EP2402913B1 - Communication of the start of operation of a device on board a vehicle - Google Patents

Communication of the start of operation of a device on board a vehicle Download PDF

Info

Publication number
EP2402913B1
EP2402913B1 EP11171844.1A EP11171844A EP2402913B1 EP 2402913 B1 EP2402913 B1 EP 2402913B1 EP 11171844 A EP11171844 A EP 11171844A EP 2402913 B1 EP2402913 B1 EP 2402913B1
Authority
EP
European Patent Office
Prior art keywords
data
checking
equipment
date
instantaneous
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP11171844.1A
Other languages
German (de)
French (fr)
Other versions
EP2402913A1 (en
Inventor
Pascal Bodin
Jacques Chambon
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Orange SA
Original Assignee
Orange SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Orange SA filed Critical Orange SA
Publication of EP2402913A1 publication Critical patent/EP2402913A1/en
Application granted granted Critical
Publication of EP2402913B1 publication Critical patent/EP2402913B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00Registering or indicating the working of vehicles
    • G07C5/08Registering or indicating performance data other than driving, working, idle, or waiting time, with or without registering driving, working, idle or waiting time
    • G07C5/0841Registering performance data
    • G07C5/085Registering performance data using electronic data carriers
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00Registering or indicating the working of vehicles
    • G07C5/008Registering or indicating the working of vehicles communicating information to a remotely located station

Definitions

  • the invention relates to the general field of vehicles equipped with an electronic tachograph and an on-board equipment for the management of vehicle fleets.
  • the present invention relates to the verification of the activation of an on-board equipment in a vehicle.
  • the services offered include the positioning of the vehicle, the recovery of positions to a central site, the sending of missions to a vehicle from the central site, etc.
  • This type of application uses equipment embedded in the vehicle that contains a satellite positioning device and that can communicate with the central site.
  • Some functions of fleet management applications may not be positively perceived by the drivers of the vehicles involved.
  • One of these mechanisms is simply to prevent the on-board equipment from operating, for example by stopping it voluntarily, or by sabotaging the power supply of the equipment.
  • some fraud can be performed in a sufficiently discrete manner that it is difficult to detect them.
  • a fraud may consist in manipulating the data relating to the route.
  • the document WO 2009/043794 describes a system comprising a tachograph for tracking the use of a vehicle and an on-board toll unit for determining toll charges when using the vehicle. This document also discloses a method for verifying the data exchanged between the tachograph and the onboard unit.
  • This method comprises (1) a step of obtaining, by the on-board equipment, the data generated by the tachograph, these data being dated with a current date, contained in the data, at which the data were obtained by the tachograph, the data being signed with a signature of the tachograph, (2) a step of verification, by the on-board equipment, of the signature of the tachograph and (3) a step of transmission, by the on-board equipment, of the data obtained to a device external.
  • the invention aims to facilitate the fight against fraud relating to equipment on board a vehicle.
  • the invention aims to provide a method for the verification of the activation of an on-board equipment in a vehicle, which does not present at least some of the disadvantages of the prior art.
  • the invention relates to a method for verifying the commissioning of an on-board equipment in a vehicle according to independent claim 1.
  • the data are signed, it is possible to authenticate their origin (the signature being specific to the tachograph, they come from the relevant tachograph) and their integrity (they have not been modified compared to what they were when of their generation in the tachograph).
  • the fact that the signed data are stored by the on-board equipment is proof that the on-board equipment, and of course the tachograph, was in operation at the current date stored. Fraud consisting in preventing the activation of the on-board equipment can therefore be easily detected by noting the absence of memorized signed data.
  • the verification device enables a third party to take cognizance of the signed data, which enables him to verify that the on-board equipment was in operation on the current date contained in the data obtained from the tachograph.
  • the verification device can for example be located at the central site of a transport company or be a portable device used on the roads by a person responsible for control.
  • the verification method may include, before the obtaining step, a request step comprising sending a data request to said electronic tachograph.
  • the on-board equipment can obtain the signed data when it wishes, in response to the data request. For example, the on-board equipment sends a data request when it is turned on.
  • said request step is repeated over a period of time during which verification of start-up is desired.
  • the repetition of the request step therefore makes it possible to check the start-up over a period of time and not only in a specific manner.
  • the on-board equipment may possibly be put into operation before the electronic tachograph.
  • the repetition of the request step in this case, to obtain the signed data as soon as the tachograph is turned on.
  • the second data being signed it is possible to ascertain their origin (they come from the tachograph concerned) and their integrity (they have not been modified compared to what they were when they were generated in the tachograph).
  • the search for a correspondence between the first data and the second data may give no result, which can detect the fraud. Fraud is therefore more difficult to achieve.
  • the first data contains a missing data indicator
  • said data verification step comprising, if no correspondence has been found between the first data and the second data, a step of determining the authenticity of the first data. according to said indicator of missing data.
  • the first data expected to be provided by the positioning device is incorrect or missing in a large part.
  • the use of the missing data indicator distinguishes between the two cases. In the case of incorrect data, the impossibility of finding a match indicates with a high probability of fraud.
  • a correspondence between the first data and the second data can be found in some cases.
  • the search for a correspondence between the second data and the third data, containing a series of instantaneous speeds determined according to the sequence of positions, is a complementary test to detect a fraud or on the contrary to increase the confidence in the integrity of the data provided by the positioning device.
  • the method comprises, in case of correspondence between at least a first instantaneous speed of the first series of instantaneous gears and at least a second instantaneous speed of the second series of instantaneous gears, a step of obtaining the date of this first instantaneous speed or instantaneous second speed and at least one positioning data for which the first instantaneous speed was generated by the positioning device.
  • Such exploitation of positioning data may be useful in certain applications of vehicle traffic.
  • the invention also proposes a system according to independent claim 10.
  • the invention also relates to a vehicle comprising the on-board equipment and a tachograph according to the invention.
  • the verification data may comprise a vehicle identification, said vehicle identification being registered in association with said information.
  • the figure 1 represents a vehicle 1 heavyweight equipped with a 2 embedded equipment and an electronic tachograph 3.
  • the equipment 2 and the tachograph 3 can communicate via a link 4.
  • the figure 1 also represents a verification device 5 which can communicate with the equipment 2 via a link 6.
  • the equipment 2 allows the implementation of fleet management applications of vehicles.
  • the equipment 2 can communicate with a central site (not shown) for example for the positioning of the vehicle 1, the recovery of positions to the central site, sending missions to the vehicle 1 from the central site, etc.
  • the equipment 2 is shown schematically on the figure 2 . It comprises in particular a microprocessor 20, a communication interface 21, a read-only memory 22, a random access memory 23, a positioning device 24 and a communication interface 25.
  • the microprocessor 20 makes it possible to execute programs stored in the read-only memory 22 , using the RAM 23.
  • the communication interface 21 allows the equipment 2 to communicate with the tachograph 3 via the link 4, which is for example a wired link.
  • the positioning device 24 is for example a GPS positioning device such as GPS, Glonass, Galileo, etc. It is able to generate position data, instantaneous speed, date and time. The data generated by the positioning device 24 can be stored in the random access memory 23.
  • the device 2 also comprises a flash memory in which the data generated by the positioning device 24 is stored, which allows avoid data loss in the event of a temporary loss of power supply.
  • the communication interface 25 allows the equipment 2 to communicate with the verification device 5 or with the central site, via the link 6.
  • the link 6 may be a wired or wireless link.
  • the tachograph 3 is an electronic tachograph, the installation of which is mandatory in any new truck of more than 3.5 tons.
  • the tachograph 3 comprises in particular a communication interface 31 and a recorder 32.
  • the recorder 32 continuously records a great deal of information: driver identity, driving time, distance traveled, instantaneous speed, average speed, maximum speed, etc.
  • the communication interface 31 comprises a standardized connector, located on the front and connected to the equipment 2 by the link 4, which allows access to the recorded data. Access to the data is normally done using a so-called " business card " smart card, which provides access to all the data concerning the drivers of the company concerned. It is however possible to access the data without the company card. Simply, some personal data is then hidden.
  • the communication between the equipment 2 and the tachograph 3 is for example carried out according to the standard protocol described in Annex 1B of the EEC Regulation No. 3821/85.
  • the verification device 5 is shown schematically on the figure 4 . It comprises in particular a microprocessor 50, a communication interface 51, a read-only memory 52 and a random access memory 53.
  • the microprocessor 50 makes it possible to execute programs stored in the read-only memory 52, using the random access memory 53.
  • communication 51 allows the verification device 5 to communicate with the equipment 2 via the link 6.
  • the verification device 5 may for example be located at the central site of a transport company or be a portable device used on the roads by a person responsible for controlling the vehicles in circulation, for example an agent responsible for verifying the application. of the regulations in force.
  • the figure 5 is a step diagram which illustrates a method of checking the start of the equipment 2. This process is performed by the equipment 2 when executing a corresponding program stored in the read-only memory 22. L Execution of this program is started automatically when the equipment 2 is turned on.
  • step 40 in which the equipment 2 sends a data request to the tachograph 3, using the communication interface 21 and the link 4. This data request is made each time a check is made. is required or necessary, or periodically or at randomly defined times.
  • the tachograph 3 When it receives this request for data, the tachograph 3 responds by sending a packet of data, having been generated by a tachograph 3, these data being dated with a current date at which this operation of obtaining data from the chronotachograph 3.
  • the current date is a precise temporal information, for example containing the calendar date and the hour to the nearest second.
  • the data supplied by the tachograph correspond to EEC Regulation 3821/85.
  • the data sent by the tachograph 3 are also signed with a signature of the tachograph 3, in order to authenticate the origin of these data, and to have a reference data set whose integrity is verifiable.
  • step 41 the equipment 2 tests whether it has received a packet of data signed from the tachograph 3.
  • step 41 the equipment 2 waits a time ⁇ T1 in step 42 before repeating the data request in step 40.
  • the tachograph 3 is not in operation during the first request for data, the repetition of steps 40, 41 and 42 makes it possible to receive a packet of signed data as soon as the tachograph 3 is turned on.
  • step 41 If, in step 41, a data packet has been received, the equipment 2 proceeds to step 43 where the received data packet is stored in the RAM 23 (or in the Flash memory previously described).
  • the RAM 23 As the data is signed, it will be possible to ensure by analysis of the signed data that the current date and time memorized are authentic and correct. Thus, the presence of the signed data packet in the RAM 23 is a proof that the tachograph 3 and the equipment 2 were in function at the current date and time stored.
  • step 44 the equipment 2 tests whether it has received a transmission request from the verification device 5, via the link 6 and the communication interface 25.
  • step 44 the equipment 2 proceeds to step 45 where the data packet or packets stored in the random access memory 23 (or in the Flash memory previously described) are transmitted. 5. These data packets constitute, when they are correct, proof of the commissioning of the equipment 2, on the dates indicated in these packages. These data are called here “verification data” and noted DATA0.
  • the user of the verification device 5 can take cognizance of the date or dates and hours stored and thus verify that the equipment 2 was in operation at the dates and hours stored.
  • the verification device 5 verifies the integrity of the verification data DATA0 received from the signature attached to these data, then generates and stores, in association with the current date for which verification data has been received, information representative of the existence or absence of proof that the said equipment was put into service at the said current date. This current date is therefore the date on which the data were obtained from the tachograph.
  • the verification device 5 applies in step 60 the processes described in Appendix 11 (entitled “Common safety mechanisms") of the EEC Regulation No. 3821/85, regulating the tachograph in Europe.
  • the verification device 5 detects the absence of data packet for certain time slots and / or certain dates and records in association with these time slots and / or dates information representative of this lack of data packet, that is to say, representative of the absence of proof of activation for these time slots and / or dates.
  • the various information thus stored are used by the verification device 5 for performing at least one verification step of determining whether the equipment 2 was in operation for a given time period or date. For example, by scanning stored information or querying a database in which this information is stored.
  • the stored information thus constitutes a history indicating for which dates the equipment 2 was in operation.
  • the verification data DATA0 received includes a vehicle identification
  • this vehicle identification is recorded in association with the information representative of the existence or absence of a proof of commissioning, in order to have a history for each identified vehicle.
  • an attempt at fraud may consist in manipulating the data provided by the positioning device 24.
  • the verification method may comprise a data verification step aimed at detect this type of fraud.
  • the figure 6 is a step diagram that illustrates the steps for this data verification.
  • the equipment 2 obtains data DATA1 supposed to be provided by the positioning device 24.
  • the positioning device 24 is configured to provide information on position, instantaneous speed, date and time. hour, for example once a second.
  • the data DATA1 comprising this information is stored in the RAM 23 for a period called " storage period for verification ", for example from 1 to 24 hours.
  • a storage period for long verification, for example 24 hours, allows better detection of data manipulations, but requires a larger memory and a higher computing power than for a shorter period.
  • the random access memory 23 contains data DATA1 supposed to have been determined by the positioning device 24.
  • data supposed to have been determined by the positioning device 24 is meant data which, in the absence of fraud, has have been determined by the positioning device 24 or which, in the event of fraud, have been manipulated and are stored in the place of the data which have actually been determined by the positioning device 24.
  • the data DATA1 contains a sequence of positions, a sequence of instantaneous speeds and for each position, a date.
  • the date is a precise time information containing, for example, the calendar date and the hour to the nearest second.
  • the data could only contain the date for certain positions, for example the first and the last, and the date of the other positions can be calculated, for example by knowing a constant time interval which separates each position.
  • the data DATA1 also contains a missing data indicator indicating the moments when a bad reception of the satellite data did not allow the positioning device 24 to generate the information.
  • step 62 the equipment 2 obtains signed DATA2 data from the tachograph 3.
  • the equipment 2 periodically sends a request for downloading data to the tachograph 3.
  • the tachograph 3 provides DATA2 data which contain a sequence of instantaneous speeds, called " tachograph speeds " and the date of at least one instantaneous speed among the tachograph speeds, for example the first instantaneous speed of the suite. In this case, it is possible to determine the date and time of all instantaneous speeds, for example knowing that the time interval between each instantaneous speed is of a second.
  • the chronotachograph speeds correspond for example to the last 24 hours of the vehicle 1.
  • step 61 is followed by step 62.
  • steps 61 and 62 may also be performed in parallel or in the reverse order of that shown.
  • step 63 the equipment 2 searches for a correspondence between the data DATA1 and the data DATA2. More specifically, the equipment 2 extracts tachograph speeds that correspond to the storage period for verification, taking into account the possible drift of the clock of the tachograph 3 (legal maximum of + - 2 seconds per day). Then, the equipment 2 performs a correspondence search between the positions / instantaneous speeds contained in the DATA1 data, and the tachograph speeds extracted DATA2 data.
  • This search for correspondence between two sequences of speeds can be carried out for example by an algorithm of the type "comparison of symbol sequences" or "pattern recognition".
  • This type of algorithm makes it possible to take into account an incomplete sequence of speeds of the storage period (to take into account the moments when a bad reception of the satellite data did not allow the positioning device 24 to generate the information) and is able to accept a slight difference between the two sequences of speeds, to take into account the legal tolerance of +/- 6 km / h on the tachograph speeds.
  • the search for correspondence aims to establish whether there is a sufficient degree of correlation (for example greater than a predetermined threshold) between the two data suites: in terms of amplitude of speed, of variations of amplitude of speed, of frequency spectrum, average value, standard deviation, etc.
  • step 64 the method proceeds to step 64.
  • the lack of correspondence may mean that the data DATA1 supposed to have been provided by the positioning device 24 is incorrect or missing between very large part.
  • the missing data indicator makes it possible to differentiate between the two cases.
  • the equipment 2 determines the authenticity of the data DATA1 taking into account the missing data indicator. More specifically, if the equipment 2 concludes that the lack of correspondence is due to incorrect data, this indicates a high probability of fraud. The process then proceeds to step 65 where this conclusion, symbolized on the figure 6 by an "X", is handled appropriately (for example, it is stored in the equipment 2 and / or transmitted to a remote site, immediately or later). On the other hand, if the equipment 2 concludes that the lack of correspondence is due to a large amount of missing data, it proceeds to step 66 and can not conclude on the presence or absence of fraud, which is symbolized by a " ? " on the figure 6 .
  • step 63 if in step 63 a match is found, the method can proceed directly to step 70 and conclude that there is no fraud, which is symbolized by a "V" on the figure 6 .
  • step 71 the verification device 5 performs a path calculation and a path check, with a view to determining from the positioning data and / or speed DATA1 obtained from the equipment 2, whether the vehicle has whether or not it is on a tax-paying road and, if so, what will be the amount of the tax to be paid.
  • the amount of this tax depends, among other things, on the eco-tax defined in France for heavy goods vehicles, the type of road used and the distance traveled on this road. All roads are not subject to the eco-tax. A road may not be completely subject to the eco-tax either.
  • the verification therefore consists in determining, from the data DATA1, produced by the positioning device 24 of the on-board equipment and validated by the verification device 5 following the establishment of a correspondence with the DATA2 data of the tachograph, if the vehicle has or has not traveled on a road subject to payment of a fee.
  • the course check also consists of reconstructing from the DATA1 data the actual course of the vehicle. In the event of the disappearance of goods between the taking-over of the latter and its delivery, it is thus possible to determine what was the journey followed by the vehicle and / or whether, among the data of verification DATA0 received by the device in a step 45, there is no verification data for part of the route and / or for a given time slot or date.
  • the verification device 5 records in a database the tax to be paid in association with the identification of the vehicle obtained in step 61: the data thus recorded will be used to trigger a payment transaction.
  • step 67 data DATA3 containing a new sequence of instantaneous speeds are determined. More precisely, the new sequence of instantaneous speeds is determined according to the sequence of positions contained in the data DATA1. Then, in step 68, the equipment 2 performs a matching search similar to that of step 63, but in this case between the new sequence of speeds determined in step 67 and the tachograph speeds. The lack of correspondence again indicates a high probability of fraud. This conclusion is treated in step 69 as in step 65. By cons, in case of correspondence, confidence in the integrity of the data obtained in step 61 can be enhanced.
  • FIG 7 represents a vehicle and a verification device according to an embodiment useful for understanding the invention. Elements identical or similar to elements of Figures 1 and 4 are designated by the same references, without risk of confusion.
  • the equipment 2 and the tachograph 3 are not connected by a link.
  • the tachograph 3 can communicate with the verification device 5 via a link 7 and the communication interface 51.
  • the equipment 2 can send to the verification device 5 data supposed to have been determined by its positioning device, and the tachograph 3 can send to the verification device 5 signed data.
  • the verification device 5 can then execute a verification method similar to that shown on the figure 6 to verify the integrity of data from the equipment 2.
  • the tachograph 3 can be connected to the on-board equipment 2.
  • the data from the tachograph 3 can be supplied to the verification device 5 via the equipment 2.
  • This verification process can be carried out by an on-board equipment on the vehicle in which the tachograph and the positioning device are located, or by an external verification device to which the data is transmitted.
  • the steps 62 and following are carried out by the verification device which receives the data DATA1 and DATA2 and then performs all the required verifications, as described above for the steps 63 to 71.
  • the attached data (answering for example the EEC regulation n ° 3821/85) generally include a vehicle identification, the safety certificate of the tachograph a current date and a signature making it possible simultaneously to check the integrity of the current date and velocity data and can thus also serve as verification data as to the commissioning of the equipment 2.
  • the verification data DATA0 and the speed data DATA2 can be obtained with different periodicities and therefore be associated with current dates spaced differently in time: a cross-use of these two types of data makes it possible to cover the same time range with different precisions.
  • the periodicity of obtaining verification data can be only one hour or 10 minutes, while the associated speed and date / time data are generated every second.
  • the verification can also be performed for dates and / or hours defined randomly, determined by a central remote server or by the verification device 5. The latter would then obtain a sequence of data packets to check, for example when the communication between the central office and the equipment is possible (in mobile network coverage). Then, the verification would be carried out for data packets obtained from the tachograph at the dates and / or times indicated. It is of course necessary to take into account the management of the authorized breaks for the driver of the vehicle (breaks and / or rest periods) and thus to select the dates and / or times for which verification is required accordingly.
  • the periodicity / times of obtaining the verification data as well as the definition of the dates and / or time for which the verification is performed will be adapted to the needs of the intended application.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Time Recorders, Dirve Recorders, Access Control (AREA)
  • Traffic Control Systems (AREA)

