MULTISERVICE DATA EXPLOITATION DEVICE FOR A MOTOR VEHICLE

Abstract

DEVICE FOR OPERATING MULTI-SERVICE DATA OF A MOTOR VEHICLE On-board device (1) for collecting, processing and transmitting multi-service data (100) generated on board a motor vehicle of connected services (20), comprising: means for acquiring (11) confidentiality policies for said connected services (20); means for acquiring (12) said multi-service data (100); means for acquiring (13) confidentiality parameters of a driver; means for processing (14) said multi-service data (100) configured to: when one of said multi-service data (100) is required by several of said connected services (20), factorize a transmission of said multi-service data (100) for said connected services (20);authorizing said transmission of said multi-service data only for said connected services (20) for which said privacy policies and / or said privacy settings authorize sharing; and means for transmitting (15) said multi-service data. Fig. 1.;

Description

Title of the invention: DEVICE FOR EXPLOITING MULTISERVICE DATA OF A MOTOR VEHICLE Technical field

[0001] The present invention relates to a device for operating multi-service data of a motor vehicle. Prior art

[0002] With the widespread use of connected vehicles, the search for solutions around the collection and processing of data returned from a motor vehicle is expanding rapidly and is becoming a major challenge for car manufacturers. Manufacturers are in fact developing more and more connected services of very different natures based on the exploitation of data returned from the vehicle.

[0003] Connected services include, for example, services for launching address searches on the Internet; connected navigation services or other route planning services indicating, for example, danger zones, fuel prices, the location and availability of charging stations for electric vehicles, etc.; automatic update services for connected services; mapping services; connected assistance services; services for consulting the charging status and autonomy of rechargeable vehicles; services for programming the charging of rechargeable vehicles; services for launching and programming air conditioning or heating or other pre-conditioning of the passenger compartment; services which offer the possibility of using a smartphone and its applications directly from the vehicle's touch screen; etc.In other words, connected services make it possible to manage motor vehicles remotely and improve the experience of their drivers.

[0004] The very rapid expansion of these connected services requires the ability to add or modify vehicle data collection and uploads at a much faster rate than that required to design and deploy new software in vehicles.

[0005] Furthermore, with the explosion of multiple and diverse uses of vehicle data also come constraints: cost constraints, regulatory constraints to respect the confidentiality of data of drivers and other passengers, and constraints on the computing power of the computers on board the vehicle. These constraints are also evolving rapidly with the deployment of new functionalities which constantly aim to meet the needs of interactivity and comfort of drivers and passengers.

[0006] Finally, some of the connected services are sold by car manufacturers and operated under contracts that stipulate performance and quality indicators for these connected services. It is important to make the data usable by third parties without compromising the proper functioning of the vehicles and while respecting the privacy preferences of drivers.

[0007] Some multi-service data upload mechanisms for connected services already exist. However, they do not allow both the factoring of data sending and the filtering of multi-service data at the source according to the different connected services that consume this multi-service data. Existing mechanisms also require, for example, mapping tables on the off-board or cloud server side to route multi-service data to the corresponding connected services.

[0008] There are also service data upload mechanisms for connected services that require authorizations and / or consents for several different purposes before uploading the service data. However, in this case, these are applications dedicated to a connected service. In other words, it is therefore necessary to deploy one application per service in the vehicle. This implies a duplication of the detection of service data and a duplication of the service data uploads when different connected services use the same service data and upload the same service data. This duplication generates a waste of the vehicle's computing power and leads to additional operating costs for the connected services. Summary of the invention

[0009] The present invention relates to a device for collecting, processing and transmitting multi-service data generated on board a motor vehicle for one or more connected services which resolves the technical limitations mentioned in relation to the systems of the state of the art. The main objective of the present invention is to propose a dynamic solution to the configuration of multi-service data uploads from a motor vehicle and the connected services which require them while applying at the source a confidentiality policy for each connected service.

[0010] The invention also relates to a system for configuring and distributing authorized multi-service data which makes it possible to create, deploy and manage the configuration of the uploading of multi-service data on board a motor vehicle, for example the configuration of the quality of the connected services, quickly and without needing to carry out a software update on the vehicle.

