RU209571U1 - ON-BOARD UNIT - Google Patents

Abstract

The utility model relates to an on-board device that is installed in the cab of a truck to monitor its location. The on-board device contains a housing, a control module and a controller located in it, functionally interconnected with a positioning module, with a communication module, with a cryptographic information protection module (CIPF), with a human-machine user interface module, with a module for monitoring the integrity of the housing, with a module a motion detector, with a power supply control unit and a data storage unit, wherein the positioning module is configured to receive a positioning signal from the GLONASS and / or GPS systems through an internal antenna and a GNSS receiver to determine the navigation parameters of the vehicle, while the output of the cryptographic information protection module through the controller and the transceiver (UART) is connected to the input of the communication module, configured to transmit to the operator via the GSM/GPRS radio channel the converted current and accumulated information about the navigation parameters of the vehicle, and to control the on-board device, the controller outputs are connected to the inputs user interface module "man-machine" with the ability to send a signal to a buzzer and/or visual indicators, and the output of the control key of the specified feedback unit is connected to the controller with the ability to display through the buzzer and visual indicators of the operating mode of the personal account status, the results of self-diagnosis of the on-board device , including indications of the housing integrity monitoring sensor about the state of the integrity of the housing and/or an attempt to remove the CIPF card, and the housing contains a connector for connecting to an external power source. The technical result is the expansion of the arsenal of existing on-board devices, as well as an increase in reliability and maintainability.

Description

The utility model relates to an on-board device that is installed in the cab of a truck and monitors its location. The claimed on-board unit (BU) is intended for use within the framework of the collection system for compensation for damage caused to roads by freight vehicles weighing more than a given value, in particular, more than 12 tons.

Many CUs are known from the prior art, which combine such functions as a navigator, a payment terminal, and a signal transceiver. In Germany, for example, on-board modules with a GPS satellite navigation system receiver are used, which make it possible to determine the location of the vehicle. In addition, a mobile transceiver and a memory device are integrated into the on-board module, which stores data identifying the vehicle, as well as information about the position of all German motorways, for which a mandatory toll is charged. On the basis of this data, in combination with the GPS signal, the on-board module calculates the due amount of the collection while driving and stores it in the form of a data packet. In the form of a short message (SMS message), this data packet, upon reaching a certain amount of data, is transmitted to the operator via GSM mobile cellular communication to the central computer of the organization operating the road. There are on-board modules installed behind the windshield as a pre-programmed unit and having a two-button control. Other on-board modules consist of two parts, namely a small infrared transponder mounted behind the windshield and an on-board computer placed in a standard cell in the truck's dashboard.

The closest analogue of the presented utility model is an on-board device of a vehicle for charging according to the patent of the Russian Federation RU 158415 (published on October 27, 2015, IPC G07B15/06, G08G1/01, B60R25/00, G07C5/00), which describes a device installed in the cab truck and is intended for use within the framework of the system of charging for compensation for damage caused to roads by cargo vehicles weighing more than 12 tons. A vehicle (TC) control unit for charging for the use of roads contains a housing and a processor located in it, functionally interconnected with a positioning module that receives a signal from a global navigation satellite system (GNSS), a wireless communication module equipped with an internal GSM antenna and a detachable SIM - a card, a cryptographic information protection module (CIPF), a human-machine interface module equipped with a buzzer and a control key and visual indicators displayed on the front panel of the case, a power supply module, a service maintenance interface module, a case integrity monitoring sensor, a non-volatile memory unit and motion detector module. The positioning module is configured to receive a positioning signal from the GLONASS and/or GPS systems through an internal antenna and a GNSS receiver to determine the navigation parameters of the vehicle (longitude, latitude, speed and direction of movement, time) with the transmission of information about the navigation parameters through the processor to the input of the cryptographic module. information protection, which is equipped with a detachable installed CIPF card. The output of the cryptographic information protection module is connected through the processor and transceiver (UART) to the input of the wireless communication module, which is configured to transmit to the operator via the GSM/GPRS radio channel the converted current and accumulated information about the navigation parameters of the vehicle. To control the on-board device, the outputs of the processor are connected to the inputs of the human-machine interface module with the possibility of sending a signal to a buzzer and/or visual indicators, and the output of the control key of the specified feedback unit is connected to the processor with the possibility of displaying the status operation mode through the buzzer and visual indicators personal account, the results of self-diagnosis of the CU, including the readings of the housing integrity monitoring sensor about the state of the integrity of the housing and / or an attempt to remove the cryptographic information protection card.

