WO2016135418A1

WO2016135418A1 - Method for securing a service enabling the control of motor vehicles by means of mobile terminals

Info

Publication number: WO2016135418A1
Application number: PCT/FR2016/050420
Authority: WO
Inventors: Eric Menard; Fabienne Masson; Aymeric CHALOCHET
Original assignee: Valeo Comfort And Driving Assistance
Priority date: 2015-02-27
Filing date: 2016-02-23
Publication date: 2016-09-01
Also published as: FR3033204B1; FR3033204A1; EP3262619A1

Abstract

The invention relates to a control service enabling the owner of a motor vehicle equipped with a mobile terminal (20) to access at least one function of the motor vehicle (10) by means of the mobile terminal, said service being operated using a server (50) in which records are stored which associate, with each motor-vehicle identifier, information relating to the owner of the vehicle, including the contact details of the owner. According to the invention, the method comprises the steps of: - receiving a request from the server for modifications to the information stored in a record, - searching for a record on the server associated with said request, - reading the contact details of the recorded owner in this record, and sending a message to the owner requesting validation of said request, - in the event of receiving a message from the owner confirming said request, modifying said record.

Description

METHOD OF SECURING A SERVICE FOR CONTROLLING MOTOR VEHICLES USING MOBILE TERMINALS

TECHNICAL FIELD TO WHICH THE INVENTION RELATES The present invention relates generally to the control of functionalities of a motor vehicle by means of a mobile terminal.

It relates more particularly to a method of securing a control service enabling a motor vehicle owner equipped with a mobile terminal to access at least one motor vehicle functionality by means of his mobile terminal, said control service being operated using a server in which are stored records that each associated with an identifier, information relating to the owner of said motor vehicle, said information comprising at least contact details of said owner.

The invention applies particularly advantageously in the case where the controlled functionality is the unlocking of the doors of the vehicle or the starting of the vehicle.

BACKGROUND

It has been proposed to control certain functionalities of a motor vehicle, such as unlocking the doors of the vehicle, by means of a mobile terminal, for example a mobile phone commonly used by the vehicle owner.

In order to allow this order only to people actually authorized, virtual keys are used which are stored in the mobile phones of authorized persons and of which an electronic control unit of the vehicle verifies the presence before controlling the unlocking of the doors.

The use of such virtual keys does not prevent the use of physical keys (or electronic control cards dedicated to the unlocking of the doors and the starting of the motor vehicle).

Thus, in practice, when he buys a motor vehicle, an owner is given by the manufacturer of the vehicle physical keys and information allowing him to register on a server in order to be issued an electronic certificate of ownership and one or more virtual keys access to the vehicle (as mentioned in the patent application FR1463430 not published at the time of filing of this patent application).

A disadvantage of such a solution is that, when the owner of the motor vehicle sells the vehicle to another person (the "new owner"), he can provide him with the physical keys but he can not send him the electronic certificate of ownership as well as the associated virtual keys.

The risk is then that the original owner uses the vehicle fraudulently, after having sold it, using the virtual keys stored in his mobile phone.

Another disadvantage is that when the owner changes mobile terminal, his new mobile terminal is not registered in the server, so that he can no longer access the motor vehicle other than with his physical keys.

OBJECT OF THE INVENTION

In order to overcome the aforementioned drawbacks of the state of the art, the present invention proposes to facilitate and secure the change of information stored in the server.

More particularly, the invention proposes a security method as defined in the introduction, which comprises the following steps:

step a): reception by the server of a request for modifications of the information relating to a motor vehicle owner, comprising an identifier and at least one information item to be modified,

step b): search for a record in the server associated with the identifier,

step c): in the case of a recording found, reading the contact information of the owner registered in the recording, and sending said owner a request message for validation of said request,

step d): in the event of receiving a message from said owner validating said request, modifying said record or creating a new record in the server, storing each piece of information to be modified.

It will be noted here that the "owner" may be a natural person or a legal person, and that he may possibly be represented by a third person to implement the method according to the invention. To illustrate the invention, one can first consider the case where the owner has changed mobile terminal. Then, the owner sends a request to the server, so that the latter takes into account this new mobile terminal. Step c) above will then ask the owner if it is the origin of this request. Thus, the new mobile terminal will be taken into account by the server only after the owner has validated that he was the origin of this request.