[0011] More particularly, the device, the system for configuring and distributing authorized multi-service data, and the associated methods according to the invention make it possible to simplify and accelerate the creation and deployment of new connected services.

[0012] The invention finally makes it possible to minimize the number of messages transmitted by a motor vehicle to a server, for example hosted or dematerialized or cloud or cloud thanks to the strategy of timing and grouping of the uploads of multiservice data. This makes it possible to considerably reduce the main cost of operation of the cloud where the multiservice data is processed and transport costs, such as for example costs of mobile network operators. The invention makes it possible to ensure the freshness of the multiservice data while maximizing the temporal aggregation and taking into account the freshness needs which are different for each connected service.

[0013] In order to achieve the above-mentioned objective, the present invention provides a device for collecting, processing and transmitting multi-service data generated on board a motor vehicle for one or more connected services, the device being embedded in the motor vehicle, and the device comprising: - means for acquiring one or more rules for processing the multi-service data, the processing rules comprising a confidentiality policy for the connected services; - means of acquiring multi-service data; - means of acquiring one or more privacy parameters of a driver of the motor vehicle for connected services; - multi-service data processing means configured for: • when one of the multi-service data is required by a plurality of the connected services, factoring a transmission of the multi-service data for the plurality of the connected services, thereby generating factored multi-service data; • allow the transmission of factored multi-service data only for connected services that require the factored multi-service data and whose privacy policies allow sharing and / or for which the privacy settings allow sharing, thus generating authorized multi-service data; • not allow the transmission of factored multi-service data for connected services whose privacy policies do not allow sharing and / or for which the privacy settings do not allow sharing; and - means of transmitting authorized multi-service data.

[0014] Thanks to the device embedded in the motor vehicle, the present invention thus makes it possible to carry out the collection, processing, transmission and distribution of authorized multi-service data in a fully configurable manner. This allows the rapid design and deployment of new uploads of authorized multi-service data for very diverse uses while complying with regulatory confidentiality requirements. There is no need to generate new software for the motor vehicle. This makes it possible to shorten the validation of the deployment of new connected services or of a new configuration for one or more connected services without having to update the vehicle.

[0015] The main objective of the present invention is to propose a dynamic solution for configuring multi-service data uploads from a motor vehicle and the connected services that require them while applying a confidentiality policy at the source for each connected service. The transmission of factored multi-service data is only authorized for connected services that require the factored multi-service data and whose confidentiality policies authorize sharing and / or for which the confidentiality parameters authorize sharing. In other words, factored multi-service data for which one or more confidentiality policies do not authorize sharing will not be transmitted by the device. Similarly, factored multi-service data for which one or more confidentiality parameters do not authorize sharing will not be transmitted by the device.

[0016] The invention makes it possible to factorize the multi-service data transmissions authorized for the different connected services. This makes it possible to reduce operating costs and to optimize the use of the computing power of the vehicle's computers.

[0017] The invention minimizes the number of messages transmitted from the motor vehicle to the cloud comprising the authorized multiservice data. This makes it possible to further reduce the operating costs of the connected services. These groupings are made possible by having defined a notion of freshness for each multiservice data and for each connected service, as well as by bringing this notion of freshness into the configuration of the vehicle.

[0018] The invention reduces the size of each message transmitting authorized multi-service data. This makes it possible to reduce the costs of transmitting authorized multi-service data.

[0019] The invention contextualizes the multiservice data to facilitate the processing, correlation and aggregation of the multiservice data at the client. This makes it possible to measure and monitor the performance indicators for each connected service. The invention allows the offboard or server or cloud server to route er to distribute, in the sense of dispatching, the authorized multi-service data without using information other than that included in the authorized multi-service data transmitted by the vehicle, for example without using a routing table. The problem of maintenance and versioning of offboard routing tables according to the configuration versions on the equipment side is eliminated with the invention. Each connected service receives the multi-service data necessary and sufficient for this connected service.