The disadvantage of this device is the presence of a processor that performs many tasks at once and has a high power consumption, which leads to the need to use its own built-in power supply module as part of the control unit. The result is a complication of the design of the known CU, its low maintainability, as well as the complexity of its maintenance.

Thus, the objective of this utility model is to create such a CU that would be small and highly reliable, could perform the functions of collecting, storing and transmitting data necessary for charging road users, providing an interface for interaction between the user (vehicle driver) and the CU by audio and visual information, as well as transferring information to the operator about the status of the control unit and the execution of commands received from the toll collection system.

The technical result of the claimed utility model is the expansion of the arsenal of existing CU, as well as an increase in reliability and maintainability.

The problem is solved, and the technical result is achieved in the claimed CU, which contains a housing, a control module and a controller placed in it, functionally interconnected with a positioning module that receives a signal from a global navigation satellite system (GNSS), with a communication module equipped with an internal GSM antenna and a detachable SIM card, with a cryptographic information protection module (CIPF), with a human-machine interface module equipped with a buzzer, as well as a control key and visual indicators displayed on the front panel of the case, with a module for monitoring the integrity of the case, with a detector module movement, with a power supply control unit and with a data storage unit, wherein the positioning module is configured to receive a positioning signal from the GLONASS and / or GPS systems through an internal antenna and a GNSS receiver to determine the navigation parameters of the vehicle (longitude, latitude, speed and direction of movement, vr nemya) with the transfer of information about the navigation parameters through the controller to the input of the cryptographic information protection module, which is equipped with a detachable installed CIPF card, while the output of the cryptographic information protection module through the controller and the transceiver (UART) is connected to the input of the communication module, configured to be transmitted to the operator by means of the GSM/GPRS radio channel of the converted current and accumulated information about the navigation parameters of the vehicle, moreover, to control the on-board device, the controller outputs are connected to the inputs of the human-machine user interface module with the possibility of sending a signal to a buzzer and/or to visual indicators, and the control key output of the specified feedback unit is connected to the controller with the ability to display through the buzzer and visual indicators of the operating mode of the personal account status, the results of self-diagnosis of the on-board device, including the readings of the housing integrity control sensor on the state of the flatness of the case and/or an attempt to remove the CIPF card, and the case contains a connector for connecting to an external power source.

The power adapter and detachable power cable are deliberately placed outside the CU case in order to increase its maintainability, which is affected by a smaller number of components that can fail, and, as a result, to simplify the design of the claimed device, thanks to which it is not necessary to worry about protection against electromagnetic pickups on the controller from the built-in power supply. In turn, the use of the controller as part of the CU control module instead of the processor, as in the closest analogue, is due precisely to the fact that an external power adapter is used to power the claimed CU, and the CU components are powered by the power supply control unit.

The task is solved, and the technical result is also achieved in private versions of the claimed CU.

So, for example, the CU can be equipped with a holder with suction cups, which secures the body to the windshield of the vehicle, thereby ensuring convenience in the operation of the device.

In another embodiment of the utility model, the controller can be configured to record information about the navigation parameters of the vehicle in the non-volatile memory of the unit in the absence of the possibility of transmitting this information via mobile radiotelephone networks of the GSM/GPRS standard via a wireless communication module.

In addition, the indication elements of the human-machine interface module can be made using colored LEDs that characterize the operating modes of the CU, reflecting the level of funds on the user account (balance), the status of the positioning module (GNSS), the status of the communication module, selection and power supply status, buzzer status.

Also, the motion detector module can be configured to supply the controller with a signal that displays the distance traveled and the speed of the vehicle with the possibility of correcting the data of the positioning module.

Further, the utility model is explained in more detail by references to the figures, which show options for the possible execution of the claimed CU.

Figure 1 shows a block diagram with the following items:

1 - control module;

2 - positioning module that receives a signal from the global navigation satellite system (GNSS);

3 - communication module equipped with an internal GSM antenna and a slot for installing a SIM card;

4 - cryptographic information protection module (CIPF) with a socket for detachable installation of the CIPF card;

5 - user interface module or user interface module "man-machine", equipped with a buzzer, visual indicators, and a control key;

6 - housing integrity control module;

7 - motion detector module;

8 - power supply control unit;

9 - data storage unit.

