Method and apparatus for data storage for a vehicle
The method optimizes data storage and encryption for autonomous vehicles by non-volatilely storing and encrypting event data based on accident severity, ensuring data preservation and protection during and after accidents.
Patent Information
- Application Number
- JP2021093366
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Priority Date
- 2020-06-04
- Filing Date
- 2021-06-03
- Publication Date
- 2025-08-06
- Estimated Expiration
- 2041-06-03
AI Technical Summary
Existing methods for handling large event datasets in autonomous vehicles during accidents fail to ensure data preservation when the vehicle's current supply is interrupted, leading to potential data loss.
A method involving non-volatile storage of temporary event data followed by encryption and storage as encrypted permanent data, optimized based on accident severity, using redundant power supplies to maintain data integrity.
Ensures that event data is preserved and protected even after a vehicle accident, preventing data loss and unauthorized access by optimizing the order of storage and encryption steps.
Smart Images

Figure 0007719634000001 
Figure 0007719634000002 
Figure 0007719634000003
Abstract
Description
[Technical Field]
[0001] The approach starts from an apparatus or method according to the generic concept of the independent claims. Computer programs are also within the scope of the approach. [Background technology]
[0002] Event datasets for highly or fully autonomous vehicles can be very large. To be able to handle such large datasets during an accident, the order in which the data is encrypted and stored is important. Summary of the Invention
[0003] On this basis, the approach presented here provides a method according to the main claim, as well as an apparatus for using this method and finally a corresponding computer program. Advantageous modifications and improvements of the apparatus presented in the independent claims are possible by the measures recited in the dependent claims.
[0004] An advantage achievable by the presented approach is that the method presented here makes it possible to ensure that the vehicle's event dataset still exists even after a vehicle accident, for example involving an interruption of the vehicle's current supply.
[0005] A method for data preservation for a vehicle is presented, the method having a non-volatile storage step, an encryption step, and a storage step. In the non-volatile storage step, temporary event data of the vehicle is non-volatilely stored as non-volatile event data in response to an accident signal representing an accident of the vehicle. In the encryption step, the non-volatile event data is encrypted to obtain encrypted event data. In the storage step, the encrypted event data is stored as encrypted permanent event data.
[0006] The vehicle may be a vehicle capable of highly or fully automated driving. The event data may be any data related to autonomous driving. The temporary event data may be, for example, detected or temporarily stored event data of a vehicle's driving assistance system. The temporary event data may be data typically stored in a so-called accident data memory. For example, the temporary event data may include information about the vehicle's current speed, direction of movement, or acceleration. The method presented here ensures that the temporary event data, not yet encrypted, is initially stored in a non-volatile manner after a vehicle accident. This may ensure that the data is still present, albeit not yet encrypted, after a potential interruption of the vehicle's current supply. Therefore, the method advantageously optimizes the order of steps during data storage to ensure that data is not lost after, for example, a serious accident involving a current supply interruption.
[0007] In the non-volatile storage step, the temporary event data can be stored non-volatilely as non-volatile event data, for example in the form of raw data, thus enabling particularly rapid storage of the raw data.
[0008] According to one embodiment, in the step of non-volatile storage, the transient event data may be stored as non-volatile event data in a non-volatile memory mechanism, which is a permanent memory mechanism in which the non-volatile event data may be reliably stored for a relatively long period of time, e.g., permanently.
[0009] Additionally or alternatively, in the storing step, the encrypted event data can be stored as encrypted permanent event data in an additional non-volatile memory mechanism. The additional non-volatile memory mechanism is a permanent memory mechanism in which the permanent encrypted event data can be reliably stored for a relatively long period of time, for example, permanently. The non-volatile memory mechanism can correspond to the additional non-volatile memory mechanism or can be different from the additional non-volatile memory mechanism. Thus, for example, the event data can exist both encrypted and unencrypted.
[0010] In the storing step, for example, the non-volatile event data can be replaced with permanent encrypted event data. In this case, the non-volatile event data can be, for example, overwritten, so that only the permanent encrypted event data is present. This can provide free memory space and at least prevent the further presence of unencrypted event data if the current supply is still intact.
[0011] Additionally or alternatively, the method may include an erasure step in which the non-volatile event data and, additionally or instead, the encrypted permanent event data are erased. The erasure step may be performed, for example, if the non-volatile event data and the permanent encrypted event data are stored in different non-volatile memory mechanisms. This step may also be performed if the non-volatile event data has not been completely overwritten. This may also prevent the subsequent presence of unencrypted event data and, additionally or instead, encrypted event data if memory space is available and the current supply is still intact.
