Method for approval for use of telematics services, mobile communications device and communications system for carrying out the method

Abstract

The invention relates to a method for approval for use of telematics services for a vehicle based on at least one digital vehicle key. The invention also relates to, in particular, a mobile communications device and a communications system for carrying out the method.

Description

[0001] Procedure for authorising the use of telematics services, mobile communication device and communication system for carrying out the procedure

[0002] The invention relates to a method for enabling the use of telematics services for a vehicle according to the preamble of claim 1. The invention relates in particular to a mobile communication device for carrying out the method and expediently to a communication system for carrying out the method.

[0003] Numerous vehicle manufacturers offer so-called telematics services for their vehicles, which provide useful vehicle functions for the user of a corresponding vehicle. These include navigation services, traffic information services, the opening and closing of vehicle windows and tailgates, remote control assistants, and the programming of the vehicle's auxiliary heater, to name just a few. After registering and activating the telematics services in a server infrastructure assigned to the vehicle by the vehicle manufacturer (hereinafter referred to as the vehicle backend), the vehicle user can access the telematics services, usually via a mobile communications device using an app provided by the vehicle manufacturer. This app communicates directly with the vehicle to implement the desired vehicle functions.The disadvantage is that registering and activating the telematics services before using them involves a certain amount of effort, which reduces the user's comfort experience with the vehicle.

[0004] From DE 102012 012 389 A1 a device and a method for controlling an access authorization and / or driving authorization for a vehicle, in particular using a mobile communication device, is known.

[0005] The object of the invention is therefore to provide an improved or at least a different embodiment of a method for authorizing the use of telematics services for a vehicle. The basic idea of ​​the invention is to implement the authorizing the use of telematics services for a vehicle using a digital vehicle key.

[0006] For this purpose, a method for authorizing the use of telematics services for a vehicle is proposed. Within the framework of this method, a mobile communications device, for example a smartphone, is provided with a storage medium in which at least one digital vehicle key and an executable app for executing telematics services for the vehicle are stored. The at least one digital vehicle key is advantageously generated in the storage medium of the mobile communications device in a preparatory step preceding the method, and an associated digital certificate, for example a digital certificate compliant with the X.509v3 standard, is registered in a vehicle backend assigned to the vehicle.It is further provided that the app has commands which, when executed by the mobile communications device, cause a ready vehicle to be selected, for example, through a user query and, based on the at least one digital vehicle key, to be authenticated by the mobile communications device and / or the app with the vehicle backend. The user query can be implemented by a screen query on the mobile communications device, which offers a user available vehicles for selection. Alternatively, the selection of a ready vehicle can be made without user interaction based on computer-based algorithms. The mobile communications device and / or the app expediently authenticate themselves to the vehicle backend using a private key of the digital vehicle key.Furthermore, the vehicle backend expediently uses the certificate stored in the vehicle backend for the at least one digital vehicle key during authentication. Furthermore, it is provided that the vehicle backend provides telematics services for the vehicle. The vehicle backend can be equipped with suitable hardware and software components for this purpose. Furthermore, the method provides that the vehicle backend establishes a user session assigned to the selected vehicle for the mobile communications device and / or the app. Within this session, a user of the vehicle can use the app to access the telematics services provided for the vehicle, provided that authentication with the vehicle backend was successful.

[0007] The invention allows for convenient and, above all, relatively quick activation of telematics services for the vehicle using the digital vehicle key. This eliminates the previously required user registration in the vehicle backend, subsequent activation of the telematics services by the vehicle backend, and password-based user authentication immediately prior to using the telematics services. This significantly increases user convenience.