[0020] In the context of the invention, multi-service data is data generated in a motor vehicle that can be required and / or used by one or more connected services in connection with the motor vehicle. In the context of the invention, a privacy policy for a connected service comprises, for example, one or more authorizations for sharing multi-service data used by the corresponding connected service. For example, a privacy policy defines whether sharing is subject to the consent of a client of the connected service or not. In the context of the invention, a privacy setting of a driver of the vehicle comprises, for example, a preference for sharing multi-service data that is defined by the driver of the vehicle inside the passenger compartment, for example from the touch screen of the vehicle.In the context of the invention, the multi-service data is generated by one or more different multi-service data sources within the motor vehicle.

[0021] More particularly, the multi-service data processing rules also include: - a definition of the multi-service data to be acquired for connected services; and - a definition of one or more events triggering the acquisition of multi-service data; and the processing means are also configured to trigger the acquisition of multi-service data by the multi-service data acquisition means according to the processing rules.

[0022] According to the invention, to generate the authorized multiservice data and construct the messages which will be transmitted to the offboard, each time that one or more multiservice data changes at the input of the device, and / or periodically: - the conditions of the events triggering the acquisition of the multiservice data are re-evaluated; and - when events are triggered, they in turn trigger the capture of multi-service data which is uploaded as is and / or start the processing or analysis of certain multi-service data and / or stop the processing or analysis of certain multi-service data.

[0023] More particularly, the multi-service data processing rules also include: an identifier for each of the connected services; and for each of the multi-service data, a list of connected services using the multi-service data; and the processing means are also configured for, when one of the multi-service data is required by a plurality of the connected services: associate the service identifiers with the multiservice data connected that require multiservice data; and allow the transmission of multiservice data associated with the identifiers of connected services that require multiservice data.

[0024] More particularly, the processing rules include a maximum duration between the acquisition of each of the multi-service data and the transmission of the multi-service data for one or more of the connected services. This maximum duration may be called freshness, and the two expressions "maximum duration" and "freshness" will be used as synonyms throughout the description.

[0025] In the context of the invention, this maximum duration between the acquisition and the transmission of multiservice data for one or more of the connected services makes it possible to ensure the freshness of the multiservice data for exploitation by the connected services.

[0026] More particularly, when one of the multiservice data is required by one or more of the connected services, the processing means are configured for the single acquisition of the multiservice data and the association of this multiservice data with: the identifiers of the connected services that require the multiservice data; and the smallest of the maximum durations for each of the connected services.

[0027] More particularly, the device also comprises a buffer memory adapted to store the authorized multi-service data before transmission; and the transmission means are configured to transmit the authorized multi-service data: when the buffer is full, i.e. when the maximum buffer size is reached; and / or when one of the maximum durations has elapsed since the time when the corresponding authorized multi-service data has been stored in the buffer; and / or when the driver of the motor vehicle changes one or more of the privacy settings.

[0028]

[0029]

[0030]

[0031]

[0032]

[0033] The authorized multi-service data thus produced is stored in a sending buffer until a message routes it to the offboard. An upload message of the authorized multi-service data is created and sent by the device, for example to a server or an authorized multi-service data configuration and distribution system comprising a server, when one or more of the described conditions are detected. According to an alternative of the invention, the buffer is not included in the device, but the buffer is in operational communication with the device. More particularly, the buffer is also suitable for storing one or more metadata comprising one or more of: - connected service identifications for each of the multi-service data; - quality of service information for each of the connected services. For example, connected services identifications include the connected services identifier. More specifically, authorized multi-service data includes one or more of: - a timestamp of the acquisition of multi-service data; - an identifier of one or more events triggering the acquisition of multi-service data; - a list of time gaps between two successive occurrences of events; - a list of connected services for which at least one of the multi-service data is present in the authorized multi-service data; - a name and a value for each of the multi-service data; - one or more incremental message counters for each of the connected services; - one or more elements for matching multi-service data and connected services. The generated authorized multi-service data is included in one or more reports. Each report corresponds to an event that occurred one or more times during a period of time during which the buffer used to store the authorized multi-service data was filled. Accordingly, each authorized multi-service data report is the aggregation, for a single event, of one or more of the above information. More specifically, each of the connected services belongs to a privacy category corresponding to the privacy policy and according to which the driver assigns one or more of the privacy parameters to each of the privacy categories.

