WO2005016709A1 - Method, computer program, and control device for operating a vehicle in a restricted mode of operation - Google Patents

Abstract

The invention relates to a method, a computer program, and a control device for operating a vehicle in a mode of operation that can by activated by the user thereof and is restricted in relation to a normal mode of operation of the vehicle. Such methods and devices are known in prior art in the form of a cruise control system, for example, in which the maximum speed can be limited, for example, thus allowing the user to define a restricted mode of operation. However, the disadvantage of methods and devices of said type known in prior art consists of the fact that they fail to effectively protect the vehicle from being misused or stolen. In order to overcome this disadvantage, the invention further develops such methods and devices in such a way that the restricted mode of operation thereof can be deactivated only by an authorized person, who does not need to be identical to the user.

Description

DaimlerChrysler AG

Method, computer program and control device for operating a vehicle in a restricted operating mode

The invention relates to a method, computer program and control device for operating a vehicle in an operating mode which can be activated by its user and which is restricted compared to a normal operating mode of the vehicle.

Particularly in situations in which the vehicle has to be handed over to a stranger, for example if the vehicle has to be handed over to a workshop for repair purposes or to the hotel porter for parking, it would be desirable for the vehicle to have a mode of operation that is different from that of a normal operating mode only limited operating mode could be transferred. The restricted operating state should ideally only allow the vehicle to be operated by the stranger to the extent that it is necessary in each individual case. The restricted operating state would then protect the vehicle against misuse and theft by the stranger.

Methods, computer programs and control devices which allow the user of a vehicle to put the vehicle into a restricted operating mode are known from the prior art, for example from DE 199 61 619 AI. It is disclosed there that the use of a vehicle by certain people is limited to certain times can, whereby these times can be set individually as part of a personalization function.

Limiters and cruise control are also known in the prior art. Both devices allow the operating mode of the vehicle to be limited by limiting its top speed. The limited speed is fixed for a limiter.

In contrast, the restricted operating mode, that is to say the predetermined maximum speed, can be changed by the user at any time in the case of a cruise control, in particular by completely accelerating again by accelerating. It is also automatically deactivated when the vehicle's ignition is switched off. Therefore, such known control devices are not suitable in their current training as protection for a vehicle against misuse and theft.

Starting from this prior art, it is therefore the object of the invention to develop a known method, computer program and control device for operating a vehicle in a restricted operating mode such that the restricted operating mode protects the vehicle against theft and / or misuse.

This object is achieved by the method claimed in claim 1. Accordingly, the problem is solved for the above-described method in that the restricted operating mode can only be deactivated again by an authorized person who need not be identical to the user.

"User" in the sense of the invention is any person who has authorized or unauthorized control over the vehicle has and can drive this. Normally, this is the owner or the current driver of the vehicle, but it can also be a stranger to whom the owner has given the vehicle for use, or a stranger who illegally uses the vehicle.

In contrast to the user defined in this way, the term “authorized person” in the sense of the invention only means a significantly more restricted group of people. It includes in particular the owner of the vehicle and persons expressly authorized to deactivate the restricted operating mode. In contrast to the user group, people who have only been given the vehicle for a limited time or for a specific purpose, as well as people who use the vehicle illegally, do not count among the group of authorized persons.

The claimed restriction that the restricted operating mode can only be deactivated again by an authorized person ensures, according to the invention, that the respective user of the vehicle does not have its full range of functions, which is why misuse or theft of the vehicle is not possible at all or would be devoid of meaning.

In a first advantageous exemplary embodiment of the method, the restricted operating mode is automatically restored even after the ignition has been switched off and the vehicle has to be restarted as long as it has not been deactivated again by the authorized person. This is particularly important so that the theft protection implemented by the restricted operating mode is not can be levered out or bypassed by simply switching off the vehicle.

While the activation of the restricted operating mode can advantageously take place without the user having to be checked, an authentication of this authorized person is absolutely necessary in advance of the deactivation of the restricted operating mode by the authorized person. Authentication is the only way to ensure that the person who is currently trying to deactivate the restricted operating mode is actually authorized to do so. The two physically separate processes authentication and deactivation can be implemented in such a way that they are triggered by the user by executing either only one operating step or two separate operating steps individually assigned to the two processes.