To illustrate the invention, one can also consider the case where the owner of the vehicle sells his vehicle to a new owner. Then, either of the old and the new owner issues a request to the server, so that the latter records this change of ownership. This request will usually be issued by the new owner. Step c) above will then ask the original owner if he has actually sold his vehicle. Then, if this is the case, the server can overwrite or block the old electronic certificate of ownership attached to the motor vehicle, before issuing another to the new owner of the vehicle.

The risk that remains is that the new owner, not informed or not interested in the possibility of being issued an electronic certificate of ownership and virtual keys, does not make itself known to the server. In this case, the former owner remains free to use the vehicle fraudulently.

Then, preferentially, the mobile terminal being adapted to communicate with the server, after each access of a user to the functionality of the motor vehicle through a mobile terminal, there is provided a step of transmission by said mobile terminal to the information server relating to the identity of the said user and at the time when the said access occurred.

The information stored in the server can thus prove the fraudulent use of the vehicle by its former owner.

To further reduce the risk of fraudulent use of the motor vehicle by the former owner, it may provide to incite, or to force the new owner to declare himself as such to the server.

Thus, advantageously, when the identifier of any owner is unchanged in the server for a duration greater than a predetermined threshold, there is provided a step of verification of the identity of the owner of the motor vehicle whose identifier is associated with said identifier.

In addition or alternatively, each record storing (in addition to the identifier or as an identifier of the owner) a name or a pseudonym of said owner, it is expected to display frequently on the display screen located in the conveys a message mentioning the name or pseudonym of the said owner.

Thus, if the new owner repeatedly sees the name of the previous owner, he will be prompted to declare himself as the owner of the server.

Other advantageous and non-limiting characteristics of the process according to the invention are the following:

the information relating to the owner further comprising an identification number of said mobile terminal, in step a), the information to be modified comprises an identification number of a new mobile terminal, and in step d) the identification number of said new mobile terminal is stored in the server;

- the owner information, which also includes an owner identifier, in step a), the information to be modified includes an identifier of a new owner who purchased the motor vehicle from the original owner, as well as the contact details of the owner; new owner, and in step d), the identifier and the contact information of the new owner are stored in the server;

in step d), the identifier of the initial owner is deactivated;

the mobile terminal of the initial owner storing at least one virtual key to access the motor vehicle functionality, when the initial owner identifier is deactivated, said virtual key is blocked and / or the automatic update of said virtual key is suspended;

said server record memorizing the contact details of at least one other user of the motor vehicle equipped with another mobile terminal storing at least one other virtual key for access to the functionality of the motor vehicle, when the owner's identifier initial is deactivated, said other virtual key is blocked and / or the automatic updating of said other virtual key is suspended, and an end of validity information message of said other virtual key is sent to said other user, by means of said contact information contact stored in the recording;

after said step d), the server transmits to the mobile terminal of the new owner a virtual key to access the functionality of the motor vehicle;

- There is provided a step of detecting an action of the new owner on a physical object related to the motor vehicle, and said step d) is further conditioned by said detection;

the physical object is a physical key able to control the unlocking of the doors of the motor vehicle;

the information relating to the owner having an identifier of the owner, when an identifier stored in the server is unchanged for a duration greater than a predetermined threshold, there is provided a step of verifying the identity of said owner;

- the owner information with a name or pseudonym of the owner, and the motor vehicle is equipped with a display screen, it is expected to frequently display on said display screen a message mentioning the name or the pseudonym said owner;

the contact details stored in each record of the server include an e-mail address and / or a telephone number;

the mobile terminal being adapted to communicate with the server, after each access of the owner to the functionality of the motor vehicle by means of a mobile terminal, there is provided a step of transmission by said mobile terminal to the server of information relating to the moment when said access has taken place;

the server stores, in the record associated with said motor vehicle, a log in which are stored, since a given date, information relating to the identity of each user accessing the motor vehicle and at the time of each access to the functionality of the motor vehicle ;

- After each access of a user to the functionality of the motor vehicle with a mobile terminal, a control unit of the motor vehicle stores information relating to the identity of the user and when said access has occurred.

DETAILED DESCRIPTION OF AN EXEMPLARY EMBODIMENT The following description with reference to the accompanying drawings, given as non-limiting examples, will make it clear what the invention consists of and how it can be achieved.

