DE102017216936B4 - Safety system for vehicle communication - Google Patents

Abstract

System (100) for secure vehicle communication, comprising:
at least one backend server (120);
at least one vehicle (110) comprising:
- a communication unit (112) configured to transmit data to the backend server;
- a computing unit (113) which is arranged
- to determine a destination of the vehicle (110); and
- to determine the distance of the vehicle (110) to the destination; and
- a control unit (119) configured to control the communication unit (112) when the vehicle (110) is below a predetermined distance from the destination such that the communication unit (112) restricts or stops the data transmission to the backend server (120); wherein a greater distance is predetermined for a long journey than for a short journey.

Description

The present invention relates to a security system and method for secure vehicle communication.

With the increasing networking of vehicles, there is an ever-increasing need for data collection, processing, and communication or exchange of vehicle-related data (vehicle communication). Vehicle communication can include servers that, in turn, act as providers of telematics services (telematics servers) for a multitude of vehicles. Vehicle communication is increasing in particular due to the increasing support provided by driver assistance systems such as lane departure warning systems, distance assistants, etc., but also due to the increasing provision of at least partially autonomous driving modes that require little or no driver assistance. However, vehicle communication also presents challenges with regard to information security, particularly with regard to the data protection of personal and/or personally identifiable data, i.e., data that allows for direct and/or indirect identification of a person. Even if a personal reference is not always obvious in vehicle communication, specific information about the vehicle driver can be obtained for a variety of vehicle communication scenarios. For example, the collection of position data can provide insights into the location and whereabouts of the vehicle driver and/or create movement profiles. This may be undesirable and/or prohibited by law.

Printed matter US 2006 / 0 178 817 A1 discloses a navigation device that performs route guidance based on a route searched by the server.

Printed matter US 2010 / 0 063 729 A1 discloses a vehicle starting from the front of a house and moving toward a destination. An area where the house is centered is an area where the position of the house is expected to be easily determined, and a road to be searched is a road necessary for searching a travel route of the vehicle. An in-vehicle device does not transmit position information or the like acquired in the area in response to a request for position information from a roadside device. The in-vehicle device transmits the position information or the like about the vehicle acquired after leaving the area to the roadside device. The position information about the vehicle is transmitted to the roadside device while protecting personal information.

Printed matter US 2013 / 0 261 954 A1 discloses a mapping or navigation device comprising or connected to a position determining device. This serves to determine one or more locations of the mapping or navigation device. The one or more determined locations form at least one route, wherein the mapping or navigation device is configured to determine at least a portion of the at least one route, wherein the at least one portion is determined according to at least one property associated with at least one location in the portion. The mapping or navigation device is further configured to form at least one anonymized route from the at least one determined route, wherein the at least one anonymized route does not include the at least one portion of the at least one route.

Printed matter DE 10 2011 106 295 A1 discloses a method for the bidirectional transmission of data between motor vehicles and a service provider, comprising providing information data receivable by the motor vehicles and originating from the service provider via a data infrastructure cloud and providing traffic data describing a traffic condition and originating from the motor vehicles. To enable secure bidirectional transmission of the data, the traffic data is provided exclusively to the service provider via a backend server device operated by a security operator.

The object of the invention is to avoid the above-mentioned disadvantages and to provide a solution that enables secure vehicle communication, while at the same time allowing the transmission of own vehicle data to support telematics services.

This object is achieved according to the invention by the features of the independent claims. Preferred embodiments are the subject of the dependent claims.

• zumindest einen Backend-Server;
• zumindest ein Fahrzeug umfassend:
  • - eine Kommunikationseinheit die eingerichtet ist, Daten an den Backend-Server zu übertragen;
  • - eine Recheneinheit, die eingerichtet ist,
    • - ein Fahrziel des Fahrzeugs zu ermitteln; und
    • - die Entfernung des Fahrzeugs zum Fahrziel zu ermitteln; und
  • - eine Steuereinheit, die eingerichtet ist, bei Unterschreitung einer vorbestimmten Entfernung des Fahrzeugs zum Fahrziel die Kommunikationseinheit derart zu steuern, dass diese die Datenübertragung an den Backend-Server einschränkt oder einstellt; wobei für eine lange Fahrstrecke eine höhere Entfernung vorbestimmt ist als für eine kurze Fahrstrecke.

