Monitoring and modifying motor vehicle functions in a motor vehicle

1. A method for monitoring and modifying motor vehicle functions in a motor vehicle, the method comprising the steps of:

a) determining an anomalous behavior of a function of the motor vehicle;

b) communicating the anomalous behavior of the function of the motor vehicle to a backend;

c) receiving an instruction from the backend, wherein the instruction is indicative of an acute measure to be taken in the motor vehicle in order to carry out an adequate reaction to the anomalous behavior of the function;

d) determining a motor vehicle component which is a cause of the anomalous behavior of the function of the motor vehicle, on the basis of the received instruction;

e) converting the motor vehicle component into a degraded configuration as adequate reaction, wherein the degraded configuration has a more limited functional scope than in the previous configuration thereof, and if converting the motor vehicle component into the degraded configuration is not possible:

f) then converting the motor vehicle component into a safe configuration as adequate reaction, wherein the safe configuration is kept available in the motor vehicle component.

2. The method as claimed in claim 1 , wherein for a case where converting the motor vehicle component into the safe configuration is not possible:

g) switching off the motor vehicle component as adequate reaction.

3. The method as claimed in claim 2 , wherein for a case where switching off the motor vehicle component is not successful:

h) converting the motor vehicle into a safe state as adequate reaction, wherein the safe state comprises safe operation of the motor vehicle in respect of a safety and/or security relevance.

4. The method as claimed in claim 3 , wherein for a case where converting the motor vehicle into the safe state is not possible:

i) switching off driving operation of the motor vehicle as adequate reaction.

5. The method as claimed in claim 4 , wherein the

j) switching off of the driving operation of the motor vehicle is carried out safely in respect of a safety relevance of the motor vehicle.

6. The method as claimed in claim 5 , further comprising the step of:

k) communicating the adequate reaction carried out to the backend, as a successfully taken acute measure in the motor vehicle.

7. The method as claimed in claim 6 , further comprising the step of:

l) receiving a patch from the backend, as an anomaly correction instruction which is indicative of a persistent measure to be taken in the motor vehicle in order to eliminate and/or to prevent the anomalous behavior of the function in the future.

8. The method as claimed in claim 7 , further comprising the steps of:

determining a further motor vehicle component which is likewise affected by the anomalous behavior of the function of the motor vehicle, on the basis of the received instruction, and

correspondingly applying method steps (e)-(l) for modifying the motor vehicle component to the further motor vehicle component.

9. The method as claimed in claim 8 , further comprising the step of:

communicating the adequate reaction carried out to a further motor vehicle, as instruction, for a current and/or preventive acute measure to be taken in the further motor vehicle.

10. The method as claimed in claim 9 , wherein

communicating the adequate reaction carried out to the further motor vehicle is carried out from the motor vehicle.

11. The method as claimed in claim 9 , wherein

communicating the adequate reaction carried out to the further motor vehicle is carried out from the backend.

12. The method as claimed in claim 1 , wherein

determining the anomalous behavior of the function of the motor vehicle is ascertainable by:

the backend,

a motor vehicle occupant, and/or

a motor vehicle-specific routine.

13. The method as claimed in claim 12 , wherein

the backend comprises a certified motor vehicle-external authority.

14. The method as claimed in claim 1 , wherein

the instruction comprises an indication of the criteria under which the adequate reaction can be canceled again.

15. The method as claimed in claim 1 , wherein

the anomalous behavior of the function of the motor vehicle is indicative of hacking of the motor vehicle or of the motor vehicle component.

16. The method as claimed in claim 1 , wherein

the anomalous behavior of the function is suitable for jeopardizing functionally safe operation of the motor vehicle.

17. The method as claimed in claim 1 , wherein

the safe configuration of the motor vehicle component is safeguarded against manipulation of the safe configuration.

18. A device for monitoring and modifying motor vehicle functions in a motor vehicle, the device comprising:

a function monitoring device, for determining an anomalous behavior of a function of the motor vehicle,

a determining unit, for determining a motor vehicle component which is the cause of the anomalous behavior of the function of the motor vehicle, and

a modifying unit, for converting the motor vehicle component into:

a degraded configuration, wherein the degraded configuration has a more limited functional scope than in the previous configuration thereof, and

a safe configuration, wherein

the safe configuration is kept available in the motor vehicle component, and

the safe configuration of the motor vehicle component is safeguarded against manipulation of the safe configuration.

19. A motor vehicle, comprising:

at least one motor vehicle component, wherein the motor vehicle component has a safe configuration, which is safeguarded against manipulation of the safe configuration;

a mobile radio communication device, for communicating an anomalous behavior of a function of the motor vehicle to a backend and for receiving an instruction in respect of the anomalous behavior of the function; and

a device for monitoring and modifying motor vehicle functions in the motor vehicle, as claimed in claim 18 .

20. A computer program product comprising a non-transitory computer readable medium having stored thereon program code sections that, when executed, carry out the acts of:

a) determining an anomalous behavior of a function of the motor vehicle;

b) communicating the anomalous behavior of the function of the motor vehicle to a backend;

c) receiving an instruction from the backend, wherein the instruction is indicative of an acute measure to be taken in the motor vehicle in order to carry out an adequate reaction to the anomalous behavior of the function;

d) determining a motor vehicle component which is a cause of the anomalous behavior of the function of the motor vehicle, on the basis of the received instruction;

e) converting the motor vehicle component into a degraded configuration as adequate reaction, wherein the degraded configuration has a more limited functional scope than in the previous configuration thereof, and if converting the motor vehicle component into the degraded configuration is not possible:

f) then converting the motor vehicle component into a safe configuration as adequate reaction, wherein the safe configuration is kept available in the motor vehicle component.