Figure 2 shows a block diagram with possible modes of operation of the BU.

The proposed CU contains a housing, a control module 1 and a controller placed in it, functionally interconnected with the positioning module 2, which receives a signal from the global navigation satellite system (GNSS), with a communication module 3, equipped with an internal GSM antenna and a detachable installed SIM card, with a module 4 cryptographic information protection (CIPF), with module 5 of the human-machine user interface, equipped with a buzzer, as well as a control key and visual indicators displayed on the front panel of the case, with module 6 for monitoring the integrity of the case, with module 7 of the motion detector, with a block 8 power management and with a data storage unit 9, wherein the positioning module 2 is configured to receive a positioning signal from the GLONASS and / or GPS systems through an internal antenna and a GNSS receiver to determine the navigation parameters of the vehicle (longitude, latitude, speed and direction of movement, time) with the transfer of information about navigation parameters through the controller to the input of the cryptographic information protection module 4, which is equipped with a plug-in installed CIPF card, while the output of the cryptographic information protection module 4 through the controller and transceiver (UART) is connected to the input of the communication module 3, configured to transmit to the operator via the GSM/GPRS radio channel the converted current and accumulated information about the navigation parameters of the vehicle, moreover, to control the on-board device, the controller outputs are connected to the inputs of module 5 of the human-machine user interface with the possibility of sending a signal to a buzzer and/or to visual indicators, and the output of the control key of the specified feedback unit is connected with a controller with the ability to display through a buzzer and visual indicators of the operating mode of the personal account status, the results of self-diagnostics of the on-board device, including the readings of the case integrity monitoring sensor about the state of the integrity of the case and / or an attempt to remove cards s CIPF, and the housing contains a connector for connecting to an external power source.

The claimed CU is equipped with a holder with suction cups, which secures the CU body to the windshield of the vehicle. At the same time, it should be noted that the CU is installed inside the car on the windshield so as not to block the driver's view. If the vehicle is equipped with metallized glass, the control unit should be installed outside the metallization zone.

The case of the control unit protects the board and the electronic units placed on it from mechanical and climatic influences, as well as from unauthorized access to them.

The CU power supply control unit 8 is configured to be connected to the vehicle power supply circuit or to another external power source through a connector in the CU housing for connection to an external power source. This makes it possible to increase the maintainability of the control unit, which is affected both by a smaller number of components that can fail, and by simplifying the design, due to which it is not necessary to take care of additional protection of the controller from electromagnetic interference from the on-board network of the vehicle.

The CU can be equipped with a power cable that connects the power supply control unit 8 to the on-board power supply of the vehicle through the specified connector in the CU case for connection to an external power source. For example, the control unit is connected to the on-board power supply network of the vehicle through a standard power adapter (“cigarette lighter”).

The output of the power supply control unit 8 is connected to the inputs of all electronic modules 1-4, 6, 7 and block 9, located on the printed circuit board in the CU case (power supply from block 8 to electronic modules 1-4, 6, 7 and block 9, located on the printed circuit board, Fig. 1 is not shown). At the same time, the entire CU circuitry is designed for continuous operation from a voltage in the range of 9-50 ° V and withstands the effect of a reverse polarity supply voltage of 50 V for at least 5 minutes.

The CU controller is configured to record information about the navigation parameters of the vehicle in the non-volatile memory of the data storage unit 9 in the absence of the possibility of transmitting the specified information via mobile radiotelephone networks of the GSM/GPRS standard through the communication module 2.

The display elements of the module 4 of the user interface "man-machine" of the CU are made using colored LEDs, the choice of color of which characterizes, for example, the operating modes of the CU, the availability of funds on the user's account (balance), the health and condition of the GNSS navigation module and the wireless mobile communication unit ( GSM), selection and level of charge of the power source, the state of the sound notification.

The motion detector module 7 of the control unit is configured to supply a signal to the controller input that displays the distance traveled and the speed of the vehicle to enable correction of the information received by the controller from the positioning module 2.