[0012] Furthermore, according to one embodiment of the method, it is advantageous if at least one step of the method is performed using energy from a redundant current supply of the vehicle, which can be useful, for example, if the general current supply of the vehicle is interrupted due to an accident.
[0013] The method may also include a step of recognizing an accident and providing an accident signal. In this regard, an accident signal may be provided when an accident is recognized. In the recognition step, for example, an accident signal may be provided if the accident has a predetermined severity. The predetermined severity may be a serious accident that may cause the current supply to be interrupted. In contrast, for minor accidents with a low severity, in which an interruption of the vehicle's current supply cannot be expected, data storage before encryption is not required. Known methods may be used to recognize an accident and, if necessary, determine its severity. To recognize the predetermined severity, for example, an acceleration signal of a vehicle control device may be read and compared with a threshold value. If the acceleration signal indicates an acceleration below the threshold value, which indicates a minor accident, the non-volatile storage step may not be performed and, for example, the temporary event data may be directly encrypted.
[0014] According to one embodiment, if the incident signal indicates an incident having a severity greater than the predetermined severity, i.e., the incident is classified as serious, the non-volatile storage step can be performed and the encryption step can encrypt the non-volatile event data. That is, the steps of the method can be performed as described above. On the other hand, if the further incident signal indicates an incident having a severity less than the predetermined severity, i.e., the incident is classified as a minor incident, the non-volatile storage step can be skipped and the encryption step can encrypt the temporary event data to obtain encrypted event data. This can accelerate the execution of the method in the case of minor incidents.
[0015] The method may further comprise reading the transient event data via an interface to a ring buffer or sensor mechanism of the vehicle. The reading step may involve reading the transient event data from another volatile memory mechanism.
[0016] The method may be implemented, for example, in software or hardware, or in a mixed form consisting of software and hardware, for example in a control device. The presently presented approach further provides an apparatus configured to implement, control, or execute the steps of one variation of the presently presented method in a corresponding mechanism. This implementation variation of the present approach in the form of an apparatus can also quickly and efficiently solve the problem underlying the present approach.
[0017] For this purpose, the device may have at least one computing unit for processing signals or data, at least one memory unit for storing signals or data, at least one interface to a sensor or actuator for reading sensor signals from the sensor or outputting data or control signals to the actuator, and / or at least one communication interface for reading or outputting data, which is integrated with a communication protocol. The computing unit may be, for example, a signal processor, a microcontroller, or the like, and the memory unit may be a flash memory, an EEPROM, or a magnetic memory unit. The communication interface may be configured for wireless and / or wired reading or output of data, and in this regard, a communication interface capable of reading or outputting wired data may read or output such data, for example electrically or optically, from or to a corresponding data transmission line.
[0018] In this application, a device may be an electrical device that processes sensor signals and outputs control and / or data signals accordingly. The device may have an interface that can be implemented by hardware and / or software. In the case of a hardware implementation, the interface may be part of a so-called system ASIC, which contains a wide variety of functions of the device. However, it is also possible for the interface to be a dedicated integrated circuit or to consist at least in part of individual components. In the case of a software implementation, the interface may be a software module that resides, for example, together with other software modules on a microcontroller.
[0019] In one advantageous embodiment, the device controls a method for data storage for a vehicle, for example, by accessing a sensor signal, such as an accident signal indicative of a vehicle accident, via an actuator, such as a reading mechanism for reading the accident signal, a non-volatile memory mechanism for non-volatilely storing temporary event data of the vehicle in response to the accident signal and / or for storing encrypted permanent event data of the vehicle, and an encryption mechanism for encrypting the temporary event data to generate the encrypted permanent event data.
[0020] A computer program product or computer program which can be stored on a machine-readable medium or memory medium, such as a semiconductor memory, hard disk memory or optical memory, and which has a program code used to implement, execute and / or control the steps of the method according to one of the above-described embodiments is also advantageous, particularly when this program product or program is run on a computer or device.
