EP1843306A2 - Method for controlling an emergency device and method for controlling a receiver device for receiving emergency calls - Google Patents

Abstract

The method involves recognizing an emergency access in a motor vehicle. A radio communication from an emergency device to a public safety answering point is established, and temporary identification data is assigned to the radio communication. Temporary identification data is stored in the emergency device. Minimum data information for the authentication of the vehicle and determined position data for describing the position of the motor vehicle are transmitted. Independent claims are also included for the following: (1) a method for controlling a receiving device for receiving an emergency call (2) an emergency device attached to a vehicle (3) an emergency call centre with a comparator device (4) an emergency call system for development of emergency call information.

Description

The present invention relates to a method for controlling an emergency device and a method for controlling a receiving device for receiving emergency calls. Furthermore, the invention relates to an emergency device, an emergency call center and an emergency system.

A long-standing problem is the timely and targeted triggering / handling of an emergency call, the so-called "eCall", after an emergency situation has arisen. Especially in the automotive industry, the correct method for controlling an emergency call is of great importance. Thus, in the motor vehicle sector emergency systems are permanently installed in a motor vehicle and send an emergency call to an emergency call center in the event of an emergency, so that there can be triggered and controlled appropriate assistance.

Thus, for example, the car manufacturer Peugeot offers a corresponding emergency system in which in case of accident from the vehicle a coded SMS is sent to a support platform when a corresponding Peugeot emergency call contract has been concluded. The emergency call can be triggered manually or automatically. The SMS contains the last 8 digits of the VIN so that the support platform can identify the vehicle and the customer. Furthermore, the SMS contains the phone data of the SIM card, which must be in the car at the time of the emergency call, as well as accurate location data of the vehicle. The support platform receives the SMS and calls the subscriber via the identification of the SIM card in the motor vehicle. During the telephone conversation between the support platform and the driver, a first assessment of the situation, such as vehicle localization, takes place The severity of the accident, the number of casualties, etc. If required by the circumstances, the support platform alerts the public services (police, fire brigade, ambulance) and transmits the information available to them. If the platform does not receive a response from the driver, public helplines are automatically sent to the scene of the accident, which can save precious seconds. However, this can only happen if the support platform has received a vehicle location report.

A disadvantage of such known emergency systems is that the inserted SIM card in the integrated in the motor vehicle emergency device is not only expensive to purchase, but also would significantly burden the mobile network of the corresponding operator. A single emergency solution solution based on SIM cards would mean that around 250 million vehicles in Europe will need 250 million SIM cards in the near future. As a result, the HLR (HLR = Home Location Register), i. the central subscriber database of a mobile radio network, the VLR (Visitor Location Register), i. the database of a mobile network are stored in the visitor, so participants in other networks, which are currently "roaming" in the relevant mobile network, and other network components in size and performance would have to be approximately doubled. The use of approximately 250 million SIM cards would greatly increase the investment expenditures of a mobile network operator as well as the necessary mobile network infrastructure to handle the additional 250 million SIM cards. 250 million additional necessary SIM cards would increase the signaling traffic extremely, so that it would come in the current network capacity to significant network congestion. This in turn would mean that emergency calls could not be put through and thus no or no timely response to the emergency call would be made.

The object of the present invention is to avoid the disadvantages of the known SIM card-based emergency systems described above. This should be a A method for controlling an emergency device, a method for controlling a receiving device for receiving emergency calls, an emergency device, an emergency call center and an emergency system are created.

This object is achieved by a method for controlling an emergency device with the features according to independent claim 1, by a method for controlling a receiving device for receiving emergency calls with the features of the independent claim 2, by an emergency device with the features according to the independent Patent claim 13, an emergency call center with the features according to independent claim 16 and by an emergency system having the features according to independent claim 21. Further advantages, features, details, aspects and effects of the invention will become apparent from the dependent claims and the description. Features and details that are described in connection with the inventive method for controlling an emergency device, of course, also apply in connection with the inventive method for controlling a receiving device for receiving emergency calls, the emergency device according to the invention, the emergency center according to the invention and the emergency system according to the invention, and in reverse, respectively.

An emergency device in the light of this invention is a device, in particular a motor vehicle, associated device which is designed such that data can be transmitted and received via a radio link. In particular, an emergency call can be sent to a corresponding emergency call center via such an emergency device. Preferably, the emergency device is a so-called "in vehicle system". That is, the emergency device is preferably located on a motor vehicle, in particular such that it is protected from unauthorized access to the motor vehicle.

An emergency call center, such as a PSAP (Public Safety Answering Point), in the light of this invention is a rescue center that receives emergency calls and forwards them to appropriate emergency services, such as police, fire departments, private or public rescue services.