In the accompanying drawings:

FIG. 1 represents an exemplary context in which the invention may be implemented, notably comprising a vehicle and a mobile terminal;

FIG. 2 diagrammatically represents components useful for understanding the invention, the vehicle and the mobile terminal of FIG. 1; and

- Figure 3 shows the main steps of a registration process, following the purchase of a used vehicle, to a vehicle function control service by means of the mobile terminal.

FIG. 1 represents an example of context in which the invention can be implemented.

In this context, a motor vehicle 10 comprises an electronic control unit 1 1 (or ECU for "Electronic Control Unit") which can enter into communication via a wireless link with a mobile terminal 20, for example a mobile phone (or telephone cellular), possibly of the "smart phone" or "smartphone" type according to the commonly used English name, in order to exchange data with this mobile terminal 20, for example with a view to controlling the functionality of the motor vehicle 10 by means of mobile terminal 20 (such a feature can be for example the unlocking of the doors of the motor vehicle 10 or the starting of the engine of the vehicle).

Alternatively, it could for example be a connected watch, a pair of glasses connected, or a tablet computer.

The wireless link used to communicate between the electronic control unit 1 1 and the mobile terminal 20 is for example of the Bluetooth type.

The mobile terminal 20 is furthermore designed to connect to a mobile telephone network 30 which notably comprises a base station 32 in communication via a radio link with the mobile terminal 20 and a gateway 34 for connection to a public network 40, for example. example the Internet network.

A server 50 is also connected to the public network 40 so that the mobile terminal 20 and the server 50 can communicate and exchanging data via the mobile telephone network 30 and the public network 40. The server 50 is here managed by the manufacturer of the electronic control unit 1 1.

FIG. 2 schematically represents components useful for understanding the invention of the motor vehicle 10 and the mobile terminal 20.

The motor vehicle 10 comprises in particular the electronic control unit 1 1 already mentioned, an actuator 15 (designed here to allow the unlocking of the doors of the motor vehicle 10), an actuator 17 (designed to allow the vehicle to start), a module wireless communication device 16 and a user interface 18.

The electronic control unit comprises a processor 12 and a storage unit 14, for example a rewritable non-volatile memory or a hard disk.

The storage unit 14 stores in particular computer programs comprising instructions whose execution by the processor 12 allows the implementation by the electronic control unit 11 of the processes described below.

An identifier (here an identification number VI D) is assigned to the motor vehicle 10. Another identifier (here a serial number N) is assigned to the electronic control unit 1 1. The association between the identification number VID of a motor vehicle 10 and the serial number N of the electronic control unit 11 that equips this motor vehicle 10 is stored in a database D managed by the server 50. .

More specifically, it will be considered here that the database D of the server 50 stores a plurality of records, each of these records being associated with one of the registered motor vehicles and storing a plurality of data, among which the identification number VID assigned to the motor vehicle 10.

The mobile terminal 20 comprises a processor 22, a memory 24 (for example a non-volatile memory rewritable), a wireless communication module 26, a communication module 28 on the mobile telephone network 30, and a screen display 27 (here a touch screen).

The memory 24 allows the mobile terminal 20 to store a user application, intended to facilitate the control of the functionalities of the mobile terminal. vehicle via this mobile terminal 20. It is also adapted to store a virtual key VK, which will allow the electronic control unit 1 1 to authenticate the mobile terminal 20 to allow him access to the features of the motor vehicle 10 s he is authorized. Here, for greater security, it will be considered that this virtual key VK has a limited validity period, and that it will have to be regularly updated by the server 50.

It will then be considered that the server 50 also stores, in each record associated with a motor vehicle 10:

- the UID of the registered owner,

the virtual key VK delivered to the owner for this vehicle,

- contact details of the owner.

These contact details will preferably include the telephone number of the mobile terminal 20 to which the virtual key VK has been delivered (that is to say the number that has been assigned to the mobile terminal 20 at the time of subscription to the telephony service mobile, it is for example a number MSISDN). Alternatively or additionally, the contact information may include the owner's email address or the owner's mailing address.

It should be noted here that the contact details of the owner could act as an identifier for the owner. Still alternatively, the identifier of the mobile terminal 20 of the owner (generally called IMEI number) could act as an identifier for the owner. Here, as will be well described later in this presentation, we will consider that the owner will be identified by a set of information.

