Granted Patent B2

US 12,646,364 · App. 18/349,065 · Granted Jun 2, 2026

Inventors: Andreas Schmidt (Braunschweig, DE); Issam Chouraib (Bottrop, DE); Benjamin Klimpke (Nordkirchen, DE)

Assignee: Cariad SE

G07C5/085G07C5/008

Abstract

Claims (54)

1 . A method for deleting of user data in a motor vehicle, the method comprising:

storing user profile data in an embedded Universal Integrated Circuit Card (eUICC) chip of a communication controller that enables a user-specific user access to a mobile radio network,

wherein the user profile data includes setting data of a plurality of device settings performed during use of the motor vehicle by at least one user in a plurality of other controllers different from the communication controller, and

wherein the plurality of other controllers includes at least two of: a controller of a navigation system, a controller of an adjustable seat, a controller of a steering wheel, a controller of a driver assist system, a controller of an air conditioning system, a controller of an adjustable mirror, a controller of a digital cockpit system, a controller of an ambient lighting system, or a controller of a media player device;

receiving a delete command for removal of the user profile data in the communication controller by a profile assistant module of the communication controller from a vehicle-external server computer,

wherein the profile assistant module of the communication controller is coupled to a data management module of the motor vehicle that is different from the communication controller;

executing the delete command, by the communication controller, wherein the user access to the mobile radio network is prevented by the executing of the delete command; and

sending a clearing command by the profile assistant module of the communication controller to the data management module of the motor vehicle that is different from the communication controller,

wherein the clearing command triggers a clearing routine in the data management module of the motor vehicle,

wherein the clearing routine in the data management module includes sending from the data management module to the plurality of other controllers different from the data management module a plurality of reset commands that cause the plurality of other controllers different from the data management module to reset the setting data to user-nonspecific standard data for resetting of the plurality of device settings,

wherein the plurality of reset commands include at least a first reset command that causes first setting data to be reset, and a second reset command that causes second setting data to be reset,

wherein the first reset command is sent to an address of a first other controller of the plurality of other controllers, and the second reset command is sent to an address of a second other controller of the plurality of other controllers, and

wherein the data management module determines the address of the first other controller, the first setting data, the address of the second other controller, and the second setting data by matching configuration data sent from the server computer with data included in a table stored by the data management module.

2 . The method according to claim 1 , further comprising:

sending the clearing command by the profile assistant module in response to the delete command, or independently of the delete command in response to a trigger from the server computer.

3 . The method according to claim 1 , wherein the clearing routine includes determining a matching controller to be actuated for the plurality of device settings in the motor vehicle, and wherein the plurality of reset commands for the plurality of device settings is addressed to the matching controller.

4 . The method according to claim 1 , further comprising:

selecting a plurality of device settings to be reset from multiple predefined and selectable device settings by the profile assistant module or by the data management module based on the configuration data from the server computer, wherein the reset commands are generated according to the device settings to be reset.

5 . The method according to claim 1 , wherein the profile assistant module is implemented in the eUICC chip or in a mobile radio modem of the communication controller.

6 . The method according to claim 1 , wherein the profile assistant module is implemented in the eUICC chip, and wherein the profile assistant module sends the clearing command based on an internal operating state of the profile assistant module.

7 . The method according to claim 1 , wherein the data management module is included in the communication controller or is a distributed program module having a first part in the communication controller and a second part in a vehicle component different from the communication controller.

8 . The method according to claim 1 , further comprising:

receiving a plurality of reply messages regarding performance of the reset commands by the data management module from the plurality of other controllers;

reporting the reply messages to the profile assistant module; and

sending a status message regarding the reply messages from the profile assistant module to the server computer.

9 . The method according to claim 1 , wherein the user data are part of an Automotive User Profile, AUP, of an Automotive Identity, AID, or

wherein the user data includes an AUP of the AID together with other non-AUP user data.

10 . The method according to claim 1 , wherein the setting data include at least one of: a route stored by the navigation system, a point of interest stored by the navigation system, a setting of a seat position of the adjustable seat, a setting of heating of the adjustable seat, a setting of positioning of the steering wheel, a setting of heating of the steering wheel, a setting of a driver assist function of the driver assist system, a setting of the air conditioning system, a setting of the adjustable mirror, a setting of information displayed by the digital cockpit system, a color scheme of the ambient lighting system, an intensity of the ambient lighting system, a loudness setting of the media player device, a preferred radio channel of the media player device, or an arrangement of applications displayed by the media player device.