• Erkennen eines Notfalleintritts bei einem Gegenstand;
• Aufbau einer Funkverbindung von der Notfalleinrichtung zu einer Notrufzentrale;
• Zuordnen von temporären Identifikationsdaten zu der Verbindung;
• Abspeichern der temporären Identifikationsdaten in der Notfalleinrichtung;
• Übermitteln zumindest einer minimalen Dateninformation zur Authentifikation des Gegenstandes sowie der ermittelten Positionsdaten zur Beschreibung der Position des Gegenstandes, gelöst.

According to the first aspect of the invention, the object is achieved by a method for controlling an emergency device with the following steps:

• Detecting an emergency occurrence of an item;
• Establishing a radio connection from the emergency facility to an emergency call center;
• Associating temporary identification data with the connection;
• Storing the temporary identification data in the emergency facility;
• Transmitting at least a minimum data information for the authentication of the object and the determined position data for describing the position of the object, solved.

Such a method enables the emergency facility to transmit minimum data information and determined position data for describing the position of the object via a radio link to an emergency call center without the use of a SIM card. In a first step, the emergency facility recognizes the occurrence of an emergency. This can be done by receiving a signal from suitable sensors or a controller. Thus, the emergency device can be associated with sensors associated with the object. The sensors can measure, for example, movements, vibrations or temperature changes of the object. If a previously defined limit is exceeded, a sensor sends a signal to the emergency facility. The signal can also be triggered by a device associated with the control device. This allows the signal to be triggered manually. For example, an occupant of a motor vehicle can actuate a switch element of a control device when an emergency situation occurs, so that it sends a signal to the emergency device. As soon as the emergency device receives the signal, it recognizes the occurrence of an emergency.

In a second step, a radio link is established from the emergency facility to an emergency call center. The radio connection can be set up according to the GSM, the UMTS or a radio standard of the future generation, for example the 4th generation of mobile radio. In a third step, the radio connection is assigned temporary identification data. As a result, a unique identification of the radio connection is possible. The operators of the mobile network used and the emergency call centers may integrate a technique that maintains the radio connection in the SIM-less system until the emergency call has been definitively cleared by an emergency call center. By assigning temporary identification data to the radio connection, the emergency facility assigns a unique identification.
In a fourth step, the emergency facility stores the temporary identification data.
In a last step, the emergency device transmits at least minimal data information for authenticating the object as well as the determined position data for describing the position of the object. The at least one minimal data information, also referred to as MSD (MSD = Minimum Set of Data), has identification data of the object, in particular of the motor vehicle. These may be, for example, an identification number, a type designation, a manufacturer information, etc. In a motor vehicle, the minimum data information may include, for example, the vehicle identification number, the vehicle manufacturer, the vehicle type, the color of the motor vehicle or also information about the service provider of the motor vehicle or the emergency device, such as telephone numbers or address information. By transmitting minimal data information containing the determined position data for describing the position of the object, the emergency call center receives all information necessary for initiating a rescue. The object, in particular the motor vehicle, is associated with a position determining device, which can determine the position of the object. After recognizing the emergency, the current position of the object is determined and made available to the emergency facility for forwarding to the emergency call center.

The temporary identification data associated with the radio connection are first transmitted to the emergency call center after the radio connection has been established, so that in the event of a breakdown of the radio connection, the emergency call center can trace back the emergency call. For this purpose, the emergency device stores the temporary identification data generated in a memory device after the emergency has occurred. By means of this temporary identification data, the radio connection can be rebuilt at any time after an interruption, since the radio connection and thus the emergency device has been assigned a unique identification. By assigning the temporary identification data to the wireless connection, the use of a SIM card or a USIM card is superfluous. The radio connection setup and the assignment of the temporary identification data to the radio connection takes place in the inventive method for controlling an emergency device only when an emergency, so that only then the radio network of a network provider is charged. This method avoids the costly purchase of SIM cards or USIM cards, making the use of the method inexpensive. Furthermore, the emergency facility charged the radio network only when an emergency occurs. A permanent signaling traffic between emergency facility and wireless operator falls away. By the method for controlling the emergency device is carried out at a movement of the emergency device no handover of the emergency device to the nearest base station of the radio network, which dwells the emergency device until the onset of the emergency in a passive state. This also protects the privacy of the vehicle user.

• Empfang eines Anrufes von einer Notfalleinrichtung;
• Abspeichern von temporären Identifikationsdaten;
• Empfangen zumindest einer minimalen Dateninformation zur Authentifikation der Notfalleinrichtung sowie von Positionsdaten zur Beschreibung der Position der Notfalleinrichtung, gelöst.

According to a second aspect of the invention, the object is achieved by a method for controlling a receiving device for receiving emergency calls, comprising the following steps:

• Receiving a call from an emergency facility;
• Storing temporary identification data;
• Receiving at least a minimum data information for authentication of the emergency device and position data for describing the position of the emergency device, solved.

