EP2259231A1

EP2259231A1 - Digital tachograph and a method for recording of vehicle related data

Info

Publication number: EP2259231A1
Application number: EP09162059A
Authority: EP
Inventors: Mikael Jansson
Original assignee: Stoneridge Electronics AB
Current assignee: Stoneridge Electronics AB
Priority date: 2009-06-05
Filing date: 2009-06-05
Publication date: 2010-12-08

Abstract

The present invention relates to a digital tachograph for recording vehicle related data, comprising an interface (7) for transferring vehicle related data, a vehicle related data memory (9) for storing vehicle related data, a signing processor (4) for signing vehicle related data, and an interface (8) for unloading vehicle related data. The digital tachograph further comprises: selecting means (10) for selecting vehicle related data from the vehicle related data memory according to criteria stored in a criteria memory (16); initiating means (11) for initiating pre-signing of vehicle related data stored in the vehicle related data memory and selected according to said criteria, wherein the signing processor is configured to perform the pre-signing; and an unload memory (12) for storing pre-signed vehicle related data signed by the signing processor so that it can be unloaded from the digital tachograph.

Description

FIELD OF INVENTION

The present invention relates generally to tachographs, and particularly to recording of vehicle related data thereon.

BACKGROUND

A digital tachograph is a recording and control device for road transport. The digital tachograph is generally composed of a Vehicle Unit (VU) containing a printer, two slots for smart cards and a display. The VU is connected to a gearbox of a vehicle it is installed in, and the number of revolutions per minute is measured by a secure motion sensor and sent to the VU encrypted.
The VU is arranged to continuously record and store data about vehicle related activities and violations of a driver of the vehicle in a VU memory and on the driver's personal smart card. Examples of vehicle related data stored are driver activities, durations, speeding, warnings of suspected tampering and other technical data. The driver's current activity is recorded at regular intervals, and the activity of driving is automatically recorded. When the vehicle is stationary, it is possible for the driver to select among non-driving activities.
Drivers are prompted, at smart card insertion into the VU, to do manual inputs of activities that happened between last smart card withdrawal and current insertion, with start and end time for each activity and daily working period. If no manual input of activities is entered this period is registered as unknown.
Vehicle related data is upon request unloaded from the tachograph to an unload equipment, or unloading device, which unload equipment selects which days of vehicle related data are to be unloaded. When the request for unloading of the respective days of vehicle related data are received by the tachograph, the tachograph starts to digitally sign the respective days. Each respective day is today by law required to be a digitally signed binary file. The vehicle related data signed by the tachograph is thereafter unloaded to the unload equipment. The purpose of the digitally signed vehicle related data is for law enforcement or other controlling authority to check if the vehicle related data is manipulated or not.

SUMMARY OF THE INVENTION

A problem with the present way of recording and unloading of vehicle related data in a tachograph is that the signing is required to be performed by a secure processor of the tachograph which generally has limited processing capacity, making signing and unloading of vehicle related data taking undesirably long time.
An object of the present invention is to significantly reduce the time it takes to record and unload data from the digital tachograph.
This object, among others, is according to the present invention attained by a method and a digital tachograph, respectively, as defined by the appended claims.
By providing a digital tachograph for recording vehicle of related data, comprising an interface for transferring vehicle related data to the digital tachograph, a vehicle related data memory for storing vehicle related data, a signing processor for signing vehicle related data, and an interface for unloading vehicle related data from the digital tachograph, wherein the digital tachograph comprises: selecting means for selecting vehicle related data from the vehicle related data memory according to criteria stored in a criteria memory; initiating means for initiating pre-signing of vehicle related data stored in the vehicle related data memory and selected according to the criteria, wherein the signing processor is configured to perform the pre-signing; and an unload memory for storing pre-signed vehicle related data signed by the signing processor so that it can be unloaded from the digital tachograph, the amount of time unloading of data takes is significantly reduced.
By preferably providing the digital tachograph with queuing means for queuing tasks to be performed by the signing processor, the recording efficiency is improved.
Advantageously, the criteria is one or more of the following: a certain time, a certain time period, a border crossing, a certain time within a country, a driver change, a certain time period for last driver, a trip ended, a certain trip length, and a freezer broken or a signal from another apparatus related to the vehicle, wherein preferably the certain time is 24:00, and the certain time period is one or more of the following: last hour, 12h, 24h, week, month, and year.
For improved security the digital tachograph preferably comprises means to automatically unload pre-signed vehicle related data from the unload memory to an unload device via the unload interface. The unload criteria is preferably stored in an unload criteria memory, and advantageously is one of the following: signed data is put into the unload memory; the driver is changed; a certain time; a freezer is broken; and a regulation is broken.
To facilitate unloading of signed vehicle related data the unload interface is preferably one of the following: a radio interface, GSM, 3G, 4G, WLAN and Bluetooth.
For high security the vehicle related data memory is preferably integrated with the signing processor.
For efficient unloading the vehicle related data memory is preferably arranged in a smart card connected to the digital tachograph.
Further features and advantages of the present invention will be evident from the following description.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention will become more fully understood from the detailed description of embodiments given below and the accompanying figures, which are given by way of illustration only, and thus, are not limitative of the present invention, wherein:

Fig. 1 schematically illustrates a number of functions in a digital tachograph.
Fig. 2 shows steps taken to perform recording of vehicle related data and unloading of digitally signed vehicle related data according to the present invention.
Fig. 3 schematically illustrates the parts of a digital tachograph according to an embodiment of the present invention.

DETAILED DESCRIPTION OF EMBODIMENTS

In the following description, for purpose of explanation and not limitation, specific details are set forth, such as particular techniques and applications in order to provide a thorough understanding of the present invention. However, it will be apparent for a person skilled in the art that the present invention may be practiced in other embodiments that depart from these specific details. In other instances, detailed description of well-known methods and apparatuses are omitted so as not to obscure the description of the present invention with unnecessary details.
A digital tachograph for recording of vehicle related data will now be described with reference to Figs. 1-3.
The digital tachograph 1 comprises driver identifier means 2 and 3, processing means 4, a user interface 5, a printer 6, a first connection port 7 and a second connection port 8.
The driver identifier means preferably has two smart card readers as parts of an interface 7 for transferring vehicle related data: a first smart card reader 2 for a current driver and a second smart card reader 3 for a possible secondary driver, a so called co-driver. The smart card readers are configured to receive a smart card 15 identifying a driver and co-driver, respectively, which smart card 15 is used to verify the identity of the driver currently responsible for generating vehicle related data on the digital tachograph 1. Alternatively, the driver identifier means utilizes a wireless connection for remote identification of a driver and co-driver, respectively, such as through RFID, Bluetooth, or similar connection. The driver or co-driver is preferably identified by verification means supporting such as remote identification, such as verification through a personal mobile phone, a personal PDA, or similar device.
The processing means 4 has a secure processing unit e.g. for reliable handling of driver identification, storing of authenticity certificates, storing of driving data (revolutions per minute) received from a gear box of a vehicle the digital tachograph is installed into, via a secure motion sensor, and for digital signing of vehicle related data, i.e. functioning as a signing processor 4 for signing vehicle related data. The vehicle related data includes i.a. driving data and driver activities. The digital tachograph comprises a vehicle related data memory 9 for storing vehicle related data, which memory the secure processing unit utilizes for secure storing of data. However, due to a high security level the secure processing unit has limited processing resources and the processing means 4 preferably also comprises a second processing unit relieving the secure processing unit of non-secure processing, such as user interface communication, printing, etc. The second processing unit preferably also communicates directly with the secure motion sensor, and forwards driving data from the secure motion sensor to the secure processing unit, in this way removing the need for a separate connector on the secure processing unit for connection to the secure motion sensor. The limited processing resources of the secure processing unit e.g. results in that signing of a 24 hours of vehicle related data today takes about three seconds, and a typical unloading request of 365 days of signing thus takes about 19 minutes. The user interface 5 comprises input means for e.g. manual entry of data and a small display for display of e.g. driver activity.
The printer 6 is e.g. used for printouts of registered driver activity, verification of manually input driver activity, or other vehicle related data.
The first connection port 7, also a part of the interface 7 for transferring vehicle related data to the digital tachograph, is configured for connection to a CAN-bus of the vehicle the tachograph is installed in, through which CAN-bus driving data is procured from the secure motion sensor.
The second connection port 8 is configured for connection to i.a. unloading equipment for unloading of vehicle related data, i.e functioning as an interface 8 for unloading vehicle related data from the digital tachograph. An unloading equipment is usually a portable device, preferably a so called unloading device, which is used for unloading of signed vehicle related data, typically for unloading of a plurality of days at each unloading occasion. The days that are to be unloaded from the digital tachograph are selected by the unloading device, and they are not known beforehand of the digital tachograph. Unloading of data is traditionally performed through the second connection port 8, being a serial front port of the digital tachograph 1. It is alternatively also possible to unload signed vehicle related data through the first connection port 7, i.e. through the CAN-bus, or yet alternatively through e.g. a wireless connection such as a Bluetooth or IR connection.
The digital tachograph comprises selecting means 10, preferably the secure processing unit, for selecting vehicle related data from the vehicle related data memory according to criteria stored in a criteria memory 16. The digital tachograph further comprises initiating means 11, preferably the secure processing unit, for initiating pre-signing of vehicle related data stored in the vehicle related data memory and selected according to the criteria stored in the criteria memory 16, wherein the signing processor 4, preferably the secure processing unit, is configured to perform the pre-signing. By pre-signing is referred to that the signing is performed without an unload instruction from an unload equipment. The digital tachograph also comprises an unload memory 12 for storing pre-signed vehicle related data signed by the signing processor 4 so that it swiftly can be unloaded from the digital tachograph. By pre-signing vehicle related data the time for unloading of vehicle related data can be significantly reduced. The vehicle related data memory is e.g. integrated in a chip with the signing processor 4. Alternatively, the vehicle related data memory is arranged separated from the signing processor 4. Advantageously, the criteria memory 16 and the unload memory 12 are integrated in a chip with the vehicle related data memory.