[0008] The invention understands telematics services for a vehicle to be vehicle functions for a vehicle, expediently provided by a vehicle backend, which are executed by the vehicle and can be useful for a user of a corresponding vehicle. Telematics services include, for example, navigation services, traffic information services, the opening and closing of windows and hatches of the vehicle, remote control assistants, and the programming of a vehicle's auxiliary heater. The user of the vehicle can usually use the telematics services using an app provided by the vehicle manufacturer, which is installed, for example, on a mobile communications device, in particular a smartphone, and communicates with the vehicle in order to implement vehicle functions selected by the user on the vehicle. It goes without saying that corresponding vehicle functions must be implemented in the vehicle.Using this communication channel (app), the vehicle user can also subsequently activate new functions directly via the backend—e.g., additional navigation maps, seat heating in the rental model, etc. This is particularly useful for rental processes.

[0009] The mobile communication device can be implemented, in particular, as a smartphone or smartwatch and can be expediently configured to communicate via telecommunications with a vehicle backend, at least one vehicle, and at least one other mobile communication device. However, the invention is not limited to such mobile communication devices.

[0010] The invention expediently understands a digital vehicle key to be a digital key stored in a storage medium, which in particular enables basic vehicle functions such as contactless unlocking and locking of the vehicle and starting the vehicle. In addition to these basic functions, the at least one digital vehicle key can also provide convenience functions. This includes, for example, the digital sharing of the digital vehicle key with co-users of the vehicle. The invention expediently understands an app to be an executable computer program. These computer programs can be optimized for use in a mobile communications device, in particular a smartphone.

[0011] For the purposes of the invention, a vehicle backend is expediently defined as any server infrastructure suitable for providing telematics services for vehicles. The vehicle backend can, in particular, comprise backend devices and backend software, i.e., both hardware and software components.

[0012] In order to be able to determine the extent to which a user may use the provided telematics services within the established user session, it may be expedient if at least one digital vehicle key is provided with telematics service-related usage rights features. Based on the usage rights features, the scope of the telematics services for the vehicle that can be used within the established user session can, for example, be limited, so that in particular fewer vehicle functions can be used for the vehicle. The usage rights features can, for example, be mapped or implemented on access profiles of the at least one digital vehicle key. This makes it relatively easy to determine the scope of permitted use of the telematics services.

[0013] It is expedient if the usage rights characteristics assigned to at least one digital vehicle key are specified by the vehicle user, a vehicle owner or a person authorized by the vehicle owner, or the vehicle backend before the user session is established. This makes it relatively easy for the vehicle user, a vehicle owner or a person authorized by the vehicle owner to specify the scope of use of the telematics services in a user session. The use of the telematics services for the vehicle is therefore only possible to the extent specified by the usage rights characteristics of the digital vehicle key. Expediently, the owner of the vehicle or a person authorized by the vehicle owner has full usage rights characteristics, so that the use of the vehicle's telematics services is possible to an unrestricted extent.In rental scenarios or when digitally sharing the digital vehicle key with co-users of the vehicle, it can be advantageous if the use of the telematics services is configured, for example, restricted, before a user session. Furthermore, it is expedient if the method is carried out with a digital friend vehicle key, which is issued, for example, by the user of the vehicle, a vehicle owner, or a person authorized by the vehicle owner using the digital vehicle key for a co-user of the vehicle. The digital friend vehicle key is expediently used when digitally sharing at least one digital vehicle key with a co-user of the vehicle together with an associated certificate, for example the X.509v3 certificate, so that the digital friend vehicle key is then stored in the co-user's mobile communications device and / or in a storage medium of the same, and the associated certificate is registered in a vehicle backend assigned to the vehicle. Within the framework of the proposed method, the digital friend vehicle key can be used instead of the digital vehicle key to achieve authentication with the vehicle backend. This ensures that a co-user of the vehicle, to whom the vehicle user, the vehicle owner, or a person authorized by the vehicle owner has provided a digital friend vehicle key through digital sharing, can also use the telematics services for the vehicle.The co-user does not have to transmit any personal data to the vehicle backend, since the authentication of the co-user's mobile communication device and / or app is realized using the digital friend vehicle key, which is relatively convenient for the co-user.

