WO2013001257A1

WO2013001257A1 - Method, system and facility for detecting the fraudulent use of a vehicle

Info

Publication number: WO2013001257A1
Application number: PCT/FR2012/051529
Authority: WO
Inventors: Sandrine RESSAYRE; Franck THIEULENT; Romain DE LA VILLE; Clément LAMBRINOS; Aymeric AUGUSTIN; Raphaël BARROIS
Original assignee: Ier Systems
Priority date: 2011-06-30
Filing date: 2012-07-02
Publication date: 2013-01-03
Also published as: FR2977216B1; FR2977216A1

Abstract

The invention relates to a method (300) for detecting the fraudulent use of a rental vehicle, in which at least one user identifier and/or at least one so-called status datum is saved in a so-called local storage location at said vehicle, and/or at least one user identifier and/or at least one so-called status datum is saved in a so-called remote storage location, at a so-called central remote site, combined with at least one identifier of said vehicle, characterised in that it includes a theft-detection operation, which includes the following steps: reading (304) at least one datum stored in said local and/or remote storage location; analysing (306) said datum, read according to at least one predetermined criterion, in order to detect an anomaly; and transmitting (318-322) a so-called notification datum when an anomaly is detected. The invention also relates to a system for detecting the fraudulent use of a rental vehicle.

Description

"Method, system and installation for detecting fraudulent use of a vehicle"

The present invention relates to a method for detecting a fraudulent use of a vehicle. It also relates to a system implementing such a method and an installation using such a method and system.

The field of the invention is the field of detection of a fraudulent use of a vehicle, such as for example a theft of the vehicle, and more particularly of a vehicle offered for rental.

State of the art

We currently know vehicles operating with one or more electric batteries and sites, so-called rental, to take a rental vehicle or return a rented vehicle at the end of rental.

The vehicles offered for rental are intended to be used by users who have previously issued a rental application and have registered with a rental system.

However, a vehicle offered for rental may be subject to fraudulent use, for example, use on the part of a person who, without having made a rental application, is able to take possession of the vehicle on a rental site by avoiding the security measures put in place to prevent such a situation.

There is no method or system that can automatically detect a fraudulent use of a vehicle whose user changes regularly, for example as part of a lease.

An object of the invention is to overcome the aforementioned drawbacks. Another object of the invention is to provide a method and an automated detection system fraudulent use of a vehicle whose user changes regularly, for example in the context of a lease.

Presentation of the invention

The invention proposes to achieve at least one of the aforementioned objects by a method of detecting a fraudulent use of a vehicle offered for rental and for which, in particular prior to each rental:

at least one identifier relating to the user, and / or at least one piece of data, called state data, is stored in a storage location, said local, at said vehicle, and / or

at least one identifier relating to the user, and / or at least one piece of data, called state data, is stored in a storage location, said remote, at a remote site, called a central site, in association with the minus an identifier of said vehicle;

characterized in that it comprises a flight detection operation comprising the following steps, in particular for each use of said vehicle:

reading at least one piece of data stored in said local and / or remote storage slot following a detection of activation,

analyzing said read data according to at least one predetermined criterion, to detect an anomaly, and

- Issuing at least one data, called notification, when an anomaly is detected.

The invention thus makes it possible to automatically detect a fraudulent use of a vehicle by a person who is not authorized to use it by analyzing the data entered in a memory location at the level of the vehicle or at a remote database level.

Such a detection operation is preferably carried out after a detection of the start-up of the vehicle so that each The vehicle is checked and checked and fraudulent use is detected as quickly as possible.

By "start-up of the vehicle" is meant any operation performed on the vehicle with a view to using / moving the vehicle such as a starting operation of a vehicle engine, a technical request to start a vehicle engine such as 'pressing a button or introducing / turning a key, moving the vehicle after starting a vehicle engine, moving the vehicle without starting the engine, any access operation inside the vehicle, etc.

A state data item may be a piece of information relating to the rented / unleased state / maintenance of the vehicle.

Such state data may be a data item called ESA, relating to the starting of the vehicle and the right of the user to start the vehicle. This data may be a binary data that makes it possible to control or not an activation signal for starting the engine of a vehicle according to its value.

State data can also be data relating to the state of at least one vehicle member, such as an RFID reader, a lock, etc.

The method according to the invention may further comprise a step performing a detection of the start of the vehicle.