The server 50 can also store, in each record associated with a motor vehicle 10:

- the identifier of the other users of the vehicle (family, friends, renter, ...),

- the contact details of these other users, and

the virtual keys VK delivered to the mobile terminals of these other users.

The wireless communication module 26 of the mobile terminal 20 makes it possible to establish a wireless link (here Bluetooth type as already indicated) with the wireless communication module 16 of the motor vehicle 10 through which the processor 12 of the unit control electronics 1 1 and the processor 22 of the mobile terminal 20 can exchange data, especially as explained below.

The communication module 28 enables the mobile terminal 20 (and more specifically the processor 22 equipping this mobile terminal 20) to exchange, as already indicated, data with other devices connected to the mobile telephone network 30 or to the public network 40, in particular with the server 50. In some embodiments, the communication module may include a smart card that stores connection data associated with a subscription to the mobile telephony service and making it possible to establish the connection on the mobile telephone network. .

As explained above, the server 50 will allow to provide users with a service of access to one or more functionalities of the registered motor vehicles, by means of their mobile terminals.

The commanded functionality may be for example the unlocking of the doors of the vehicle or the starting of the vehicle.

The user may be the owner of the vehicle, or any other person authorized by the latter and registered in the server 50.

This service must then be secured to prevent unauthorized persons from accessing the features of motor vehicles.

The subject of the present disclosure then relates more specifically to a method of securing this service when the owner of a motor vehicle 10 wishes to modify one of the information stored in the server 50.

It may be noted, in a preliminary manner, that this method will systematically comprise four main stages, namely:

a step of reception by the server 50 of a request for modifications of the information relating to the owner of a motor vehicle 10, comprising an identifier (for example that of the vehicle) and at least one information item to be modified,

a step of searching for a record in the server 50 associated with the identifier VID,

in case of registration found, a step of reading the contact information of the owner registered in the recording, and sending to said owner of a request message for validation of said request, and - In case of receipt of a message from the owner validating said request, a step of modifying the record (or alternatively of creating a new record in the server) so that it stores each information to be modified.

To understand the present invention, we can consider two cases, the one where the owner of the vehicle changes (the information to be modified in the server 50 including including names and first names and contact information of the owner), and where the owner changes mobile terminal (the information to be modified in the server 50 then including the IMEI number of the mobile terminal, and possibly the telephone number associated with this mobile terminal).

Consider first the case of a sale or an assignment of the motor vehicle 10 by its "former owner" (or "original owner") to a "new owner".

FIG. 3 then presents in detail the main steps of a registration process (or enrollment) of the new owner on the server 50, so that he can access the service of control of the functionalities of the motor vehicle by means of his terminal mobile 20.

It should be noted that prior to the implementation of such a method, the mobile terminal 20 of the new owner is not specifically prepared for the control of functionalities of the motor vehicle 10 and does not include any data associated with the motor vehicle 10. This may for example be the mobile phone commonly used by the new owner of the motor vehicle 10.

Likewise, before the implementation of the method, the mobile terminal 20 of the new owner is unknown to the motor vehicle 10 which is therefore not aware of any data associated with this mobile terminal 20.

On the other hand, it will be considered here that the former owner had identified himself with the server 50, so that the database D includes, in a record D1 associated with the motor vehicle 10, information relating to this former owner (for example an identifier, a phone number associated with his mobile terminal, his name and surname, ...). It will be noted here that the mobile terminal of the former owner will be referenced 20 'in FIG.

It is considered that, for the implementation of the method of FIG. The new owner has access to the motor vehicle 10 by conventional means, for example by a physical key that the former owner has given him.

In the embodiment described here, the new owner carries and uses the mobile terminal 20 which, as described above, is in communication on the one hand with the electronic control unit 1 1 via a wireless link (for example of the Bluetooth type) and on the other hand with the server 50 via a radio link to the base station 31, then via the mobile telephone network 30 and the public network 40.

The mobile terminal 20 can thus be used, in the embodiment described here, as a gateway for data exchange between the electronic control unit 1 1 of the motor vehicle 10 and the server 50, as described below.

Alternatively, other means of communication could be used between the vehicle and the server 50, for example a communication module (sometimes called "Telematic Control Unit") fitted to the vehicle and designed to establish a (direct) communication between the vehicle and the mobile phone network.

