Method for anonymous use of a radio communications system

The invention relates to a method of using a communication system with a data transmission system, in particular a mobile radio network, by individual subscribers for transmitting information to at least one receiver, wherein an access code as a use authorization for the use of services of the communication system is required.

Mobile networks are known as special communications systems for transmitting information between equipped with mobile phones subscribers. The large spatial extent of a mobile network in particular enables a plurality of subscribers that move to almost any spatial positions at any speed, to transmit information to a receiver. The mobile network acts as a transmitter of information, ie, a switching and transmission performance of the participants availed for the duration of the connection, apply user fees for the usually. The user fees are thereby usually provided one of the two participants in the connection charge. This requires that the user of the mobile network can be uniquely identified, which is usually an assigned with the right to use mobile phone number, so that the owner of the access authorization the charges incurred can be provided by your mobile operator bill. An anonymous use of the intermediary services of a mobile network is not provided. Consequently, for example, appears a survey of current vehicle data of a plurality of individual vehicles for traffic monitoring, in which the detected current data is transmitted to a traffic computer via a cellular network, data protection law initially problematic because in such a case, under normal use of a mobile network, the anonymity of the driver would not remain safeguarded although a mobile network from a technical perspective for this transmission job would ideally suited.

It is <b>task</b> of the present invention, a method of using a communication system with a data transmission system, in particular a mobile radio network, specify in which an access code as access authorization for the use of services of the communication system is required, yet a complete anonymity of each participant in the transmission of information to a minimum a recipient is preserved.

The <b>solution</b> This object is inventively characterized by the features specified in patent claim 1. By the characterizing features of the dependent claims 2 to 10, this method is further ausgestaltbar in an advantageous manner. An apparatus for carrying out the method according to the invention comprises the features of patent claim 11.

The invention provides that a group of users is assigned a group identifier and also transmitted as part of the data, the group identification prevents handoff the access code. This access to the communication system is made possible therefore on the one hand, but on the other hand allowed no information pertaining to the individual Inanspruchnehmer the performance of the receiver.

The in some cases absolutely necessary unique distinctness of participants is thereby ensured in development of the invention that in each transmission of information to the recipient a constant at least for a period of time individual identification is transferred. The individual identification allows the recipient merely a distinction but no identification of the participants in the group, so that at different times sent by a subscriber data is assigned to one and not several participants, so it is used in the evaluation of the transmitted data, for example, no undesired data mixed and thus individual data profiles are buildable and evaluated.

Advantageously, the individual identification is generated by an identity server the data transmission system to which the recipient of the information has no influence.

Alternatively, it is proposed with the invention to be produced, the individual identification by the participant. With very little effort, in particular the vehicle location and / or time can be used when starting the car as an individual identifier.

In another embodiment, the individual identification becomes the recipient associated with the active participants for each first lying within a predetermined period of time information transfer a participant from the receiver, ie the participant receives from the receiver in the first information transmitting a new individual identification; the management of individual identifiers thus occurs through the receiver.

Appropriately, the individual identification is a random algorithm generated by a special algorithm, for example,.

A further advantageous embodiment of the invention is already assigned to the individual identification of the participants in the award of the group identifier.

To prevent abuse of performance of the communication system, it is proposed with the invention that the group ID to the participants only allowed a use of special services, in particular, only the transmission of information to a clearly defined set of recipients.

Alternatively, the participants of the group, the individual identification are associated with advantage even when allocating the group identifier.

A communication system for transmitting information to at least one receiver with a data transmission system, in particular to a mobile network, wherein an access code as a use authorization is required, includes an identification server, through the respective index is determined for each participant a group with assigned group ID. This figure is mitübertragbar at each transmission of information to the receiver as a constant, at least for a period of time individual identification of the subscriber, the transmission of code at each transmission of information to the receiver is advantageously carried out automatically. In particular, the measure may be a random number which is generated by a random number; a number such meets all the requirements to be placed on a complete anonymisation of information transmission in clear distinctness of all participants.

Use the procedure described below using the example of traffic data collection by virtue of a mobile radio network for the transmission of traffic data from each individual sample vessels to a traffic computer, the invention is exemplified below.

The embodiment relates to the specific case of the collection of traffic data by collecting and analyzing the driving data of individual test vehicles of a selected group of vehicles by an ex-sample vehicles arranged traffic computer. To receive the driving data, the traffic computer to a communication unit, which is equipped with an appropriate transmitter / receiver; on this is the traffic computer to a wireless network connected. The mobile network allows the spatially distributed data technology to connect to a road network moving sample vehicles at any time with the traffic computer. It is provided with appropriate facilities that enable the registration of each vehicle in the wireless network by receiving and decoding the access code to load, for example, about the identification of the holder of the right to use this with the resulting in the transmission of data charges.