The principle of operation of the claimed BU is based on the constant determination of the location of the vehicle by the signals of satellite navigation systems GPS/GLONASS. The claimed CU performs the functions of measuring current navigation parameters, determining on their basis the coordinates of the vehicle in the P3-90.11 coordinate system and synchronizing the internal time scale of the device with the national time scale of the Russian Federation UTC (SU) to ensure the tasks of monitoring the location of the vehicle, carried out for the purpose of collecting payments in respect of compensation for damage caused to public roads of federal significance of the vehicle, having a permitted maximum mass of more than 12 tons. To do this, in the normal mode of operation of the control unit, data on the location of the vehicle using mobile communications are periodically transmitted to the toll collection system. If the control unit malfunctions, its repair and adjustment is carried out by a service center authorized by the toll collection system.

When the supply voltage is applied to the CU through the power supply control unit 8, the control controller and the electronic modules 1-4, 6, 7 and the unit 9 interconnected with it, located on the printed circuit board in the CU case, are switched on. When the CU is turned on, an audible notification is made to the user and all indicator lights turn green. Next, the CU self-diagnosis procedure starts, the progress of which can be seen by the state of visual indicators. After the completion of the self-diagnosis procedure, the indicators light up with the color that currently characterizes the state of a particular module or the CU as a whole.

If no hardware or software malfunctions are detected during self-diagnosis, the control unit switches to normal operation mode. At the same time, module 2 receives a positioning signal from GLONASS and / or GPS systems through an internal antenna and a GNSS receiver to determine the navigation parameters of the vehicle, such as longitude, latitude, speed, direction of movement and time, with subsequent transmission of information about navigation parameters through the controller to the input CIPF module 4 equipped with a removable CIPF card. CIPF module 4 encrypts/decrypts transmitted and received information. The CIPF card provides cryptographic protection of data transmitted to the operator of the toll collection system. At the same time, the output of the CIPF module 4 through the controller and the transceiver of the UART type is connected to the input of the communication module 2 for transmitting to the operator via the GSM/GPRS radio channel the converted current and accumulated information about the navigation parameters of the vehicle. The SIM card installed in the communication module slot 2 provides access to data services via GSM radio channels.

Module 5 of the user interface "man-machine" of the CU provides display of the operating mode and the state of the personal account using light indication, sound informing about the events of the CU, the ability to control the operation of the CU by the user by pressing the control key displayed on the front panel of the case.

The CU can be operated in one of the following modes of operation (shown in Fig. 3):

"Active" mode;

mode "Not active";

"Hardware lock" (when the case opening sensor is triggered). In the "Active" mode, submodes are highlighted:

1) "Regular": the on-board unit is fully operational and performs its functions within the toll collection system;

2) "Sleep": the CU is fully functional, is in the low power mode, does not control the location of the vehicle, does not exchange information with the server of the subsystem for receiving and processing data from on-board devices (CU POPD). The transition to this submode occurs either when the vehicle is not moving, or when the control unit is disconnected from the vehicle's power supply network for a period of more than 5 minutes. When the movement of the vehicle is detected or when connected to the vehicle's power supply network, the on-board unit switches to the "Regular" mode;

3) “Outside the territory of the Russian Federation (outside the zone of application)”: the CU is fully operational, there is no information exchange with the CU PSU server. The transition to this submode occurs when the control unit detects a departure outside the border of the territory of the Russian Federation. When fixing the entry into the territory of the Russian Federation, the control unit switches to the “Regular” mode;

4) "Emergency": CU is inoperable. The transition to this submode occurs when the self-diagnostics of the control unit ended with an error or an internal (hardware and software) error occurred;

5) "Blocking logic": the CU performs functions within the tolling system, however, the sent data is marked with a special sign. The transition to this sub-mode occurs if the appropriate command is received from the control unit or it is not possible to determine the location of the vehicle for a long time. The transition to the "Regular" submode from the "Logical blocking" submode occurs automatically or by command from the CU PUMP;

6) “Service”: The CU provides the functions of status diagnostics, configuration and software updates via a service USB connector. The transition to this sub-mode occurs on command from the control unit.

In the "Inactive" mode, submodes are highlighted:

1) "Storage": the CU is in the warehouse, the power status and the case opening sensor are being monitored. The transition to the "Active" mode is carried out after connecting to the power source;

2) "Transportation": the CU is issued to the user, the power supply status and the case opening sensor are monitored. The transition to the "Transportation" submode is carried out by a command from the control unit. The transition from the "Transportation" submode to the "Regular" submode occurs after the control unit is connected to the power source.