After receiving a call / emergency call from an emergency facility, ie after the establishment of a radio link by the emergency facility, the receiving device stores temporary identification data to the call or to the established radio link. This assigns individual identification data to the call in the receiving device. The receiving device receives at least minimal data information for authentication of the emergency device and position data for describing the position of the emergency device or the object. By such a method for controlling a receiving device receives the receiving device in addition to the at least one minimum data information and the position of the emergency device and a clear assignment of the emergency call the emergency device. Thus, the receiving device, which is in particular part of an emergency call center, recognize the emergency call of the emergency facility at any time by the temporary identification data, if the connection to the emergency facility is interrupted. The renewed connection is established with the aid of the stored temporary identification data for the emergency call or the first radio connection. The temporary identification data can be transmitted with the emergency call to the receiving device. If this is not the case, the receiving device generates after the receipt of the emergency call temporary identification data for the emergency call. As a result, the receiving device can detect a renewed emergency call of the same emergency device without causing confusion or treating the same emergency call multiple times.
As soon as an emergency call or the radio connection breaks down, the emergency facility initialises a new emergency call with the aid of the temporary identification data. The receiving device is on the basis of the temporary identification data capable of recognizing that it is an emergency call that has already accumulated once and can the incoming emergency call with the Link information that already exists in the receiving device for this process. By storing the temporary identification data, the renewed emergency call, ie the renewed establishment of a radio link, of the emergency device is not recognized as a new emergency call.

• Bei Auftritt eines Notfalls, automatischer Aufbau der Funkverbindung von der einem vernotfallten Gegenstand, insbesondere einem Fahrzeug, zugeordneten Notfalleinrichtung zu einer Empfangsvorrichtung, insbesondere einer Notrufzentrale;
• Mit Aufbau der Funkverbindung, automatisches Erzeugen von temporären Identifikationsdaten und Zuordnen dieser temporären Identifikationsdaten zu der Funkverbindung;
• Abspeichern der temporären Identifikationsdaten in der Notfalleinrichtung und in der Notrufzentrale;
• Bei Auftritt des Notfalls, weiterhin Ermitteln der Position des Gegenstandes durch das Positionsbestimmungsverfahren;
• Über die aufgebaute Funkverbindung, Übermitteln zumindest einer minimalen Dateninformation zur Authentifikation des Gegenstandes sowie der ermittelten Positionsdaten zur Beschreibung der Position des Gegenstandes;
• Auslösen einer Notfallaktion auf der Basis der minimalen Dateninformation sowie der Position des Gegenstandes
• Nach Auslösen der Notfallaktion Beendigung der Funkverbindung durch die Notrufzentrale.

A preferred embodiment of the method for controlling an emergency device or the method for controlling a receiving device for receiving emergency calls is characterized by the following steps:

• In the event of an emergency, automatic construction of the radio link from the one Vernotfallten object, in particular a vehicle, associated emergency device to a receiving device, in particular an emergency call center;
• With establishment of the radio connection, automatic generation of temporary identification data and assignment of this temporary identification data to the radio link;
• Storing the temporary identification data in the emergency facility and in the emergency call center;
• Upon occurrence of the emergency, further determining the position of the object by the positioning method;
• About the established radio connection, transmitting at least a minimum data information for authentication of the object and the determined position data for describing the position of the object;
• Triggering an emergency response based on the minimum data information as well as the location of the item
• After triggering the emergency action termination of the radio connection by the emergency call center.

Such a procedure handles an emergency situation easily and quickly, without the prior registration of the emergency facility in the network operator of the network operator. The costly use of a SIM card or a USIM card can be omitted. The emergency device is not permanently searched in the radio network of the network operator, so that no constant signaling traffic takes place. This will be the nets the corresponding network operator charged only slightly more. By allocating the temporary identification data, the emergency call or the radio connection can be recognized again at any time both by the emergency device and by the receiving device, in particular the receiving device of the emergency call center.

The present invention enables a SIM-unlatched emergency device to rebuild an aborted emergency call using temporary identification data until it is terminated by the emergency device.

The advantageous method steps listed below relate to one of the two methods described above or to both methods described above and to the preferred embodiment of the method described above.

A method is preferred in which the temporary identification data is deleted when the radio connection is terminated. As a result, after the end of the radio connection, a new emergency call can not be made which reuses the temporary identification data generated in the previous emergency call. Thus, a confusion of the emergency call with a previous emergency call, i. a previous accident, avoided in the receiving device.

The temporary identification data can be generated in the emergency facility and transmitted to the emergency call center. In this case, the temporary identification data are transmitted to the receiving device or the emergency call center after the establishment of the radio link first, before the at least one minimum data information for the authentication of the object and the determined position data for describing the position of the object. Thus, the receiving device or the emergency call center first receives the identification data of the established radio connection, so that in the case of an interruption of the radio connection and an incomplete transmission of the at least one minimum data information for the authentication of the object As well as the determined position data for describing the position of the object, in a renewed connection setup, the receiving device can build on the previously sent in advance sent incomplete information. The receiving device thus does not trigger two different emergency actions on the basis of the minimum data information as well as the position of the object.