The restriction in the operating mode of the vehicle can advantageously be implemented in various ways. It can consist, on the one hand, of restricting the driving operation of the vehicle, on the other hand of restricting the use of the vehicle by the user and / or finally by restricting the access rights of the user of the vehicle to personal data which are accessible via the devices assigned to the vehicle are.

Furthermore, it is advantageous if the scope of the restriction in the restricted operating mode can be redefined at any time, preferably menu-driven or by voice input.

The above object of the invention is further achieved by a computer program with program code for carrying out the method just described, a data carrier with a corresponding computer program and solved by a control device for operating a vehicle in a restricted operating mode. The advantages of these further solutions to the task correspond to the advantages mentioned above with reference to the claimed method.

Further advantageous refinements of the method, the computer program and the control device are the subject of the dependent claims.

drawing

Show:

Figure 1 A control device according to the invention.

2 shows an example of the implementation of the restricted operating mode; and

3 shows a further example for realizing the operating mode restricted according to the invention.

The invention is described in detail below in the form of numerous exemplary embodiments with reference to the figures mentioned.

Figure 1 shows the control device 100 according to the invention. The control device 100 is used to operate a vehicle (not shown) in an operating mode that is restricted compared to a normal operating mode, as is usually available when the vehicle is delivered by the manufacturer. To set and operate this restricted operating mode, the control device 100 comprises a memory device 110, in which the scope of the restricted operating mode is stored / defined. In addition, the tax Device 100 is assigned an input device 120 for activating the restricted operating mode by the user of the vehicle. The input device 120 is preferably designed in the form of a keyboard with or without an additional screen, so that it enables manual, preferably menu-controlled, input. As an alternative or in addition to manual input, voice-controlled input can also be provided.

Whatever the input device 120 is designed, the activation A of the restricted operating mode acts directly on a control device 140. As a result of the activation, the control device 140 is instructed to load a restricted operating mode selected by a respective input from the storage device 110 and by controlling components 150-1 ... -N of the vehicle. The components are explained below in connection with the possible scope of the restricted operating mode.

Advantageously, however, the input device 120 not only serves to activate a predetermined operating mode, but rather also for the individual modification M thereof. For this purpose, it is connected directly to the storage device 110. The modification M enables the restricted operating mode to be individually adapted to a particular situation. It may make sense that in the event that the vehicle has to be left to a workshop for repair purposes, a different restricted operating mode makes sense than if the vehicle was left to the porter of a hotel for parking.

In order that the restricted operating mode in the sense of the invention can be used to protect the vehicle from misuse or theft, an authentication device 130 is provided according to the invention, which is connected between the input device 120 and the control device 140. The authentication device 130 ensures that the restricted operating mode in the vehicle can only be deactivated D by an authorized person. To check the person with regard to their authorization, the input device 120 and the authentication device 130 can each be designed differently. If the input device 120 is designed, for example, to read in biometric features in the form of a fingerprint of a person, then the downstream authentication device 130 should be designed to compare the read fingerprint with the fingerprint of the authorized person with regard to a match. Alternatively or in addition, the input device 120 can be designed to read a personal identification number (PIN); then the authentication device 130 should alternatively or additionally be designed to compare the read PIN with a PIN assigned to the authorized person with regard to a match. In both cases, the authentication device 130 only forwards the command for deactivating D the set operating mode sent by the respective person via the input device 120 to the control device 140 if at least one of the two comparisons results in a match.

As an alternative or in addition to the options mentioned, the authentication device 130 can also be designed to effect the authorization of a person in cooperation with a service center, for example an emergency service, which is usually located remotely. For this purpose, the authentication device 130 has a communication device 132 in order to obtain information about the authorization or non-authorization of a person from the service center, preferably by radio connection. Such a procedure is particularly suitable if a person wishing to deactivate D For example, has forgotten their PIN, but can prove to the service center as authorized.

For the type of restriction in the restricted operating mode, there are basically three options according to the invention, these three options not only being realizable but also in combination with one another.