The method of FIG. 3 begins in step E1 at which the new owner declares himself to the server 50 as the new owner of the motor vehicle 10.

For this, it can first be installed in the motor vehicle 10, and wait for a Bluetooth link is established in a conventional manner between the mobile terminal 20 and the electronic control unit 1 1 of the motor vehicle 10.

It can also download the user application made available by the manufacturer of the motor vehicle. This user application may for example be downloaded to the "online store" associated with the operating system embedded on its mobile terminal 20. In practice, if it has an iPhone ^® , the user can download this user application on the Apple store ^® .

Once this link has been established and this user application has been downloaded and installed on its mobile terminal 20, in step E1, the new owner communicates to the server 50 a request for a change of ownership of the motor vehicle 10 here comprising a user identifier UID1, the login VID of the motor vehicle 10, and the telephone number associated with the mobile terminal 20 used.

In one conceivable embodiment, it uses the user application for this purpose, the latter being programmed to request the new owner to enter the aforementioned identifiers UID1, VID and to transmit them to the server 50. In another conceivable embodiment, the new owner connects to the server 50 by entering the http address of the server 50 in a browser executed by the processor 22 of the mobile terminal 20, and for example captures the aforementioned identifiers UID1, VID and its telephone number in a form then transmitted to the server 50.

The user ID UID1 of the new owner may come in different forms. For example, it could include the first name and surname (s) of the new owner, and / or his pseudonym and / or date of birth and / or e-mail address and / or phone number and / or mobile terminal identifier. (such as the IMEI number). It will be considered later in this presentation that this identifier will include the surname and first name (s) of the new owner, as well as his phone number.

The VID identifier of the vehicle is for example of the "Vehicle Identification Number" type. It will have been provided by the previous owner to the new owner, along with the vehicle papers. However, it would be possible alternatively to use another identifier associated with the motor vehicle 10, in particular the serial number N of the electronic control unit 11 of the motor vehicle 10.

The user ID UID1 and the vehicle identifier VID considered in association form an electronic certificate of ownership of the vehicle for the proposed service.

The server 50 receives the user ID UID1 and the vehicle identifier VID in the step E2 and stores these identifiers, at this stage, in a zone dedicated to the vehicles for which the registration to the service of control of functionalities of the vehicle by means of of the mobile terminal is in progress.

In the next step E3, the server 50 will check whether the motor vehicle 10 is already registered in the database D or if it is a new motor vehicle to be recorded in it.

It goes for that search in its database D a record in which the vehicle identifier VID would be stored. It will be considered here, in the context of the present invention, that a record D1 is found, so that the method continues in a step E5.

If no registration was found, the motor vehicle 10 would be considered never to have been registered in the database D. The process would then continue to E4 operations during which not only the new owner but also the vehicle should enlist with the server.

Steps E5 and following will then be implemented by the server 50 so that the latter can ensure that the person who transmitted the request for change of ownership is the new owner of the motor vehicle 10.

These steps will consist in checking with the former owner that the latter owner is no longer the legal owner of the motor vehicle 10, then possibly identifying the new owner (the latter being considered as such if he has a physical object particular - here the physical key).

For this, the server 50 reads in step E5 the phone number of the old owner, which is stored in the D1 record of the database D.

In the next step E6, the server sends on the mobile terminal 20 'of the former owner a message asking if he has actually sold his vehicle.

This message may be transmitted for example as a short message or SMS (for "Short Message System"). Alternatively, it could be an email or even a physical mail.

The message then appears on the touch screen 27 of the mobile terminal 20

(step E7). It will be considered here that this message includes two http links, one to validate that the motor vehicle 10 has actually been sold, the other to answer that the former owner still owns the vehicle.

The former owner may then choose not to answer or reply that he is still the owner of the vehicle, in which case the process is interrupted (step E0).

On the contrary, it can validate that the motor vehicle 10 has actually been sold, in which case a favorable response message is transmitted from the mobile terminal 20 'of the former owner to the server 50. Upon receipt of this message, the new owner could be directly registered in the server 50.

However, here, for greater security, steps E8 and later will be undertaken before validating the registration of the new owner in the server 50.