Alternatively, the temporary identification data may be generated in the emergency call center and transmitted to the emergency facility. After receiving the call or the emergency call of the emergency device, the receiving device or the emergency call center immediately generates temporary identification data for identifying the emergency call or the radio connection. As a result, the emergency call center can recall the emergency facility if there is incomplete transmission of the at least one minimal data information for authentication of the object and of the determined position data for describing the position of the object. Without the temporary identification data, the emergency call center would have no identification of the emergency facility, whereby a return connection would not be possible.

A method is preferred in which the at least one minimum data information or at least parts of the minimum data information transmitted by the emergency facility is checked for admissibility in the emergency call center. Before the triggering of an emergency action, the emergency call center checks the at least minimum data information for admissibility. That is, to limit possible abuse, the emergency call center is only forwarded to an emergency service, such as the police, the fire brigade or other organizations, if the at least minimum data information has been checked by the emergency call center and classified as "permissible". For example, identification numbers of the emergency facility can be checked for plausibility. For example, in the case of the minimum data information of a motor vehicle, it could be checked whether the vehicle identification number appears plausible. Further, the other data information, such as the vehicle manufacturer, the vehicle type, the Vehicle color or even the service provider of the emergency facility are used as a plausibility parameter. If, for example, "vehicle manufacturer: BMW and vehicle type E500" is transmitted as the minimum data information, then the emergency call center recognizes that there is a discrepancy since the vehicle manufacturer BMW does not know the vehicle type designation E500.

Parts of the minimum data information are permanently assigned to an object so that no misinformation may be present here. That is, for the inventive method, it is a necessary component that the emergency device and thus the minimum data information over the entire life cycle of an object are permanently assigned to this. The unchangeable minimum data information in motor vehicles are, for example, the chassis number, the color and the service provider, while the variable minimum data information in motor vehicles is, for example, the accident location, the direction or the accident time. Normally, in the case of a motor vehicle, the emergency device should be firmly integrated into the motor vehicle during production, so that no unauthorized access to the emergency device is possible from the outside. The emergency device is turned on during installation in the motor vehicle and provided with minimal data information. That is, an emergency device installed in a motor vehicle can go through a procedure in which it is supplied with the values required for composing the minimum data information, such as vehicle identification number, vehicle manufacturer, vehicle type, vehicle color, and service provider identifications (telephone number, etc.). The necessary data information can be made available in various ways. On the one hand, this can be done by directly entering data into the emergency device, eg by means of a suitable man-machine interface, or "remotely" by means of a connection to a computer system or to a dedicated emergency facility service center. Other suitable functionalities are also conceivable. To generate the minimum data information, generated temporary identification data can help.

A further preferred method step provides that in the event of an interruption of the radio connection before its termination by the emergency device, an automatic rebuilding of a radio connection to the emergency call center takes place and that the stored temporary identification data is transmitted to the emergency facility. After triggering an emergency action, the radio connection is terminated by the emergency call center. That is, before the emergency action is triggered, the radio link must not be interrupted. The triggering of the emergency action, i. the notification of auxiliary services takes place as soon as the emergency call center has received the at least one minimum identification data and the position data of the object. Before triggering, a permissibility check can still be carried out as already described. If these requirements are fulfilled, the radio connection can be terminated, since all necessary information of the emergency call center is available. If the radio connection before termination, i. before the complete transmission of the mandatory information data is interrupted, the emergency facility automatically establishes a new connection, stating the temporary identification data associated with the first connection establishment. The rebuilding of the radio connection takes place until the emergency call center terminates the radio connection. In one embodiment, it is conceivable that the dialing ends after a certain number of dialing attempts. A manual termination of the radio connection by a user of the emergency device should be prevented by the method.

The transmitted temporary identification data are compared in the emergency call center with the temporary identification data stored there for the purpose of recognizing a previously established but interrupted radio connection. This prevents multiple emergency actions from being triggered by the emergency call center. Since the temporary identification data are transmitted first after the establishment of the radio connection, a further radio connection can be assigned to the first incomplete radio connection. The temporary identification data can be transmitted before the MSD as a data block or in be transmitted to the MSD. Furthermore, the temporary identification data can be generated from the MSD in the emergency call center.

A method in which the automatic structure or the reconstruction of a radio connection to the emergency call center is such that the emergency device repeatedly dials the emergency center until the side of the emergency call center confirmation of the connection setup is carried out, is advantageously feasible. As an alternative to the direct termination of the radio connection by the emergency call center, the emergency call center can send a confirmation of the connection setup to the emergency facility. As a result, the emergency device receives a direct feedback of the emergency call center, whereby the emergency facility can set the repeated dialing of the emergency call center. This so-called feedback is advantageous when it comes to the fact that proof must be provided that the handling of the emergency call was made properly. Thus, the user of the object, the driver of the motor vehicle, receives proof that the emergency device associated with the object has functioned properly if the rescue measures have not been initiated correctly and in good time. This may be important for any recourse claims.