A first possibility consists in restricting the driving operation of the vehicle by manipulating its vehicle-related data F. Here, for example, a maximum speed which is below the factory-possible speed and / or a maximum distance from the vehicle during activation of the restricted operating mode can be covered. In the event that the vehicle is left to the porter of a hotel for parking, it may be sufficient, for example, to limit the maximum speed of the vehicle to 40 km / h and the maximum travel distance of the vehicle to, for example, 100 m. In this way it can be ensured that the gatekeeper does not misuse or even steal the vehicle for a jaunt through the city. To implement this restriction of driving, it is necessary that the control unit evaluates, for example, the speed signal of the vehicle, encoder signals or Global Positioning System GPS signals with regard to the specified limits and, if necessary, to the brakes, the steering or the power supply etc. as Components 150-1 ... -N of the vehicle. When the predetermined maximum speed is reached, this action can consist, for example, of preventing the accelerator pedal from being depressed further, or of releasing the brakes or reactivating the power supply after reaching the predetermined maximum distance. A second possibility of restriction is that the user is prohibited from using certain parts or areas of the vehicle. For example, he can be denied access to the glove compartment or the trunk of the vehicle. For this purpose, suitable interlocks are to be provided as components 150 on the respective devices, such as glove compartment or trunk, which may be controlled in a suitable manner by the control device 140.

As a third possibility, a restriction in the user's access rights to personal data can be provided, which are basically accessible by devices in the vehicle, such as a PC or a navigation system. In the case of this personal data, a distinction is preferably made between non-sensitive and sensitive, that is to say particularly sensitive, data. Examples of the non-sensitive personal data are settings of seats or the settings of the volume of the radio, which can be stored individually for individual persons who occasionally use the vehicle in the sense of a personalization concept. In contrast, the sensitive personal data are, for example, e-mails that a specific person has received or sent or navigation data, that is, for example, destinations that the person has directed in the past or would like to control in the future. A restriction with regard to this personal data is preferably implemented in that only write protection is set up for the non-sensitive data, while both read and write protection are set up for the sensitive data as part of the restricted operating mode.

FIG. 2 illustrates the case in which personal data of only one person PI are stored in the vehicle. The non-sensitive data NSDP1 stored for this person can then advantageously be part of the entered restricted operating mode can be stored in the storage device 110, for example for initialization purposes. It is important that, even in the event of a restricted operating mode, initialization for certain devices such as seats or hi-fi systems is specified so that the control devices for these systems know how they should react and what settings they should make. In the example shown, the non-sensitive personal data NSDP1, which is already stored anyway, simply need to be copied into the storage device 110; An initialization of the corresponding devices is then possible by simple read access to this data.

In contrast to the non-sensitive data NSDP1, the sensitive data SDP1 are generally not required for the initialization of devices. Of course, a personal computer PC or a navigation device in the vehicle must also be initialized in the restricted operating mode, but this initialization usually takes place automatically when the ignition is switched on. However, the contents of individual e-mails are no more used to initialize the PC than individual navigation destinations are required to initialize the navigation system. This data SDP1 should therefore be disregarded when defining the restricted operating mode and should not be transferred to the storage device 110.

FIG. 3 shows a case similar to that in FIG. 2, but with the difference that personal data of not just one but three people P1, P2, P3 are stored in the vehicle. More specifically, sensitive data SDP1, SDP2, SDP3 and non-sensitive data NSDP1, NSDP2, NSDP3 are then known from these three people. In this case too, when setting the restricted operating mode, it makes sense to use the sensitive data of only one person, for example person P1, for initialization purposes. The non-sensitive data of other people P2 and P3 and the sensitive data SDP1 ... 3 should preferably not be transferred to the memory device 110 and used to define the restricted operating mode.

In contrast to the personal data, it is generally not possible to refer to a specific data record, which is already stored somewhere in the vehicle, with respect to the vehicle data F. As a rule, they must be individually defined for each restricted operating mode, preferably as mentioned above via the input device 120.

Different variants are also conceivable for the deactivation D of the restricted operating mode by the authorized person with regard to the personal data. A first variant is that in this case the personal data of all data subjects Pl ... 3 are released for reading and / or writing again. Alternatively, it is conceivable that in this case only the personal data of only individual persons, in particular of the authorized person himself, are released for reading and / or writing again. In particular, the sensitive personal data is advantageously protected by individual passwords.

