Method for monitoring access to electronically controllable devices
A method for monitoring access to an electronically controllable device includes establishing communication between a mobile device and a control platform via a communication network. A booking, including first and second data, is created for a controllable device in the platform. The first data is access information and the second data is encrypted with an individual key which is assigned to an access control unit in the controllable device. The mobile device is wirelessly connected to the access unit and the second data, as well as a subset of the first data, is transmitted to the access unit which decrypts the second data and checks its signature. If the check is successful, a configuration of the access unit is adapted as a function of the decrypted data. Authorization for access to the controllable device by the mobile device is checked as a function of the decrypted data.
1. A method for monitoring access to an electronically controllable device, having the following steps:
establishing a communication connection between a mobile communication device and a central control platform via a communication network,
creating a booking for an electronically controllable device in the central control platform and transmitting first data on the booking from the central control platform to the mobile communication device, wherein the first data are embodied as access information for an access to the electronically controllable device and for processing in the mobile communication device,
transmitting second data from the central control platform to the mobile communication device as a data container, wherein the second data are signed with a signature in the central control platform and encrypted with an individual key prior to the transmission, wherein the individual key is assigned to an access control unit in the electronically controllable device and wherein the encrypted second data are stored in the mobile communication device, wherein contents of the data container are not modifiable in the mobile communication device, and wherein at no time is access provided to the contents of the data container in the mobile communication device, or the contents are not modifiable without destroying the signature,
wirelessly connecting the mobile communication device to the access control unit of the electronically controllable device for access to the electronically controllable device, wherein at least the second data and at least a subset of the first data are transmitted to the access control unit,
wherein the access control unit decrypts the second data and checks the signature of the second data and, if the check is successful, a configuration of the access control unit is adapted as a function of the decrypted data, wherein the configuration of the access control unit is updated and the access control unit is programmed without a direct connection between the central control platform and the access control unit, and
wherein an authorization for access to the electronically controllable device by the mobile communication device is checked as a function of the decrypted data.
2. The method according to claim 1 , wherein the electronically controllable device is a vehicle.
3. The method according to claim 1 , wherein, encrypted in the second data, in addition to the first data on the booking sent from the central control platform to the mobile communication device, is information on additional booking processes for the same electronically controllable device.
4. The method according to claim 1 , wherein the second data comprise a time stamp of a time of encryption and wherein a current configuration of the access control unit is not updated unless the time stamp indicates that the encrypted data are more up-to-date than the current configuration of the access control unit.
5. The method according to claim 1 , wherein, after creating the booking and prior to the access to the electronically controllable device, the central control platform, using the mobile communication device, establishes a connection to the mobile communication device and replaces the encrypted second data with updated encrypted second data.