Advantageously, a method in which the triggering of an emergency action comprises forwarding the minimum data information and the position of the object to at least one rescue service. As a result, the rescue service, such as the police, the fire brigade or other appropriate support services, receives all necessary information to initiate appropriate appropriate rescue operation.

A method, in which the at least one minimal data information has at least one individualizing identification of the object, on the one hand provides the advantage that this individualizing identification can be used as a temporary identification. By an individualizing marking of the object it is easier to carry out a targeted rescue operation.

It is thus possible for the emergency call centers to be able to access data memories in which information about all emergency facilities or about the objects associated with the emergency facilities is stored. The receiving device of an emergency call center can receive further important information about the object from an example centrally available storage device after the transmission of the individualizing identification of the object.

Particularly preferred is a method in which the article is designed as a vehicle and in which the at least one minimum data information has the chassis number and / or the manufacturer and / or the vehicle type and / or the vehicle color and / or identification codes of other service providers. As a result, an individual minimum data information can be assigned to each motor vehicle, so that the motor vehicle can be perfectly identified in the event of an emergency. It is also conceivable to provide address information about the holder of the motor vehicle or a person associated with the holder.

A method in which, in addition to the at least one minimum data information, further information data, in particular voice information, is transmitted is particularly advantageously feasible in order to initiate an effective and rapid rescue operation. About the established radio connection and voice data can be transmitted. In this case, the voice data can be transmitted unidirectionally or bidirectionally from the emergency device to the receiving device of the emergency call center. On the one hand, the user of the emergency facility can send a message in the direction of an emergency call center without the latter sending an answer. For this purpose, an answering machine functionality, possibly with voice recognition, can be provided in the receiving device of the emergency call center. In another embodiment of the method, a conversation between the user of the emergency facility and a person in the emergency call center can be guided via the established radio connection. This allows optimally necessary for the rescue information to the emergency call center to get redirected. For this purpose, the emergency device has a voice input device with a microphone. The analog voice information is converted in the emergency device into digital voice data and transmitted via the radio link to the receiving device of the emergency call center. The emergency device preferably also has a loudspeaker device, so that the user of the emergency device can possibly receive instructions from the emergency call center.

Also preferred is a method in which the radio connection is established as a GSM, UMTS connection or networks that can be used in the future. As a result, standardized radio networks for transmitting the at least one minimum data information as well as the determined position data can be used. In addition to the 2nd and 3rd generation radio networks already implemented, the procedure is also to be designed for radio networks of the coming generations, such as the 4th generation.

A method in which temporary identification data in the form of a hash value or a checksum or another suitable manner can be generated, is particularly easy to use. A hash value is a number or string that is calculated from a document or program. The hash value can be used to uniquely identify and recognize a file. That is, a hash value is an almost unique identifier, a so-called electronic fingerprint, a larger set. If the hash value of a user or an emergency facility is recorded in a database by a regulatory authority, then this user or emergency facility is unequivocally identified. A similar procedure, as with the hash value, is checksuming. This is a method of error detection implemented in most network protocols and in code systems. The checksum is calculated from the contents of a data package or a file and is transmitted along with it. The checksum can be calculated in the simplest case by the checksum, other methods are complicated mathematical algorithms used, such as in the cyclic block test or at the error correction. Depending on the checksum method, the block checksum is divided by a specific number, the so-called generator polynomial, and the non-divisible residual amount is added inverted to the block checksum to be transmitted. The result is a unique checksum that checks whether the message has been transmitted correctly. As a rule, the checksum number is transmitted at the end of the message. The receiving device uses the same algorithm, calculates the checksum and compares the number with the transmitted checksum. If the numbers are identical, the message is error-free, otherwise it is error-prone and will be rejected.

Furthermore, a method step which makes it possible for the at least one minimal data information to be variable in the emergency device is preferred. As a result, the emergency device can be assigned to another object, for example another motor vehicle. However, the alteration of the at least one minimum data information should only be performed by an authorized person. Thus, it is conceivable that the emergency facility is reprogrammed by an authorized service provider.

According to a third aspect of the invention, the object is achieved by an emergency device which is associated with an object, in particular a vehicle, wherein the emergency device a triggering device for initiating a structure of a radio connection to an emergency call center, a radio module for automatically establishing a radio connection, an interface to the emergency call center, means for transmitting and receiving data, a memory device for storing temporary identification data, a memory device for storing at least one minimum data information associated with the object or an interface to a memory device for storing at least one minimum data information associated with the object, means for generating and / or or processing temporary identification data, a position-determining device or an interface to an external position-determining device.

Such an emergency device allows a quick and cost-effective handling of an emergency situation. An advantage of the emergency device is that this data can be sent to a receiving device, in particular an emergency call center, without having to register, for example via a SIM or USIM card, with a radio network provider. This saves considerable costs and burdens the wireless networks used, since only in emergency situations, a radio connection is established. As long as no emergency situation has occurred, the emergency facility remains passive, i.e., there is no permanent signaling traffic between the emergency facility and the network provider. The emergency device can be assigned to any conceivable object. It is conceivable, for example, that the emergency facility is also assigned to a person. However, the emergency device is preferably integrated in a motor vehicle. As a result, emergencies can be easily included in road traffic and appropriate rescue measures can be initiated.