Description

Arrière-plan de l'inventionBackground of the invention

L'invention se rapporte au domaine général des véhicules équipés d'un chronotachygraphe électronique et d'un équipement embarqué pour la gestion de flottes de véhicules. En particulier, la présente invention concerne la vérification de la mise en fonction d'un équipement embarqué dans un véhicule.The invention relates to the general field of vehicles equipped with an electronic tachograph and an on-board equipment for the management of vehicle fleets. In particular, the present invention relates to the verification of the activation of an on-board equipment in a vehicle.

Les applications de gestion de flottes de véhicules sont maintenant courantes. Les services offerts sont notamment le positionnement du véhicule, la remontée des positions vers un site central, l'envoi de missions à un véhicule depuis le site central, etc. Ce type d'application utilise un équipement embarqué dans le véhicule qui contient un dispositif de positionnement par satellite et qui peut communiquer avec le site central.Fleet management applications are now commonplace. The services offered include the positioning of the vehicle, the recovery of positions to a central site, the sending of missions to a vehicle from the central site, etc. This type of application uses equipment embedded in the vehicle that contains a satellite positioning device and that can communicate with the central site.

Il arrive que certaines fonctions des applications de gestion de flottes de véhicules ne soient pas perçues de façon positive par les conducteurs des véhicules concernés. On peut par exemple penser aux fonctions ayant pour but de vérifier les parcours effectués, ou le type d'utilisation du véhicule. Dans ces cas, certains conducteurs peuvent être tentés de mettre en place des mécanismes de fraude. L'un de ces mécanismes consiste simplement à éviter que l'équipement embarqué n'entre en fonction, par exemple en l'arrêtant volontairement, ou en sabotant l'alimentation électrique de l'équipement.Some functions of fleet management applications may not be positively perceived by the drivers of the vehicles involved. One can for example think of the functions intended to verify the routes taken, or the type of use of the vehicle. In these cases, some drivers may be tempted to set up fraud schemes. One of these mechanisms is simply to prevent the on-board equipment from operating, for example by stopping it voluntarily, or by sabotaging the power supply of the equipment.

Pour certaines applications, certaines fraudes peuvent être réalisées de façon suffisamment discrète pour qu'il soit difficile de les détecter. Par exemple, pour une application basée sur le parcours effectué, une fraude peut consister à manipuler les données relatives au parcours.For some applications, some fraud can be performed in a sufficiently discrete manner that it is difficult to detect them. For example, for an application based on the route taken, a fraud may consist in manipulating the data relating to the route.