The above-mentioned object is achieved by a system for secure vehicle communication, comprising:

• at least one backend server;
• comprising at least one vehicle:
  • - a communication unit configured to transmit data to the backend server;
  • - a computing unit that is set up,
    • - to determine a destination for the vehicle; and
    • - to determine the distance of the vehicle to the destination; and
  • - a control unit configured to control the communication unit, if the vehicle falls below a predetermined distance from the destination, in such a way that the communication unit restricts or stops the data transmission to the backend server; a greater distance is predetermined for a long journey than for a short journey.

The backend server is a central data pool and can include a computing device and a storage device, e.g., a database, in which data can be stored, managed, and processed centrally or under central control. It may be necessary for each vehicle to be registered once by a user on the backend server. The backend server can be configured to receive and evaluate data records from a large number of vehicles and, using the evaluated data, provide one or more telematics services for a large number of vehicles. For example, the telematics services can include real-time traffic data, real-time weather data, real-time hazard data, and/or real-time traffic change data, etc.

The term vehicle includes passenger cars (cars), trucks (lorries), buses, mobile homes, motorcycles, etc.

The vehicle comprises a communications unit. The communications unit is capable of establishing a communications connection with other communication participants, e.g., other vehicles, the backend server, etc., in order to transmit data. The communications unit can comprise a subscriber identity module or a SIM card, which serves to establish a communications connection via a mobile radio system. The subscriber identity module uniquely identifies the communications unit in the mobile radio network. The communications connection can be a data connection (e.g., packet switching) and/or a wired communications connection (e.g., circuit switching). A wireless communications connection via other current and future technologies, e.g., local area networks (LANs), such as wireless LANs, etc., can also be established with other communications participants via the communications unit. Any communication or data transmission between the vehicle and other communications participants can take place via the communications unit.

The communication unit is configured to transmit data to the backend server. As already explained above, the backend server can be configured to provide telematics services comprising real-time data for a large number of vehicles. If a (previously registered) vehicle uses this telematics service, the vehicle can transmit at least current position data each time it starts a journey. The backend server can transmit current traffic data for a predetermined geographical area—e.g., a 25km radius. This data can be displayed in a navigation unit of the vehicle. In order for the backend server to provide telematics services, it relies on receiving real-time data from as many vehicles as possible. The real-time data comprises a data set that includes at least current position data and a timestamp. The current position data can include data on a geographical position that can be acquired using a navigation satellite system. The navigation satellite system can be any current or future global navigation satellite system (GNSS) for positioning and navigation by receiving signals from navigation satellites and/or pseudo-navigation satellites. For example, this could be the Global Positioning System (GPS), GLObal NAvigation Satellite System (GLONASS), Galileo positioning system, and/or BeiDou Navigation Satellite System. In the GPS example, the vehicle can include a GPS module configured to determine the vehicle's current GPS position data. Depending on the telematics service, the data set can include additional data required to provide the telematics service, e.g., the vehicle's current speed, sensor data from various on-board sensors (e.g., camera, radar, lidar sensor), etc. However, the backend server is thus able to create a movement profile from the vehicle's data sets.

Therefore, each vehicle includes at least one computing unit. The computing unit is configured to determine a destination of the vehicle. Furthermore, the computing unit is configured to determine a distance of the vehicle from the destination.

In a next step, the computing unit can determine whether the vehicle is below a predefined or predetermined distance from the destination. For example, the predetermined distance to the destination can be 1 kilometer (km), This distance can be 2km, 3km, 3.5km, or another distance to the destination suitable for preventing the creation of a travel profile from the position data. The same distance can be predetermined for all routes. In another example, a different, e.g., greater, distance can be predetermined for long routes than for short routes. The computing unit can, for example, periodically determine whether the predetermined distance to the destination has been exceeded.