[0021] Exemplary embodiments of the approach presented herein are illustrated in the drawings and explained in more detail in the following description. [Brief explanation of the drawings]
[0022] [Figure 1] 1 is a schematic diagram of an apparatus for data storage for a vehicle according to one exemplary embodiment. [Figure 2] FIG. 1 is a flow diagram of a method for data storage for a vehicle according to one exemplary embodiment. [Figure 3] FIG. 1 is a block diagram of a method according to one exemplary embodiment. [Figure 4] 2 is a schematic illustration of a time sequence t of a method according to one exemplary embodiment; [Figure 5] 2 is a schematic illustration of a time sequence t of a method according to one exemplary embodiment; [Figure 6] 2 is a schematic illustration of a time sequence t of a method according to one exemplary embodiment; DETAILED DESCRIPTION OF THE INVENTION
[0023] In the following description of preferred exemplary embodiments of this approach, the same or similar reference numerals are used for similarly acting elements shown in different figures, without repeating the description of these elements.
[0024] FIG. 1 shows a schematic diagram of an apparatus 100 for data storage for a vehicle 105 according to one exemplary embodiment. Merely by way of example, device 100, according to this exemplary embodiment, is housed on or within vehicle 105, such as implemented in a control device of vehicle 105. Vehicle 105, according to this exemplary embodiment, is a highly or fully self-driving capable vehicle 105, also referred to as an autonomous vehicle 105.
[0025] The device 100 is configured to non-volatilely store temporary event data 110 of the vehicle 105 as non-volatile event data 115 in response to an incident signal 107 indicative of an accident of the vehicle 105. The device 100 is further configured to encrypt the non-volatile event data 115 to obtain encrypted event data 120. The device 100 is further configured to store the encrypted event data 120 as encrypted permanent event data 125.
[0026] The event data 110 may be any data of a driving operation, such as an autonomous driving, of the vehicle 105. The temporary event data 110 may be, for example, sensed data or temporarily stored data of, for example, a driving assistance system of the vehicle 105.
[0027] For data storage, the device 100, according to this exemplary embodiment, includes at least one non-volatile memory mechanism 127 for non-volatile storage, an encryption mechanism 130 for encryption, and / or a reading mechanism 135 for reading the accident signal 107 and / or the temporary event data 110. The non-volatile memory mechanism 127 is a permanent memory mechanism in which the non-volatile event data 115 is reliably stored for a relatively long period of time, e.g., permanently. The reading mechanism 135, according to this exemplary embodiment, is configured to read the temporary event data 110 via an interface to a volatile memory mechanism, such as a ring buffer 137 or a sensor mechanism 139 of the vehicle 105.
[0028] According to one exemplary embodiment, device 100, in response to incident signal 107, non-volatilely stores temporary event data 110 in non-volatile memory mechanism 127 as non-volatile event data 115. In this regard, device 100 is configured to non-volatilely store temporary event data 110 in raw data form as non-volatile event data 115. According to this exemplary embodiment, device 100 is further configured to, upon storing encrypted permanent event data 125, replace non-volatile event data 115 with permanent encrypted event data 125. In this case, non-volatile event data 115 is, for example, overwritten, such that only encrypted permanent event data 125 resides in non-volatile memory mechanism 127. According to an alternative exemplary embodiment, device 100 stores encrypted event data 120 as encrypted permanent event data 125 in a further non-volatile memory mechanism different from non-volatile memory mechanism 127. The additional non-volatile memory mechanism is similarly a permanent memory mechanism in which the encrypted permanent event data 125 is reliably stored, e.g., permanently, for a relatively long period of time. According to one exemplary embodiment, the device 100 also includes this additional non-volatile memory mechanism. In such an exemplary embodiment, the device 100 is configured to erase the non-volatile event data 110 when the encrypted permanent event data 125 is stored in the additional non-volatile memory mechanism. Additionally, according to one exemplary embodiment, the device 100 is also configured to erase the encrypted permanent event data 125, e.g., after a predetermined period of time.
[0029] According to this exemplary embodiment, the device 100 is further configured to recognize an accident and to provide an accident signal 107 as soon as the accident is recognized. For this purpose, the device 100 comprises a recognition mechanism 140 according to this exemplary embodiment. According to this exemplary embodiment, the recognition mechanism 140 provides the accident signal 107 if the accident has a predetermined severity. The predetermined severity can be a serious accident that can shut down the current supply of the vehicle 105. In contrast, in a minor accident of low severity, in which an interruption of the current supply of the vehicle 105 cannot be expected, the recognition mechanism 140 according to this exemplary embodiment does not provide the accident signal 107 but provides a further accident signal 142. To recognize the predetermined severity, the recognition mechanism 140 is configured, for example, to read an acceleration signal 145 of an acceleration sensor for the restraint system 150 of the vehicle 105, which reaches or exceeds a threshold value. If the acceleration signal 145 indicates an acceleration below a threshold value that causes a minor accident to be recognized, the recognition mechanism 140 according to this exemplary embodiment provides the further accident signal 142. To detect the severity, the recognition mechanism 140, according to this exemplary embodiment, has an evaluation mechanism configured to evaluate the acceleration signal 145 and / or compare it with a stored threshold. The device 100, according to this exemplary embodiment, is also configured to read a further incident signal 142 and, in response to this further incident signal 142, to encrypt the temporary event data 110 directly in the encryption mechanism 130 without non-volatile storage and / or subsequently store it non-volatilely as encrypted permanent event data 125.
