5.

[0083] In the following, the same reference symbols may be used for the same features.

[0084] Fig. 1 shows a first backend device 101, comprising: a communication device 103, which is configured to receive infrastructure assistance data for a motor vehicle driving at least partially automatically within an infrastructure from at least one infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated journey through the infrastructure, wherein the communication device 103 is configured to forward the received infrastructure assistance data to the motor vehicle in accordance with a safety specification, wherein the safety specification specifies that infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure must be forwarded unchanged and directly to the motor vehicle.The communication device 103 is therefore particularly configured to receive the infrastructure assistance data from the infrastructure system and to forward it unchanged and directly to the motor vehicle.

[0085] The forwarding includes, for example, sending the infrastructure assistance data to the motor vehicle, in particular sending it via a wireless communication network.

[0086] Unchanged means, for example, that a checksum of the received infrastructure assistance data is equal to a checksum of the forwarded infrastructure assistance data.

[0087] Infrastructure assistance data is therefore routed primarily through the communication device.

[0088] "Immediate" means, in particular, that the infrastructure assistance data is forwarded to the vehicle in response to its receipt. "Immediate" therefore means that no unnecessary delays are permitted, except, in particular, those that are technically essential.

[0089] Fig. 2 shows a second backend device 201, comprising: a communication device 203, which is configured to receive infrastructure assistance data for a motor vehicle driving at least partially automatically within an infrastructure from at least one infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated journey through the infrastructure, wherein the communication device 203 is configured to forward the received infrastructure assistance data to the motor vehicle in accordance with a safety specification, wherein the safety specification specifies that infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure must be forwarded unchanged and directly to the motor vehicle.

[0090] The communication device 203 comprises a first communication interface and a second communication interface, wherein the first communication interface 205 is configured to receive the infrastructure assistance data from the infrastructure system, and wherein the second communication interface 207 is configured to forward the received infrastructure assistance data to the motor vehicle in accordance with the safety specification.

[0091] Fig. 3 shows a flow diagram of a method for operating a backend device according to the first aspect, comprising the following steps: receiving 301 infrastructure assistance data for a motor vehicle driving at least partially automatically within an infrastructure from at least one infrastructure system for infrastructure-supported assistance of the motor vehicle during its at least partially automated journey through the infrastructure by the communication device, forwarding 303 the received infrastructure assistance data to the motor vehicle by the communication device in accordance with a safety specification, wherein the safety specification specifies that infrastructure assistance data of an infrastructure system for infrastructure-supported assistance of a motor vehicle during its at least partially automated journey through an infrastructure must be forwarded unchanged and directly to the motor vehicle.

[0092] Fig. 4 shows a machine-readable storage medium 401 on which a computer program 403 is stored. The computer program 403 includes instructions that, when executed by a computer, cause the computer program 403 to execute a method according to the first aspect.

[0093] Fig. 5 shows a motor vehicle 501 during an at least partially automated journey within an infrastructure 503. The infrastructure 503 includes a road 505 on which the motor vehicle 501 travels. The road 505 is, for example, a highway or a country road. The infrastructure 503 can include, for example, a parking lot, so that the motor vehicle 501 travels, for example, within a parking lot.

[0094] A video camera 507 comprising an image sensor 509 is arranged within the infrastructure 503. The video camera 507 records video images of the surroundings of the motor vehicle 501 and sends these video images to an infrastructure system 511 for infrastructure-supported assistance of a motor vehicle during an at least partially automated journey through the infrastructure 503. The infrastructure system 511 is, for example, an AVP system when the motor vehicle 501 is driving, for example, within a parking lot, or is, for example, an IAD system when the motor vehicle 501 is driving, for example, on a road, in particular a highway.

[0095] The infrastructure system 511 determines infrastructure assistance data based on the video images of the video camera 507 and sends them to a third backend device 513 comprising a communication device 515, which is configured accordingly, as already explained in the description.

[0096] The communication device 515 receives the infrastructure assistance data sent by the infrastructure system 511 and forwards them unchanged and directly to the motor vehicle 501.

[0097] Fig. 6 shows the motor vehicle 501, the infrastructure system 511 and the third backend device 513 during a corresponding forwarding of a message 601 comprising infrastructure assistance data, which are symbolically represented in Fig. 6 by zeros and ones.

[0098] Message 601 comprising infrastructure assistance data is generated by infrastructure system 511 and sent by infrastructure system 511 to backend device 513. Communication device 515 receives message 601 and forwards it immediately and unchanged to motor vehicle 501. The fact that message 601 is forwarded unchanged to motor vehicle 501 by communication device 515 is illustrated in Fig. 6 by the fact that the zeros and ones were not changed during forwarding.

