Method and device for managing access to at least one function of a vehicle

Abstract

A method (100) for managing access to at least one function of a vehicle is proposed, which comprises determining (102) a counter value (14) by means of a central evaluation unit (11), providing (103) a function login (13) with regard to a function of the vehicle by means of the central evaluation unit (11), wherein the function login (13) comprises the counter value (14), and checking (104), by means of an evaluation unit (12) of the vehicle, whether the counter value is higher than a previously stored reference value.

Description

[0001] Description

[0002] Method and device for access management to at least one function of a vehicle

[0003] The present invention relates to a method and a device for access management to at least one function of a vehicle according to the independent claims and to a vehicle comprising a corresponding device.

[0004] Devices and methods for access management to vehicle functions are generally known from the prior art. For example, a remote lock / unlock process is used, in which the vehicle confirms a request from a backend and responds with a vehicle challenge. The backend then generates a special function login, incorporating the vehicle challenge and a control unit secret into the calculation. In a further step, the special function login is evaluated using the vehicle, and the special function login and the vehicle challenge are verified. Overall, however, these process steps are very time-consuming, resulting in an execution time of several minutes. Satisfactory solutions for reducing the process steps and thus the resulting time are not known from the prior art.

[0005] US 10,464,529 B1 discloses a method and system for increasing the security of a vehicle. The method includes defining an access area and configuring a locking mechanism based on the access scope.

[0006] US 2017 / 0230831 A1 describes a method for providing a login signal for a mobile logistics destination, while WO 2020 / 101721 A1 relates to a method for detecting unauthorized access to a vehicle compartment.

[0007] The present invention is based on the object of improving a method for access management to at least one function of a vehicle in such a way that the necessary process steps for checking an access request and the associated time are reduced.

[0008] This object is achieved by a method and a device according to the independent claims. The method comprises determining a counter value using a central evaluation unit. Preferably, an access request to at least one function of the vehicle has been received beforehand. The central evaluation unit can preferably be a technical system external to the vehicle or an IT backend.

[0009] Furthermore, the method can include providing a function login relating to a function, preferably the requested function, of the vehicle by means of the central evaluation unit. The function login includes the counter value. It can include the access request. The function login is to be understood as authorization data for accessing the function. For example, the function can be the opening or closing of at least one door or compartment of the vehicle. An example of a function login would be as follows:

[0010] Function login = function call | counter value | cryptographic signature (function call | counter value)

[0011] The counter value can, in particular, be a numerical value. In this case, the counter value is particularly a part of the functional login. An evaluation unit in the vehicle then checks whether the counter value is higher than a previously stored reference value. However, the counter value is preferably not based on any previously transmitted information from the vehicle. Therefore, the counter value is not a vehicle challenge known from the state of the art, which could, for example, be implemented as a random number. The method therefore does not involve retrieving the counter value from the vehicle.

[0012] Preferably, the counter value is based on a time or a value that increases over time. In particular, the counter value can be determined based on a current time, for example, Coordinated Universal Time (UTC). In particular, the counter value represents the current time as a numerical value.

[0013] Furthermore, the function login in the vehicle can be checked for authenticity. Both a symmetric and an asymmetric method can be used to protect against authenticity. Secrets required to check authenticity, which the function login may include, are introduced into the vehicle using suitable methods not described here. The control unit secret can be a symmetric secret or an asymmetric secret. With a symmetric secret, the secret is present in both the central evaluation unit and the vehicle's evaluation unit. The central evaluation unit can generate a symmetric signature, which the vehicle's evaluation unit verifies. In other words, the vehicle uses the same signature method, with verification occurring if it produces the same result.In particular, it is a Cipher-based Message Authentication Code (CMAC) signature or a Hashed Message Authentication Code (HMAC) signature.

[0014] With an asymmetric secret, the central evaluation unit can keep the control unit secret in the context of a private key, whereby the vehicle contains a public key and checks whether the function login was generated with the corresponding private key.

[0015] The method may include allowing and / or denying access to the vehicle's function depending on whether the counter value is higher than the reference value and / or depending on the authenticity check. For example, the method may include allowing access if the counter value is higher than the reference value and the function login is authentic.

[0016] Thus, both checks are preferably successfully completed until access is granted. In such a case, the method involves overwriting the reference value with the counter value, so that the evaluation unit expects a higher counter value upon the next functional login. Upon a new request, the new counter value is compared with a new reference value. Because the counter value is preferably based on a time or a value that increases over time, it is determined whether the request was made later than a previous request.

[0017] Since the counter value is not based on any information originating from the vehicle, a process step is eliminated compared to the state of the art. The central evaluation unit generates a functional login that can only be executed once. After that, the counter value is no longer valid, as it is preferably based on a time or a value that increases over time. In security technology, the achieved security goal is also referred to as "freshness." The counter value, known as the freshness value, has the property of authorizing an authentic functional login once.

[0018] A time-consuming handshake between the vehicle and the central evaluation unit is eliminated, as the functional login can be calculated and provided immediately by the vehicle without any additional information. The time required to verify an access request is thus significantly reduced.

[0019] The method may include denying access to the vehicle's functions if the counter value is less than or equal to the vehicle's reference value. In particular, a check of the counter value against the previously stored reference value can be performed prior to the authenticity check to save time. If the counter value is less than or equal to the reference value, access can be denied immediately, saving the time required for the authenticity check, as such a check is no longer necessary.

[0020] The procedure may also include denying access to the vehicle's functions if the function login is not authentic.