Such a start detection step may include one or more of the following steps:

- detection of engine start,

- detection of the rolling of the vehicle,

detection of the modification of the coordinates of the vehicle (carried out by geolocation such as GPS and / or GSM triangulation),

detection of an opening of an opening of the vehicle, and

- any operation aimed at achieving at least one of these stages. The memory location read / interrogated may be the local memory location via a vehicle element and / or the remote memory location, for example located at the central site. Indeed, a database of the central site is generally associated with data relating to the vehicle and data relating to the user.

According to the invention, the analysis step may comprise a comparison of the data item read to a predetermined value. Such a step is particularly interesting when the read data is supposed to be a state data, for example a binary data with a value "1" corresponding to the "rented" state or "operating member" and a value "0" corresponding to the state "not rented" or "organ HS".

According to the invention, the analysis step may comprise a comparison of a format of the data item read to a predetermined format. Such a comparison can be made to determine whether a data corresponding to an identifier is stored in the storage location read. If this is not the case, it may mean that no user has rented the vehicle concerned. Such a step is particularly advantageous when at each end of lease the user of the user who rented the vehicle is deleted from the memory location consulted.

The analysis step may further include comparing the data read in said local storage location with the read data stored in the remote storage location. Such a step is particularly important when, at the end of each lease, the identifier of the user having rented the vehicle:

- is not deleted from the local memory location to allow access to the user inside the vehicle after the end of the lease without allowing him to use the vehicle, and

- is cleared from the remote memory location.

So, during the analysis step helps to determine

if the data has a predetermined format, if the datum has a predetermined value or is different from a predetermined value, and / or

- If the value of the data, including the data stored at the vehicle, is equal to the value of another predetermined data, including a data stored at the central site in association with the vehicle identifier.

The analysis step may further comprise a comparison of said data read in said local storage location with a predetermined datum corresponding to a use declared by an operator in a setting other than the location, for example for a test of the vehicle or of a maintenance operation.

Indeed, in the case where the vehicle is opened by some operators, an identification number of these operators can be stored in the vehicle, regardless of the state of the vehicle, for rental, parking, charging for a vehicle electric, and its attribution or not to a user and the opening of the vehicle with the aid of this identification number is not fraudulent.

The method may therefore comprise another interrogation / reading and analysis step concerning a data relating to the maintenance, in particular if the identifier does not correspond to the expected value. This interrogation can be performed at the central site since the operator must report to the central site when performing a task. The analysis step comprises a comparison of said data read in said local storage location with a predetermined datum relating to the normal operation of a vehicle member, preferably stored in the central site. The different steps of the analysis step can be carried out alone or in combination.

The method according to the invention may further comprise the transmission of a notification data automatically by the vehicle or the vehicle. central site in the case where the vehicle seeks to communicate with the central site and the communication is not implemented within a predetermined time, for example through a GPRS communication. Indeed, it is considered that the areas not covered by the GPRS network are few and a lack of response from the central site may indicate that the communication antennas of the vehicle have been damaged, possibly in order to prevent the vehicle from communicating. with the central site. At least one notification data can trigger an audible and / or visual alert at the vehicle level. This data can be initiated by the vehicle or preferably by the central site.

At least one notification data may trigger a stopping of a vehicle functionality, for example a stopping of the vehicle engine. This data can be initiated by the vehicle or preferably by the central site.

At least one notification data may trigger a transmission of a message, for example an SMS message, to an operator of the rental system, a user or the police. This data can be initiated by the vehicle or preferably by the central site. The operation of sending a message is preferably performed by the central site.

The transmission of a notification data can be carried out through a wired communication network, for example ADSL or non-wired for example GPRS. In a particularly preferred embodiment of the invention, the data stored in the local location is sent to the central site, which performs the flight detection operation. It is obvious that to read this data, the central site stores them, at least temporarily, but these data are stored out of the predetermined location.

During the analysis step, it can then compare the data received from the vehicle with predetermined values (for example, concerning the state of the organs), and / or with data stored in the predetermined location (concerning the identifying particular).

In this case, the notification data can be sent to the vehicle if it is desired that an action be performed at the vehicle.

According to another aspect of the invention there is provided a system for detecting a fraudulent use of a proposed rental vehicle, and for which:

characterized in that it comprises the following means, preferably at the central site:

at least one means for reading at least one datum stored in said local and / or remote storage location,

at least one means for analyzing said data item read as a function of at least one predetermined criterion, to detect an anomaly, and

at least one means for transmitting at least one piece of data, called notification data, when an anomaly is detected.

The system according to the invention may further comprise at least one detecting means of starting the vehicle. The system according to the invention may further comprise visual / audible alarm means at the level of the vehicle.

The invention is particularly applicable to the management of a fleet of interchangeable electric vehicles for rental and for which a plurality of docking stations is provided.