[0034] In order to achieve the above-mentioned objective, the present invention provides a system for configuring and distributing authorized multi-service data comprising a server adapted to receive authorized multi-service data transmitted by a device for collecting, processing and transmitting multi-service data generated on board a motor vehicle for one or more connected services, the system for configuring and distributing authorized multi-service data comprising: - means for configuring the device, configured to generate one or more multi-service data processing rules and transmit the processing rules to said device; - means of receiving authorized multi-service data; - means of distributing authorized multi-service data to one or more of the connected services; and - means of measuring and monitoring the quality of service of authorized multi-service data.

[0035] More particularly, when one of the multiservice data is required by one or more of the connected services, the rules for processing the multiservice data require the unique acquisition of the multiservice data and the association of this multiservice data with: • the identifiers of the connected services that require the multiservice data; and • the smallest of the maximum durations for each of the connected services.

[0036] When the offboard receives a request to activate or deactivate a connected service for a motor vehicle, or when the configuration of a connected service used on a motor vehicle is updated in the offboard, a configuration must be pushed to the vehicle and it is recalculated. The invention merges the configurations of all the connected services activated on the vehicle with the following steps: - when multi-service data only appears in a single configuration of connected services: the multi-service data, the associated freshness, and the identifier of the connected service are put in the merged configuration; - when multiservice data appears in several connected service configurations: the multiservice data is placed only once in the merged configuration and the following is associated with it: • the smallest of the freshnesses associated with it in each of the connected service configurations; • the list of identifiers of the connected services whose configurations contain this multiservice data; - the invention extracts from one or more databases the events, the definitions of the events referenced by the multi-service data contained in the configurations of the connected services activated on the vehicle. The extracted event definitions are added to the merged configuration; and - the invention adds the list of identifiers of the connected services activated on the vehicle with the corresponding confidentiality policies.

[0037] More particularly, the configuration means are configured to transmit the processing rules when the authorized multi-service data configuration and distribution system receives an activation request or when a configuration of one or more of the connected services is updated.

[0038] More particularly, the authorized multi-service data configuration and distribution system also comprises one or more connected services databases adapted to store: - a configuration for each of the connected services, including: • an identifier of the connected service; • a privacy category of the connected service corresponding to the privacy policy; • a list of properties of the multi-service data used by the connected service, the list including at least: • the names of the multi-service data that must be acquired; • the identifier of one or more events triggering the acquisition of multi-service data; • a maximum duration between the acquisition of multi-service data and the transmission of multi-service data for connected services; - a catalog of each of the events triggering the acquisition of multi-service data, including for each of the events: • an event identifier; and • a condition for triggering the event.

[0039] The vehicle user, for example the driver or a passenger, has access to the privacy settings menu for the vehicle's connected services. In this menu, the user can choose whether or not to share the vehicle's multi-service data for a number of privacy categories of the connected services. Each connected service belongs to one of the privacy categories. Some connected services, such as certain regulatory services, or such as services for which there is a sufficient contractual basis with the car user, are not subject to the user's privacy categories. Connected services that are not subject to the user's privacy categories belong to a special privacy category named for example "no privacy". Multi-service data uploads of connected services that are not subject to the user's privacy categories are always allowed. For any connected service belonging to a privacy category other than the special privacy category named "no privacy", data is uploaded if and only if one or more vehicle user privacy settings allow multi-service data sharing for that connected service for the privacy category of that connected service.

[0040] Each event triggering the acquisition of multi-service data referenced in one or more connected service configurations must be defined in the event catalog. This catalog includes the definition of all the events with for each event: the identifier of the event and the trigger condition which is a logical calculation equation: when this condition changes from FALSE to TRUE, this triggers an occurrence of the event. This calculation uses the vehicle data as operands and the operators defined in the configuration grammar. This grammar typically includes, for example, logical operators (AND, OR), mathematical calculation operators (+,-, / ,*, max, min,...) and other operators (value change detection, delay, etc.).