The emergency device has a triggering device for initiating a setup of a radio link to an emergency call center. The triggering device first detects the occurrence of an emergency. This can be done by receiving a signal from suitable sensors or a controller. Thus, the triggering device of the emergency device can be linked to sensors that are associated with the object. The sensors can measure, for example, movements, changes in shape, vibrations or temperature changes of the object. If a previously defined limit value is exceeded, a sensor sends a signal to the triggering device of the emergency device. The signal can also be triggered directly by the tripping device. That is, the signal for initiating a setup of a radio connection to an emergency call center can be triggered manually. For this purpose, a switch element can be provided on the triggering device of the emergency device. An occupant of a motor vehicle can actuate the switch element of the triggering device in the event of an emergency situation, so that the establishment of a radio link to an emergency call center is initiated by the emergency device.

The emergency device also has a radio module for automatically establishing a radio connection to an emergency call center and an interface to the emergency call center. Furthermore, means for sending and receiving data are provided in the emergency facility.
The emergency device has at least one memory device for storing temporary identification data. When establishing a radio connection to an emergency call center, the emergency facility generates temporary identification data which are assigned to the radio connection. This allows the emergency call to be recognized at any time. In order for the emergency facility to be able to access the same temporary identification data during a renewed radio connection setup, these are stored in the memory device.
Furthermore, the emergency device has a memory device for storing at least one minimum data information associated with the article or an interface to a memory device for storing at least one minimum data information associated with the article. The storage device (s) is / are protected from access by unauthorized persons. The content of the memory device, ie the at least one minimum data information, is preferably only loaded once into the memory device. A change in the content of the storage device should only be possible by an authorized service provider.
The aforementioned memory devices may be separate memory devices, but they may also be designed as a memory device in a preferred embodiment of the emergency device.

The emergency facility further comprises means for generating and / or processing temporary identification data. By means of this means, upon occurrence of an emergency, the individual radio-frequency connection assigned individual temporary identification data can be generated.

By a position-determining device or an interface to an external position-determining device, which is part of the emergency device, can the exact position of the emergency device will be determined when the emergency occurs. The position-determining device is designed in such a way that after the detection of an emergency, the current position of the object is determined and the emergency device is made available for forwarding to the emergency call center. The position determination can be done for example via GPS.

The emergency device is preferably designed such that it has the means and devices necessary for carrying out the methods described above.

Advantageous is an emergency device which has a triggering device for automatic and / or manual initiation of a structure of a radio link to an emergency call center. Preferably, the triggering device sensors that can measure, for example, shocks, temperature changes or deformations, so that when exceeding a predetermined limit, a signal is forwarded to the emergency device, and additionally assigned switch elements for manual triggering of a signal.

Preferably, the emergency device is an integral part of the article. This means that the emergency device is arranged in or on the object so that it is protected from access from the outside. For example, in the production of a motor vehicle, the emergency device can be firmly anchored in or on the body of the motor vehicle. Access to the emergency facility should only be made by authorized service providers.

According to a further aspect of the invention, the object is achieved by an emergency call center which interfaces with at least one emergency device, a radio module for transmitting and receiving data to and from the emergency device via a radio link, a memory device for storing temporary identification data, means for generating and / or or processing temporary identification data, means for processing at least one of an object transmitted by an emergency device minimum data information, a device for triggering an emergency action on the basis of at least a minimum data information and the position of the object, means for terminating the radio connection to the emergency device, solved.

The emergency call center preferably has all the means and devices related to the emergency call center for carrying out the previously described methods. In particular, the emergency call center has a receiving device according to the invention previously described.

The emergency call center has an interface to at least one emergency facility, so that data can be sent and received via a radio module of the emergency call center. Furthermore, the emergency call center has a memory device for storing temporary identification data, so that the emergency call center can at least temporarily store the temporary identification data transmitted by an emergency device. Since the temporary identification data, as one of three different methods / possibilities, after the establishment of a radio link first sent to the emergency call center, the storage of this temporary identification data is of great importance, so that the emergency call center recognizes that a rebuilt radio link is a supplement to the first radio link is.

Furthermore, an emergency call center is preferred which has means for checking the admissibility of the at least one minimum data information transmitted by an emergency facility. This allows the emergency center to restrict the misuse of emergency equipment. The emergency center checks the submitted at least a minimum data information on admissibility before it triggers appropriate emergency action at a support service. Only when the at least minimal data information is plausible, the emergency call center sends the information necessary for coordinating a rescue operation to the auxiliary services.

An emergency call center which has a comparator device for comparing temporary identification data transmitted by an emergency device with temporary identification data stored in the emergency call center in order to recognize a previously established, but interrupted radio link, can be advantageously used. The comparator device makes it possible to "find again" an interrupted radio link. After establishing a new radio link through the emergency device detects the emergency call center that for this emergency already received a first incomplete emergency call, so that not two or more emergency actions are triggered by the emergency call center.