Other advantages and characteristics will appear on examining the detailed description of non-limiting embodiments, and the appended drawings in which:

- Figure 1 is a schematic representation of a management system of a fleet of vehicles proposed for rental setting in which the invention can be implemented;

FIG. 2 is a schematic representation of a system for detecting the fraudulent use of a vehicle according to the invention; and

- Figure 3 is a schematic representation of a method for detecting the fraudulent use of a vehicle according to the invention.

It is understood that the embodiments which will be described in the following are in no way limiting. In particular, it will be possible to imagine variants of the invention comprising only a selection of characteristics described subsequently isolated from the other characteristics described, if this selection of characteristics is sufficient to confer a technical advantage or to differentiate the invention from the state of the prior art. This selection comprises at least one preferably functional feature without structural details, or with only a portion of the structural details if it is this part only that is sufficient to confer a technical advantage or to differentiate the invention from the state of the invention. prior art. In particular, all the variants and embodiments described are combinable with each other if nothing stands in the way of this combination at the technical level. Figure 1 is a schematic representation of a global management system of an electric vehicle park proposed for rental.

The system 100 shown in FIG. 1 comprises a central site 102 connected to several sites - or stations - 104i-104 _n , said to be leased through a wireless communication network 106, for example GPRS, or a network wired, for example DSL type. Preferably, each station is connected to the central site via the two separate networks, which allows a continuous connection even if one of the networks is faulty.

Each rental station includes a subscription terminal 108 for the registration of a new subscriber, a rental terminal 110 for the rental of a vehicle and a plurality of charging terminals 112-116, each charging terminal being designed to charge a vehicle with an electric battery at a parking space.

The central site 102 can be connected directly to each of the terminals of a rental station 104 through the network 106 or only to the subscription terminal and / or to the rental terminal and / or charging terminals 112-116. .

At least two terminals of a rental station are connected to each other through a wired connection (not shown).

The central site 102 is also arranged to connect to an electric vehicle comprising a connection box with one or more elements of the vehicle and / or a communication interface with the user, via a GPRS network. Each vehicle is therefore equipped with a GSM chip. The central site 102 is also arranged to exchange information with a portable communication device such as a PDA, a mobile phone, etc., carried by an operator of the rental service and also connected to the central site via a GPRS network.

The system makes it possible to manage a plurality of vehicles each comprising a control unit capable of communicating with the central site and with various organs of the vehicle, and a user interface.

The users are able to interact with the different terminals as well as with the various elements of the vehicles. In addition, the vehicle rental service with the system according to the invention can also be performed using the operators and their mobile terminal such as a PDA, which can intervene in the service. The central site 102 furthermore comprises a database 118 in which are registered in association with each vehicle identifier, the identifier of the user to whom this vehicle is rented, possibly the rented / non-rented / maintenance state. of the vehicle, an identifier of an operator performing a maintenance operation, etc.

The database 118 is updated each time the vehicle is changed, at the beginning of the lease, at the end of the lease, at the beginning of maintenance, at the end of maintenance, and so on.

The central site 102 further comprises an interface 120 making it possible to modify at least one of the data recorded in the database, for example for the operators intervening on the vehicles for maintenance operations or test operations.

The central site 102 further comprises a communication module 122 with one or more vehicles through the network 106 directly or indirectly via a terminal.

The central site 102 furthermore comprises an alert data management / transmission module 124 which can enable the sending of messages, for example SMS messages, sent to an operator or to the police forces through a network. wireless communication, such as the GPRS network 106, or wired such as the ADSL network. The central site 102 may further comprise an analysis module 126 arranged to read at least one memory location in the storage means 118, and analyze the read data according to at least one analysis criterion to detect an anomaly. To carry out this analysis, the analysis module 220 can also request the vehicle at least one piece of data through the communication module 122. When an anomaly is detected, the analysis module 126 alerts the management / alerting module 124 We will now describe with reference to Figure 2 the elements of a system for detecting a fraudulent use of a vehicle according to the invention, installed on / in / around the vehicle.

The system 200 shown in FIG. 2 comprises a communication module 202 enabling the system 200 to communicate with the central site directly, in particular using a GPRS network, or via a charging terminal. rental or subscription.

The system 200 further comprises a control unit 204 monitoring at least one sensor 206i-206 _n associated with a member / member 208i-208 _n of a vehicle (not shown) and for detecting a start of the vehicle. Each sensor means 206 may be a mechanical sensor, electrical or electronic such as a sensor 206i 208i engine operation, a sensor 206 ₂ of movement of a wheel 208 of the vehicle _2, a sensor 206 an angle of ₃ flywheel 208 ₃ , a force sensor 206 ₄ detecting the opening of an opening 208 ₄ of the vehicle or an electronic sensor 206 _n changing the GPS position of the vehicle by means of a GPS 208 _n of the vehicle.