[0041] Optionally, the catalog of triggering events for the acquisition of multi-service data also includes a period for each periodic triggering event. For periodic events, the period of the event will be included in the catalog of triggering events: the event will occur periodically as long as its triggering condition remains TRUE. Optionally, a triggering condition of an event and the list of properties also include one or more calculation or processing or analysis rules to be applied to one or more multi-service data before transmission by the device.

[0042] More particularly, the distribution means are adapted to distribute the authorized multi-service data to one or more of the connected services according to the identifiers of the connected services.

[0043] A message received offboard contains one or more reports, each of which contains authorized multi-service data associated with one or more connected services. The distribution means extract the authorized multi-service data from the received message and distribute it to the connected services based on the information of the identifier(s) of the connected services indicated for each authorized multi-service data in the message. The type of interface for exposing the multi-service data authorized to the different connected services may for example consist of feeding an asynchronous event bus, feeding databases dedicated to the connected services, or any other method of exposing the data as long as the discrimination of the connected services is guaranteed in order to avoid the exposure of unauthorized multi-service data that is not legitimate.

[0044] More particularly: - the authorized multi-service data also includes incremental message counters for each of the connected services; and - the means of measuring and monitoring the quality of service of authorized multi-service data are adapted to measure a rate of loss of multi-service data based on the incremental message counters and for each of the connected services.

[0045] More particularly, the means for measuring and monitoring the quality of service are also adapted to compare the timestamps of acquisition of the multiservice data with the timestamps of reception of the multiservice data authorized by the reception means.

[0046] The present invention thus makes it possible to measure and monitor performance indicators of the various connected services.

[0047] The offboard function of the quality of service measurement and monitoring means can measure and monitor the quality of authorized multi-service data uploads by evaluating the incremental message counters per connected service contained in each message. By this means, each connected service has its own message completeness indicator if we consider that the messages are received in their order of transmission. The problem of message inversions can be solved by simple buffering and reordering methods: if a number is missing in the sequence, it is easy to count how many messages have been lost.By comparing the multi-service data collection timestamps with the arrival timestamps in the offboard server for each of the connected services, statistics on the latency of the multi-service data uploads allowed for each connected service, for example by determining an average, a peak, variance, histograms, etc. can be calculated.

[0048] In order to achieve the above-mentioned objective, the present invention provides a method for collecting, processing and transmitting multi-service data generated on board a motor vehicle for one or more connected services, the device being embedded in the motor vehicle, and the method comprising the steps of: - acquiring one or more rules for processing the multi-service data, the processing rules comprising a confidentiality policy for the connected services; - acquisition of multi-service data; - acquisition of one or more privacy parameters of a driver of the motor vehicle for connected services; - multi-service data processing including: • when one of the multi-service data is required by a plurality of the connected services, a factorization of a transmission of the multi-service data for the plurality of the connected services, thus generating factorized multi-service data; • authorization to transmit factored multi-service data only for connected services that require the factored multi-service data, and whose privacy policies allow sharing and / or for which privacy settings allow sharing, thus generating authorized multi-service data; and - transmission of authorized multi-service data.

[0049] In order to achieve the above-mentioned objective, the present invention provides a motor vehicle comprising a device according to the preceding paragraphs.

[0050] In order to achieve the above-mentioned objective, the present invention provides a method for configuring and distributing authorized multi-service data transmitted by a device for collecting, processing and transmitting multi-service data generated on board a motor vehicle for one or more connected services, the method comprising the steps of: - configuring the device to generate one or more multi-service data processing rules and transmit the processing rules to said device; - reception of authorized multi-service data; - distribution of authorized multi-service data to one or more of the connected services; and - measurement and monitoring of the quality of service of authorized multi-service data.

[0051] In order to achieve the above-mentioned objective, the present invention provides a computer program product comprising instructions which, when the program is executed by a computer, cause the computer to implement the method according to the invention.

[0052] In order to achieve the above-mentioned objective, the present invention provides a computer-readable medium, on which the computer program product according to one aspect of the invention is recorded. Brief description of the drawings

[0053] [Fig-1] is a representation of a device and a system for configuring and distributing authorized multi-service data for the collection, processing and transmission of multi-service data on board a motor vehicle for one or more connected services and according to a variant of the invention.