The vehicle related data memory, unload memory 12, etc. is alternatively arranged in a smart card 15 connected to the digital tachograph. In this way unloading of signed vehicle related data could be performed by simply removing such a smart card 15 from the digital tachograph. Another smart card 15 can be used to replace the removed smart card 15, and the digital tachograph and the vehicle it is installed in are immediately ready for further utilization.
When pre-signing of vehicle related data is initiated that task is preferably handled by queuing means 4, preferably the secure processing unit, for queuing tasks to be performed by the signing processor 4, in which way the signing processor 4 can be utilized in an optimal way.
The criteria used to select which vehicle related data to pre-sign is preferably based on one or more of the following pre-sign criteria: a certain time, a certain time period, a border crossing, a certain time within a country, a driver change, a certain time period for last driver, a trip ended, a certain trip length, and a freezer broken or a signal from another apparatus related to the vehicle. The certain time is preferably 24:00, and the certain time period is preferably one or more of the following: last hour, 12h, 24h, week, month, and year. Today, the single criterion for unloading of vehicle related data is whole days. If a non-driving related control signal is signaling a limit broken, such as to high temperature in a cargo, this is preferably registered by the digital tachograph and pre-signed, in order to prevent the driver from manipulating this information. Also signals from other apparatuses related to the vehicle can be registered and pre-signed by the digital tachograph.
The digital tachograph preferably comprises means 4, preferably the secure processing unit, to automatically unload pre-signed vehicle related data from the unload memory 12 to an unload device 13 via the unload interface, wherein the automatic unload preferably is performed according to unload criteria stored in an unload criteria memory 14, preferably related to the vehicle related data memory. A trigger for initiating automatic unloading of pre-signed vehicle related data is preferably based on one of the following unload criteria: pre-signed data is stored in the unload memory 12; the driver is changed; a certain time; vehicle stopped; all smart cards removed from the digital tachograph; the ignition turned off; a freezer or other control signal is broken; and a regulation is broken. By having automatic unloading of pre-signed vehicle related data a direct supervision can be utilized, wherein violations can be detected immediately.
For a facilitated unload interface of the digital tachograph one or more of the following unload interfaces is preferably used: a radio interface, GSM, 3G, 4G, WLAN and Bluetooth. By having a wireless unload interface, an unload instruction could be sent to the digital tachograph also when the vehicle is on the move.
Recording of vehicle related data thus comprises the steps of: procuring vehicle related data; pre-signing selected procured vehicle related data, wherein the pre-signing is initiated according to a criteria stored in the digital tachograph; and storing the pre-signed vehicle related data in the digital tachograph for later unloading thereof.
Pre-signing is preferably initiated when a day has begun, i.e. 24:00, and unloading of the signed vehicle related data from the digital tachograph to an unload equipment is preferably initiated upon request from the unload equipment.
Vehicle related data is continuously collected and saved into the secure vehicle related data memory, belonging to the secure processing unit, of the tachograph when the smart card 15 is positioned in the first or second smart card reader. Further, manually input driver activity data is preferably also collected and saved into the secure vehicle related data memory, belonging to the secure processing unit, of the digital tachograph.
Based on criteria in the criteria memory 16 vehicle related data is saved as a binary file in the secure vehicle related data memory of the secure processing unit. Preferably vehicle related data is assembled together on a day by day basis. Other types of assembly of vehicle related data is however possible, such as hour based assembly. Hour based vehicle related data can later be concatenated to a whole day.
After that vehicle related data for a required period, in this case a day, has been saved in a binary file that vehicle related data is queued for pre-signing, i.e. the digital signing has been initiated. During periods of reduced processing load of the secure processing unit it digitally signs the binary file first in the signing queue, i.e. when data processing capacity is available.
Digital signing combines the data to be signed and a digital certificate (the private key thereof) to a small amount of data in a digital signature. It is thereafter possible to check and verify the authenticity of the original data by utilization of the data to be verified, the digital signature and the digital certificate (the public key thereof), or a digital certificate (the public key thereof) higher up in its certificate hierarchy.
A digital certificate is an electronic document which uses a digital signature to bind together a public key of the digital certificate with an identity - information such as the name of a person or an organization, their address, and so forth, which is responsible for the original data. The certificate can be used to verify that a public key belongs to an individual.
Upon request from an unload equipment the pre-signed vehicle related data is unloaded from the digital tachograph to the unload equipment, typically being an unloading device. However, in case the digital tachograph does not have the requested vehicle related data stored pre-signed digital signing is initiated for signing and unloading thereof.
When the pre-signed vehicle related data is unloaded from the digital tachograph the digital signature and the vehicle related data is put together or switched together. The signed data, i.e. the digital signature and the vehicle related data, for a day is alternatively stored additionally on a separate memory position, such that it is even more swiftly transferable to the unload equipment, however at the cost of extra memory utilization.
It will be obvious that the present invention may be varied in a plurality of ways. Such variations are not to be regarded as departure from the scope of the present invention as defined by the appended claims. All such variations as would be obvious for a person skilled in the art are intended to be included within the scope of the present invention as defined by the appended claims.