The server 50 then triggers the continuation of the registration process by sending to the electronic control unit 1 1 of the motor vehicle 10 an INS instruction to check the presence of the new owner in the motor vehicle 10 (step E8).

Upon receipt of this INS instruction, the electronic control unit

1 1 command in step E9 generation by the user interface 18 an indication asking the new owner to perform one or more action (s) ACT.

This indication may be a visual indication (for example a light signal or a display on a screen of the user interface 18) and / or sound (for example a particular sound or a voice message).

The action or actions requested preferably include the use of the physical key (for example, the support, possibly simultaneous, on one or more buttons of the physical key, or the starting and / or stopping of the engine. with the physical key). Alternatively, it (s) may comprise an action of the new owner on the motor vehicle 10, for example a button press of the user interface 18, an opening and / or a door closure (in these variants, these actions can only be implemented if the new owner actually has the physical key).

The new owner performs the action (or actions) requested

ACT at step E9.

The electronic control unit 1 1 detects in step E10 whether the action performed by the new owner corresponds to the requested action ACT (leaving for example a predetermined duration to the new owner to perform the action).

In case of failure (that is to say if the new owner does not perform the requested actions within the allotted time), the electronic control unit 1 1 proceeds to the step E1 1 which ends to the registration process. An error message may be displayed on the user interface 18 of the motor vehicle 10.

On the other hand, if the new owner correctly completes the requested ACT actions within the allotted time, it is considered that all the conditions required to complete his registration in the database D are fulfilled and that the service of control of functionalities of the vehicle by means of the mobile terminal can be started.

Then, during a step E12, the electronic control unit 1 1 of the motor vehicle transmits to the server 50 an authentication message of the new owner.

On receipt of this message, the server 50 disables the UID0 identifier of the previous owner, as well as all the rights attached (step E13).

Here, the UID0 identifier of the old owner is erased from the record D1 of the database D. It can then be archived in another database.

Alternatively, the entire record D1 could be deleted or archived.

In any event, the server 50 then ceases the updates of the virtual keys VK (which is recalled that they have a limited validity period) attached to the electronic certificate of ownership of the former owner of the motor vehicle 10.

As a variant, the server 50 can transmit to all the mobile terminals 20 stored in the record D1 associated with the motor vehicle 10 a request to delete the virtual keys that these mobile terminals 20 store.

In both cases, the server 50 erases all the virtual keys VK that were recorded in the record D1. Simultaneously, it may be provided that the server 50 controls the sending to the mobile terminals that used these virtual keys VK a message warning them that they can no longer benefit from access to the motor vehicle 10 using their terminals mobile 20.

Then, during a step E14, the server 50 proceeds to the registration of the UID1 identifier of the new owner in the D1 record of the database D, as well as to the registration of his telephone number. .

As a variant, this inscription could be made in a new database record, in association with the identifier VI D of the motor vehicle 10.

Once this registration has been completed, the server 50 generates a new virtual key VK which it stores in the record D1 and which it sends to the mobile terminal 20 of the new owner (step E15).

This step of transmission of the virtual key VK is not the subject of the present invention, it will not be described here in detail. It can simply be explained that it is initiated by sending a short message to the mobile terminal 20, using the telephone number stored in the record D1 of the database D.

At the end of this step, the mobile terminal 20 has a virtual key

VK (step E16) which allows the new owner to have access to the functionalities of his vehicle by means of his mobile terminal 20.

Once the virtual key VK is issued, the enrollment process of the new owner ends.

Now consider the case where the new owner of the motor vehicle 10 does not register with the server 50.

It may happen that the new owner does not wish to benefit from the access service to the vehicle by means of a mobile terminal, or that he is not informed of the possibility of benefiting from this service.

It is understood that in this case, the former owner remains free to fraudulently use the motor vehicle 10 by using the virtual keys VK which he still has in his mobile terminal 20 '.

It is then planned to store in the server 50 information to prove a posteriori the fraudulent use of the vehicle by its former owner.

For this, the user application registered in each mobile terminal 20 is programmed to transmit to the server 50, whenever the mobile terminal 20 is used to unlock the doors or to start the vehicle engine, information relating to the identity of its owner and at the time of said access. This information can be directly transmitted to the server, or can be transmitted later if the mobile terminal

20 does not have access to the mobile phone network.