[0054] [Fig.2] is a representation of the steps of a method for managing the collection, processing and transmission of multi-service data on board a motor vehicle for one or more connected services and according to a variant of the invention.

[0055] [Fig.3] schematically represents an example of a computer system suitable for implementing various steps of the methods according to the invention. Detailed description

[0056] [Fig.l] shows a device 1 for collecting, processing and transmitting multi-service data 100 generated on board a motor vehicle for one or more connected services 20, the device being embedded in the motor vehicle, and the device 1 comprising: - means 11 for acquiring one or more processing rules 300 for the multi-service data 100, the processing rules 300 comprising a confidentiality policy 201 for the connected services; - means of acquiring 12 multi-service data 100; - means of acquiring 13 one or more confidentiality parameters 400 of a driver 4 of the motor vehicle for connected services 20 - means of processing 14 multi-service data 100 configured for: • when one of the multiservice data 100 is required by a plurality of the connected services 20, factoring a transmission of the multiservice data 100 for the plurality of the connected services 20, thus generating factored multiservice data 101; • authorize the transmission of the factored multi-service data 101 only for the connected services 20 which require the factored multi-service data 101 and whose confidentiality policies 201 authorize sharing and / or for which the confidentiality parameters 400 authorize sharing, thus generating authorized multi-service data 102; and - means 15 for transmitting authorized multi-service data 102. The authorized multi-service data 102 are transmitted for example to a system 3 for configuring and distributing authorized multi-service data. The system 3 for configuring and distributing authorized multi-service data comprising a server adapted to receive authorized multi-service data 102 transmitted by the device 1 for collecting, processing and transmitting multi-service data 100 generated on board a motor vehicle for one or more connected services 20, the system 3 for configuring and distributing authorized multi-service data comprising: - configuration means 31 of the device 1, adapted to generate one or more processing rules 300 of the multiservice data 100 and transmit the processing rules 300 to said device 1; - means of receiving 32 authorized multi-service data 102; - means of distributing 33 authorized multi-service data 102 to one or more of the connected services 20; and means 34 for measuring and monitoring the quality of service of authorized multi-service data 102.

[0057] [Fig. 3] shows an example of a suitable computer system 500 comprising circuitry adapted to carry out steps of the embodiments of the methods according to the invention, in particular in a driver assistance system, according to one aspect of the invention. The computer system 500 may generally be in the form of a suitable general-purpose computer and comprise a bus 510, a processor 502, a local memory 504, one or more optional input interfaces 514, one or more optional output interfaces 516, a communication interface 512, a storage element interface 506, and one or more storage elements 508. The bus 510 may comprise one or more conductors allowing communication between the components of the computer system 500. The processor 502 may comprise any type of conventional processor or microprocessor which interprets and executes programming instructions.The local memory 504 may include random access memory (RAM) or another type of dynamic storage device that stores information and instructions to be executed by the processor 502 and / or a read only memory (ROM) or another type of static storage device that stores information and static instructions to be used by the processor 502. The input interface 514 may include one or more conventional mechanisms for an operator or user to input information into the computer system 500, such as a keyboard 520, a mouse 530, a pen, voice and / or biometric recognition mechanisms, a camera, etc. The output interface 516 may include one or more conventional mechanisms that transmit information to the operator or user, such as a display 540, etc.The communication interface 512 may include any transceiver type mechanism, such as, for example, one or more Ethernet interfaces, which allows the . computer system 500 to communicate with other devices and / or systems, for example with other computing devices 581, 582, 583. The communication interface 512 of the computer system 500 may be connected to another computing system by means of a local area network (LAN) or a wide area network (WAN), such as, for example, the Internet. The storage element interface 506 may comprise a storage interface such as, for example, a Serial Advanced Technology Attachment (SATA) interface or a Small Computer System Interface (SCSI) interface for connecting the bus 510 to one or more storage elements 508, such as one or more local disks, for example, SATA disk drives, and controlling the reading and writing of data to and / or from these storage elements 508.Although the storage element(s) 508 above are described as a local disk, in general, any other suitable computer-readable medium, such as a removable magnetic disk, an optical storage medium such as a CD or DVD, a disk-ROM, solid-state drives, flash memory cards, etc. could be used.