Claims

Claims 1. Backend device (101, 201, 513), comprising: a communication device (103, 203, 515) which is configured to receive infrastructure assistance data for a motor vehicle (501) driving at least partially automatically within an infrastructure (503) from at least one infrastructure system (511) for infrastructure-supported assistance of the motor vehicle (501) during its at least partially automated journey through the infrastructure (503), wherein the communication device (103, 203, 515) is configured to forward the received infrastructure assistance data to the motor vehicle (501) in accordance with a safety specification, wherein the safety specification specifies that infrastructure assistance data of an infrastructure system (511) for infrastructure-supported assistance of a motor vehicle (501) during its at least partially automated journey through an infrastructure (503) must be forwarded unchanged and directly to the motor vehicle (501).

2. Backend device (101, 201, 513) according to claim 1, wherein the security requirement is implemented in the communication device (103, 203, 515).

3. Backend device (101, 201, 513) according to claim 1 or 2, comprising a control device which is configured to control the communication device (103, 203, 515) based on the safety specification in such a way that it forwards infrastructure assistance data of an infrastructure system (511) for infrastructure-supported assistance of a motor vehicle (501) during its at least partially automated journey through an infrastructure (503) unchanged and directly to the motor vehicle (501).

4. Backend device (101, 201, 513) according to one of the preceding claims, wherein the security requirement is integrated in a message (601) comprising the infrastructure assistance data, wherein the communication device (103, 203, 515) is arranged to receive the message (601) from the infrastructure system (511) and read the security specification from the message (601).

5. Backend device (101, 201, 513) according to claim 4, wherein the security requirement is integrated at a predetermined position in the message (601), wherein the communication device (103, 203, 515) is configured to read out the security requirement at the predetermined position.

6. Backend device (101, 201, 513) according to one of the preceding claims, wherein the communication device (103, 203, 515) has a plurality of communication interfaces (205, 207), wherein at least one of the plurality of communication interfaces (205, 207) is provided for receiving infrastructure assistance data from an infrastructure system (511) for infrastructure-supported assistance of a motor vehicle (501) during its at least partially automated journey through an infrastructure (503), so that the communication device (103, 203, 515) is configured, upon receipt of infrastructure assistance data from an infrastructure system (511) for infrastructure-supported assistance of a motor vehicle (501) during its at least partially automated journey through an infrastructure (503), to forward the received infrastructure assistance data unchanged and directly to the motor vehicle via the at least one of the plurality of communication interfaces (205, 207).

7. Backend device (101, 201, 513) according to one of the preceding claims, wherein the communication device (103, 203, 515) is configured to receive an announcement message from an infrastructure system (511) for infrastructure-supported assistance of a motor vehicle (501) during its at least partially automated journey through an infrastructure (503), which announcement message announces infrastructure assistance data of the infrastructure system (511) for a motor vehicle (501), wherein the communication device (103, 203, 515) is configured, upon receipt of the infrastructure assistance data of the infrastructure system (511) for the motor vehicle (501), to forward the received infrastructure assistance data unchanged and directly to the motor vehicle based on the announcement message.

8. Backend device (101, 201, 513) according to one of the preceding claims, wherein the communication device (103, 203, 515) has a first communication interface (205) and a second communication interface (207), wherein the first communication interface (205) is configured to receive the infrastructure assistance data from the infrastructure system (511), and wherein the second communication interface (207) is configured to forward the received infrastructure assistance data to the motor vehicle (501) in accordance with the safety specification.

9. Backend device (101, 201, 513) according to one of the preceding claims, comprising a testing device which is configured to check whether the security requirement is met.

10. A method for operating a backend device (101, 201, 513) according to one of the preceding claims, comprising the following steps: receiving (301) infrastructure assistance data for a motor vehicle (501) driving at least partially automated within an infrastructure (503) from at least one infrastructure system (511) for infrastructure-supported assistance of the motor vehicle (501) during its at least partially automated journey through the infrastructure (503) by the communication device (103, 203, 515), Forwarding (303) the received infrastructure assistance data to the motor vehicle (501) by the communication device (103, 203, 515) in accordance with a safety specification, wherein the safety specification specifies that infrastructure assistance data of an infrastructure system (511) for infrastructure-supported assistance of a motor vehicle (501) during its at least partially automated journey through an infrastructure (503) must be forwarded unchanged and directly to the motor vehicle (501).

11. A computer program (403) comprising instructions which, when executed by a computer, cause the computer to carry out a method according to claim 10.

12. Machine-readable storage medium (401) on which the computer program (403) according to claim 11 is stored.

Images