The current operating mode of the CU is displayed using six three-color LED indicators:

indicator "Status" characterizes the operating mode of the CU;

indicator "Balance" characterizes the availability of funds on the user's account;

indicator "GNSS" characterizes the state of the module 2 positioning;

indicator "Communication" characterizes the state of the communication module 3;

the "Power" indicator characterizes the state of charge of the power source;

the "Sound" indicator characterizes the status of the sound notification on/off.

For example, if the "Connection" indicator is green, it means that a connection has been established with the CU PSU server. If the "Connection" indicator lights up yellow, it means that the VU is not registered in the mobile communication network, there is no connection with the VU PSU server. If the "Communication" indicator is lit red, this means a malfunction of the communication module 2, or the detection of GSM jamming devices.

As part of module 5 of the user interface “man-machine” of the CU, for selecting the vehicle class, for the possibility of turning on / off sound alerts, as well as initiating an immediate connection to the CU PSU server, a control key is provided on the CU body, which functions as follows:

pressing for up to 1 s allows you to turn on and off sound alerts;

pressing for 2 to 5 seconds initiates an immediate transfer of data to the toll system operator;

pressing for more than 7 s allows you to select one of the vehicle classes allowed for installation of this VU.

The function of sound informing about the current state and changing the operating mode of the control unit is implemented as follows.

A single sound signal is given when connected to the on-board network of the vehicle; when disconnected from the on-board network and switched to work from the built-in battery; when switching operating modes of the control unit; when you turn on the sound notification mode.

A three-time sound signal is given when any malfunction in the operation of the control unit is detected; in the absence or insufficient amount of funds on the account.

When connected to the on-board network of the vehicle, the control unit turns on, an audible notification is made, and all indicator lights turn green. Next, the CU self-diagnosis procedure is launched, the progress of which is reflected by the state of visual indicators. After the completion of the self-diagnosis procedure, the indicators light up with the color that characterizes the state of a particular module or the CU as a whole.

If any hardware or software malfunctions are detected during the self-diagnostics, the control unit switches to the "Emergency" submode, in which only monitoring of the module 6 for monitoring the integrity of the housing is performed (opening the housing). At the same time, the “Status” indicator flashes red, and further operation of the CU is impossible. The user needs to transfer the CU to the service point.

If in the process of self-diagnostics or in the course of operation, the module 6 for monitoring the integrity of the housing is detected (opening the housing), the control unit switches to the "Hardware blocking" mode. The “Status” indicator lights up red, further operation of the CU is impossible. The user must transfer the CU to the service point.

If faults are detected in positioning module 2 and communication module 3, the GNSS and Communication indicators light up red, further operation of the control unit is impossible. The user needs to transfer the CU to the service point.

If the "GNSS" and/or "Communication" indicators are yellow, the positioning module 2 and communication module 3 are operational, but the coordinates are not fixed and/or the connection with the toll system server is not established. It is necessary to wait or move the CU to the line of sight of the satellites in an open area away from jamming devices.

If the GNSS signal is absent for a long time (more than 48 hours), the CU switches to the "Logic blocking" mode, and the "Status" indicator starts to glow green with periodic red flashing.

If during self-diagnostics or operation the “Power” indicator starts to glow yellow, this means that the control unit has switched to operation from the built-in battery due to a lack of power (or low level) in the on-board network or poor contact with the car power connector (“cigarette lighter”) .

If the Power LED turns red during self-test or operation, it means that the battery has reached a critical level and needs to be recharged.

At the first start of the CU, the "Balance" indicator will glow green until the exchange of information with the server of the CU PPOD about the state of the user's personal account takes place. If there are no funds on the account, the "Balance" indicator lights up red.

During subsequent launches, the state of the "Balance" indicator will correspond to its state at the time of the last shutdown of the CU, up to successful exchange of information with the server, when the indication corresponds to the current state of the personal account.

If the "Balance" indicator lights up red during the operation of the CU, this indicates that the balance on the personal account has reached a critically low value and it is necessary to replenish the account in any convenient way.

By default, when turned on for the first time, sound alerts are active, the Sound indicator is green.

To enable/disable sound alerts, a short press (up to 1 s) of the control key is required. When the sound is turned off, the Sound indicator turns yellow.

In case of successful completion of the start-up and diagnostics procedure, the “Status” indicator lights up green - the CU is in the “Normal” mode and is ready for operation. Normal operation corresponds to the indication of green or yellow color of the indicators of the module 4 of the user interface "man-machine" BU.