C'est par exemple le cas de l'éco-taxe poids-lourds, qui va obliger chaque camion de plus de 3,5 tonnes roulant en France à être équipé d'un équipement embarqué qui aura pour but de fournir les données nécessaires au calcul d'une taxe proportionnelle à l'utilisation des routes françaises. Dans cet exemple, afin d'empêcher la fraude, la solution actuelle envisagée est l'installation de systèmes fixes de vérification, répartis sur les routes soumises à la taxe. Ces systèmes sont souvent de type portique, supportant des équipements électroniques, permettant par exemple la mise en place d'un dialogue avec les poids-lourds passant à proximité, afin de relever, entre autre, l'identité du poids-lourds. Ces équipements sont chers, complexes, et imposants. Ils nécessitent le raccordement au réseau électrique.This is the case, for example, of the eco-tax for heavy goods vehicles, which will oblige each truck weighing more than 3.5 tonnes in France to be equipped with on-board equipment which will aim to provide the necessary data for calculation of a tax proportional to the use of French roads. In this example, in order to prevent fraud, the current solution envisaged is the installation of fixed verification systems, spread over the roads subject to the tax. These systems are often gantry type, supporting electronic equipment, allowing for example the establishment of a dialogue with the trucks passing nearby, in order to identify, among other things, the identity of the trucks. These equipments are expensive, complex, and imposing. They require connection to the power grid.

Le document WO 2009/043794 décrit un système comprenant un tachygraphe pour suivre l'utilisation d'un véhicule et une unité embarquée de péage destinée à déterminer des frais de péage lors de l'utilisation du véhicule. Ce document divulgue également un procédé de vérification des données échangées entre le tachygraphe et l'unité embarquée. Ce procédé comprenant (1) une étape d'obtention, par l'équipement embarqué, des données générées par le tachygraphe, ces données étant datées avec une date courante, contenue dans les données, à laquelle les données ont été obtenues par le tachygraphe, les données étant signées avec une signature du tachygraphe, (2) une étape de vérification, par l'équipement embarqué, de la signature du tachygraphe et (3) une étape de transmission, par l'équipement embarqué, des données obtenues vers un dispositif externe.The document WO 2009/043794 describes a system comprising a tachograph for tracking the use of a vehicle and an on-board toll unit for determining toll charges when using the vehicle. This document also discloses a method for verifying the data exchanged between the tachograph and the onboard unit. This method comprises (1) a step of obtaining, by the on-board equipment, the data generated by the tachograph, these data being dated with a current date, contained in the data, at which the data were obtained by the tachograph, the data being signed with a signature of the tachograph, (2) a step of verification, by the on-board equipment, of the signature of the tachograph and (3) a step of transmission, by the on-board equipment, of the data obtained to a device external.

Objet et résumé de l'inventionObject and summary of the invention

L'invention est définie dans le jeu de revendications ci-joint.The invention is defined in the attached set of claims.

L'invention vise à faciliter la lutte contre la fraude relative à un équipement embarqué sur un véhicule. En particulier, l'invention vise à fournir un procédé permettant la vérification de la mise en fonction d'un équipement embarqué dans un véhicule, qui ne présente pas au moins certains des inconvénients de l'art antérieur.The invention aims to facilitate the fight against fraud relating to equipment on board a vehicle. In particular, the invention aims to provide a method for the verification of the activation of an on-board equipment in a vehicle, which does not present at least some of the disadvantages of the prior art.

A cet effet, l'invention concerne un procédé de vérification de la mise en fonction d'un équipement embarqué dans un véhicule selon la revendication indépendante 1.For this purpose, the invention relates to a method for verifying the commissioning of an on-board equipment in a vehicle according to independent claim 1.

Comme les données sont signées, il est possible d'authentifier leur origine (la signature étant propre au chronotachygraphe, elles proviennent bien du chronotachygraphe concerné) et de leur intégrité (elles n'ont pas été modifiées par rapport à ce qu'elles étaient lors de leur génération dans le chronotachygraphe). Ainsi, le fait que les données signées soient mémorisées par l'équipement embarqué constitue une preuve que l'équipement embarqué, et bien entendu le chronotachygraphe, était en fonction à la date courante mémorisée. Une fraude consistant à empêcher la mise en fonction de l'équipement embarqué peut donc être facilement détectée en constatant l'absence de données signées mémorisées.As the data are signed, it is possible to authenticate their origin (the signature being specific to the tachograph, they come from the relevant tachograph) and their integrity (they have not been modified compared to what they were when of their generation in the tachograph). Thus, the fact that the signed data are stored by the on-board equipment is proof that the on-board equipment, and of course the tachograph, was in operation at the current date stored. Fraud consisting in preventing the activation of the on-board equipment can therefore be easily detected by noting the absence of memorized signed data.

Le fait de pouvoir obtenir des données en provenance du chronotachygraphe permet de prouver que le chronotachygraphe et l'équipement embarqués étaient en fonction, au moment de la récupération des données.The fact of being able to obtain data coming from the tachograph makes it possible to prove that the tachograph and the equipment on board were in function, at the time of the data recovery.

Le dispositif de vérification permet à un tiers de prendre connaissance des données signées, ce qui lui permet de vérifier que l'équipement embarqué était en fonction à la date courante contenue dans les données obtenues du chronotachygraphe. Le dispositif de vérification peut par exemple se trouver sur le site central d'une entreprise de transport ou être un dispositif portable utilisé sur les routes par une personne responsable du contrôle.The verification device enables a third party to take cognizance of the signed data, which enables him to verify that the on-board equipment was in operation on the current date contained in the data obtained from the tachograph. The verification device can for example be located at the central site of a transport company or be a portable device used on the roads by a person responsible for control.

Le procédé de vérification peut comprendre, avant l'étape d'obtention, une étape de demande comprenant l'envoi d'une demande de données audit chronotachygraphe électronique.The verification method may include, before the obtaining step, a request step comprising sending a data request to said electronic tachograph.

Ainsi, l'équipement embarqué peut obtenir les données signées quand il le souhaite, en réponse à la demande de données. Par exemple, l'équipement embarqué envoie une demande de données lorsqu'il est mis en fonction.Thus, the on-board equipment can obtain the signed data when it wishes, in response to the data request. For example, the on-board equipment sends a data request when it is turned on.

Selon un mode de réalisation, ladite étape de demande est répétée sur une période de temps pendant laquelle la vérification de la mise en fonction est souhaitée.According to one embodiment, said request step is repeated over a period of time during which verification of start-up is desired.

La répétition de l'étape de demande permet donc de vérifier la mise en fonction sur période de temps et pas seulement de manière ponctuelle. De plus, l'équipement embarqué peut éventuellement être mis en fonction avant le chronotachygraphe électronique. La répétition de l'étape de demande permet, dans ce cas, d'obtenir les données signées dés que le chronotachygraphe est mis en fonction.The repetition of the request step therefore makes it possible to check the start-up over a period of time and not only in a specific manner. In addition, the on-board equipment may possibly be put into operation before the electronic tachograph. The repetition of the request step, in this case, to obtain the signed data as soon as the tachograph is turned on.

Selon un mode de réalisation, ledit équipement embarqué comprend un dispositif de positionnement et ledit procédé comprend une étape de vérification de données censées avoir été générées par ledit dispositif de positionnement, ladite étape de vérification de données comprenant

  • une étape d'obtention des premières données censées avoir été déterminées par ledit dispositif de positionnement, les premières données contenant une première suite de vitesses instantanées et la date d'au moins une des vitesses instantanées de la première suite de vitesses instantanées,
  • une étape d'obtention des deuxièmes données signées déterminées par ledit chronotachygraphe électronique, les deuxièmes données contenant une deuxième suite de vitesses instantanées et la date d'au moins une vitesse instantanée de la deuxième suite de vitesses instantanées,
  • une étape de recherche d'une correspondance entre les premières données et les deuxièmes données.
According to one embodiment, said on-board equipment comprises a positioning device and said method comprises a data verification step supposed to have been generated by said positioning device, said data verification step comprising
  • a step of obtaining the first data supposed to have been determined by said positioning device, the first data containing a first sequence of instantaneous speeds and the date of at least one of the instantaneous speeds of the first series of instantaneous gears,
  • a step of obtaining the second signed data determined by said electronic tachograph, the second data containing a second sequence of instantaneous gears and the date of at least one instantaneous speed of the second series of instantaneous gears,
  • a step of finding a correspondence between the first data and the second data.

Les deuxièmes données étant signées, il est possible de s'assurer de leur origine (elles proviennent bien du chronotachygraphe concerné) et de leur intégrité (elles n'ont pas été modifiées par rapport à ce qu'elles étaient lors de leur génération dans le chronotachygraphe). Ainsi, en cas de fraude consistant à manipuler les données fournies par le dispositif de positionnement, la recherche d'une correspondance entre les premières données et les deuxièmes données peut ne donner aucun résultat, ce qui peut permettre de détecter la fraude. La fraude est donc plus difficile à réaliser.The second data being signed, it is possible to ascertain their origin (they come from the tachograph concerned) and their integrity (they have not been modified compared to what they were when they were generated in the tachograph). Thus, in case of fraud of manipulating the data provided by the positioning device, the search for a correspondence between the first data and the second data may give no result, which can detect the fraud. Fraud is therefore more difficult to achieve.

Selon une variante, les premières données contiennent un indicateur de données manquantes, ladite étape de vérification de données comprenant, si aucune correspondance n'a été trouvée entre les premières données et les deuxièmes données, une étape de détermination de l'authenticité des premières données en fonction dudit indicateur de données manquantes.According to one variant, the first data contains a missing data indicator, said data verification step comprising, if no correspondence has been found between the first data and the second data, a step of determining the authenticity of the first data. according to said indicator of missing data.

Si aucune correspondance n'est trouvée, cela signifie que les premières données censées être fournies par le dispositif de positionnement sont incorrectes ou manquantes en très grande partie. L'utilisation de l'indicateur de données manquantes permet de faire la distinction entre les deux cas. Dans le cas de données incorrectes, l'impossibilité de trouver une correspondance indique avec une forte probabilité une fraude.If no match is found, it means that the first data expected to be provided by the positioning device is incorrect or missing in a large part. The use of the missing data indicator distinguishes between the two cases. In the case of incorrect data, the impossibility of finding a match indicates with a high probability of fraud.

Selon un mode de réalisation, les premières données contiennent une suite de positions correspondant à la première suite de vitesses instantanées, ladite étape de vérification de données comprenant, si une correspondance a été trouvée entre les premières données et les deuxièmes données, une étape de détermination de l'authenticité des premières données comprenant :

  • une étape de détermination de troisièmes données contenant une troisième suite de vitesses instantanées déterminée en fonction de la suite de positions,
  • une étape de recherche d'une correspondance entre les troisièmes données et les deuxièmes données.
According to one embodiment, the first data contains a sequence of positions corresponding to the first sequence of instantaneous speeds, said data verification step comprising, if a correspondence has been found between the first data and the second data, a determination step. the authenticity of the first data including:
  • a step of determining third data containing a third sequence of instantaneous speeds determined according to the sequence of positions,
  • a step of finding a correspondence between the third data and the second data.

Même en cas de fraude consistant à manipuler les données fournies par le dispositif de positionnement, une correspondance entre les premières données et les deuxièmes données peut être trouvée, dans certains cas. La recherche d'une correspondance entre les deuxièmes données et les troisièmes données, contenant une suite de vitesses instantanées déterminée en fonction de la suite de positions, constitue un test complémentaire permettant de détecter une fraude ou au contraire d'augmenter la confiance en l'intégrité des données fournies par le dispositif de positionnement.Even in case of fraud involving manipulating the data provided by the positioning device, a correspondence between the first data and the second data can be found in some cases. The search for a correspondence between the second data and the third data, containing a series of instantaneous speeds determined according to the sequence of positions, is a complementary test to detect a fraud or on the contrary to increase the confidence in the integrity of the data provided by the positioning device.