[0030] According to one alternative exemplary embodiment, device 100 is configured to initially non-volatilely store temporary event data 110 upon recognizing an accident, regardless of the severity of the accident.
[0031] The apparatus 100 is further configured, according to one exemplary embodiment, to perform at least one of the aforementioned steps using energy from redundant current supplies of the vehicle 105 .
[0032] The presently presented apparatus 100 enables a method for encryption and storage of event datasets for an autonomous vehicle 105. Event datasets for highly or fully autonomously capable vehicles 105 can be very large. To be able to handle such large datasets during a serious accident, the presently presented apparatus 100 advantageously optimizes the order of encryption and storage of data 110, 115, 120, 125.
[0033] According to one exemplary embodiment, when an airbag of a restraint system 150 of a vehicle 105 is activated, an accident signal 107 is provided by a recognition mechanism 140, which causes temporary event data 110 to be non-volatilely stored in a non-volatile memory mechanism 127, which may also be called an "Event Data Recorder" or "EDR" for short. This functionality is necessary for an autonomous vehicle 105, on the one hand, to comply with upcoming regulations and on the other hand, in connection with product liability. The required data set for an autonomous vehicle 105 may be significantly larger than the data set of an event data store for an airbag, which poses a significant challenge to the processing capabilities of the responsible control device, which may be a domain control device for a driver assistance system.
[0034] The device 100 or control device for storing data for autonomous driving constantly stores required data in a temporary / volatile memory mechanism of the vehicle 105, here in a ring buffer 137. As soon as a critical situation, such as an accident, is recognized, the device 100 stores the data from the volatile memory mechanism to a non-volatile memory mechanism 127, which may also be called a "permanent memory." This occurs relatively quickly in the device 100, since there is no guarantee of a current supply after a serious crash. In addition to large amounts of data, this data set may also contain sensitive data that requires encryption, such as data about the driver's personal sphere. Encrypting and storing large amounts of data poses a significant challenge for the device 100 responsible for it.
[0035] The approach presented here allows for optimizing the order of encryption and storage of data sets used, for example, for autonomous driving. Instead of first encrypting the data, the device 100 first stores the raw data, and after storage, encrypts the data and stores it again in the non-volatile memory 127. This way, there is a better chance of storing critical data during an accident, even if the data is possibly not encrypted. According to this exemplary embodiment, if the current supply is still alive after an accident, the stored raw data is eventually replaced by encrypted data.
[0036] The method presented here, controlled by the device 100, allows switching between a typical data storage scheme in which data is first encrypted and then only permanently stored, and the presented non-volatile storage before encryption depending on the severity of the accident, which is captured, for example, by an acceleration sensor of the restraint system 150. According to one exemplary embodiment, the device 100 has a redundant current supply mechanism or self-sufficiency mechanism configured to ensure a redundant current supply after or when the current supply of the vehicle 105 is stopped.
[0037] According to one exemplary embodiment, the non-volatile memory mechanism 127 for autonomous driving data is implemented or can be implemented in a control device, such as a domain control device for a driver assistance system, abbreviated as "DASy," an electronic control unit for a vehicle stability control system, abbreviated as "VDC" (Vehicle Dynamics Control), and / or a so-called "capture / compare unit," abbreviated as "CCU." One of these control devices can typically be used as a so-called "host control device," or "host ECU," for such functions.
[0038] 2 illustrates a flow diagram of a method 200 for data storage for a vehicle according to one exemplary embodiment, which may be a method 200 that can be performed or controlled by the device described in FIG.
[0039] Method 200 includes a non-volatile storage step 205, an encryption step 210, and a storage step 215. In the non-volatile storage step 205, temporary event data of the vehicle is non-volatilely stored as non-volatile event data in response to an incident signal. In this regard, the incident signal notifies of a recognized incident of the vehicle. In the encryption step 210, the non-volatile event data is encrypted to obtain encrypted event data. In the storage step 215, the encrypted event data is stored as encrypted permanent event data.