The selected sample of vehicles whose travel data are to be recorded on the traffic situation survey, also have a transmitter / receiver such as a cellular phone, on which enables the transmission of driving data to the next receiving station of the mobile network, so that these can be forwarded via the mobile network to the traffic computer. An installed in the test vehicle traveling data acquisition system ensures the acquisition and processing of the driving data of the vehicle, for example, the current location and the average vehicle speed. A memory element of the transmitter an access code and in particular an associated group identifier is stored. The group ID and the access code are also transmitted via the radiotelephone to the cellular network, the access code for the proper application in the mobile network. The group ID is mitübertragbar over the radiotelephone to the cellular network and causes a blockage of the disclosure of the access code by the mobile network, in particular to the receiver, so that the anonymity of the sample vehicle, and the driver is back in full respect to the outside.

A very special, but very simple embodiment provides to use the phone number of the recipient as a group ID. This variant is particularly advantageous when the traffic computer as listed only the data of a single set of test vehicles regularly. In several groups, it is in this variant may have to assign the traffic computer several Telefonnummem, in which case each group respectively receives one of these Telefonnummem.

In the preferred embodiment, the communication system also includes an identification server, by, respectively, a measure can be determined for each participant, which is assigned a group ID. The code is preferably generated by an algorithm. With each transmission of information to the recipient, this figure is mitübertragbar as individual identification of the subscriber, the transmission of code at each transmission of information to the receiver advantageously takes place automatically by the communication system, ie reporting a vehicle with an access code and a group identifier a conversation to a particular recipient at , the communication system ensures that the transmitted information further comprises the assigned code. This figure is the. At least for a period, for example for a day or for a ride, consistent individual identification of this subscriber In particular, the measure may be a can be generated by a random number generator random number; a number such meets all the requirements to be placed on a complete anonymisation of information transmission in clear distinctness of all participants.

With the start of the test vehicle, the driving data of the test vehicle are provided for transmitting at predetermined temporal or spatial intervals. The radiotelephone then transmits the data as regularly along with the access code, the group identifier and the recipient's phone number to the mobile network. The cellular network then provides the basis of the transmitted telephone number to connect to the receiver, ie for example for traffic control. Due to the group ID, only the data, but not the participants identified access code, forwarded to the clearly defined in this example, customers, namely the traffic computer. If a participant from the identity server not assigned individual identification, so also carried the generation and assignment of individual identification. The cellular network then adds the data to be transferred the assigned individual identification of the corresponding subscriber and passes the so extended data to the traffic computer on. An abuse under these conditions is therefore not possible because the sender's identity is known only within the mobile network.

By submitting the individual identification is the traffic control possible to recover completely anonymous individual driving profiles. The travel data of the same sample can be assigned to the vehicle due to the individual identification clearly this vehicle. To which vehicle it is concrete, can not be determined with reference to the individual identification.

In alternative embodiments, the individual identifier is generated for example by the participants, in particular with a random algorithm. Or the vehicle location and / or time at the start of the vehicle is used by the test vehicle as individual identification and transferred with each transmission of information, which a particularly low additional expenditure.

Another very specific embodiment of the invention is already assigned to the individual identification of the participants in the award of the group identifier. In general, the individual identification may include a random algorithm by a special algorithm, for example, are produced; especially in the latter case, this variant is provided to maintain the anonymity of the participants in that the assignment of individual identification, although the traffic computer, but just randomly occurs, ie. without registration of individual identification, together with the personal data of the person served by the traffic computer

To prevent abuse of performance of the communication system, allows the Group ID to the participants only a use of special services, in particular the transfer of information only to a clearly defined set of recipients. To monitor the limited use of transmission services, a known control unit of the communication system is provided.

Naturally, it is also possible that the respective subscriber, the receiver, so the traffic computer, wherein the first transmission of the data within a predetermined time portion allocates the individual identification. Appropriately, the first data transfer is then carried out, for example, with a preceding zero identifier, which is in all further data transmissions replaced by the address assigned by traffic control individual identification. The individual identification is transmitted in such a case by the traffic computer during the first contact directly via the mobile network to the appropriate sample vehicle. It is definitely ensured that each sample vehicle is given a different identification number; in generating a random number as the individual identification in the test vehicle could contrast coincidentally happen that, although highly unlikely, for example, two sample vehicles have the same ID number.

Basically, it is possible solely on the basis of the group identifier, perform a meaningful traffic monitoring. So for example it is not necessary for a vehicle that has just reached a traffic jam and a message settles to know the individual access code. For high-quality traffic monitoring with eg date information on the vehicle speed, however, is a differentiation of the group members is of great value.