The method just described for defining, activating and deactivating the restricted operating mode in a vehicle is advantageously implemented in the form of a computer program. Such a computer program can, for example, possibly be stored on a computer-readable data carrier together with other computer programs. The data carrier can be a floppy disk, a compact disc, a flash memory or the like. The computer program stored on the data carrier can then be sold to a customer as a product. In the case of an implementation as a computer program, it is also possible for the computer program, possibly together with further computer programs, for the control device according to the invention - without the aid of a data carrier - to be transmitted as a product to a customer via an electronic communication network, in particular the Internet, and to the customer Way is sold.

Claims

DaimlerChrysler AG patent claims 1. A method for operating a vehicle in an operating mode which can be activated by its user and which is restricted compared to a normal operating mode of the vehicle, characterized in that the restricted operating mode can only be deactivated again by an authorized person who need not be identical to the user can. 2. The method of claim 1, d a d u r c h g e k e n n e e i c h n e t that the restricted operating mode is automatically reset even after switching off the ignition and a subsequent restart of the vehicle, as long as it has not been deactivated by the authorized person. 3. The method as claimed in one of the preceding claims, that the deactivation of the restricted operating mode is preceded by an authentication of the authorized person, the person being able to authenticate himself in particular by entering his fingerprint or a PIN number or via a central emergency service. 4. The method according to any one of the preceding claims, characterized in that the restricted operating mode provides a restriction in the driving operation of the vehicle, in particular in the form of a predeterminable maximum speed and / or a maximum distance that can be covered by the vehicle during activation of the restricted operating mode. 5. The method according to any one of the preceding claims, that the restricted operating mode provides for a restriction in the use of the vehicle by the user, in particular in the form of a locking of the glove compartment and / or the trunk of the vehicle. 6. The method according to any one of the preceding claims, that the restricted operating mode includes a restriction in the user's access rights to personal data which are accessible via the devices associated with the vehicle, such as a PC or navigation system. 7. The method according to claim 6, so that the restriction comprises a pure write protection for nonsensitive personal data and a write and read protection for sensitive personal data. 8. The method according to claim 7, d a d u r c h g e k e n n z e i c h n e t that the restriction an unchangeable initialization of devices of the vehicle, such as. Sitting or entertainment facilities, as provided by the non-sensitive personal data of a predetermined person. 9. The method according to any one of claims 6 to 8, characterized in that when the restricted operating mode is deactivated by the authorized person, the personal data of all data subjects are released for reading and / or writing again. 10. The method according to any one of claims 6 to 8, so that when the restricted mode of operation is deactivated by the authorized person, the personal data of only individual persons, in particular the authorized person himself, are released for reading and / or writing again when the restricted operating mode is deactivated. 11. The method according to any one of the preceding claims, that the scope of the restriction in the restricted operating mode is preferably menu-controlled, haptically or by voice input, in particular by the user. 12. Computer program with program code for a control device for operating a vehicle in a restricted operating mode, so that the program code is designed to carry out the Method according to one of claims 1 to 11. 13. Data carrier with a computer program according to claim 12. 14. A control device (100) for operating a vehicle in an operating mode that is restricted compared to a normal operating mode, comprising: storage means (110) for storing the restricted operating mode; an input device (120) for activating the input restricted operating mode by the user of the vehicle and for deactivating the restricted operating mode; and a control device (140) for controlling components (150-1 ... -N) of the vehicle for setting the respectively activated operating mode; characterized in that an authentication device (130) which is designed to ensure that the restricted operating mode can only be deactivated again by an authorized person via the input device (120). 15. The control device (100) according to claim 14, that the input device is designed for manual or voice-controlled input, preferably menu-driven. 16. Control device (100) according to one of claims 13 to 15, characterized in that the input device (120) is designed for reading biometric features, in particular a fingerprint, and the authentication device (130) is designed, the read biometric features with the biometric features compare the authorized person with regard to a match. 17. Control device (100) according to one of claims 13 to 16, characterized in that the input device (120) is designed to read a PIN number and the authentication device (130) is designed to read the PIN with a PIN assigned to the authorized person in To compare for a match. 18. Control device (100) according to one of claims 13 to 17, characterized in that the authentication device (130) a communica- tion device (132) comprises for performing authentication by data exchange with a service center. 19. Control device (100) according to one of claims 13 to 18, so that the storage device (110) is separated from other storage devices, in particular from a storage device for the personal data, and is preferably designed as a non-write-protected read-only memory. 20. Control device (100) according to claim 19, so that the type / scope of the restricted operating mode stored in the memory device (110) can be changed via the input device (120).