[0058] As used herein, the term "circuit" may refer to one or more or all of the following:

[0059] (a) hardware-only circuit implementations such as the implements information in purely analog and / or digital circuits and

[0060] (b) combinations of hardware circuits and software, such as (as the case may be):

[0061] (i) a combination of analog and / or digital hardware circuit(s) with software / firmware and

[0062] ii) any portion of hardware processor(s) with software (including digital signal processor(s), software and memory(s) that operate together to enable a device, such as a mobile phone or a server, to perform various functions) and

[0063] (c) hardware circuit(s) and / or processor(s), such as a microprocessor or a part of a microprocessor, which requires software (e.g., firmware) to function, but the software may not be present when it is not needed for the device to function.

[0064] This definition of circuits applies to all uses of this term in the present application, including in the claims. By way of further example, as used in the present application, the term "circuit" also covers an implementation of a single hardware circuit or processor (or processors) or part of a hardware circuit or processor and its (or their) accompanying software and / or firmware. The term "circuit" also covers, for example and if applicable to the particular claimed element, a baseband integrated circuit or a processor integrated circuit for a mobile device or similar integrated circuit in a server, cellular network device, or other computing or network device.

[0065] In conjunction with the accompanying drawings, the technical content and detailed description of the present invention are set forth below according to a preferred embodiment which does not limit the scope of its execution. Any changes and modifications made in accordance with the appended claims are covered by the claims of the present invention. The invention has been explained according to its preferred embodiment(s) as described above. It should be noted, however, that many other possible modifications or variations can be made without altering the scope of the present invention. It is understood that the appended claim(s) include(s) said modifications or variations falling within the true scope of the invention.

[0066] Although the present invention has been illustrated with reference to specific embodiments, those skilled in the art will understand that the invention is not limited to the details of the illustrative embodiments, and that the present invention may be embodied with numerous modifications without departing from the scope of the invention. The embodiments are to be considered illustrative and not restrictively, the scope of the invention being defined by the claims which follow rather than by the foregoing description. Any modification which falls within the meaning or equivalence of the claims is intended to be understood. That is, it is intended to cover all modifications, variations or equivalences which fall within the scope of the basic principles underlying and the essential features of which are claimed in this patent application.The reader of this patent application will understand that the words “comprising” or “comprises” do not exclude any other element or step, and that the words “a” or “an” do not exclude a plurality. The reference signs in the claims cannot be considered as limiting the claim concerned. The terms “first”, “second”, “third”, “a”, “b”, “c”, etcetera are introduced to distinguish different elements or steps and do not necessarily describe a sequential or chronological order. Similarly, the terms “upper”, “lower”, “above”, “below”, etcetera are introduced for descriptive purposes and not necessarily to designate relative positions. It will be understood that these terms are interchangeable under appropriate conditions and that embodiments of the invention are capable of being operable according to the present invention in other sequences or in orientations which differ from those described or illustrated above.

Claims

Claims

1. Device (1) for collecting, processing and transmitting multi-service data (100) generated on board a motor vehicle for one or more connected services (20), said device (1) being on board said motor vehicle, and said device (1) comprising: - means for acquiring (11) one or more processing rules (300) of said multi-service data (100), said processing rules (300) comprising a confidentiality policy (302) for said connected services (20); - means for acquiring (12) said multi-service data (100); - means for acquiring (13) one or more confidentiality parameters (400) of a driver (4) of said motor vehicle for said connected services (20); - processing means (14) of said multi-service data (100) configured to: • when one of said multi-service data (100) is required by a plurality of said connected services (20), factoring a transmission of said multi-service data (100) for said plurality of said connected services (20), thereby generating factored multi-service data (101); • authorizing said transmission of said factored multi-service data (101) only for said connected services (20) which require said factored multi-service data (101) and for which said privacy policies (302) authorize sharing and / or for which said privacy settings (400) authorize sharing, thus generating authorized multi-service data (102); • not authorize the transmission of factored multi-service data (102) for connected services (20) whose privacy policies (302) do not authorize sharing and / or for which the privacy settings (400) do not authorize sharing; and - means of transmission (15) of said multi-data

2.