Furthermore, an emergency call center is preferred, in which the device for triggering an emergency action comprises means for forwarding the minimum data information as well as the position of the object to at least one rescue service. This ensures that the information necessary to rescue the item safely arrives at the appropriate rescue services, such as the police, the fire brigade or other emergency services.

According to the last aspect of the invention, the object is achieved by an emergency system for handling an emergency situation, with at least one emergency device described above and at least one emergency call center described above. The emergency system has means and means for carrying out the previously described methods. Such an emergency system, which has at least one emergency device described above and at least one emergency call center described above, represents a simple and effective emergency system to initiate appropriate emergency measures in an emergency service after the emergence of an emergency. Such an emergency system does not require a SIM or USIM card of a network provider, so that the use of such an emergency system is inexpensive to implement. Furthermore, no expensive network updates need to be done to handle the SIM or USIM cards. When using such a system, the existing wireless networks not unnecessarily burdened by constant signaling traffic. Only when an emergency occurs, a radio connection is established. Even if the limits of two radio cells are exceeded, there is no exchange of signaling between the emergency facility and the base stations of a radio network provider.

A possible embodiment of the emergency system, the method for controlling an emergency device or the method for controlling a receiving device for receiving emergency calls is described below. The emergency device is permanently installed in a motor vehicle. After the occurrence and detection of an emergency, a GSM, UMTS or 4G based voice and data connection to the nearest emergency call center (PSAP) will be established automatically. About the voice and data connection at least a minimum data information and determined by the emergency device position data of the despatched vehicle are sent to the emergency call center. To limit possible misuse, the emergency call can only be put through or prioritized under the proviso that the at least minimum data information (MSD) has been received, checked and classified as "admissible". For this purpose, the vehicle identification number VIN transmitted in the MSD and the other transmitted information can be used. This design could significantly reduce potential abuse because the MSD or parts of the MSD are securely stored in the emergency device and thus largely deprived of user access. This protects the MSD from volitional changes. The abuse is also prevented by the fact that the user can not end the emergency call itself. This is only possible through the emergency call centers.

The emergency call centers preferably have the option of "parking" the radio connection. In order to be able to provide effective assistance, the emergency call centers resume the parked radio connection to the emergency facility of a damaged vehicle if the capacity of the emergency call center permits this. It may be tactically sensible to arrange several simultaneous emergency calls and the then "recall" affected emergency facilities / motor vehicles. The wireless network operators and the emergency call centers maintain communication in the SIM or USIM-free system until the emergency call is definitively cleared by an emergency call center. This is done as a replacement for the SIM based callback option. In an eCall system, the emergency call centers are the only party that is allowed to terminate or terminate an emergency call. For this purpose, the emergency device generates a unique, temporary identification, which is transmitted during the transmission of the MSD in the first bytes. This could possibly also be a checksum or a hash value, which is formed via the transmitted MSD. Alternatively, the temporary identification may be generated by the radio network provider or the emergency call center and then transmitted to the emergency facility. This, inter alia, as part of the confirmation, which is sent from the emergency center to the emergency facility.

As soon as an emergency call breaks down, the emergency facility initializes a new emergency call with the aid of the temporary identification. On the basis of the temporary identification, the emergency call center is able to recognize that it is an emergency call that has already arrived and links the incoming emergency call with the information already available to the emergency call center for this procedure. As a result, the new emergency call is not recognized as a new emergency call and no further rescue measures are initiated. For the possibility of a clear assignment of the emergency call, it can also be advantageous to freeze the MSD generated in the emergency facility in the event of an emergency, in order to be able to use it again as an authenticator. Once the situation has been clarified, the emergency call center can establish the connection and instruct the emergency facility not to dial in again. This can be done by a new confirmation message in which this instruction is packaged. Thus the emergency call is finally ended. This call back option can be set up so that even the case can be covered, where in the course of time the dial-up takes place via several radio network providers.

There is also the possibility that an emergency system can periodically check its status. On the one hand, this can be triggered automatically every few weeks or manually. The emergency facility connects to a service center that is completely independent of the emergency call center. This approach would significantly reduce the impact of millions of emergency facilities on the network operators' radio networks (signaling traffic and authentication) and could also be used to reach the emergency facilities at regular intervals, e.g. to access information such as software updates that are downloaded and installed during periodic contact. In addition, the method could be used to test the entire communication chain by simulating an emergency call. In the event of a detected fault, this could be done to the driver of the motor vehicle, e.g. be signaled via HMI and he is asked to take action. Conversely, in the case of a suspected but unconfirmed failure of the emergency equipment components installed in the motor vehicle, the emergency facility could connect directly to the service center outside of the few-week period to check the entire system.