The system 200 further comprises a module 210 for managing / transmitting alert data to the user or to the central site via a telecommunications network directly or via the communication module 202.

The system 200 further comprises means 212 for storing data at the vehicle level and means 214 for identifying a user by reading an RFID or biometric type identifier. When the identification module 214 is disposed at the level of the vehicle, it communicates with the communication module 202.

The system 200 further comprises means for transmitting a vehicle-level alarm such as one or more speakers 216 which may be the vehicle speakers, and one or more display screens 218 which may be a display screen of an on-board computer of the vehicle.

The control module 204 is arranged to analyze the data received from the sensors 206 or directly from the members 208 to detect a start-up and to alert an analysis module 220.

The analysis module is arranged to read at least one memory location in the storage means 212, and analyze the read data according to at least one analysis criterion to detect an anomaly. To perform this analysis, the analysis module 220 can also request or transmit to the central site at least one piece of data through the communication module. Note that the analysis module is optional because the analysis step can be performed entirely at the central site.

In the event of detection of an anomaly, the analysis module 220 informs the management module / emission of alert data to the module 210 which, as needed, activates the loudspeaker 216 to emit an audible alarm, or the screen 218 to issue a visual alert. The management / alert transmission module 210 may also request the control module to block the operation of one or more of the elements 208 of the vehicle. The management / alert transmission module 210 may also issue an alert data item to an operator or the police forces via the communication module 202 or via the central site.

We will now describe, with reference to FIG. 3, an exemplary detection method according to the invention.

Before that, the steps taking place at the time of the assignment of a vehicle are recalled.

At the moment when the user requests a vehicle, generally via a rental terminal, the central site chooses a vehicle that it attributes to the user according to certain criteria which one will not detail here.

After allocation, the central system then enters, possibly after acceptance of the user, the identifier of the user associated with an identifier of the vehicle in a database, called "vehicle", that it hosts. This identifier is also transmitted to the vehicle, possibly along with other data such as an ESA data relating to the starting of the vehicle representing the right of the user to start the engine of a vehicle. This is a binary data that makes it possible to control or not an activation signal of the starting of the engine of the vehicle according to its value. This transmission can be carried out from the beginning of the lease or once the user has requested the opening of the doors for example. At the end of rental, user data is normally cleared from the vehicle memory and replaced with standard data. A priori the ESA data is replaced by the binary value 0 and the identification data can also be replaced by a determined numerical value.

It should therefore be noted that when the vehicle is ready to start, it includes the user's identifier in his memory.

It will also be noted that the vehicle permanently stores an emergency identification number, which is also held by certain operators in an identification means of their own.

The method according to the invention comprises a step of detecting the start-up of the vehicle during a step 302. This detection is performed by means of a sensor which detects the movement of the wheel and returns the information to the housing by via a CAN bus. It can also be detected, for example, when the CAN bus sends the information to the box indicating that the engine is running, or when the latter, able to determine the GPS coordinates of the vehicle, detects that these coordinates change. After the start detection, a step 304 queries the predetermined local memory location containing the user's identifier and / or the ESA and / or other predetermined data.

This data is analyzed during a step 306 to determine, for example, whether the interrogated location contains a datum having the predetermined value indicating that the vehicle is out of rental.

If this location contains data having the predetermined value indicating that the vehicle is out of rental, an additional check is made for the purpose of checking whether an operator has started the vehicle for a maintenance or test operation. This additional check is described below.

If the value found is different from said value, it is verified that the value of the data (for example the user identifier) recorded in the vehicle body is the same as that recorded in the central site. A step 308 sends the identifier retrieved from the vehicle's local memory to the remote site.

A step 310 queries the database at the remote site to retrieve the identifier associated with the vehicle in the central site database.

The two identifiers are compared during a step 312.

If the two values are identical, it is deduced that the vehicle is used legitimately and the process is finished, possibly after notifying the vehicle.

If the two values are not identical, an additional check is made in order to check whether an operator has started the vehicle for a maintenance or test operation.

The additional check includes an optional step 314 of transmitting to the central site a request comprising data relating to the vehicle (if the vehicle has itself determined that the vehicle was not being rented). Otherwise, this step 314 is unnecessary since the central site already has data relating to the vehicle, including its identifier. In both cases, the central site is asked to indicate the last tasks declared on the vehicle during a step 314. This data may in particular be in a database relating to maintenance. If an operator has declared that they have opened the doors, this will be indicated in this database and the central site will deduce that it will not be a flight for this vehicle. The process is finished, possibly after notifying the vehicle. The method may further include steps for verifying other data such as the time at which such an operation was performed.