The vehicle also includes at least one control unit. If the computing unit determines that the vehicle is below the predetermined distance from the destination, the control unit is configured to control the communication unit in such a way that it restricts or stops data transmission to the backend server. For example, the communication unit can only transmit data records to the backend server that no longer contain position data. In another example, data transmission can be stopped completely.

Advantageously, data records for providing one or more telematics services can thus be transmitted from the vehicle to the backend server, while simultaneously preventing the backend server from using the vehicle's position data to derive information about the driver's location or whereabouts or create movement profiles. This ensures information security, especially data protection.

Preferably, the vehicle comprises a navigation unit, wherein the destination is determined by the computing unit by determining a destination selected by the user of the vehicle via the navigation unit.

The driver can enter a destination using a suitable input/output unit (e.g., rotary push-button, touchscreen, voice command unit, etc.) of the vehicle's infotainment system, which includes a navigation unit. The computing unit can read the distance to the destination from the navigation unit based on the calculated route.

Preferably, the vehicle may comprise a self-learning navigation unit configured to estimate the destination, wherein the computing unit is configured to determine the destination and the distance to the destination via the self-learning navigation unit, even if a user of the vehicle has not entered a destination himself.

Experience has shown that drivers do not always use the navigation unit or navigation device to reach a destination. This is particularly the case when a driver is traveling to destinations that are well known. Therefore, the vehicle's navigation unit can be a self-learning navigation unit that is configured to estimate the destination. Self-learning navigation devices that estimate an expected destination and an expected route to the expected destination are known. For this purpose, user- or vehicle-specific movement profiles are created that link previously visited destinations with time and/or location information. The expected destination and the route to the expected destination are estimated taking into account the learned movement profile, the current time of day and/or the current day of the week and/or other suitable parameters.

Advantageously, the computing unit can thus determine the destination and the distance to the destination via the self-learning navigation unit, even if the user of the vehicle has not entered a destination himself.

• Ermitteln, durch eine Recheneinheit, eines Fahrziels eines Fahrzeugs, wobei das Fahrzeug eingerichtet ist, Daten an einen Backend-Server zu senden;
• Ermitteln, durch die Recheneinheit, der Entfernung des Fahrzeugs zum Fahrziel; und wenn das Fahrzeug eine vorbestimmte Entfernung zum Fahrziel unterschreitet:
  • Einschränken oder Einstellen, durch eine Steuereinheit der Datenübertragung vom Fahrzeug an den Backend-Server, wobei für eine lange Fahrstrecke eine höhere Entfernung vorbestimmt wird als für eine kurze Fahrstrecke.

According to a second aspect, the object is achieved by a method for secure vehicle communication, comprising:

• Determining, by a computing unit, a travel destination of a vehicle, wherein the vehicle is configured to send data to a backend server;
• Determining, by the computing unit, the distance of the vehicle to the destination; and if the vehicle falls below a predetermined distance to the destination:
  • Restricting or setting, by a control unit, the data transmission from the vehicle to the backend server, whereby a higher distance is predetermined for a long journey than for a short journey.

Preferably, the computing unit determines the destination by determining a destination selected by the user of the vehicle via a navigation unit.

Preferably, the destination is estimated by a self-learning navigation unit on the vehicle and the destination and the distance to the destination are transmitted via the self-learning navigation unit by the computing unit, even if a user of the vehicle has not entered a destination himself.

• 1 zeigt ein System zur sicheren Fahrzeugkommunikation;
• 2 zeigt ein Flussdiagramm, das ein Verfahren zur sicheren Fahrzeugkommunikation veranschaulicht.

These and other objects, features and advantages of the present invention will become apparent from a study of the following detailed description preferred embodiments and the accompanying figures. It will be appreciated that, although embodiments are described separately, individual features thereof may be combined to form additional embodiments.

• 1 shows a system for secure vehicle communication;
• 2 shows a flowchart illustrating a method for secure vehicle communication.

1 shows a schematic system 100 for secure vehicle communication. The system 100 is configured and/or designed to implement a method 200 for secure vehicle communication as described with reference to 2 described.