Selon un mode de réalisation, le procédé comprend, en cas de correspondance entre au moins une première vitesse instantanée de la première suite de vitesses instantanées et au moins une deuxième vitesse instantanée de la deuxième suite de vitesses instantanées, une étape d'obtention de la date de cette première vitesse instantanée ou de cette deuxième vitesse instantanée et d'au moins une donnée de positionnement pour laquelle la première vitesse instantanée a été générée par le dispositif de positionnement.According to one embodiment, the method comprises, in case of correspondence between at least a first instantaneous speed of the first series of instantaneous gears and at least a second instantaneous speed of the second series of instantaneous gears, a step of obtaining the date of this first instantaneous speed or instantaneous second speed and at least one positioning data for which the first instantaneous speed was generated by the positioning device.

Une telle exploitation des données de positionnement peut être utile dans certaines applications de la circulation des véhicules.Such exploitation of positioning data may be useful in certain applications of vehicle traffic.

L'invention propose également un système selon la revendication indépendante 10.The invention also proposes a system according to independent claim 10.

Selon un mode de réalisation, l'équipement embarqué comprend un dispositif de positionnement et des moyens de vérification de données générées par ledit dispositif de positionnement, lesdits moyens de vérification de données comprenant:

  • des moyens d'obtention de premières données censées avoir été déterminées par ledit dispositif de positionnement, les premières données contenant une première suite de vitesses instantanées et la date d'au moins une des vitesses instantanées de la première suite de vitesses instantanées,
  • des moyens d'obtention de deuxièmes données signées déterminées par ledit chronotachygraphe électronique, les deuxièmes données contenant une deuxième suite de vitesses instantanées et la date d'au moins une vitesse instantanée de la deuxième suite de vitesses instantanées,
  • des moyens de recherche d'une correspondance entre les premières données et les deuxièmes données.
According to one embodiment, the on-board equipment comprises a positioning device and data verification means generated by said positioning device, said data verification means comprising:
  • means for obtaining first data supposed to have been determined by said positioning device, the first data containing a first sequence of instantaneous speeds and the date of at least one of the instantaneous speeds of the first series of instantaneous gears,
  • means for obtaining second signed data determined by said electronic tachograph, the second data containing a second series of instantaneous gears and the date of at least one instantaneous speed of the second series of instantaneous gears,
  • means for finding a correspondence between the first data and the second data.

L'invention concerne aussi un véhicule comprenant l'équipement embarqué et un chronotachygraphe selon l'invention.The invention also relates to a vehicle comprising the on-board equipment and a tachograph according to the invention.

Les caractéristiques et avantages discutés ci-dessus en référence au procédé de communication s'appliquent de manière correspondante à l'équipement et au véhicule.The features and advantages discussed above with reference to the communication method apply correspondingly to the equipment and the vehicle.

Les données de vérification peuvent comprendre une identification de véhicule, ladite identification de véhicule étant enregistrée en association avec ladite information.The verification data may comprise a vehicle identification, said vehicle identification being registered in association with said information.

Le procédé de vérification peut comprendre :

  • une étape de mémorisation, pour chaque date courante d'un ensemble de dates courantes, de ladite information en association avec ladite date courante;
  • une étape de vérification consistant à déterminer, à partir des données de vérification reçues ou des informations mémorisées, si ledit équipement était en fonction pendant une plage horaire donnée ou à une date donnée.
The verification method may include:
  • a step of memorizing, for each current date of a set of current dates, said information in association with said current date;
  • a verification step of determining, from the received verification data or the stored information, whether said equipment was in operation for a given time period or at a given date.

Le procédé de vérification peut comprendre :

  • une étape d'obtention de données de positionnement et/ou de vitesse générées par un dispositif de positionnement placé dans ledit véhicule,
  • une étape de vérification consistant à déterminer, à partir desdites données de positionnement et/ou de vitesse, si le véhicule a circulé ou non sur une route soumise au paiement d'une taxe.
The verification method may include:
  • a step of obtaining positioning and / or speed data generated by a positioning device placed in said vehicle,
  • a verification step of determining, from said positioning data and / or speed, whether the vehicle has traveled or not on a road subject to payment of a fee.

Brève description des dessinsBrief description of the drawings

D'autres caractéristiques et avantages de la présente invention ressortiront de la description faite ci-dessous, en référence aux dessins annexés qui en illustrent un exemple de réalisation. Sur les figures :

  • la figure 1 est un schéma d'un véhicule selon un mode de réalisation de l'invention et d'un dispositif de vérification,
  • la figure 2 représente schématiquement l'équipement de gestion de flotte du véhicule de la figure 1,
  • la figure 3 représente schématiquement le chronotachygraphe électronique du véhicule de la figure 1,
  • la figure 4 représente de manière plus détaillée le dispositif de vérification de la figure 1,
  • la figure 5 est un diagramme d'étapes illustrant un procédé de vérification selon un mode de réalisation de l'invention, et
  • la figure 6 est un diagramme d'étapes représentant des étapes mises en oeuvre par l'équipement embarqué ou par le dispositif de vérification de la figure 1,
  • la figure 7 est un schéma d'un véhicule et d'un dispositif de vérification, selon un mode de réalisation utile à la compréhension de l'invention.
Other features and advantages of the present invention will emerge from the description given below, with reference to the accompanying drawings which illustrate an example embodiment. In the figures:
  • the figure 1 is a diagram of a vehicle according to an embodiment of the invention and a verification device,
  • the figure 2 schematically represents the vehicle fleet management equipment of the figure 1 ,
  • the figure 3 schematically represents the electronic tachograph of the vehicle of the figure 1 ,
  • the figure 4 represents in more detail the verification device of the figure 1 ,
  • the figure 5 is a step diagram illustrating a verification method according to an embodiment of the invention, and
  • the figure 6 is a diagram of steps representing steps implemented by the on-board equipment or by the device for verifying the figure 1 ,
  • the figure 7 is a diagram of a vehicle and a verification device, according to an embodiment useful for understanding the invention.

Description détaillée de modes de réalisationDetailed description of embodiments

La figure 1 représente un véhicule 1 poids-lourd équipé d'un équipement 2 embarqué et d'un chronotachygraphe 3 électronique. L'équipement 2 et le chronotachygraphe 3 peuvent communiquer par une liaison 4. La figure 1 représente également un dispositif de vérification 5 qui peut communiquer avec l'équipement 2 par une liaison 6.The figure 1 represents a vehicle 1 heavyweight equipped with a 2 embedded equipment and an electronic tachograph 3. The equipment 2 and the tachograph 3 can communicate via a link 4. The figure 1 also represents a verification device 5 which can communicate with the equipment 2 via a link 6.

L'équipement 2 permet la mise en oeuvre d'applications de gestion de flottes de véhicules. Ainsi, l'équipement 2 peut communiquer avec un site central (non représenté) par exemple pour le positionnement du véhicule 1, la remontée des positions vers le site central, l'envoi de missions au véhicule 1 depuis le site central, etc.The equipment 2 allows the implementation of fleet management applications of vehicles. Thus, the equipment 2 can communicate with a central site (not shown) for example for the positioning of the vehicle 1, the recovery of positions to the central site, sending missions to the vehicle 1 from the central site, etc.

L'équipement 2 est représenté schématiquement sur la figure 2. Il comprend notamment un microprocesseur 20, une interface de communication 21, une mémoire morte 22, une mémoire vive 23, un dispositif de positionnement 24 et une interface de communication 25. Le microprocesseur 20 permet d'exécuter de programmes mémorisés dans la mémoire morte 22, en utilisant la mémoire vive 23. L'interface de communication 21 permet à l'équipement 2 de communiquer avec le chronotachygraphe 3 par la liaison 4, qui est par exemple une liaison filaire. Le dispositif de positionnement 24 est par exemple un dispositif de positionnement par satellite de type GPS, Glonass, Galileo, etc. Il est capable de générer des données de position, de vitesse instantanée, de date et d'heure. Les données générées par le dispositif de positionnement 24 peuvent être mémorisées dans la mémoire vive 23. En variante, l'équipement 2 comprend également une mémoire de type Flash dans laquelle sont mémorisées les données générées par le dispositif de positionnement 24, ce qui permet d'éviter une perte de données en cas de perte momentanée de l'alimentation électrique. L'interface de communication 25 permet à l'équipement 2 de communiquer avec le dispositif de vérification 5 ou avec le site central, par la liaison 6. La liaison 6 peut être une liaison filaire ou sans fils.The equipment 2 is shown schematically on the figure 2 . It comprises in particular a microprocessor 20, a communication interface 21, a read-only memory 22, a random access memory 23, a positioning device 24 and a communication interface 25. The microprocessor 20 makes it possible to execute programs stored in the read-only memory 22 , using the RAM 23. The communication interface 21 allows the equipment 2 to communicate with the tachograph 3 via the link 4, which is for example a wired link. The positioning device 24 is for example a GPS positioning device such as GPS, Glonass, Galileo, etc. It is able to generate position data, instantaneous speed, date and time. The data generated by the positioning device 24 can be stored in the random access memory 23. In a variant, the device 2 also comprises a flash memory in which the data generated by the positioning device 24 is stored, which allows avoid data loss in the event of a temporary loss of power supply. The communication interface 25 allows the equipment 2 to communicate with the verification device 5 or with the central site, via the link 6. The link 6 may be a wired or wireless link.

Le chronotachygraphe 3 est un chronotachygraphe électronique, dont l'installation est obligatoire dans tout camion neuf de plus de 3,5 tonnes. Le chronotachygraphe 3 comprend notamment une interface de communication 31 et un enregistreur 32. L'enregistreur 32 enregistre en permanence de nombreuses informations : identité du conducteur, durée de conduite, distance parcourue, vitesse instantanée, vitesse moyenne, vitesse maximale, etc. L'interface de communication 31 comprend un connecteur normalisé, situé en face avant et relié à l'équipement 2 par la liaison 4, qui permet l'accès aux données enregistrées. L'accès aux données se fait normalement en utilisant une carte à puce dite « carte entreprise », qui permet d'accéder à toutes les données concernant les conducteurs de l'entreprise concernée. Il est toutefois possible d'accéder aux données sans la carte entreprise. Simplement, certaines données nominatives sont alors masquées.The tachograph 3 is an electronic tachograph, the installation of which is mandatory in any new truck of more than 3.5 tons. The tachograph 3 comprises in particular a communication interface 31 and a recorder 32. The recorder 32 continuously records a great deal of information: driver identity, driving time, distance traveled, instantaneous speed, average speed, maximum speed, etc. The communication interface 31 comprises a standardized connector, located on the front and connected to the equipment 2 by the link 4, which allows access to the recorded data. Access to the data is normally done using a so-called " business card " smart card, which provides access to all the data concerning the drivers of the company concerned. It is however possible to access the data without the company card. Simply, some personal data is then hidden.

Lorsque des données sont extraites du chronotachygraphe 3 par le connecteur en face avant, elles sont signées. Cette signature, reposant sur un schéma habituel de chiffrement à clés asymétriques, permet de s'assurer de l'authentification des données (elles proviennent bien du chronotachygraphe concerné) et de leur intégrité (elles n'ont pas été modifiées par rapport à ce qu'elles étaient lors de leur génération dans le chronotachygraphe).When data is extracted from the tachograph 3 by the connector on the front panel, they are signed. This signature, based on a usual asymmetric key encryption scheme, makes it possible to ensure the authentication of the data (they come from chronotachograph) and their integrity (they have not been modified compared to what they were when they were generated in the tachograph).