Claims

A digital tachograph for recording of vehicle related data, comprising an interface (7) for transferring vehicle related data to said digital tachograph, a vehicle related data memory (9) for storing vehicle related data, a signing processor (4) for signing vehicle related data, and an interface (8) for unloading vehicle related data from said digital tachograph, characterized in that said digital tachograph comprises:
selecting means (10) for selecting vehicle related data from said vehicle related data memory according to criteria stored in a criteria memory (16);

initiating means (11) for initiating pre-signing of vehicle related data stored in said vehicle related data memory and selected according to said criteria, wherein said signing processor is configured to perform said pre-signing; and

an unload memory (12) for storing pre-signed vehicle related data signed by said signing processor so that it can be unloaded from said digital tachograph.
The digital tachograph according to claim 1, comprising queuing means (4) for queuing tasks to be performed by said signing processor.
The digital tachograph according to claim 1 or 2, wherein said criteria is one or more of the following: a certain time, a certain time period, border crossing, a certain time within a country, a driver change, a certain time period for last driver, a trip ended, a certain trip length, and a freezer broken.
The digital tachograph according to claim 3, wherein said certain time is 24:00, and said certain time period is one or more of the following: last hour, 12h, 24h, week, month, and year.
The digital tachograph according to any of claims 1-4, comprising means (4) to automatically unload pre-signed vehicle related data from said unload memory (13) to an unload device via the unload interface.
The digital tachograph according to claim 5, wherein the automatic unload is according to unload criteria stored in an unload criteria memory (14).
The digital tachograph according to claim 6, wherein said unload criteria is one of the following: signed data is put into the unload memory; the driver is changed; a certain time; vehicle stopped; all smart cards removed from the digital tachograph; the ignition turned off; a freezer is broken; and a regulation is broken.
The digital tachograph according to any of claims 1-7, wherein the unload interface is one of the following: a radio interface, GSM, 3G, 4G, WLAN and Bluetooth.
The digital tachograph according to any of claims 1-8, wherein said vehicle related data memory is integrated with said signing processor.
The digital tachograph according to any of claims 1-8, wherein said vehicle related data memory is arranged in a smart card (15) connected to said digital tachograph.
A method for recording vehicle related data in a digital tachograph (1), comprising the steps of:
procuring vehicle related data;

pre-signing the procured vehicle related data, wherein said pre-signing is initiated according to a criteria stored in said digital tachograph; and

storing said pre-signed vehicle related data in said digital tachograph for later unloading thereof.