[0014] Conveniently, the digital friend vehicle key is also equipped with usage rights features. This can be configured when the digital friend vehicle key is issued or in a user account created in the vehicle backend. When establishing a user session for a co-user of the vehicle, the extent to which the co-user may use the telematics services for the vehicle within the established user session is determined. The usage rights features for the friend vehicle key can be specified, for example, by the user of the vehicle, a vehicle owner, or a person authorized by the vehicle owner.

[0015] It can be expedient to provide for the vehicle user, a vehicle owner, or a person authorized by the vehicle owner to declare the digital friend vehicle key issued to a co-user invalid or, for example, if the same has become invalid due to time lapse, whereby an established user session is simultaneously terminated and can no longer be resumed. This ensures that after the digital friend vehicle key is no longer issued or expires, the rights to use the telematics services granted to a co-user are terminated and therefore no longer usable. This increases the security of the process for digitally sharing the digital vehicle key.

[0016] Furthermore, it is advisable for the user of the vehicle or a co-user of the vehicle to carry out the procedure using the app, in particular, to carry out the following steps:

[0017] 1) Start the app on the mobile communication device;

[0018] 2) if at least one digital vehicle key is stored in a storage medium of the mobile communication device, a user query is carried out in which the user decides by selection whether a) authentication should be carried out using the stored at least one digital vehicle key, or b) authentication should be carried out using password-based authentication;

[0019] 3) alternatively to step 2), the app can decide without user interaction and based on predefined computer-based algorithms, for example that authentication via the digital vehicle key is not available, whether a) authentication should be carried out using the stored at least one digital vehicle key, or b) authentication should be carried out via password-based authentication;

[0020] 4) if a) is selected, proceed to the following step 6);

[0021] 5) If b) is selected, a password-based authentication is performed with the vehicle backend to authorise the use of telematics services for the vehicle;

[0022] 6) If more than one digital vehicle key is stored in the storage medium of the mobile communication device, a further user query is carried out in which the user decides by selection for which vehicle telematics services should be used.

[0023] This allows a user or co-user of the vehicle to conveniently choose authentication with the vehicle backend using the digital vehicle key and then, if more than one digital vehicle key is stored in the storage medium of the mobile communication device, select the vehicle for which telematics services should be used. This makes the proposed method relatively easy to master, which in particular improves customer acceptance.

[0024] In particular, it can be provided that the at least one digital vehicle key is provided according to the digital vehicle key standard from the Car Connectivity Consortium. Advantageously, said digital friend vehicle keys are also provided according to the ccc standard. The "ccc standard" is advantageously specified in the document "Car Connectivity Consortium Digital Key Release 3 Technical Specification Version 1.0.0 (CCC-TS-101)" and subsequent documents, abbreviated to CCC, the disclosure of which is incorporated herein by reference. Accordingly, the at least one digital vehicle key is generated, in particular during a user pairing or friend pairing process, in a secure storage element, called a secure element, of a CCC-compliant mobile communications device, and the digital certificate associated with the digital vehicle key, in particular the X.509v3 certificate, simultaneously registered in the vehicle backend of a selected vehicle. Furthermore, the at least one digital vehicle key expediently has an asymmetric cryptographic key pair, the so-called public key and private key, as well as an associated certificate, for example, the X.509v3 certificate.

[0025] It is also useful if the established user session is carried out anonymously or pseudonymously, i.e. as an anonymous or pseudonymous user session.

[0026] Data protection authorities’ definition of pseudonym:

[0027] “The Ell's personal data protection legislation defines pseudonymization as the processing of personal data in such a way that this data can no longer be attributed to a specific individual, without the use of additional information.” Source: https: / / edps.europa.eu / press-publications / press-news / blog / pseudonymous-data-processing-personal-data-while-mitigating en.