Thus, each record D1 of the database D stored in the server 50 stores a log in which are listed all these accesses. This log can thus in practice memorize the telephone number or the IMEI code of the mobile terminal 20 used, as well as the date and time of access to the motor vehicle 10.

In this way, in the event of a dispute, this newspaper may serve as evidence concerning the persons who have used the motor vehicle 10.

Advantageously, a peer log is maintained by the electronic control unit 1 1 of the motor vehicle 10.

Thus, at each access to one of the functionalities of the motor vehicle by a user, the electronic control unit 1 1 stores in its storage unit 14 information relating to the identity of the user (for example the IMEI number of its mobile terminal 20) and at the moment when said access has taken place.

In this way, when the mobile terminal 20 does not have access to the server 50, the vehicle log is still updated. Thus, subsequently, when a mobile terminal (the same or another) having access to the server 50 is used by a user to access the vehicle, the mobile terminal serves as a gateway to allow the information contained in the vehicle log to to be transmitted to the server 50.

An advantage is that even if the server log is not up to date and the motor vehicle has been stolen and found, it is possible to analyze the vehicle log to control all access to the vehicle.

To further reduce the risk of fraudulent use of the motor vehicle 10 by its former owner, it may be provided to incite, or to force the new owner to declare himself as such to the server 50.

This incentive may take the form of messages displayed on the user interface 18 of the motor vehicle 10.

Thus, the electronic control unit 1 1 may be provided to control the display, at regular intervals, name and surname of the owner of the vehicle registered in the server 50 (for example at each start of the motor vehicle 10).

Thus, by seeing first and last name that are not his, the new owner of the vehicle will be encouraged to declare himself as such to the server 50.

Alternatively, it can be provided that the electronic certificate of ownership of each motor vehicle has a limited period of validity and that the the vehicle owner is forced to update it at regular intervals.

In this variant, the date of creation of the electronic property certificate can be stored in each record of the database.

So, for example every anniversary of this creation date, we can force the owner to update his certificate of electronic property. This update may for example be performed by asking the owner to use his physical key, to enter his last name and first name on the user interface 18 of the motor vehicle 10 and connect his mobile terminal 20 to the electronic control unit 1 1 in Bluetooth.

Then, these first and last names and the identifier of the mobile terminal 20 will be compared by the server 50 with those stored in the corresponding record of the database D.

If they match, the validity of the electronic certificate of ownership will be extended by one year.

In the opposite case (in case the owner of the vehicle has changed), the new owner will be forced to enlist with the server, according to the method described above.

It is now possible to envisage the second example of implementation of the invention, that in which the owner of the vehicle has changed his mobile terminal 20 and wishes to register this new terminal 20 in the server 50.

In this second example not shown in the figures, the owner initiates the registration process of this new mobile terminal 20 in the server 50 by communicating to the server 50 a mobile terminal change request.

For this, he starts by downloading the user application made available by the manufacturer of the motor vehicle, then he chooses in this application the menu allowing him to issue such a request.

In this menu, the owner enters information, including an identifier allowing the server 50 to find the record D1 corresponding to the motor vehicle 10 of the owner.

This identifier will preferably be the identifier VI D of the motor vehicle 10.

Alternatively, it could be the UID of the vehicle owner. When it receives this information, the server 50 searches in its database D a record in which the vehicle identifier VID would be stored.

It will be considered here, in the context of the present invention, that a record D1 is found.

The following steps will then be implemented by the server 50 so that the latter can ensure that the person who transmitted the request for change of mobile terminal is the owner of the motor vehicle 10.

For this, the server 50 reads the telephone number stored in the D1 record of the database D, then sends on this phone number a message asking the owner if he has indeed changed mobile terminal.

This message may be transmitted for example in the form of a short message or SMS (for "Short Message System").

In a variant or in the absence of a response (particularly in the case where the owner has also changed his telephone number), the message may be transmitted in the form of an electronic mail or a paper mail.

As soon as the owner validates the received message, the IMEI number of the mobile terminal 20 is registered in the server 50, as a new identifier of the mobile terminal of the owner of the motor vehicle 10.

Here again, for more security, other steps could be taken before validating the registration of the IMEI number of the new mobile terminal in the server. It could thus be asked the owner to validate this registration, by performing one or more action (s) ACT of the type described above.