[0021] In a further aspect, the invention relates to a device for access management to at least one function of a vehicle, which device comprises a central evaluation unit, wherein the central evaluation unit is designed to determine a counter value and to provide a function login relating to a function of the vehicle. The function login includes the counter value. The device further comprises an evaluation unit of the vehicle, which is designed to check whether the counter value is higher than a previously stored reference value. The device is designed to carry out a method described above.

[0022] In a further aspect, the invention relates to a vehicle comprising a device as described above.

[0023] They show in a purely schematic representation:

[0024] Figure 1 shows a method for managing access to at least one function of a vehicle; and

[0025] Figure 2 shows a device for managing access to at least one function of a vehicle.

[0026] Figure 1 shows a method 100 for managing access to at least one function of a vehicle. As a first step, an access request to at least one function is received 101. A counter value is determined 102 by a central evaluation unit, and a function login relating to the requested vehicle function is provided 103 by the central evaluation unit.

[0027] Using an evaluation unit in the vehicle, a check is now performed 104 to determine whether the counter value is higher than a previously stored reference value. Access can be denied 109 immediately after this step, specifically if the counter value is less than or equal to the previously stored reference value. Furthermore, a check 105 for the authenticity of the function login can be performed. The response can be to allow 107 or deny 109 access.

[0028] If access is permitted, the reference value is overwritten with the counter value 108 and the functional login is executed. Thus, access is granted or denied 106 depending on whether the counter value is higher than the reference value and / or on the authenticity check.

[0029] Figure 2 shows a device 10 for access management to at least one function of a vehicle, comprising a central evaluation unit 11 and an evaluation unit 12 of the vehicle. An authentic function login 13 is shown as an example, which includes a counter value 14 and a request for function execution 15. The function login 13 can be created directly by the central evaluation unit 11 without having to be based on information that must be previously transmitted by the vehicle.

[0030] List of reference symbols

[0031] Method for managing access to at least one function of a vehicle

[0032] Receiving an access request to the at least one function

[0033] Determining a counter value using a central evaluation unit

[0034] Providing a function login regarding a function of the vehicle using the central evaluation unit

[0035] Check whether the counter value is higher than a previously saved reference value

[0036] Verification of the authenticity of the functional login

[0037] Allowing and / or denying access to the vehicle's function depending on whether the counter value is higher than the reference value and / or depending on the authenticity check

[0038] Allow access to the vehicle's functions

[0039] Overwriting the reference value with the counter value and function execution

[0040] Denying access to the vehicle's functions

[0041] Device for access management to at least one function of a vehicle central evaluation unit

[0042] Evaluation unit of the vehicle authentic function login

[0043] Counter value

[0044] Requirement for functional execution

Claims

Patent claims 1. A method (100) for managing access to at least one function of a vehicle, characterized in that the method (100) comprises the following steps: • Determining (102) a counter value (14) by means of a central evaluation unit (11), • Providing (103) a function login (13) relating to a function of the vehicle by means of the central evaluation unit (11), wherein the function login (13) comprises the counter value (14), • Checking (104) by means of an evaluation unit (12) of the vehicle whether the counter value is higher than a previously stored reference value.

2. Method (100) according to claim 1, characterized in that the counter value (14) is not based on any previously transmitted information of the vehicle.

3. Method (100) according to claim 1 or 2, characterized in that the counter value (14) is based on a time or a value increasing over time.

4. Method (100) according to claim 3, characterized in that the counter value (14) is determined on the basis of a current time.

5. Method (100) according to one of the preceding claims, characterized in that the function login (13) comprises a request for function execution (15), wherein the method (100) comprises a check (105) of an authenticity of the function login.

6. Method (100) according to claim 5, characterized in that the functional login (13) is authenticated via a symmetric signature.

7. Method (100) according to claim 6, characterized in that the functional login (13) is authenticated via an asymmetric signature.

8. Method (100) according to one of the preceding claims, characterized in that the method (100) comprises allowing and / or denying (106) access to the function of the vehicle depending on the check as to whether the counter value (14) is higher than the reference value and / or depending on the check of the authenticity.

9. Method (100) according to one of the preceding claims, characterized in that the method (100) comprises allowing (107) access to the function if the counter value (14) is higher than the reference value and the function login (13) is authentic.

10. The method (100) according to claim 9, characterized in that the method (100) comprises overwriting (108) the reference value with the counter value (14).

11. Method (100) according to one of claims 1 to 9, characterized in that the method (100) comprises denying (109) access to the function of the vehicle if the counter value (14) is not less than or equal to the reference value of the vehicle.

12. Method (100) according to one of claims 5 to 11, characterized in that the method (100) comprises denying (109) access to the function of the vehicle if the function login (13) is not authentic.

13. Device (10) for access management to at least one function of a vehicle, characterized in that the device (10) comprises a central evaluation unit (11), wherein the central evaluation unit (11) is designed to determine (102) a counter value and to provide (103) a function login (13) relating to a function of the vehicle, wherein the function login (13) comprises the counter value (14), wherein the device (10) further comprises an evaluation unit (12) of the vehicle, wherein the evaluation unit (12) of the vehicle is designed to check whether the counter value (14) is higher than a previously stored reference value.

14. Device (10) according to claim 13, characterized in that the device (10) is designed to carry out a method (100) according to one of claims 1 to 12.

15. Vehicle comprising a device (10) according to one of claims 13 or 14.

Images