[0028] The difference between anonymous and pseudonymous is that with pseudonymous use, additional information is required to identify a person. With anonymous use, this is no longer possible. This primarily satisfies a user's data protection interests, as a user does not have to disclose any personal data to use telematics services. Furthermore, a co-user, in particular, does not have to provide personal data on the vehicle backend, which is advantageous for the co-user in a rental scenario or when digitally sharing the digital vehicle key.

[0029] Furthermore, it is conceivable that the method according to the invention serves as an entry point for new customers of the vehicle backend. This can be achieved by enabling co-users not registered in the vehicle backend, who represent potential new customers for the vehicle backend, to conveniently and relatively quickly use the telematics services for the vehicle using the proposed method. The telematics services are supplemented by programs that enable easy registration of the co-users in the vehicle backend.

[0030] According to a further basic concept of the invention, a mobile communications device, in particular a smartphone or a smartwatch, is provided, which has a computer-readable storage medium in which at least one digital vehicle key and an executable app for implementing telematics services for the vehicle are stored. The mobile communications device is expediently configured to carry out the method according to the preceding description. This provides an advantageous mobile communications device with which the present method can be carried out. The mobile communications device is, in particular, configured such that more than one digital vehicle key can be stored in the computer-readable storage medium.

[0031] According to a further basic idea of ​​the invention, a communication system for carrying out the present method according to the above description is provided. It comprises a vehicle configured to carry out telematics services, a mobile communication device configured according to the above description and suitable for carrying out the method according to the above description, having a storage medium, an executable app stored in the storage medium of the mobile communication device for carrying out telematics services for the vehicle, and a vehicle backend. The app has commands which, when executed by the mobile communication device, cause authentication of the mobile communication device and / or the app to be carried out in the vehicle backend assigned to the vehicle using the at least one digital vehicle key.The vehicle backend provides telematics services for the vehicle and is further configured to establish and terminate at least one user session for a mobile communication device and / or an app. Within the scope of a user session, a respective user of the vehicle can use the provided telematics services for the vehicle using the respective app. This provides an advantageous communication system by means of which the present method can be carried out.

[0032] Furthermore, it may be useful for the app in question to use the Digital Key Framework defined by the CCC for authentication. In this context, the Digital Key Framework conveniently refers to the device-side framework for the digital vehicle key, which implements key functions such as vehicle pairing, digital sharing of digital vehicle keys, and digital vehicle key management.

[0033] Furthermore, if no digital vehicle key or no digital vehicle key provided according to the ccc standard is available, it is advisable to set up a vehicle backend or vehicle manufacturer-based process parallel to the digital vehicle key. This process, like the digital vehicle key provided according to the ccc standard, can use an asymmetric, cryptographic key pair consisting of a public key and a private key with a certificate, in particular the X.509v3 certificate.

[0034] It is advisable for the user of the vehicle to be the owner of the vehicle, a person authorized by the owner of the vehicle, or the vehicle backend. The co-user can be a renter of the vehicle in a rental scenario or, otherwise, a person trusted by the user.

[0035] In summary, the invention relates to a method for authorizing the use of telematics services for a vehicle using a digital vehicle key. The invention particularly relates to a mobile communications device and a communications system for implementing the method.

[0036] Further important features and advantages of the invention emerge from the dependent claims, the drawings, and the associated description of the figures with reference to the drawings. It is understood that the features mentioned above and those to be explained below can be used not only in the respective combinations specified, but also in other combinations or on their own, without departing from the scope of the present invention.

[0037] Preferred embodiments of the invention are illustrated in the drawings and are explained in more detail in the following description, wherein the same reference numerals refer to the same or similar or functionally identical components.

[0038] Showing:

[0039] Fig. 1 is a highly simplified flow diagram of the method according to the invention and

[0040] Fig. 2 shows a less simplified flow diagram of the method according to the invention.