La communication entre l'équipement 2 et le chronotachygraphe 3 est par exemple effectuée selon le protocole normalisé décrit dans l'annexe 1B du règlement CEE n° 3821/85.The communication between the equipment 2 and the tachograph 3 is for example carried out according to the standard protocol described in Annex 1B of the EEC Regulation No. 3821/85.

Le dispositif de vérification 5 est représenté schématiquement sur la figure 4. Il comprend notamment un microprocesseur 50, une interface de communication 51, une mémoire morte 52 et une mémoire vive 53. Le microprocesseur 50 permet d'exécuter des programmes mémorisés dans la mémoire morte 52, en utilisant la mémoire vive 53. L'interface de communication 51 permet au dispositif de vérification 5 de communiquer avec l'équipement 2 par la liaison 6.The verification device 5 is shown schematically on the figure 4 . It comprises in particular a microprocessor 50, a communication interface 51, a read-only memory 52 and a random access memory 53. The microprocessor 50 makes it possible to execute programs stored in the read-only memory 52, using the random access memory 53. communication 51 allows the verification device 5 to communicate with the equipment 2 via the link 6.

Le dispositif de vérification 5 peut par exemple être situé sur le site central d'une entreprise de transport ou être un dispositif portatif utilisé sur les routes par une personne responsable du contrôle des véhicules en circulation, par exemple un agent chargé de vérifier l'application de la réglementation en vigueur.The verification device 5 may for example be located at the central site of a transport company or be a portable device used on the roads by a person responsible for controlling the vehicles in circulation, for example an agent responsible for verifying the application. of the regulations in force.

La figure 5 est un diagramme d'étapes qui illustre un procédé de vérification de la mise en fonction de l'équipement 2. Ce procédé est effectué par l'équipement 2 lors de l'exécution d'un programme correspondant mémorisé dans la mémoire morte 22. L'exécution de ce programme est lancée automatiquement lorsque l'équipement 2 est mis en fonction.The figure 5 is a step diagram which illustrates a method of checking the start of the equipment 2. This process is performed by the equipment 2 when executing a corresponding program stored in the read-only memory 22. L Execution of this program is started automatically when the equipment 2 is turned on.

Le procédé débute à l'étape 40, dans laquelle l'équipement 2 envoie une demande de données vers le chronotachygraphe 3, en utilisant l'interface de communication 21 et la liaison 4. Cette demande de données est effectuée chaque fois qu'une vérification de mise en fonction est souhaitée ou nécessaire, ou bien périodiquement ou à des instants définis aléatoirement.The method starts in step 40, in which the equipment 2 sends a data request to the tachograph 3, using the communication interface 21 and the link 4. This data request is made each time a check is made. is required or necessary, or periodically or at randomly defined times.

Lorsqu'il reçoit cette demande de données, le chronotachygraphe 3 répond en envoyant un paquet de données, ayant été générées par un chronotachygraphe 3, ces données étant datées avec une date courante à laquelle s'effectue cette opération d'obtention de données auprès du chronotachygraphe 3. La date courante est une information temporelle précise, contenant par exemple la date calendaire et l'heure à la seconde près.When it receives this request for data, the tachograph 3 responds by sending a packet of data, having been generated by a tachograph 3, these data being dated with a current date at which this operation of obtaining data from the chronotachograph 3. The current date is a precise temporal information, for example containing the calendar date and the hour to the nearest second.

Outre la date (et heure) courante et la signature, les données fournies par le chronotachygraphe 3 contiennent les informations suivantes (fixées par la réglementation européenne) :

  • le certificat de sécurité de l'état européen d'origine du véhicule.
  • le certificat de sécurité du chronotachygraphe,
  • l'identification du véhicule,
  • la date et l'heure chronotachygraphe de fourniture du paquet de données par la chronotachygraphe,
  • éventuellement d'autres données, par exemple la vitesse instantanée du véhicule à la date courante.
In addition to the current date (and time) and the signature, the data provided by the tachograph 3 contains the following information (set by European regulations):
  • the safety certificate of the European State of origin of the vehicle.
  • the safety certificate of the tachograph,
  • vehicle identification,
  • the chronotachograph date and time of delivery of the data packet by the tachograph,
  • possibly other data, for example the instantaneous speed of the vehicle on the current date.

Les données fournies par le chronotachygraphe répondent par exemple au règlement CEE n°3821/85.For example, the data supplied by the tachograph correspond to EEC Regulation 3821/85.

Les données envoyées par le chronotachygraphe 3 sont en outre signées avec une signature propre au chronotachygraphe 3, afin de pouvoir authentifier l'origine de ces données, et de disposer d'un jeu de données de référence dont l'intégrité est vérifiable.The data sent by the tachograph 3 are also signed with a signature of the tachograph 3, in order to authenticate the origin of these data, and to have a reference data set whose integrity is verifiable.

Ainsi, à l'étape 41, l'équipement 2 teste s'il a reçu un paquet de données signées de la part du chronotachygraphe 3.Thus, in step 41, the equipment 2 tests whether it has received a packet of data signed from the tachograph 3.

Si, à l'étape 41, aucun paquet de données n'a été reçu, l'équipement 2 attend un temps ΔT1 à l'étape 42 avant de répéter la demande de données à l'étape 40. Ainsi, si le chronotachygraphe 3, n'est pas en fonction lors de la première demande de données, la répétition des étapes 40, 41 et 42 permet de recevoir un paquet de données signées dés que le chronotachygraphe 3 est mis en fonction.If, in step 41, no data packet has been received, the equipment 2 waits a time ΔT1 in step 42 before repeating the data request in step 40. Thus, if the tachograph 3 , is not in operation during the first request for data, the repetition of steps 40, 41 and 42 makes it possible to receive a packet of signed data as soon as the tachograph 3 is turned on.

Si, à l'étape 41, un paquet de données a été reçu, l'équipement 2 passe à l'étape 43 où le paquet de données reçu est mémorisé dans la mémoire vive 23 (ou dans la mémoire Flash décrite précédemment). Comme les données sont signées, il sera possible de s'assurer par analyse des données signées que la date et l'heure courantes mémorisées sont authentiques et intègres. Ainsi, la présence du paquet de données signées dans la mémoire vive 23 constitue une preuve que le chronotachygraphe 3 et l'équipement 2 étaient en fonction à la date et l'heure courantes mémorisées.If, in step 41, a data packet has been received, the equipment 2 proceeds to step 43 where the received data packet is stored in the RAM 23 (or in the Flash memory previously described). As the data is signed, it will be possible to ensure by analysis of the signed data that the current date and time memorized are authentic and correct. Thus, the presence of the signed data packet in the RAM 23 is a proof that the tachograph 3 and the equipment 2 were in function at the current date and time stored.

Ensuite, à l'étape 44, l'équipement 2 teste s'il a reçu une demande de transmission de la part du dispositif de vérification 5, par l'intermédiaire de la liaison 6 et de l'interface de communication 25.Then, in step 44, the equipment 2 tests whether it has received a transmission request from the verification device 5, via the link 6 and the communication interface 25.

Si, à l'étape 44, aucune demande de transmission n'a été reçue, l'équipement 2 attend un temps ΔT2 à l'étape 46 avant de répéter la demande de données à l'étape 40. Ainsi, par la répétition des étapes 40, 41 et 43, plusieurs paquets de données signées, contenant des dates et heures courantes différentes, peuvent être mémorisés dans la mémoire vive 23 (ou dans la mémoire Flash décrite précédemment). Le temps ΔT2 peut différer d'une exécution de l'étape 46 à l'autre, en fonction des besoins de l'application. Par exemple, le temps ΔT2 est aléatoire. En pratique, la demande de données de l'étape 40 est :

  • soit répétée (aléatoirement ou périodiquement) sur une période de temps pendant laquelle la vérification de mise en fonction est souhaitée ou sur une période de temps incluant les instants pour lesquels la vérification est souhaitée,
  • soit répétée ponctuellement, à chaque fois qu'il est requis de disposer d'une information sur cette mise en fonction.
If, in step 44, no transmission request has been received, the equipment 2 waits a time ΔT2 in step 46 before repeating the data request in step 40. Thus, by repetition of Steps 40, 41 and 43, several signed data packets, containing different current dates and times, can be stored in the RAM 23 (or in the Flash memory previously described). The time ΔT2 may differ from one execution from step 46 to the other, depending on the needs of the application. For example, the time ΔT2 is random. In practice, the data request of step 40 is:
  • is repeated (randomly or periodically) over a period of time during which the start-up check is desired or over a period of time including times for which verification is desired,
  • is repeated punctually, whenever it is required to have information on this activation.

Si, à l'étape 44, une demande de transmission a été reçue, l'équipement 2 passe à l'étape 45 où le ou les paquets de données mémorisés dans la mémoire vive 23 (ou dans la mémoire Flash décrite précédemment) sont transmis au dispositif de vérification 5. Ces paquets de données constituent, lorsqu'ils sont intègres, une preuve de la mise en fonction de l'équipement 2, aux dates indiquées dans ces paquets. Ces données sont appelées ici « données de vérification » et notées DATA0.If, in step 44, a transmission request has been received, the equipment 2 proceeds to step 45 where the data packet or packets stored in the random access memory 23 (or in the Flash memory previously described) are transmitted. 5. These data packets constitute, when they are correct, proof of the commissioning of the equipment 2, on the dates indicated in these packages. These data are called here "verification data" and noted DATA0.

Ainsi, l'utilisateur du dispositif de vérification 5 peut prendre connaissance de la ou des dates et heures mémorisées et ainsi vérifier que l'équipement 2 était en fonction aux dates et heures mémorisées.Thus, the user of the verification device 5 can take cognizance of the date or dates and hours stored and thus verify that the equipment 2 was in operation at the dates and hours stored.

Le dispositif de vérification 5 vérifie l'intégrité des données de vérification DATA0 reçues à partir de la signature jointe à ces données, puis génère et mémorise, en association avec la date courante pour laquelle des données de vérification ont été reçues, une information représentative de l'existence ou de l'absence d'une preuve de la mise en fonction dudit équipement à ladite date courante. Cette date courante est donc la date à laquelle les données ont été obtenues auprès du chronotachygraphe.The verification device 5 verifies the integrity of the verification data DATA0 received from the signature attached to these data, then generates and stores, in association with the current date for which verification data has been received, information representative of the existence or absence of proof that the said equipment was put into service at the said current date. This current date is therefore the date on which the data were obtained from the tachograph.

Afin de vérifier l'intégrité des données, le dispositif de vérification 5 applique lors de l'étape 60 les traitements décrits dans l'appendice 11 (intitulé "Mécanismes de sécurité communs") du règlement CEE n° 3821/85, règlementant le chronotachygraphe électronique en Europe. Une fois cette intégrité établie, il a la certitude que l'équipement 2 était bien en fonction dans le véhicule identifié sur la base de l'identification de véhicule fournie, à la date et heure indiquées dans les données reçues de l'équipement 2. Le dispositif de vérification 5 enregistre, en association avec les dates pour lesquelles un paquet de données intègres a été reçu, une information représentative de l'existence d'un tel paquet, c'est-à-dire représentative de l'existence d'une preuve de mise en fonction pour ces dates.In order to verify the integrity of the data, the verification device 5 applies in step 60 the processes described in Appendix 11 (entitled "Common safety mechanisms") of the EEC Regulation No. 3821/85, regulating the tachograph in Europe. Once this integrity is established, it is certain that the equipment 2 was in operation in the vehicle identified on the basis of the vehicle identification provided, at the date and time indicated in the data received from the equipment 2. The verification device 5 records, in association with the dates for which a packet of integrity data has been received, information representative of the existence of such a packet, i.e. representative of the existence of proof of commissioning for these dates.