When the vehicle stops (sensors of module 7 of the motion detector show the absence of vibration and movement) or in the absence of on-board power for 5 minutes, the control unit switches to the “Sleep” mode. In this mode, the Status LED blinks green. In the "Sleep" submode, only the monitoring of the connection to the on-board network, the sensor of the motion detector module 7 and the status of the module 6 for monitoring the integrity of the hull is performed. Exit from the "Sleep" submode occurs automatically when the vehicle motion is detected or when connected to the on-board network.

The output of the CU from the "Sleep" submode to the "Regular" mode can also be done manually, namely by pressing the control key on the CU body.

The motion detector module 7, based on the analysis of the accelerometer readings, generates one of two logical states - rest or movement. If the movement is detected, the rest timer stops and, if the CU is in the "Sleep" submode, a record of the data array about the beginning of the movement is formed.

If rest is recorded, the duration of being at rest is estimated. If the duration reaches 5 minutes, and the record of the transition to the rest mode has not yet been formed, a record of the data array is created, and if the device is in the "Active" mode, the transition to the "Sleep" mode is performed. At the same time, if there is a communication session with the PPOD, it is not interrupted, and the modem is disconnected after the session ends.

If during operation the vehicle leaves the territory of the Russian Federation, the control unit records this fact and switches to the submode “Outside the territory of the Russian Federation (outside the zone of application)”. In this mode, there is no data exchange with the server of the CU PSU. When fixing the entry into the territory of the Russian Federation, the BU returns to the "Regular" submode of operation.

If the communication module 3 of the control unit cannot transmit signals using mobile radiotelephone networks of the GSM / GPRS standard (the “Communication” indicator lights up in yellow or red), the control unit records the signals in the built-in non-volatile memory of the data storage unit 9, which performs the function of a “black box ". After the connection is restored via the GPRS channel, the VU automatically transfers the saved messages to the SUSP VU. The size of the "black box" ensures the storage of information about the location of the vehicle for at least 30 days.

During operation, the CU controller generates information about the current coordinates and direction vector of the vehicle by receiving and processing signals from GLONASS/GPS satellite navigation systems by positioning module 2 upon the fact of an event and/or time:

at the time of change in the state of the CU hardware;

periodically with a time interval, the value of which is set by a command from the subsystem for receiving and processing data from the BU (PPOD BU) of the charging system;

at intermediate checkpoints.

The CU, through the positioning module 2 and the CIPF module 4, periodically transmits the accumulated information to the CU PSU using GSM/GPRS mobile radiotelephone networks:

about the location of the vehicle in which the control unit is installed;

about internal events related to the functionality and integrity of the VU.

The CU controller, using the appropriate software, generates information about the location of the vehicle in the form of an array of coordinate sequences, which is recorded in the internal memory of the CU controller, while:

writing an array of coordinate sequences occurs cyclically;

the write cycle of an array of coordinate sequences is determined by the amount of available memory.

The accumulation and storage of information about the location of the vehicle is carried out for at least 30 days with the placement in the memory of the data storage unit 9 of the control unit, and free memory of at least 128 MB is provided for storing this information.

The CU controller registers and records in the reprogrammable permanent memory of the data storage unit 9, which has a non-volatile memory, information about the following internal events in the active mode of operation:

connection/disconnection of the onboard power supply of the vehicle;

the beginning and termination of the movement of the vehicle;

end of transport mode;

reducing the battery charge to a critically low level;

self-diagnosis results;

violation of the integrity of the body;

prolonged loss of GNSS signal;

determination of GNSS signal interference;

prolonged loss of GSM signal;

determination of GSM signal interference;

the result of updating the BU software;

inability to determine position;

autonomous blocking in case of malfunction detection;

information about malfunctions, errors in the operation of the software;

changing the current operating mode of the BU;

passing a known control point;

change of vehicle class.

The control unit provides automatic shutdown of data transmission over GSM/GPRS mobile radiotelephone networks in case of crossing the state border.

The CU contains in memory information about at least two thousand control coordinate points (geofences), when passing through which a communication session is started and the data of coordinate information of the monitoring event is transmitted to the CU PPOD.