11 . A device for a motor vehicle, the device comprising:

a processor; and

a memory storing instructions that, when executed by the processor, cause the device to:

delete user profile data stored in an embedded Universal Integrated Circuit Card (eUICC) chip and, based on a delete command to delete the user profile data received from a vehicle-external server computer, wherein a user access to a mobile radio network is enabled in a communication controller, and

send a clearing command that triggers a clearing routine for a plurality of device settings,

wherein the user profile data includes setting data of the plurality of device settings performed during use of the motor vehicle by at least one user in a plurality of other controllers different from the communication controller,

wherein the plurality of other controllers includes at least one two of: a controller of a navigation system, a controller of an adjustable seat, a controller of a steering wheel, a controller of a driver assist system, a controller of an air conditioning system, a controller of an adjustable mirror, a controller of a digital cockpit system, a controller of an ambient lighting system, or a controller of a media player device,

wherein the clearing routine includes sending to the plurality of other controllers a plurality of reset commands that cause the plurality of other controllers to reset the setting data to user-nonspecific standard data for resetting of the plurality of device settings,

wherein the plurality of reset commands include at least a first reset command that causes first setting data to be reset, and a second reset command that causes second setting data to be reset,

wherein the first reset command is sent to an address of a first other controller of the plurality of other controllers, and the second reset command is sent to an address of a second other controller of the plurality of other controllers, and

wherein the address of the first other controller, the first setting data, the address of the second other controller, and the second setting data are determined by matching configuration data sent from the server computer with data included in a table stored in the memory.

12 . The device according to claim 11 , wherein the device is implemented in the eUICC chip or the communication controller.

13 . The device according to claim 11 , wherein the setting data include at least one of: a route stored by the navigation system, a point of interest stored by the navigation system, a setting of a seat position of the adjustable seat, a setting of heating of the adjustable seat, a setting of positioning of the steering wheel, a setting of heating of the steering wheel, a setting of a driver assist function of the driver assist system, a setting of the air conditioning system, a setting of the adjustable mirror, a setting of information displayed by the digital cockpit system, a color scheme of the ambient lighting system, an intensity of the ambient lighting system, a loudness setting of the media player device, a preferred radio channel of the media player device, or an arrangement of applications displayed by the media player device.

14 . A motor vehicle comprising:

a plurality of other controllers which, in operation, receives a plurality of device settings made during a use of the motor vehicle by at least one user and stores the device settings as setting data; and

a communication controller different from the plurality of other controllers,

wherein the communication controller, in operation, provides a user access to a mobile radio network by way of user profile data, wherein the communication controller includes an embedded Universal Integrated Circuit Card (eUICC) chip that stores user profile data including the setting data,

wherein the user profile data includes setting data of the plurality of device settings performed during use of the motor vehicle by at least one user in the plurality of other controllers different from the communication controller,

wherein the plurality of other controllers includes at least two of: a controller of a navigation system, a controller of an adjustable seat, a controller of a steering wheel, a controller of a driver assist system, a controller of an air conditioning system, a controller of an adjustable mirror, a controller of a digital cockpit system, a controller of an ambient lighting system, or a controller of a media player device, and

wherein the communication controller includes a profile assistant module which, in operation, receives a delete command for removal of the user profile data from a vehicle-external server computer, and executes the delete command, wherein the user access to the mobile radio network is prevented by execution of the delete command; and

a data management module coupled to the profile assistant module, wherein the data management module, in operation, receives a clearing command from the profile assistant module, and performs a clearing routine in which a plurality of reset command that reset the setting data to user-nonspecific standard data for resetting of the plurality of device settings is sent to the plurality of other controllers,

wherein the clearing routine includes sending to the plurality of other controllers a plurality of reset commands that cause the plurality of other controllers to reset the setting data to user-nonspecific standard data for resetting of the plurality of device settings,

wherein the plurality of reset commands include at least a first reset command that causes first setting data to be reset, and a second reset command that causes second setting data to be reset,

wherein the first reset command is sent to an address of a first other controller of the plurality of other controllers, and the second reset command is sent to an address of a second other controller of the plurality of other controllers, and

wherein the address of the first other controller, the first setting data, the address of the second other controller, and the second setting data are determined by matching configuration data sent from the server computer with data included in a stored table.

15 . The motor vehicle according to claim 14 , wherein the setting data include at least one of: a route stored by the navigation system, a point of interest stored by the navigation system, a setting of a seat position of the adjustable seat, a setting of heating of the adjustable seat, a setting of positioning of the steering wheel, a setting of heating of the steering wheel, a setting of a driver assist function of the driver assist system, a setting of the air conditioning system, a setting of the adjustable mirror, a setting of information displayed by the digital cockpit system, a color scheme of the ambient lighting system, an intensity of the ambient lighting system, a loudness setting of the media player device, a preferred radio channel of the media player device, or an arrangement of applications displayed by the media player device.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (19)