3.

4. authorized services (102). Device (1) according to claim 1, wherein said rules of processing (300) of said multi-service data (100) also includes: a definition of said multi-service data (100) to be acquired for said connected services (20); and a definition of one or more events triggering the acquisition of said multi-service data (100); and according to which said processing means (300) are also configured to trigger the acquisition of said multi-service data (100) by said acquisition means (12) of said multi-service data according to said processing rules (300). Device (1) according to claim 1 or 2, wherein: said processing rules (300) of said multi-service data (100) also comprise: • an identifier (201) for each of said connected services (20); and • for each of said multiservice data (100), a list of connected services (20) using said multiservice data (100); and said processing means (14) are also configured to, when one of said multi-service data (100) is required by a plurality of said connected services (20): • associate with said multiservice data (100) said identifiers (201) of said connected services (20) which require said multiservice data (100); and • authorize the transmission of said multiservice data (100) associated with said identifiers (201) of said connected services (20) which require said multiservice data (100). Device (1) according to any one of claims 1 to 3, in wherein said processing rules (300) include a maximum duration between the acquisition of each of said multi-service data (100) and transmitting said multi-service data (100) for one or more of said connected services (20).

5. Device (1) according to any one of claims 1 to 4, wherein said authorized multi-service data (102) comprises one or more of: - a timestamp of the acquisition of said multi-service data (100); - an identifier (201) of one or more events triggering the acquisition of said multi-service data (100); - a list of the time gaps between two successive occurrences of said events; - a list of said connected services (20) for which at least one of said multi-service data (100) is present in said authorized multi-service data (102); - a name and a value for each of said multi-service data (100); - one or more incremental message counters for each of said connected services (20).

6. System (3) for configuring and distributing authorized multi-service data (102), comprising a server adapted to receive authorized multi-service data (102) transmitted by a device (1) for collecting, processing and transmitting multi-service data generated on board a motor vehicle for one or more connected services (20), said system (3) for configuring and distributing authorized multi-service data comprising: - configuration means (31) of said device (1), configured to generate one or more processing rules (300) of said multi-service data (100) and transmit said processing rules (300) to said device (1); - reception means (32) of said authorized multi-service data (102); - distribution means (33) of said authorized multi-service data (100) to one or more of said connected services (20);and - means (34) for measuring and monitoring the quality of; service of said authorized multi-service data (102).

7. System (3) according to claim 6, also comprising one or more databases (35) of the connected services (20) adapted to store: - a configuration (350) for each of said connected services (20), comprising: • an identifier (201) of said connected service (20); • a confidentiality category of said connected service (20) corresponding to said confidentiality policy (302); • a list of properties of the multi-service data used by said connected service (20), the list comprising at least: • the names of said multi-service data (100) which must be acquired; • the identifier (301) of one or more events triggering the acquisition of said multiservice data (100); • a maximum duration between the acquisition of said multiservice data and the transmission of said multiservice data (100) for said connected services (20); - a catalog of each of said events triggering the acquisition of said multiservice data (100), comprising for each of said events: • an identifier (201) of said event; and • a condition for triggering said event.

8. System (3) according to any one of claims 6 or 7, according to which: - said authorized multi-service data (102) also comprises incremental message counters for each of said connected services (20); and - said means (34) for measuring and monitoring the quality of service of said authorized multi-service data (102) are configured to measure a loss rate of said data multiservices (100) based on said incremental message counters and for each of said connected services (20).

9. System (3) according to any one of claims 6 to 8, according to which said means (34) for measuring and monitoring the quality of service are also configured to compare the acquisition timestamps of said multiservice data (100) with the reception timestamps of said authorized multiservice data (102) by said reception means (32).

10. Motor vehicle comprising a device (1) according to any one of claims 1 to 5.

Images