En cas de fraude consistant à empêcher temporairement la mise en fonction de l'équipement 2, aucun paquet de données contenant des dates et heures correspondant à la période de non fonctionnement ne sera mémorisé, ce qui permet de détecter la fraude. Dans une telle situation, le dispositif de vérification 5 détecte l'absence de paquet de données pour certaines plages horaires et/ou certaines dates et enregistre en association avec ces plages horaires et/ou dates une information représentative de cette absence de paquet de données, c'est-à-dire représentative de l'absence de preuve de mise en fonction pour ces plages horaires et/ou dates.In case of fraud consisting in temporarily preventing the activation of the equipment 2, no data packet containing dates and times corresponding to the period of non-operation will be stored, which makes it possible to detect the fraud. In such a situation, the verification device 5 detects the absence of data packet for certain time slots and / or certain dates and records in association with these time slots and / or dates information representative of this lack of data packet, that is to say, representative of the absence of proof of activation for these time slots and / or dates.

Les différentes informations ainsi mémorisées, représentatives de l'existence ou de l'absence d'une preuve de la mise en fonction de l'équipement 2 (ou directement les données de vérification DATA0 reçues), sont utilisées par le dispositif de vérification 5 pour exécuter au moins une étape de vérification consistant à déterminer si l'équipement 2 était en fonction pendant une plage horaire donnée ou à une date donnée. Par exemple, par balayage des informations mémorisées ou interrogation d'une base de données dans laquelle ces informations sont mémorisées. Les informations mémorisées constituent ainsi un historique indiquant pour quelles dates l'équipement 2 était en fonction.The various information thus stored, representative of the existence or the absence of a proof of the putting into operation of the equipment 2 (or directly the received DATA0 verification data), are used by the verification device 5 for performing at least one verification step of determining whether the equipment 2 was in operation for a given time period or date. For example, by scanning stored information or querying a database in which this information is stored. The stored information thus constitutes a history indicating for which dates the equipment 2 was in operation.

Lorsque les données de vérification DATA0 reçues comprennent une identification de véhicule, cette identification de véhicule est enregistrée en association avec les informations représentatives de l'existence ou de l'absence d'une preuve de la mise en fonction, afin de disposer d'un historique pour chaque véhicule identifié.When the verification data DATA0 received includes a vehicle identification, this vehicle identification is recorded in association with the information representative of the existence or absence of a proof of commissioning, in order to have a history for each identified vehicle.

Comme expliqué précédemment, outre la non mise en fonction de l'équipement 2, une tentative de fraude peut consister à manipuler les données fournies par le dispositif de positionnement 24. Ainsi, le procédé de vérification peut comprendre une étape de vérification de données visant à détecter ce type de fraude. La figure 6 est un diagramme d'étapes qui illustre les étapes permettant cette vérification de données.As explained above, in addition to the non-activation of the equipment 2, an attempt at fraud may consist in manipulating the data provided by the positioning device 24. Thus, the verification method may comprise a data verification step aimed at detect this type of fraud. The figure 6 is a step diagram that illustrates the steps for this data verification.

A l'étape 61, l'équipement 2 obtient des données DATA1 censées être fournies par le dispositif de positionnement 24. A cet effet, le dispositif de positionnement 24 est configuré pour fournir des informations de position, de vitesse instantanée, de date et d'heure, de manière régulière, par exemple une fois par seconde. Les données DATA1 comprenant ces informations sont mémorisées dans la mémoire vive 23 pour une période dite « période de stockage pour vérification », par exemple de 1 à 24 heures. Une période de stockage pour vérification longue, par exemple de 24 heures, permet une meilleure détection des manipulations de données, mais nécessite une mémoire plus importante et une puissance de calcule plus élevée que pour une période plus courte.In step 61, the equipment 2 obtains data DATA1 supposed to be provided by the positioning device 24. For this purpose, the positioning device 24 is configured to provide information on position, instantaneous speed, date and time. hour, for example once a second. The data DATA1 comprising this information is stored in the RAM 23 for a period called " storage period for verification ", for example from 1 to 24 hours. A storage period for long verification, for example 24 hours, allows better detection of data manipulations, but requires a larger memory and a higher computing power than for a shorter period.

Ainsi, la mémoire vive 23 contient des données DATA1 censées avoir été déterminées par le dispositif de positionnement 24. Par « données censées avoir été déterminées par le dispositif de positionnement 24 », on entend des données qui, en l'absence de fraude, ont effectivement été déterminées par le dispositif de positionnement 24 ou qui, en cas de fraude, ont été manipulées et sont mémorisées à la places des données qui ont effectivement été déterminées par le dispositif de positionnement 24.Thus, the random access memory 23 contains data DATA1 supposed to have been determined by the positioning device 24. By "data supposed to have been determined by the positioning device 24" is meant data which, in the absence of fraud, has have been determined by the positioning device 24 or which, in the event of fraud, have been manipulated and are stored in the place of the data which have actually been determined by the positioning device 24.

Les données DATA1 contiennent une suite de positions, une suite de vitesses instantanées et pour chaque position, une date. La date est une information temporelle précise contenant par exemple la date calendaire et l'heure à la seconde près. En variante, les données ne pourraient contenir la date que pour certaines positions, par exemple la première et la dernière, et la date des autres positions peut être calculée, par exemple en connaissant un intervalle de temps constant qui sépare chaque position. Les données DATA1 contiennent également un indicateur de données manquantes indiquant les moments où une mauvaise réception des données satellites n'a pas permis au dispositif de positionnement 24 de générer les informations.The data DATA1 contains a sequence of positions, a sequence of instantaneous speeds and for each position, a date. The date is a precise time information containing, for example, the calendar date and the hour to the nearest second. As a variant, the data could only contain the date for certain positions, for example the first and the last, and the date of the other positions can be calculated, for example by knowing a constant time interval which separates each position. The data DATA1 also contains a missing data indicator indicating the moments when a bad reception of the satellite data did not allow the positioning device 24 to generate the information.

A l'étape 62, l'équipement 2 obtient des données DATA2 signées de la part du chronotachygraphe 3. Pour obtenir les données DATA2, l'équipement 2 envoie périodiquement une demande de téléchargement de données au chronotachygraphe 3. En réponse à cette demande de téléchargement, le chronotachygraphe 3 fournit les données DATA2 qui contiennent une suite de vitesses instantanées, dites « vitesses chronotachygraphe » et la date d'au moins une vitesse instantanée parmi les vitesses chronotachygraphe, par exemple de la première vitesse instantanée de la suite. Dans ce cas, il est possible de déterminer la date et l'heure de toutes les vitesses instantanées, par exemple sachant que l'intervalle de temps entre chaque vitesse instantanée est d'une seconde. Les vitesses chronotachygraphe correspondent par exemple aux dernières 24 heures de trajet du véhicule 1.In step 62, the equipment 2 obtains signed DATA2 data from the tachograph 3. To obtain the DATA2 data, the equipment 2 periodically sends a request for downloading data to the tachograph 3. In response to this request for Download, the tachograph 3 provides DATA2 data which contain a sequence of instantaneous speeds, called " tachograph speeds " and the date of at least one instantaneous speed among the tachograph speeds, for example the first instantaneous speed of the suite. In this case, it is possible to determine the date and time of all instantaneous speeds, for example knowing that the time interval between each instantaneous speed is of a second. The chronotachograph speeds correspond for example to the last 24 hours of the vehicle 1.

Sur la figure 6, l'étape 61 est suivie par l'étape 62. En pratiques, les étapes 61 et 62 peuvent également être effectuées en parallèles ou dans l'ordre inverse de celui représenté.On the figure 6 step 61 is followed by step 62. In practice, steps 61 and 62 may also be performed in parallel or in the reverse order of that shown.

A l'étape 63, l'équipement 2 recherche une correspondance entre les données DATA1 et les données DATA2. Plus précisément, l'équipement 2 extrait des vitesses chronotachygraphe celles qui correspondent à la période de stockage pour vérification, en prenant en compte la dérive possible de l'horloge du chronotachygraphe 3 (maximum légal de +- 2 secondes par jour). Ensuite, l'équipement 2 effectue une recherche de correspondance entre les positions / vitesses instantanées contenues dans les données DATA1, et les vitesses chronotachygraphe extraites des données DATA2.In step 63, the equipment 2 searches for a correspondence between the data DATA1 and the data DATA2. More specifically, the equipment 2 extracts tachograph speeds that correspond to the storage period for verification, taking into account the possible drift of the clock of the tachograph 3 (legal maximum of + - 2 seconds per day). Then, the equipment 2 performs a correspondence search between the positions / instantaneous speeds contained in the DATA1 data, and the tachograph speeds extracted DATA2 data.

Cette recherche de correspondance entre deux suites de vitesses peut être effectuée par exemple par un algorithme du type « comparaison de séquences de symboles » ou « reconnaissance de motifs ». Ce type d'algorithme permet de tenir compte d'une suite incomplète de vitesses de la période de stockage (pour prendre en compte les moments où une mauvaise réception des données satellites n'a pas permis au dispositif de positionnement 24 de générer les informations) et est capable d'accepter un léger écart entre les deux suites de vitesses, pour tenir compte de la tolérance légale de +/- 6 km/h sur les vitesses chronotachygraphe.This search for correspondence between two sequences of speeds can be carried out for example by an algorithm of the type "comparison of symbol sequences" or "pattern recognition". This type of algorithm makes it possible to take into account an incomplete sequence of speeds of the storage period (to take into account the moments when a bad reception of the satellite data did not allow the positioning device 24 to generate the information) and is able to accept a slight difference between the two sequences of speeds, to take into account the legal tolerance of +/- 6 km / h on the tachograph speeds.

La recherche de correspondance vise à établir s'il y a un degré de corrélation suffisant (par exemple supérieur à un seuil prédéterminé) entre les deux suites de données : en termes d'amplitude de vitesse, de variations d'amplitude de vitesse, de spectre fréquentiel, de valeur moyenne, d'écart type, etc.The search for correspondence aims to establish whether there is a sufficient degree of correlation (for example greater than a predetermined threshold) between the two data suites: in terms of amplitude of speed, of variations of amplitude of speed, of frequency spectrum, average value, standard deviation, etc.

Si, à l'étape 63, aucune correspondance n'est trouvée, le procédé passe à l'étape 64. L'absence de correspondance peut signifier que les données DATA1 censées avoir été fournies par le dispositif de positionnement 24 sont incorrectes ou manquantes entre très grande partie. L'indicateur de données manquantes permet de faire la différence entre les deux cas. Ainsi, à l'étape 64, l'équipement 2 détermine l'authenticité des données DATA1 en tenant compte de l'indicateur de données manquantes. Plus précisément, si l'équipement 2 conclut que l'absence de correspondance est due à des données incorrectes, cela indique une forte probabilité de fraude. Le procédé passe alors à l'étape 65 où cette conclusion, symbolisée sur la figure 6 par un « X », est traitée de manière appropriée (par exemple, elle est mémorisée dans l'équipement 2 et/ou transmise à un site distant, immédiatement ou ultérieurement). Par contre, si l'équipement 2 conclu que l'absence de correspondance est due à de nombreuses données manquantes, il passe à l'étape 66 et ne peut pas conclure sur la présence ou l'absence de fraude, ce qui est symbolisé par un « ? » sur la figure 6.If, in step 63, no match is found, the method proceeds to step 64. The lack of correspondence may mean that the data DATA1 supposed to have been provided by the positioning device 24 is incorrect or missing between very large part. The missing data indicator makes it possible to differentiate between the two cases. Thus, in step 64, the equipment 2 determines the authenticity of the data DATA1 taking into account the missing data indicator. More specifically, if the equipment 2 concludes that the lack of correspondence is due to incorrect data, this indicates a high probability of fraud. The process then proceeds to step 65 where this conclusion, symbolized on the figure 6 by an "X", is handled appropriately (for example, it is stored in the equipment 2 and / or transmitted to a remote site, immediately or later). On the other hand, if the equipment 2 concludes that the lack of correspondence is due to a large amount of missing data, it proceeds to step 66 and can not conclude on the presence or absence of fraud, which is symbolized by a " ? " on the figure 6 .