CU positioning module 2 provides data reception from GLONASS/GPS systems via an internal antenna, as well as determination of the following information:

geographic latitude and longitude;

direction and speed of movement;

reduced positioning accuracy in the horizontal plane HDOP (Horizontal Dilution of Precision);

decrease in positioning accuracy in the vertical plane VDOP (Vertical Dilution of Precision);

the number of visible and used satellites;

list of satellites with signal strength and signal-to-noise ratio (SNR).

The positioning information received by the positioning module 2 is sent for encryption to the CIPF module 4.

Communication module 2 BU complies with the requirements of the Rules for the use of subscriber stations (subscriber radio stations) of mobile radiotelephone networks of the GSM-900/1800 standard. The CU communication module 2 sends data to the CU PSU in packets, the size of which (the number of items in one packet) is set by the charging system.

On the basis of module 4 CIPF in the claimed device operates a subsystem for encryption/decryption of transmitted/received information (CIPF). The subsystem provides cryptographic protection of the following data related to the movement of the vehicle, when interacting with the CU PPOD:

information about the location of the vehicle;

accumulated information about the location of the vehicle;

other information, the loss of which may lead to disputes regarding the calculations made by the operator of the fees payable;

CU state monitoring data;

data and control commands of the control unit;

data and commands for updating the software (SW) of the CU.

When the CIPF module 4 is installed in the CU, the mentioned subsystem performs a unique comparison of the CU instance and the cryptographic means of the CIPF, and transfers information about the comparison to the CU PPOD.

A feature of the claimed CU is that the used CIPF is equipped with an alienable hardware or software-hardware element, preferably made in the form of a CIPF card.

The used CIPF provides the following functions:

cryptographic transformations in accordance with the GOST 28147-89 algorithm;

random sequence generation;

generation of key information to perform cryptographic transformations;

storage of at least 10 sets of key information;

removal of key information.

The VU software allows the controller to perform a VU self-diagnostic procedure. The self-diagnosis procedure is performed:

at each transition to "Active";

on command with PPOD BU;

on command via the service USB connector.

The VU self-diagnosis subsystem performs the following checks during the self-diagnosis procedure:

integrity of the software image;

operability of the communication module 3;

operability of positioning module 2;

the operability of the module 6 monitoring the integrity of the case;

operability of the power management unit 8;

case integrity and an attempt to extract the CIPF module 4, upon detection of which the key information sets in the CIPF module 4 are deleted.

The self-diagnosis subsystem of the control unit saves the data of the test results in the memory of the data storage unit 9.

The results of self-diagnostics are available for reading via the service USB connector.

The human-machine user interface subsystem operates on the basis of module 5.

The "human-machine" user interface subsystem allows the user, by pressing the control key, to initiate a connection with the CU PSU, turn on or off the sound notification, set the class of the vehicle used in the CU.

The visual indicators of the human-machine user interface subsystem allow the user to unambiguously identify the following states of the VU:

CU is in sleep mode;

CU is functioning correctly;

CU is faulty (if possible);

The VU is in the initialization state (preparing to function as part of the charging process);

a warning about the low balance of funds on the account of the user in whose name the BU was issued;

the type of vehicle used set in the CU;

the rechargeable battery is completely discharged;

the charge level of the rechargeable battery is sufficient for the operation of the control unit;

the rechargeable battery is low.

Sound notification means of the human-machine user interface subsystem provide information in the following cases:

pressing the control key BU;

change in the operating mode of the control unit;

switching on and off the external power supply;

-receipt of a special command for the control unit, which provides for an audible notification (determined at the stage of technical design).

The human-machine interface subsystem of module 5 supports a non-standard USB service interface. The service USB-connector is activated by a special command of the CU PSU to transfer the CU to the service mode of operation. The command PPOD BU for transferring the CU to the service mode of operation is given using the CIPF.

Through the USB service interface, the human-machine interface subsystem supports the following functions:

tests of complex functional testing of control units at the final stage of production;

system tests;

performance tests of electronic components;

ensuring the tasks of general diagnostics;

update of the applied and system software of the control unit.

When the control unit is connected to the car's on-board power supply, the battery is disconnected from the load and charged if its charge level is below 50%.

Operating temperature range of CU functioning is from minus 40°C to plus 55°C. The developed control unit is designed for round-the-clock operation.

One of the significant differences and advantages of the proposed utility model in comparison with known analogues is that all information leaving the device is encrypted.