[0040] In steps 205, 210, 215, the corresponding data may be processed block by block or in a continuous data stream. According to one exemplary embodiment, steps 205, 210, and 215 are performed regardless of the severity of the accident. According to an alternative exemplary embodiment, step 205 of non-volatile storage is performed only if the accident signal indicates a serious accident. On the other hand, if the accident signal indicates a minor accident, step 205 of non-volatile storage is skipped for this, and the transient event data is directly encrypted in step 210.
[0041] The method 200 optionally further comprises a step of recognizing 220, a step of reading 225, and / or a step of erasing 230, according to one exemplary embodiment. In a recognition step 220, an accident is recognized and an accident signal is provided. Optionally, in step 220, the severity of the accident is recognized and notified by the accident signal. In a reading step 225, the temporary event data is read via an interface to a ring buffer or sensor mechanism in the vehicle. In this regard, the temporary event data may be read via a data line in one or more forms of an electrical signal. In an erasure step 230, the non-volatile event data and / or the encrypted permanent event data is erased. According to this exemplary embodiment, the erasure step 230 is performed after the encryption step 210 and / or the storage step 215.
[0042] The process steps presented here can be performed repeatedly, so that continually occurring temporal event data can be processed continuously. 3 shows a block diagram 300 of a method 200 according to one example embodiment, which may be one example embodiment of the method 200 described in FIG.
[0043] The first block 305 of the block diagram 300 indicates the start of the method according to this exemplary embodiment. After the start, according to this exemplary embodiment, a step 310 of temporary storage of data in a volatile memory mechanism, for example, a ring buffer, is triggered. In the subsequent query block 315, according to this exemplary embodiment, it is queried whether a vehicle accident has occurred. If no accident has occurred, according to this exemplary embodiment, the method is terminated in the final block 320. On the other hand, if a vehicle accident has occurred, according to this exemplary embodiment, the non-volatile storage step 205, the encryption step 210, the storage step 215, and / or the erasure step 230 are sequentially performed. In the erasure step 230, according to this exemplary embodiment, the non-volatile event data and further encrypted permanent event data are erased. After the erasure step 230, according to this exemplary embodiment, the method is terminated in the final block 320.
[0044] 4 shows a schematic diagram of a time sequence t of a method 200 according to an exemplary embodiment, which may be the method described in either FIG. 2 or FIG. 3. The progression of the method is exemplarily illustrated in the event of a vehicle accident in which the current supply is not interrupted. A line marks the accident time 400 of the accident.
[0045] According to one exemplary embodiment, temporary storage step 310 is performed until an incident is notified, after which non-volatile storage step 205, encryption step 210, storage step 215, and erasure step 230 are performed as described above.
[0046] In the exemplary embodiment shown here, the approach presented here has no essential advantages over the simplified flow described below with reference to FIG. 6 because the current supply is still active after the accident. In this case, the starting point is that the stored data is encrypted and protected from unauthorized persons during minor accidents or when the vehicle is only slightly damaged, such as during an accident with a pedestrian and subsequent vehicle investigation, or when the vehicle is driven again after the accident. According to one exemplary embodiment, the flow described with reference to FIG. 4 is still executed in the event of a minor accident, provided that the current supply required for the execution of the method is not interrupted. In an alternative exemplary embodiment, the flow described with reference to FIG. 4 is executed only in the event of a major accident, provided that the current supply required for the execution of the method is interrupted. In the event of a minor accident, the method described with reference to FIG. 6 is executed instead.
[0047] 5 shows a schematic diagram of a time sequence t of the method 200 according to one exemplary embodiment. This may be the method described in either FIG. 2 or FIG. 3. The progression of the method in the event of a vehicle accident with interruption of the current supply is exemplarily illustrated. One line marks the accident time 400 of the accident, and another line marks the interruption time 405 of the interruption of the current supply. According to this exemplary embodiment, the interruption time 405 is arranged after the non-volatile storage step 205 and / or during the encryption step 210.
[0048] According to this exemplary embodiment, the presented approach helps to keep unencrypted data in permanent memory when the current supply is interrupted after an accident, assuming that the vehicle will be investigated by law enforcement soon after a serious accident and that the probability that the vehicle will be driven again or that many components will be replaced is relatively low.