Selon une variante, si à l'étape 63 une correspondance est trouvée, le procédé peut passer directement à l'étape 70 et conclure à l'absence de fraude, ce qui est symbolisé par un « V » sur la figure 6.According to a variant, if in step 63 a match is found, the method can proceed directly to step 70 and conclude that there is no fraud, which is symbolized by a "V" on the figure 6 .

Lors de l'étape 71, le dispositif de vérification 5 effectue un calcul de parcours et une vérification de parcours, en vue de déterminer à partir des données de positionnement et/ou de vitesse DATA1 obtenues de l'équipement 2, si le véhicule a circulé ou non sur une route soumise au paiement d'une taxe et dans l'affirmative, de déterminer quel sera le montant de la taxe à payer.In step 71, the verification device 5 performs a path calculation and a path check, with a view to determining from the positioning data and / or speed DATA1 obtained from the equipment 2, whether the vehicle has whether or not it is on a tax-paying road and, if so, what will be the amount of the tax to be paid.

Le montant de cette taxe dépend entre autres, en ce qui concerne l'éco-taxe définie en France pour les poids lourds, du type de la route utilisée et de la distance parcourue sur cette route. Toutes les routes ne sont pas soumises à l'éco-taxe. Une route peut ne pas être non plus complètement soumise à l'éco-taxe.The amount of this tax depends, among other things, on the eco-tax defined in France for heavy goods vehicles, the type of road used and the distance traveled on this road. All roads are not subject to the eco-tax. A road may not be completely subject to the eco-tax either.

La vérification consiste donc à déterminer, à partir des données DATA1, produites par dispositif de positionnement 24 de l'équipement embarqué et validées par le dispositif de vérification 5 suite à l'établissement d'une correspondance avec les données DATA2 du chronotachygraphes, si le véhicule a circulé ou non sur une route soumise au paiement d'une taxe.The verification therefore consists in determining, from the data DATA1, produced by the positioning device 24 of the on-board equipment and validated by the verification device 5 following the establishment of a correspondence with the DATA2 data of the tachograph, if the vehicle has or has not traveled on a road subject to payment of a fee.

Dans le cas du transport de marchandises de valeur, la vérification de parcours consiste en outre à reconstituer à partir des données DATA1 le parcours réel du véhicule. En cas de disparition de marchandise entre la prise en charge de celle-ci, et sa livraison, il est ainsi possible de déterminer quel a été le parcours suivi par le véhicule et/ou si, parmi les données de vérification DATA0 reçues par le dispositif de vérification lors d'une étape 45, il y absence de données de vérification pour une partie du parcours et/ou pour une plage horaire ou date donnée.In the case of the transport of valuable goods, the course check also consists of reconstructing from the DATA1 data the actual course of the vehicle. In the event of the disappearance of goods between the taking-over of the latter and its delivery, it is thus possible to determine what was the journey followed by the vehicle and / or whether, among the data of verification DATA0 received by the device in a step 45, there is no verification data for part of the route and / or for a given time slot or date.

Lorsque ces vérifications sont effectuées, le dispositif de vérification 5 enregistre dans une base de données la taxe à payer en association avec l'identification du véhicule obtenue à l'étape 61: les données ainsi enregistrées serviront au déclenchement d'une opération de paiement.When these verifications are carried out, the verification device 5 records in a database the tax to be paid in association with the identification of the vehicle obtained in step 61: the data thus recorded will be used to trigger a payment transaction.

Selon une autre variante représentée sur la figure 6, le procédé passe d'abord aux étapes 67 et 68 qui constituent un test complémentaire. A l'étape 67, des données DATA3 contenant une nouvelle suite de vitesses instantanées sont déterminées. Plus précisément, la nouvelle suite de vitesses instantanées est déterminée en fonction de la suite de positions contenues dans les données DATA1. Ensuite, à l'étape 68, l'équipement 2 effectue une recherche de correspondance similaire à celle de l'étape 63, mais dans ce cas entre la nouvelle suite de vitesses déterminée à l'étape 67 et les vitesses chronotachygraphe. L'absence de correspondance indique à nouveau une forte probabilité de fraude. Cette conclusion est traitée à l'étape 69 comme à l'étape 65. Par contre, en cas de correspondance, la confiance en l'intégrité des données obtenues à l'étape 61 peut être renforcée.According to another variant represented on the figure 6 the method first proceeds to steps 67 and 68 which constitute a complementary test. In step 67, data DATA3 containing a new sequence of instantaneous speeds are determined. More precisely, the new sequence of instantaneous speeds is determined according to the sequence of positions contained in the data DATA1. Then, in step 68, the equipment 2 performs a matching search similar to that of step 63, but in this case between the new sequence of speeds determined in step 67 and the tachograph speeds. The lack of correspondence again indicates a high probability of fraud. This conclusion is treated in step 69 as in step 65. By cons, in case of correspondence, confidence in the integrity of the data obtained in step 61 can be enhanced.

Les données DATA2 étant signées, il est possible de s'assurer de leur authentification et de leur intégrité. Ainsi, en cas de fraude consistant à manipuler les données fournies par le dispositif de positionnement 24, la recherche d'une correspondance entre les données DATA1 et les données DATA2 permet de vérifier l'intégrité des données fournies par le dispositif de positionnement 24, ou au contraire de détecter une fraude.DATA2 data being signed, it is possible to ensure their authentication and integrity. Thus, in the event of fraud involving manipulating the data provided by the positioning device 24, finding a correspondence between the data DATA1 and the data DATA2 makes it possible to verify the integrity of the data provided by the positioning device 24, or on the contrary to detect a fraud.

La figure 7 représente un véhicule et un dispositif de vérification selon un mode de réalisation utile à la compréhension de l'invention. Les éléments identiques ou similaires à des éléments des figures 1 et 4 sont désignés par les mêmes références, sans risques de confusion.The figure 7 represents a vehicle and a verification device according to an embodiment useful for understanding the invention. Elements identical or similar to elements of Figures 1 and 4 are designated by the same references, without risk of confusion.

Dans le mode de réalisation de la figure 7, l'équipement 2 et le chronotachygraphe 3 ne sont pas reliés par une liaison. Par contre, le chronotachygraphe 3 peut communiquer avec le dispositif de vérification 5 par une liaison 7 et l'interface de communication 51.In the embodiment of the figure 7 , the equipment 2 and the tachograph 3 are not connected by a link. On the other hand, the tachograph 3 can communicate with the verification device 5 via a link 7 and the communication interface 51.

Ainsi, l'équipement 2 peut envoyer au dispositif de vérification 5 des données censées avoir été déterminées par son dispositif de positionnement, et le chronotachygraphe 3 peut envoyer au dispositif de vérification 5 des données signées. Le dispositif de vérification 5 peut alors exécuter un procédé de vérification similaire à celui représenté sur la figure 6 pour vérifier l'intégrité des données provenant de l'équipement 2.Thus, the equipment 2 can send to the verification device 5 data supposed to have been determined by its positioning device, and the tachograph 3 can send to the verification device 5 signed data. The verification device 5 can then execute a verification method similar to that shown on the figure 6 to verify the integrity of data from the equipment 2.

En variante, le chronotachygraphe 3 peut être relié à l'équipement embarqué 2. Dans ce cas, les données provenant du chronotachygraphe 3 peuvent être fournie au dispositif de vérification 5 par l'intermédiaire de l'équipement 2.Alternatively, the tachograph 3 can be connected to the on-board equipment 2. In this case, the data from the tachograph 3 can be supplied to the verification device 5 via the equipment 2.

Ainsi, le présent document concerne de manière générale un procédé de vérification de données censées avoir été générées par un dispositif de positionnement, comprenant :

  • une étape d'obtention de premières données censées avoir été déterminées par le dispositif de positionnement, les premières données contenant une première suite de vitesses instantanées et la date d'au moins une des vitesses instantanées de la première suite de vitesses instantanées,
  • une étape d'obtention de deuxièmes données signées déterminées par un chronotachygraphe électronique, les deuxièmes données contenant une deuxième suite de vitesses instantanées et la date d'au moins une vitesse instantanée de la deuxième suite de vitesses instantanées,
  • une étape de recherche d'une correspondance entre les premières données et les deuxièmes données.
Thus, the present document generally relates to a method of verifying data supposed to have been generated by a positioning device, comprising:
  • a step of obtaining first data supposed to have been determined by the positioning device, the first data containing a first sequence of instantaneous speeds and the date of at least one of the instantaneous speeds of the first series of instantaneous gears,
  • a step of obtaining second signed data determined by an electronic tachograph, the second data containing a second series of instantaneous gears and the date of at least one instantaneous speed of the second series of instantaneous gears,
  • a step of finding a correspondence between the first data and the second data.

Ce procédé de vérification peut être effectué par un équipement embarqué sur le véhicule dans lequel se trouvent le chronotachygraphe et le dispositif de positionnement, ou par un dispositif de vérification externe auquel sont transmises les données.This verification process can be carried out by an on-board equipment on the vehicle in which the tachograph and the positioning device are located, or by an external verification device to which the data is transmitted.

Dans un mode de réalisation les étapes 62 et suivantes sont mise en oeuvre par le dispositif de vérification qui reçoit les données DATA1 et DATA2 puis effectue toutes les vérifications requises, selon ce qui est décrit ci-dessus pour les étapes 63 à 71.In one embodiment, the steps 62 and following are carried out by the verification device which receives the data DATA1 and DATA2 and then performs all the required verifications, as described above for the steps 63 to 71.

Pour les besoins de la preuve de mise en fonction sur une plage temporelle donnée, le dispositif de vérification 5 peut utiliser :

  • des paquets de données de vérification DATA0 générés pour plusieurs dates courantes, obtenues du chronotachygraphe indépendamment de données de vitesse DATA2 et /ou
  • des données jointes par le chronotachygraphe aux données de vitesse DATA2 fournies par le chronotachygraphe.
For the purposes of proof of activation over a given time range, the verification device 5 may use:
  • DATA0 verification data packets generated for several current dates, obtained from the tachograph independently of DATA2 speed data and / or
  • data attached by the tachograph to the speed data DATA2 provided by the tachograph.

En effet, les données jointes (répondant par exemple au règlement CEE n°3821/85) comprennent généralement une identification du véhicule, le certificat de sécurité du chronotachygraphe une date courante et une signature permettant de vérifier simultanément l'intégrité de la date courante et des données de vitesses et peuvent donc également servir de données de vérification quant à la mise en fonction de l'équipement 2.Indeed, the attached data (answering for example the EEC regulation n ° 3821/85) generally include a vehicle identification, the safety certificate of the tachograph a current date and a signature making it possible simultaneously to check the integrity of the current date and velocity data and can thus also serve as verification data as to the commissioning of the equipment 2.

Il faut noter à ce propos que les données de vérification DATA0 et les données de vitesse DATA2 peuvent être obtenues avec des périodicités différentes et donc être associées à des dates courantes espacées différemment dans le temps : une utilisation croisée de ces deux types de données permet de couvrir une même plage temporelle avec des précisions différentes. En pratique, la périodicité d'obtention de données de vérification peut être d'une heure seulement ou de 10mn, alors que les données de vitesses et dates / heures associées sont générées à chaque seconde.It should be noted in this respect that the verification data DATA0 and the speed data DATA2 can be obtained with different periodicities and therefore be associated with current dates spaced differently in time: a cross-use of these two types of data makes it possible to cover the same time range with different precisions. In practice, the periodicity of obtaining verification data can be only one hour or 10 minutes, while the associated speed and date / time data are generated every second.