[0041] Fig. 1 shows a highly simplified flow diagram of the proposed method 1 for authorizing the use of telematics services for a vehicle, in which, in a first step A, a mobile communication device 2 is initially provided with a storage medium in which at least one digital vehicle key 4 and an executable app 6 for executing telematics services for a vehicle are stored. Furthermore, it is provided that the app 6 has commands which, when executed by the mobile communication device 2 in a second step B of the method 1, cause a provided vehicle to be selected and, based on the at least one digital vehicle key 4, to be authenticated with a vehicle backend 9 assigned to the vehicle.The said vehicle backend 9 provides telematics services for the vehicle and, in a third step C of the method, establishes a user session 10 assigned to the selected vehicle for the mobile communication device 2 and / or the app 6. If the authentication was successful, a user of the vehicle can then use the provided telematics services for the vehicle using the said app 6 within the framework of the user session 10.

[0042] Fig. 2 shows a less simplified flow diagram of the proposed method 1 for enabling the use of telematics services for a vehicle, wherein, within the scope of method 1, however, fundamentally the same method steps A, B and C are carried out as in the flow diagram illustrated in Fig. 1. Accordingly, Fig. 2 indicates a CCC-compliant, mobile communication device 2 with a frame, which is configured to carry out the proposed method 1 and for this purpose has a mobile communication device 2 with a storage medium in which at least one digital vehicle key 4 provided in accordance with the ccc standard and an executable app 6 for executing telematics services for a vehicle are stored.The app 6, which serves the user as a user interface for using telematics services, comprises or communicates with a security element 11 (Secure Element) stored in the storage medium, in which the at least one digital vehicle key 4 is located, and uses a Digital Key Framework 12, also stored in the storage medium and defined according to the ccc standard, which in this case provides the device-side framework for working with the at least one digital vehicle key 4. The app 6 has, purely as an example, a user authentication logic 13, which represents, so to speak, the app-side implementation of the authentication based on the digital vehicle key 4.The app 6 further comprises commands which, when executed by the mobile communication device 2, cause a provided vehicle to be selected and, based on the private key of the at least one digital vehicle key 4, to be authenticated 7 of the mobile communication device 2 and / or the app 6 with a vehicle backend 9 assigned to the vehicle. For this purpose, in the vehicle backend 9, in a preparatory step preceding the method 1, a certificate 8 associated with the at least one digital vehicle key 4, for example the X.509v3 certificate, is registered in a digital key backend 16 of the vehicle backend 9.Said vehicle backend 9, which provides the telematics services for the vehicle, has, purely by way of example, a backend authentication logic 14 implemented in a backend app 17, which implements a server-side implementation of the telematics services and represents the backend-side implementation of the authentication based on the at least one digital vehicle key 4. Within the scope of the proposed method 1, it is provided that the backend authentication logic 14 of the vehicle backend 9 establishes a user session 10, for example an anonymous one, associated with the selected vehicle for the mobile communication device 2 and / or the app 6 if the authentication was successful. Within the scope of the established user session 10, the user of the vehicle can use the app 6 to use the telematics services provided for the vehicle.It should also be mentioned that the at least one digital vehicle key 4 used for authentication can be provided with telematics service-related usage rights features 15, which are used to determine the extent to which the user of the vehicle may use the telematics services for the vehicle within the scope of the user session 10 when establishing the said user session 10. The usage rights features 15 are preferably specified by the user of the vehicle, who is, for example, the owner of the vehicle or a person authorized by the owner of the vehicle, before establishing the user session 10, for example in rental scenarios in which a co-user of the vehicle is issued a digital friend vehicle key 5 with a corresponding certificate 8 by digitally sharing the at least one digital vehicle key 4.