The emergency facility service center may also keep information for the emergency facility in stock, which the emergency facility may then download and thus update itself. This concerns software or the MSD in detail. This could be the case in the case of a repainting of the motor vehicle or if service provider information changes.

At the end of life of an item, the emergency facility may actively report to the emergency facility service center and deregister. Such a function could be provided via HMI. Alternatively, the emergency facility service center could provide this information, either provided by vehicle owners or involved by another party.

The emergency call center may be configured such that the malfunctioning or misconfigured emergency facilities may be deployed from the emergency system, e.g. by inclusion in a database (so-called black list). Emergency calls from such emergency facilities can then be handled so as not to jeopardize the effectiveness of the emergency response system.

Claims (22)

Method for controlling an emergency device with the following steps: - detecting an emergency occurrence of an item; - Establishment of a radio link from the emergency facility to an emergency call center; Assigning temporary identification data to the connection; - storing the temporary identification data in the emergency facility; - Transmitting at least a minimum data information for authentication of the object and the determined position data for describing the position of the object. Method for controlling a receiving device for receiving emergency calls, comprising the following steps: - receiving a call from an emergency facility; - Storing temporary identification data - Receiving at least a minimum data information for authentication of the emergency device and position data for describing the position of the emergency device. A method according to claim 1 or 2, characterized in that at the end of the radio connection, the temporary identification data are deleted. Method according to one of claims 1 to 3, characterized in that the temporary identification data generated in the emergency device and transmitted to the emergency call center and / or that the temporary identification data generated in the emergency call center and transmitted to the emergency facility. Method according to one of the preceding claims, characterized in that the at least one minimum data information transmitted by the emergency facility is checked for admissibility in the emergency call center. Method according to one of the preceding claims, characterized in that at an interruption of the radio connection before the termination of the emergency device, an automatic reconstruction of a radio connection to the emergency center, that the stored temporary identification data are transmitted to the emergency facility and that the transmitted temporary identification data in the emergency call center be compared with the stored there temporary identification data for the recognition of a previously established, but interrupted radio connection. Method according to one of the preceding claims, characterized in that the automatic construction or the reconstruction of a radio connection to the emergency call center takes place such that the emergency facility repeatedly dials the emergency center until the emergency call center is confirmed by the connection establishment. Method according to one of the preceding claims, characterized in that the triggering of an emergency action comprises forwarding the minimum data information and the position of the object to at least one rescue service. Method according to one of the preceding claims, characterized in that the at least one minimal data information has at least one individualizing marking of the object, in particular the object is designed as a vehicle and the at least one minimum data information is the chassis number and / or the manufacturer and / or the vehicle type and / or the vehicle color and / or identifiers of other service providers has. Method according to one of the preceding claims, characterized in that in addition to the at least one minimum data information further information data, in particular voice information, are transmitted. Method according to one of the preceding claims, characterized in that temporary identification data in the form of a hash value or a checksum or another suitable manner can be generated. Method according to one of the preceding claims, characterized in that the at least one minimum data information in the emergency device is changeable. Emergency device associated with an object, in particular a vehicle, characterized by a triggering device for initiating a setup of a radio connection to an emergency call center, a radio module for automatically establishing a radio connection, an interface to the emergency call center, means for sending and receiving data, a A memory device for storing temporary identification data, a memory device for storing at least one minimum data information associated with the object or an interface to a memory device for storing at least one minimum data information associated with the object, means for generating and / or processing temporary identification data, a position determination device or an interface to a external position determining device. Emergency equipment according to claim 13, characterized in that said means for carrying out the method according to one of claims 1 to 12, which relates to the emergency device. Emergency device according to claim 13 or 14, characterized in that the triggering device is designed for the automatic and / or manual initiation of a structure of a radio link to an emergency call center. Emergency call center, characterized by an interface to at least one emergency device, a radio module for sending and receiving data from and to the emergency device via a radio link, a memory device for storing temporary identification data, means for generating and / or processing temporary identification data, means for processing an emergency device transmitting at least one minimum data item associated with an item, means for initiating an emergency response based on the at least minimum data information, and the item location, means for terminating the radio connection to the emergency facility. Emergency call center according to claim 16, characterized in that this related to the emergency call center means for performing the method according to one of claims 1 to 12. Emergency call center according to claim 16 or 17, characterized in that said means for checking the admissibility of the transmitted from an emergency device has at least a minimum of data information. Emergency call center according to one of claims 16 to 18, characterized in that it has a comparator device for comparing temporary emergency data transmitted by an emergency device with temporary identification data stored in the emergency call center Recognize a previously established, but interrupted radio link again. Emergency call center according to one of claims 16 to 19, characterized in that the means for triggering an emergency action comprises means for forwarding the minimum data information and the position of the object to at least one rescue service. Emergency system for handling an emergency information, with at least one emergency device according to one of claims 13 to 15 and at least one emergency call center according to one of claims 16 to 20. Emergency system according to claim 21, characterized in that it comprises means for carrying out the method according to one of claims 1 to 12.