La vérification peut également s'effectuer pour des dates et/ou heures définies aléatoirement, déterminées par un serveur distant central ou encore par le dispositif de vérification 5. Ce dernier obtiendrait alors une suite de paquets de données à vérifier, par exemple lorsque la communication entre le central et l'équipement est possible (en couverture réseau mobile). Ensuite, la vérification serait effectuée pour les paquets de données obtenus du chronotachygraphe aux dates et/ou heures indiquées. Il faut bien sûr prendre en compte la gestion des pauses autorisées pour le conducteur du véhicule (pauses et/ou temps de repos) et donc sélectionner les dates et/ou heures pour lesquelles la vérification est requise en conséquence.The verification can also be performed for dates and / or hours defined randomly, determined by a central remote server or by the verification device 5. The latter would then obtain a sequence of data packets to check, for example when the communication between the central office and the equipment is possible (in mobile network coverage). Then, the verification would be carried out for data packets obtained from the tachograph at the dates and / or times indicated. It is of course necessary to take into account the management of the authorized breaks for the driver of the vehicle (breaks and / or rest periods) and thus to select the dates and / or times for which verification is required accordingly.

De manière générale, la périodicité / les instants d'obtention des données de vérification (ou des données DATA2) ainsi que la définition les dates et/ou heure pour lesquelles la vérification est effectuée seront adaptés aux besoins de l'application visée.In general, the periodicity / times of obtaining the verification data (or DATA2 data) as well as the definition of the dates and / or time for which the verification is performed will be adapted to the needs of the intended application.

Claims (13)

  1. Method for checking the starting up of equipment (2) embedded in a vehicle (1), said method comprising:
    - a step (41) of obtaining, by said embedded equipment (2), of data generated by an electronic tachograph (3) embedded in said vehicle (1), the data being date-stamped with a current date, contained in said data, at which said data were obtained from the electronic tachograph, said obtained data being signed with a signature of the tachograph,
    - a step (45) of transmission, by said embedded equipment (2), of the obtained data to a checking device (5),
    - a step (70) of checking, by the checking device (5), of the integrity of said data from said signature, and,
    - a generation step during which, if the integrity of the data is proved, the checking device (5) generates information representative of the existence of a proof of the starting up of said equipment at said current date.
  2. Checking method according to Claim 1, comprising, before the obtaining step (41), a request step (40) comprising the sending, by the embedded equipment (2), of a data request to said electronic tachograph (3).
  3. Checking method according to Claim 2, in which said request step (40) is repeated over a period of time during which the checking of the starting up is desired.
  4. Checking method according to Claim 1, in which said embedded equipment (2) comprises a positioning device (24), said method comprising a step of checking of data supposed to have been generated by said positioning device (24), said data checking step comprising:
    - a step (61) of obtaining of first data (DATA1) supposed to have been determined by said positioning device (24), the first data (DATA1) containing a first series of instantaneous speeds and the date of at least one of the instantaneous speeds of the first series of instantaneous speeds,
    - a step (62) of obtaining of signed second data (DATA2) determined by said electronic tachograph (3), the second data (DATA2) containing a second series of instantaneous speeds and the date of at least one instantaneous speed of the second series of instantaneous speeds,
    - a step (63) of searching for a correlation between the first data (DATA1) and the second data (DATA2) .
  5. Checking method according to Claim 4, comprising, in case of correlation between at least one first instantaneous speed of the first series of instantaneous speeds and at least one second instantaneous speed of the second series of instantaneous speeds, a step of obtaining of the date of this first instantaneous speed or of this second instantaneous speed and of at least one positioning datum for which the first instantaneous speed was generated by the positioning device.
  6. Checking method according to Claim 4, in which the first data (DATA1) contain an indicator of missing data, said data checking step comprising, if no correlation has been found between the first data (DATA1) and the second data (DATA2), a step (64) of determination of the authenticity of the first data (DATA1) as a function of said indicator of missing data.
  7. Checking method according to Claim 4, in which the first data (DATA1) contain a series of positions corresponding to the first series of instantaneous speeds, said data checking step comprising, if a correlation has been found between the first data (DATA1) and the second data (DATA2), a step of determination of the authenticity of the first data (DATA1) comprising:
    - a step (67) of determination of third data (DATA3) containing a third series of instantaneous speeds determined as a function of the series of positions,
    - a step (68) of searching for a correlation between the third data (DATA3) and the second data (DATA2) .
  8. Checking method according to one of Claims 1 to 7, in which said obtained data comprise a vehicle identification, said vehicle identification being stored by the checking device (5) in association with said information.
  9. Checking method according to one of Claims 1 to 8, comprising
    - a step of memorizing, by the checking device, for each current date of a set of current dates, of said information in association with said current date;
    - a checking step, carried out by the checking device, consisting in determining, from obtained data or from the memorised information, whether said equipment was in operation for a given time band or on a given date.
  10. Checking method according to one of Claims 1 to 8, comprising
    - a step of obtaining, by the checking device, of positioning and/or speed data (DATA1) generated by a positioning device placed in said vehicle,
    - a checking step, carried out by the checking device, consisting in determining, from said positioning and/or speed data, whether the vehicle has or has not travelled on a road subject to payment of a charge.
  11. System comprising a checking device and equipment (2) intended to be embedded in a vehicle (1),
    the embedded equipment comprising:
    - means (21) for obtaining data generated by an electronic tachograph (3) embedded in said vehicle (1), the data being date-stamped with a current date, contained in said data, at which said data were obtained from the electronic tachograph, said obtained data being signed with a signature of the tachograph,
    - means (25) for transmitting said obtained data to the checking device (5),
    the checking device (5) comprising:
    - means for checking the integrity of said data from said signature, and
    - means for generating, if the integrity of the data is proved, information representative of the existence of a proof of the starting up of said equipment on said current date.
  12. System according to Claim 11, in which the embedded equipment (2) comprises a positioning device (24) and means for checking data generated by said positioning device (24), said data checking means comprising:
    - means (23) for obtaining first data (DATA1) supposed to have been determined by said positioning device (24), the first data (DATA1) containing a first series of instantaneous speeds and the date of at least one of the instantaneous speeds of the first series of instantaneous speeds,
    - means (21) for obtaining signed second data (DATA2) determined by said electronic tachograph (3), the second data (DATA2) containing a second series of instantaneous speeds and the date of at least one instantaneous speed of the second series of instantaneous speeds,
    - means (20) for searching for a correlation between the first data (DATA1) and the second data (DATA2) .
  13. Vehicle comprising the embedded equipment (2) according to the system of Claims 11 or 12 and an electronic tachograph (3) linked to said embedded equipment (2).
EP11171844.1A 2010-06-30 2011-06-29 Communication of the start of operation of a device on board a vehicle Active EP2402913B1 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
FR1002736A FR2962241A1 (en) 2010-06-30 2010-06-30 CHECKING THE STARTING OF AN ON-VEHICLE EQUIPMENT IN A VEHICLE

Publications (2)

Publication Number Publication Date
EP2402913A1 EP2402913A1 (en) 2012-01-04
EP2402913B1 true EP2402913B1 (en) 2019-07-31

Family

ID=43567618

Family Applications (1)

Application Number Title Priority Date Filing Date
EP11171844.1A Active EP2402913B1 (en) 2010-06-30 2011-06-29 Communication of the start of operation of a device on board a vehicle

Country Status (2)

Country Link
EP (1) EP2402913B1 (en)
FR (1) FR2962241A1 (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102013208128A1 (en) * 2013-05-03 2014-11-06 Robert Bosch Gmbh Method and system for logging vehicle data
EP3142289B1 (en) * 2014-05-08 2020-10-07 Panasonic Intellectual Property Corporation of America In-vehicle network system, electronic control unit, and irregularity detection method

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102004054095A1 (en) * 2004-11-09 2006-05-18 Vodafone Holding Gmbh Method and system for determining a route user charge
DE102006048029B4 (en) * 2006-10-09 2008-10-02 Continental Automotive Gmbh Method and device for transmitting data between a tachograph and a data processing device
DE102007058163A1 (en) * 2007-09-28 2009-04-23 Continental Automotive Gmbh Tachograph, toll-on-board unit, indicating instrument and system
AU2007237287C1 (en) * 2007-11-30 2013-09-19 Transport Certification Australia Limited System for monitoring vehicle use
DE102008048162A1 (en) * 2008-09-19 2010-03-25 Continental Automotive Gmbh System and on-board unit

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Also Published As

Publication number Publication date
FR2962241A1 (en) 2012-01-06
EP2402913A1 (en) 2012-01-04

Similar Documents

Publication Publication Date Title
US8653953B2 (en) Odometer verification and reporting using a telematics-equipped vehicle
US8433471B2 (en) Pre-filling vehicle data check
EP2306358B1 (en) Method for verifying the validity of an electronic parking ticket
US20160140649A1 (en) Method and Apparatus for Automated Rental Key Dispensal and Return
EP2199966A1 (en) Method for securing transactions, corresponding transaction device, banking server, mobile terminal and computer program products
DK3272705T3 (en) System and method for controlling fuel dispensing by means of a distribution device
EP2689398B1 (en) Checking the integrity of data of an apparatus onboard a vehicle
CN108377260B (en) System and method for displaying vehicle information
WO2013001256A1 (en) Method and system for monitoring a rental vehicle
EP3168769A1 (en) Method for assisting with the authentication of a user, corresponding server and computer program
WO2017203146A1 (en) Method for securing an electronic device and corresponding electronic device
EP2402913B1 (en) Communication of the start of operation of a device on board a vehicle
EP2929496A2 (en) Secure management of a service provision transaction
WO2016084041A1 (en) Smart parking lot management system
EP2727087A1 (en) Method for checking the use of the functions of a provided vehicle
EP2469904A1 (en) Electronic device and communication method
WO2016135418A1 (en) Method for securing a service enabling the control of motor vehicles by means of mobile terminals
EP3343487A1 (en) Method for checking usage habits and electronic device capable of implementing such a method
FR2835951A1 (en) Vehicle zone access electronic authentication having transponder signal sent with secret/public security identification code.
EP2178724B1 (en) Method for locating a vehicle
FR3038435B1 (en) METHOD FOR MANAGING THE USE OF A PARKING SPACE AND ASSOCIATED DEVICES
EP1235189A1 (en) A biometric sensing device
FR2910682A1 (en) Motor vehicle parking management system e.g. Internet server, for supervising territory, has emitter to emit response message comprising list of vehicle codes to monitoring device equipping monitoring agent
EP4309152A2 (en) Metrological device for calculating a cost associated with the use of a vehicle
EP4136557A1 (en) Method for monitoring the use of a vehicle

Legal Events

Date Code Title Description
AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20120703

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: ORANGE

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20161122

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20190211

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1161729

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190815

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: FRENCH

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602011060837

Country of ref document: DE

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20190731

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 1161729

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191202

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191031

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191031

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191130

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200224

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602011060837

Country of ref document: DE

RAP2 Party data changed (patent owner data changed or rights of a patent transferred)

Owner name: ORANGE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG2D Information on lapse in contracting state deleted

Ref country code: IS

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191030

26N No opposition filed

Effective date: 20200603

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200629

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20200630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200629

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190731

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20230523

Year of fee payment: 13

Ref country code: DE

Payment date: 20230523

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20230523

Year of fee payment: 13