[0049] 6 shows a schematic diagram of a time sequence t of a method 200 according to one exemplary embodiment, which may be the method described in either FIG. 2 or FIG. 3. The progression of the method is exemplarily illustrated in the event of a minor vehicle accident, provided that the current supply is not interrupted. A line marks the accident time 400 of the accident.
[0050] According to one exemplary embodiment, a step of temporary storage 310 is performed until an accident is notified, corresponding to the flow described with reference to Figure 4. Thereafter, and in contrast to the flow described with reference to Figure 4, a step of encryption 210 is performed directly, in which the temporary event data is directly encrypted to obtain encrypted event data, which is subsequently permanently stored in step 215 as described with reference to Figure 4. [Explanation of symbols]
[0051] 105 vehicles 107 Accident Signal 110 Temporary Event Data 115 Non-volatile event data 120 Encrypted Event Data 125 Encrypted Permanent Event Data 127 Non-volatile memory mechanism 130 Encryption mechanism 135 Reading mechanism 137 Ring Buffer 139 Sensor Mechanism 140 Recognition mechanism 142 Further Accident Signals 200 ways 205 Steps in Non-Volatile Memory 210 Encryption Steps 215 Steps of Memory 220 Steps of Recognition 225 Loading Steps 230 Elimination Steps 310 Temporary Memory Steps
Claims
1. A method (200) for data storage for a vehicle (105), said method (200) comprising the following steps: storing (205) temporary event data (110) of the vehicle (105) as non-volatile event data (115) in non-volatile memory in response to an accident signal (107) indicative of an accident involving the vehicle (105); encrypting (210) the non-volatile event data (115) to obtain encrypted event data (120); storing (215) the encrypted event data (120) as encrypted permanent event data (125); The method (200), wherein the storing step (215) replaces the non-volatile event data (115) with the encrypted permanent event data (125). Claim 2: A method (200) for data storage for a vehicle (105), said method (200) comprising the steps of: storing (205) temporary event data (110) of the vehicle (105) as non-volatile event data (115) in non-volatile memory in response to an accident signal (107) indicative of an accident involving the vehicle (105); encrypting (210) the non-volatile event data (115) to obtain encrypted event data (120); storing (215) the encrypted event data (120) as encrypted permanent event data (125); The method further comprises: a step (220) of recognizing the accident and providing the accident signal (107) in response to the recognition of the accident; In the providing step (220), the incident signal (107) is provided if the incident has a predetermined severity; If the incident signal (107) indicates the incident having a severity greater than the predetermined severity, the storing in non-volatile memory step (205) is performed, and in the encrypting step (210) the non-volatile event data is encrypted, and if a further incident signal (142) indicates the incident having a severity less than the predetermined severity, the storing in non-volatile memory step (205) is skipped, and in the encrypting step (210) the temporary event data (110) is encrypted to obtain the encrypted event data (120).
3. 3. The method (200) of claim 1 or 2, wherein in the step (205) of storing in non-volatile memory, the transient event data (110) is stored in a raw data form in non-volatile memory as the non-volatile event data (115).
4. 4. The method (200) of claim 1, wherein in the step (205) of storing in non-volatile memory, the temporary event data (110) is stored as the non-volatile event data (115) in a non-volatile memory mechanism (127).
5. 5. The method (200) of claim 1, wherein in the storing step (215), the encrypted event data (120) is stored as the encrypted permanent event data (125) in a further non-volatile memory mechanism.
6. The method (200) of any one of claims 1 to 5, comprising an erasure step (230) in which the non-volatile event data (115) and / or encrypted permanent event data (125) are erased.
7. 7. The method (200) of any one of claims 1 to 6, wherein at least one step (205, 210, 215, 220, 225, 230; 310) of the method (200) is performed using energy from redundant current supplies of the vehicle (105).
8. 8. The method (200) of any one of claims 1 to 7, comprising the step of reading (225) the transient event data (110) via an interface to a ring buffer (137) or a sensor mechanism (139) of the vehicle (105).
9. An apparatus (100) adapted to perform and / or control the steps (205, 210, 215, 220, 225, 230; 310) of the method (200) according to any one of claims 1 to 8 in a unit (127, 130, 135, 140).
10. A computer program adapted to perform and / or control the steps (205, 210, 215, 220, 225, 230; 310) of the method (200) according to any one of claims 1 to 8.
11. A machine-readable memory medium having stored thereon the computer program of claim 10.
Citation Information
Patent Citations
Data processor
JP2012044355A
Vehicle information acquiring system
JP2013041355A
Operation information recording apparatus
JP2019169066A