The system 100 includes a backend server 120. The backend server 120 is a central data pool and may include a computing device (not shown) and a storage device 125, e.g., a database 125, in which data can be stored, managed, and processed centrally or under central control. It may be necessary for each vehicle 110 to first be registered once by a user on the backend server 120. The backend server 110 may be configured to receive and evaluate data records from a plurality of vehicles, and to provide one or more telematics services for a plurality of vehicles using the evaluated data. For example, the provision of the telematics services may include the provision of real-time traffic data, real-time weather data, real-time hazard data, real-time traffic change data, etc.

The vehicle 110 includes a communication unit 112. The communication unit is capable of establishing a communication connection with other communication participants, e.g., other vehicles 110, a backend server 120, etc., in order to transmit data. Any communication or data transmission between the vehicle 110 and other communication participants can take place via the communication unit 112.

The communication unit 112 is configured to transmit data to the backend server 120. As already explained above, the backend server 120 can be configured to provide or provide telematics services for a plurality of vehicles 110.

The provision of telematics services can, for example, include the provision of real-time traffic data, real-time hazard data, real-time weather data, real-time traffic change data, etc. For example, the backend server 120 can be configured to provide real-time traffic data as a telematics service. If a (previously registered) vehicle 110 uses this telematics service, the vehicle 110 can transmit at least its current geographical position data each time it starts a journey. The backend server 120 can then transmit current traffic data for a predetermined geographical area - e.g., a radius of 25 km - to the vehicle 110. This data can be visually presented to the vehicle user in a navigation unit 114 of the vehicle. In order for the backend server 120 to be able to provide this telematics service, it relies on real-time data from as many vehicles 110 as possible. The real-time data includes, at predefined time intervals - e.g., every 10 seconds - a data set comprising at least current geographical position data of the vehicle 110 and a timestamp.

Depending on the telematics service, the data set may include additional data required to provide the telematics service, e.g., the current speed of the vehicle 110, sensor data from various vehicle-mounted sensors (e.g., camera 118, radar 116, lidar sensor 117), etc. The sensor data can be processed in a suitable manner by a sensor unit 115. However, this enables the backend server 120 to create a movement profile from the received data sets of a vehicle 110.

Therefore, the vehicle 110 includes at least one computing unit 113. The computing unit 113 is configured to determine a destination of the vehicle 110. Furthermore, the computing unit 113 is configured to determine a distance of the vehicle 110 from the destination.

The vehicle 110 may include a navigation unit 114. The computing unit 113 may determine the destination by determining a destination selected by the user of the vehicle 110 via the navigation unit 114. For example, the driver of the vehicle 110 may enter a destination via a suitable input/output unit (not shown, e.g., rotary push-button, touchscreen, voice input unit, etc.) of the infotainment system of the vehicle 110, which includes the navigation unit 114. The computing unit 113 may read the entered destination as well as the distance to the destination—e.g., according to the calculated route—from the navigation unit 114.

In addition or alternatively, the navigation unit 114 may be a self-learning navigation unit 114 that is configured to destination. Drivers do not always use the navigation unit 114 or the vehicle-mounted navigation device to reach a destination. This is particularly the case when drivers travel to destinations that are well known to them. Therefore, the navigation unit 114 of the vehicle 110 can be a self-learning navigation unit 114 that is configured to estimate the destination. Self-learning navigation units or navigation devices that estimate an expected destination and an expected route to the expected destination are known. For this purpose, self-learning navigation units create user- or vehicle-specific movement profiles that link previously visited destinations with time and/or location information. Taking into account the learned movement profile, a current time of day and/or a current day of the week and/or other relevant parameters, the expected destination and the route to the expected destination are estimated.

Advantageously, the computing unit 113 can thus determine the destination by retrieving it from the self-learning navigation unit 114, even if the vehicle user has not entered a destination themselves. The distance to the destination can also be read or retrieved from the self-learning navigation unit 114.

