Method for the anonymized provision of data of a first vehicle for a vehicle-external server device, and anonymization apparatus and motor vehicle

Patent metadata

Field	Value
Publication number	US-11889299-B2
Application number	US-202017265391-A
Country	US
Kind code	B2
Filing date	Mar 20, 2020
Priority date	Apr 9, 2019
Publication date	Jan 30, 2024
Grant date	Jan 30, 2024

Abstract

In order to provide sensitive vehicle data of a first vehicle as anonymously as possible, the present disclosure relates to a method for the anonymized provision of the data of the first vehicle for a vehicle-external server device. According to a defined or definable condition, a decision is made between transmitting the data directly to the vehicle-external server device or transmitting the data to the vehicle-external server device via a second vehicle, which has a communication connection to the first vehicle. The data are then transmitted according to the decision. In n-hop anonymization, the data can be forwarded via an arbitrary number of vehicles as intermediaries or intermediate stations.

First claim

The invention claimed is:

1. A method for a provision of data from a first vehicle to a vehicle-external server device, the method comprising:
randomly selecting a recipient vehicle from one or more recipient vehicles;
transmitting the data from a first vehicle to the vehicle-external server device by one or more successive hops facilitated by one or more recipient vehicles, wherein the one or more recipient vehicles are in an operating state, and wherein the operating state includes a driving operation or a stationary operation;
transmitting to the recipient vehicle, a count value and a limit value wherein the count value describes a current number of hops and the limit value determines a maximum number of hops for transmitting the data;
incrementing the count value by one with each successive hop;
transmitting the data to the vehicle-external server device when the count value equals the limit value;
transmitting an authentication feature of the first vehicle or a first recipient vehicle to a second recipient vehicle or to the vehicle-external server device;
transmitting data to the second recipient vehicle or the vehicle-external server device, in response to verifying a match of the authentication feature with a listed authentication feature of a plurality of authentication features, by the second recipient vehicle or the vehicle-external server device; and
deleting sender information of the first vehicle and the recipient vehicle from the data to anonymously transmit the data to the vehicle-external server device via a recipient vehicle.

2. The method of claim 1 , wherein selecting the recipient vehicle from the one or more recipient vehicles comprises using a random algorithm or a random generator, and wherein the first vehicle, the one or more recipient vehicles, and the vehicle-external server device are participants in an ad-hoc network.

3. The method of claim 2 , further comprising adapting the ad-hoc network in accordance with an operating state of the one or more recipient vehicles.

4. The method of claim 3 , wherein the one or more recipient vehicles do not participate in the ad-hoc network when the one or more recipient vehicles are in a switched off operating state.

5. The method of claim 2 , further comprising:
transmitting the data to the vehicle-external server device over a plurality of hops, wherein a recipient vehicle of the one or more recipient vehicles is selected at most one time for a hop of the plurality of hops.

6. The method of claim 2 , further comprising:
registering the first vehicle with an administration server device when starting a trip; and
receiving, from the administration server device, a list comprising communication information on the participants of the ad-hoc network.

7. The method of claim 2 , further comprising transmitting the data to the vehicle-external server device upon determining that the data is transmitted via a predetermined number of vehicles of the one or more recipient vehicles in the ad-hoc network.

8. The method of claim 2 , further comprising updating a list periodically depending on a number of the participants in the ad-hoc network.

9. The method of claim 1 , further comprising transmitting the data in an encrypted manner using asymmetric cryptography, wherein the asymmetric cryptography is based on elliptic curves or a public key encryption method.

10. An anonymization apparatus for a transmission of data from a first vehicle to a vehicle-external server device, the anonymization apparatus comprising a processor and memory, the processor configured to:
randomly select a recipient vehicle from one or more recipient vehicles;
use the processor configured to transmit the data from a first vehicle to the vehicle-external server device by one or more successive hops facilitated by one or more recipient vehicles, wherein the one or more recipient vehicles are in an operating state, and wherein the operating state includes a driving operation or a stationary operation;
transmit to the recipient vehicle, using a communication device, a count value and a limit value wherein the count value describes a current number of hops and the limit value determines a maximum number of hops for transmitting the data;
increment the count value by one with each successive hop;
transmit the data to the vehicle-external server device when the count value equals the limit value;
transmit, using the communication device, an authentication feature of the first vehicle or a first recipient vehicle to a second recipient vehicle or to the vehicle-external server device;
transmit, using the communication device, data to the second recipient vehicle or to the vehicle-external server device, in response to verifying a match of the authentication feature with a listed authentication feature of a plurality of authentication features, by the second recipient vehicle or the vehicle-external server device; and
delete sender information of the first vehicle and the recipient vehicle from the data to anonymously transmit the data to the vehicle-external server device via the recipient vehicle.

11. The anonymization apparatus of claim 10 , further configured to select the recipient vehicle from the one or more recipient vehicles using a random algorithm or a random generator, and wherein the first vehicle, the one or more recipient vehicles, and the vehicle-external server device are participants in an ad-hoc network.

12. The anonymization apparatus of claim 10 , further configured to transmit the data to the vehicle-external server device upon determining that the data is transmitted via a predetermined number of recipient vehicles of the one or more recipient vehicles in the ad-hoc network.

13. The anonymization apparatus of claim 10 , further configured to transmit the data in an encrypted manner using asymmetric cryptography, wherein the asymmetric cryptography is based on elliptic curves or a public key encryption method.

14. A motor vehicle comprising:
an anonymization apparatus for a transmission of data from a first vehicle to a vehicle-external server device, wherein the anonymization apparatus comprises a processor and memory, the processor being configured to:
randomly select a recipient vehicle from one or more recipient vehicles,
using the processor;
use the processor to transmit the data from a first vehicle to the vehicle-external server device via one or more successive hops facilitated by one or more recipient vehicles, wherein the one or more recipient vehicles are in an operating state, and wherein the operating state includes a driving operation or a stationary operation;
transmit to the recipient vehicle, using a communication device, a count value and a limit value wherein the count value describes a current number of hops and the limit value determines a maximum number of hops for transmitting the data;
increment the count value by one with each successive hop;
transmit the data to the vehicle-external server device when the count value equals the limit value;
transmit, using the communication device, an authentication feature of the first vehicle or a first recipient vehicle to a second recipient vehicle or the vehicle-external server device;
transmit, using the communication device, data to the second recipient vehicle or to the vehicle-external server device, in response to verifying a match of the authentication feature with a listed authentication feature of a plurality of authentication features, by the second recipient vehicle or the vehicle-external server device; and
delete sender information of the first vehicle and the recipient vehicle from the data to

Assignees

• Audi Ag

Inventors

• Ernst Sebastian
• Buck Andreas

Classifications

• H04W12/02 Primary

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04W4/44

  for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H] · CPC title

• H04W12/009

  specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks · CPC title

• H04W84/18

  Self-organising networks, e.g. ad-hoc networks or sensor networks · CPC title