Cryptographic transformations are performed using a CIPF certified in accordance with the legislation, made, for example, in the ID-000 form factor in accordance with GOST R ISO / IEC 7810-2006, GOST R ISO / IEC 7816-1-2013 and GOST R ISO / IEC 7816 -2-2010. The advantage is that the form factor of the CIPF module in the form of a removable smart card makes it possible to certify in the relevant authorities for built-in encryption not the entire device, but only the CIPF module itself. In addition, if the encryption module fails, repairs are carried out by simply replacing the smart card with a new one.

As an example of a specific execution of the claimed utility model, the CIPF module may include an NXP P5CC081 microcontroller implemented as a smart card manufactured by MultiSoft Systems LLC with the Vigrid version 1.0 operating system in the ID-000 form factor. The smart card has an enhanced random number generator that allows generating key information.

The specified module 4 of the cryptographic information protection tool is designed for encryption, calculation of imitate insertion, obtaining a hash function, cryptographic authentication, generating key information using the Diffie-Hellman algorithm in accordance with RFC4357, generating random sequences of arbitrary length using a software random number generator, as well as storing key information in internal memory. The session key is 32 bytes long. No more than 2 MB of information can be encrypted on one session key, and when this threshold is reached, the session key must be changed. For regular authorization of the CIPF user, a PIN code is used, which is randomly generated by the CU at the time of device registration. The PIN code is 8 characters long.

In the specified module 4 of the CIPF, the following algorithms are implemented:

encryption algorithm in accordance with the requirements of GOST 28147-89 “Information processing systems. Cryptographic protection”;

algorithm for calculating the simulation insert in accordance with the requirements of GOST 28147-89 “Information processing systems. Cryptographic protection”.

Thus, the claimed CU is small-sized, compact, easy to manage and reliable in operation, as well as maintainable, while ensuring a high degree of protection and reliability of information transmitted to the toll collection system on account of compensation for damage caused to public roads of federal significance of the Customs Union, weighing over 12 tons.

Claims (5)

1. An on-board device for monitoring the location of a vehicle, comprising a housing, a control module and a controller located in it, functionally interconnected with a positioning module that receives a signal from a global navigation satellite system (GNSS), with a communication module equipped with an internal GSM antenna and a detachable installed SIM - card, with a cryptographic information protection module (CIPF), with a human-machine user interface module equipped with a buzzer, as well as a control key and visual indicators displayed on the front panel of the case, with a case integrity control module, with a motion detector module, with a power supply control unit and a data storage unit, wherein the positioning module is configured to receive a positioning signal from the GLONASS and/or GPS systems through an internal antenna and a GNSS receiver to determine the navigation parameters of the vehicle with the transmission of information about the navigation parameters through the control Ler to the input of the cryptographic information protection module, which is equipped with a detachably installed CIPF card, while the output of the cryptographic information protection module through the controller and transceiver (UART) is connected to the input of the communication module, configured to transmit the converted current and accumulated information to the operator via the GSM / GPRS radio channel about the navigation parameters of the vehicle, moreover, to control the on-board device, the controller outputs are connected to the inputs of the human-machine user interface module with the ability to send a signal to a buzzer and / or visual indicators, and the output of the control key of the specified feedback block is connected to the controller with the ability to display through the buzzer and visual indicators of the mode of operation of the state of the personal account, the results of self-diagnostics of the on-board device, including the indications of the body integrity monitoring sensor about the state of the integrity of the body and / or an attempt to remove the cryptographic information protection card, and the body contains a connector for connecting to an external power source. 2. The on-board device according to claim 1, characterized in that it is equipped with a holder with suction cups, which secures the body to the windshield of the vehicle. 3. The on-board device according to claim 1, characterized in that the controller is configured to record information about the navigation parameters of the vehicle in the non-volatile memory of the unit in the absence of the possibility of transmitting this information via mobile radiotelephone networks of the GSM/GPRS standard via a wireless communication module. 4. The on-board device according to claim 1, characterized in that the display elements of the "human-machine" user interface module are made using colored LEDs that characterize the operating modes of the on-board device, reflecting the level of funds on the user's account (balance), the state of the positioning module ( GNSS), communication module status, power source selection and status, audible alert status. 5. The on-board device according to claim 1, characterized in that the motion detector module is configured to supply a signal to the controller input that displays the distance traveled and the speed of the vehicle with the possibility of correcting the data of the positioning module.

Images