In a next step, the computing unit 113 can determine whether the vehicle 110 is below a predeterminable or predetermined distance from the destination. For example, the predetermined distance from the destination can be 1 kilometer (km), 2 km, 3 km, 3.5 km, or another distance from the destination that is suitable for preventing the creation of a driving profile from the position data. The same distance can be predetermined for all routes. In another example, a different, e.g., greater, distance can be predetermined for long routes than for short routes. The computing unit 113 can, for example, periodically determine whether the predetermined distance to the destination has been exceeded.

The vehicle 110 also includes at least one control unit 119. If the computing unit 113 determines that the predetermined distance of the vehicle from the destination has been undershot, the control unit 119 is configured to control the communication unit 112 such that it restricts or stops data transmission to the backend server 120, with a greater distance being predetermined for a long journey than for a short journey. For example, the communication unit 112 can only transmit data records to the backend server 120 that no longer include position data. In another example, the data transmission can be stopped completely.

Advantageously, data records for providing one or more telematics services can thus be transmitted from the vehicle 110 to the backend server 120, while simultaneously preventing the backend server 120 from using the position data of the vehicle 110 to infer information about the location and whereabouts of the driver of the vehicle 110 and/or create movement profiles. This ensures information security, in particular data protection.

2 shows a flowchart illustrating a method 200 for secure vehicle communication - as described above with reference to 1 The process steps can be described as with reference to 1 described can be realized.

The method 200 includes determining 210, by a vehicle-side computing unit, a travel destination of a vehicle.

The determination 210 of the destination by the computing unit can be performed by determining a destination selected by the vehicle user via a navigation unit. Furthermore or alternatively, the determination 210 of the destination by the computing unit 113 can be performed by determining a destination selected by the vehicle user via a navigation unit.

The method also includes determining 222, by the computing unit 113, the distance of the vehicle to the destination. If the vehicle 110 falls below a predeterminable or predetermined distance to the destination, in a next method step 230, a vehicle-side control unit restricts or stops the data transmission from the vehicle 110 to the backend server 120, with a greater distance being predetermined for a long distance than for a short distance.

Claims (6)

System (100) for secure vehicle communication, comprising: at least one backend server (120); at least one vehicle (110) comprising: - a communication unit (112) which is configured to transmit data to the backend server; - a computing unit (113) which is configured to - determine a destination of the vehicle (110); and - determine the distance of the vehicle (110) to the destination; and - a control unit (119) which is configured to interrupt the communication if the distance of the vehicle (110) to the destination falls below a predetermined distance tion unit (112) in such a way that it (112) restricts or stops the data transmission to the backend server (120); wherein a greater distance is predetermined for a long travel distance than for a short travel distance. System (100) according to Claim 1 , wherein the vehicle (110) comprises a navigation unit (114); and wherein the determination of the destination by the computing unit (113) is carried out by determining a destination selected by the user of the vehicle (110) via the navigation unit (114). System according to Claim 1 or 2 , wherein the vehicle (110) comprises a self-learning navigation unit (114) which is configured to estimate the destination, wherein the computing unit (113) is configured to determine the destination and the distance to the destination via the self-learning navigation unit (114), even if a user of the vehicle (110) has not entered a destination himself. A method (200) for secure vehicle communication, comprising: determining (210), by a computing unit (113), a destination of a vehicle (110), wherein the vehicle (110) is configured to transmit data to a backend server (120); determining (220), by the computing unit (113), the distance of the vehicle (110) to the destination; and if the vehicle (110) falls below a predetermined distance to the destination: restricting or stopping (230), by a control unit (119), the data transmission from the vehicle (110) to the backend server (120), wherein a greater distance is predetermined for a long distance than for a short distance. Procedure (200) according to Claim 4 , wherein the determination (210) of the destination by the computing unit (113) is carried out by determining a destination selected by the user of the vehicle (110) via a navigation unit (114). Procedure (200) according to Claim 4 or 5 , wherein an estimation of the destination is carried out by a vehicle-side, self-learning navigation unit (114) and the determination (210, 220) of the destination and the distance to the destination is carried out via the self-learning navigation unit (114) by the computing unit (113), even if a user of the vehicle (110) has not entered a destination himself.