Claims

Patent claims Method (1) for enabling the use of telematics services for a vehicle, characterized in that - a mobile communication device (2) is provided with a storage medium in which at least one digital vehicle key (4) and an executable app (6) for executing telematics services for a vehicle are stored, - wherein the app (6) further comprises commands which, when executed by the mobile communication device (2), cause a provided vehicle to be selected and an authentication of the mobile communication device (2) and / or the app (6) to be carried out using the at least one digital vehicle key (4) with a vehicle backend (9) assigned to the vehicle, - wherein the vehicle backend (9) provides telematics services for the vehicles assigned to it, - wherein the vehicle backend (9) establishes a user session (10) associated with the selected vehicle for the mobile communication device (2) and / or the app (6), within which a user of the vehicle can use the telematics services provided for the vehicle using the app (6) if the authentication was successful. Method (1) according to claim 1, characterized in that - the at least one digital vehicle key (4) is provided with telematics service-related usage rights features (15) which are used to determine, when establishing the user session (10), the extent to which the telematics services can be used by the user of the vehicle within the scope of the user session (10). Method (1) according to claim 2, characterized in that - the usage rights features (15) are specified by the user of the vehicle, an owner of the vehicle, a person authorized by the owner of the vehicle, or the vehicle backend (9) before the establishment of the user session (10). Method (1) according to one of the preceding claims, characterized in that - the method (1) is carried out with a digital friend vehicle key (5) that is issued to a co-user of the vehicle based on the digital vehicle key (4). Method (1) according to claim 4, characterized in that - the digital friend vehicle key (5) is equipped with usage rights features (15) according to claim 2 or 3. Method (1) according to claim 4 or 5, characterized in that - the user of the vehicle or an owner of the vehicle or a person authorised by the owner of the vehicle declares a digital friend vehicle key (5) issued to a co-user of the vehicle to be invalid, - wherein the established user session (10) is simultaneously terminated, and future user sessions with this digital friend vehicle key can no longer be established. Method (1) according to one of the preceding claims, characterized in that the user of the vehicle or a co-user of the vehicle, in order to execute the method (1), carries out, in particular, the following steps using the app (6): 1) Start the app (6) on the mobile communication device (2); 2) if at least one digital vehicle key (4) is stored in a storage medium of the mobile communication device (2), carrying out a user query in which the user actively decides by selection whether a) an authentication based on the stored at least one digital vehicle key (4), or b) authentication is to be carried out via password-based authentication; 3) alternatively to step 2), the app (6) can decide without user interaction and on the basis of predetermined computer-based algorithms whether a) authentication should be carried out using the stored at least one digital vehicle key (4), or b) authentication should be carried out using password-based authentication; 4) if a) is selected, proceed to the following step 6); 5) if b) is selected, a password-based authentication is carried out with the vehicle backend (9) to authorize the use of telematics services for the vehicle; 6) if more than one digital vehicle key (4) is stored in the storage medium of the mobile communication device (2), performing a further user query, in which the user actively decides by selection for which vehicle telematics services are to be used. Method (1) according to one of the preceding claims, characterized in that - the at least one digital vehicle key (4) is provided according to the ccc standard. Method (1) according to one of the preceding claims, characterized in that - the user session (10) is conducted as an anonymous or pseudonymous user session (10). Mobile communication device (2), in particular a smartphone, - with a computer-readable storage medium in which at least one digital vehicle key (4) and an executable app (6) for executing telematics services for the vehicle are stored, wherein the mobile communication device (2) is configured to execute the method (1) according to claims 1 to 9. Communication system for carrying out the method (1) according to claims 1 to 9, comprising - a vehicle equipped to carry out telematics services, - a mobile communication device (2) designed in particular according to claim 10 and suitable for carrying out the method (1) according to claims 1 to 9, having a storage medium, - an executable app (6) stored in the storage medium of the mobile communication device (2) for executing telematics services for the vehicle, which app has commands which, when executed by the mobile communication device (2), cause the mobile communication device (2) and / or the app (6) to be authenticated with a vehicle backend (9) assigned to the vehicle using the at least one digital vehicle key (4), - a vehicle backend (9) which provides telematics services for the vehicle and which is configured to establish and terminate a user session (10) assigned to the selected vehicle for the mobile communication device (2) and / or the app (6), within the framework of which user session a user of the vehicle can use the telematics services provided for the vehicle using the app (6).

Images