Claims

1. Method for securing a control service enabling a motor vehicle owner (10) equipped with a mobile terminal (20) to access at least one feature of the motor vehicle (10) by means of the mobile terminal (20) , said control service being operated by means of a server (50) in which are stored records which each associate to an identifier (VID; UID), information relating to the owner of said motor vehicle (10), said information comprising at least contact details of said owner,

characterized in that it comprises the following steps:

a) reception by the server (50) of a request for modifications of information relating to a motor vehicle owner (10), comprising an identifier (VID, UID) and at least one item of information to be modified,

b) search for a record in the server (50) associated with the identifier (VID; UID),

c) in the case of a recording found, reading the contact details of the owner registered in said record, and sending said owner a request message for validation of said request,

d) when receiving a message from said owner validating said request, modifying said record or creating a new record in the server (50), so that the server (50) stores each information to be modified.

The security method of claim 1, wherein the owner information further includes an identification number of said mobile terminal (20),

in step a), the information to be modified comprises an identification number of a new mobile terminal (20), and

in step d), the identification number of said new mobile terminal (20) is recorded in the server (50).

3. Securing method according to claim 1, wherein said identifier (VID) characterizing the motor vehicle (10), the owner information comprising an identifier (UID0) of the owner,

in step a), the information to be modified comprises an identifier (UID1) of a a new owner who purchased the motor vehicle (10) from the original owner, as well as the contact information of the new owner, and

in step d), the identifier (UID1) and the contact coordinates of the new owner are stored in the server.

4. Securing method according to claim 3, wherein in step d), the identifier (UIDO) of the original owner is disabled.

The security method according to claim 4, wherein the mobile terminal (20 ') of the initial owner storing at least one virtual key (VK) for access to the functionality of the motor vehicle (10), when the identifier ( UIDO) of the original owner is disabled, said virtual key (VK) is blocked and / or the automatic update of said virtual key (VK) is suspended.

6. Securing method according to claim 5, wherein, said record of the server (50) storing contact details of at least one other user of the motor vehicle (10) equipped with another mobile terminal storing at least one other virtual key access to the functionality of the motor vehicle (10), when the identifier (UIDO) of the original owner is disabled, said other virtual key is blocked and / or the automatic update of said other virtual key is suspended, and an end of validity information message of said other virtual key is sent to said other user, by means of the contact coordinates stored in the record.

7. Securing method according to one of claims 3 to 6, wherein, after said step d), the server (50) transmits to the mobile terminal (20) of the new owner a virtual key (VK) access to the functionality of the motor vehicle (10).

8. Securing method according to one of claims 3 to 7, comprising a step of detecting an action of the new owner on a physical object related to the motor vehicle (10), wherein said step d) is further conditioned by said detection.

9. Securing method according to claim 8, wherein the physical object is a physical key capable of controlling the unlocking of the doors of the motor vehicle (10).

The security method according to one of the preceding claims, wherein, the owner information including an owner identifier (UID), when an owner identifier (UID) stored in the server (50) is unchanged for a duration greater than a predetermined threshold, there is provided a step of verification of the identity of said owner.

1 1. A security method according to one of the preceding claims, wherein, the owner information having a name or pseudonym of the owner, and the motor vehicle (10) being equipped with a display screen (18), it is provided to display frequently on said display screen (18) a message mentioning the name or pseudonym of said owner.

12. Securing method according to one of the preceding claims, wherein, wherein the contact details stored in each record of the server (50) include an e-mail address and / or a telephone number.

13. Securing method according to one of the preceding claims, wherein, the mobile terminal (20) being adapted to communicate with the server (50), after each access of the owner to the functionality of the motor vehicle (10) with a mobile terminal (20), there is provided a step of transmission by said mobile terminal (20) to the server (50) of information relating to the moment when said access has occurred.

14. Securing method according to the preceding claim, wherein the server (50) stores, in the record associated with said motor vehicle (10), a log in which are stored, since a specified date, information relating to the identity. of each user accessing the motor vehicle (10) and at the time of each access to the functionality of the motor vehicle (10).

15. Securing method according to one of the preceding claims, wherein after each access of a user to the functionality of the motor vehicle (10) through a mobile terminal (20), a control unit (1 1) of the vehicle automobile (10) stores information relating to the identity of the user and when said access has taken place.