On the other hand, if no recent task concerning the opening of the vehicle is indexed in the maintenance database, the central site sends, during a step 318, a message to the operators, for example from a data center. call, so that they are informed of the possible theft of the vehicle. These can then decide according to the circumstances to prevent the police or to closely monitor the vehicle for a time. This message to operators can be sent via email or SMS.

In addition, the central site sends, during a step 320, a message to the vehicle, through the communication units. This message indicates to the vehicle a malfunction and includes data capable of triggering an activation signal. Such an activation signal makes it possible to execute a command on the vehicle, in this case in the present case, the triggering of an audible alarm during a step 320. This generally makes it possible to put the thieves to flight and also to alert people who are able to intervene and who are nearby.

The method according to the invention is of course not limited to the embodiment described above. For example, verification could be done only locally, at the vehicle level or preferentially only in cooperation with the central site. Indeed, in a preferred embodiment, the vehicle remounts information to the central site (through a periodic transmission) and the information system is able to detect through this communication that some devices (RFID reader, lock) are damaged or the user's identifier or start-up data does not comply with the expected value and thus trigger the appropriate alarms

The verification performed could also be a verification of the format of the data, a verification of the presence of data in the dedicated location of the box, etc.

When the verification consists of a comparison of the data of the central site with that stored in the vehicle, it will also be noted that the central site could send the data recovered in the database to the vehicle, the latter performing the verification itself.

The additional maintenance check is also not required.

Likewise, the alarm step may be different from what has been indicated. For example, an SMS can be sent to an operator on the ground or to the police. The communication unit of the central site, able to communicate via a GPRS network, makes it possible to compose a message and send it to a known number. The message could even be sent to a user whose identifier is listed in the vehicle or database so that he can call the system to explain or rectify the error. Another alarm could also be a call to the vehicle. All these alarms as well as those described previously can be triggered alone or in combination.

Finally, it should be noted that the method could comprise an additional step of verifying the connection of the vehicle to the GPRS network. Indeed, one could imagine that some malicious people have managed to cut the connection of the vehicle to the network, to prevent the start of the alarm. However, it should be noted that in some regions the network is dense enough that the network cutoff does not exceed a short time. As a result, the vehicle or the central site can, using a timer, triggered when sending a message to the central site, to check whether the network interruption has lasted for a duration greater than a predetermined duration, for example 5 minutes (especially in the case where the system is supposed to receive in permanence of the data from the vehicle). If at the end of this period, no message could be sent to the central site, or no response from the central site could be received, we can deduce that the network cut was intentionally triggered by a person who has succeeded to deactivate the GPRS antennas of the vehicle. The management / alerting transmission module then triggers the audible alarm of the vehicle-side vehicle and / or the sending of messages to the persons concerned on the central site.

Naturally, the invention is not limited to the examples which have just been described.

Claims

A method (300) for detecting a fraudulent use of a proposed rental vehicle and for which:

at least one identifier relating to the user, and / or at least one datum, called state datum, is stored in a storage location (212), said local, at said vehicle, and / or

at least one identifier relating to the user, and / or at least one piece of data, called state data, is stored in a storage location (118), said remote, at a remote site (102), said central, in association with at least one identifier of said vehicle;

characterized in that it comprises a flight detection operation comprising the following steps:

reading (304) at least one piece of data stored in said local and / or remote storage location,

analyzing (306) said read data according to at least one predetermined criterion, to detect an anomaly, and

- transmission (318-322) of a data, called notification, when an anomaly is detected.

2. Method according to claim 1, wherein a state data may relate to a rented / unleased / maintenance status of the vehicle or relating to the state of a vehicle body.

3. Method (300) according to any one of the preceding claims, characterized in that it further comprises a step (302) performing a detection of the start of the vehicle, the flight detection operation being carried out at using the data stored prior to start-up, when detecting the start-up of the vehicle.

4. Method (300) according to any one of the preceding claims, characterized in that the analysis step (306) comprises a comparison of a format of the data read to a predetermined format.

5. Method (300) according to any one of the preceding claims, characterized in that the analysis step (306) comprises a comparison of said data read in said local storage location (212) with the data read stored in the remote storage location (118).

A method (300) according to any one of the preceding claims, characterized in that the analyzing step (306) comprises a comparison of said data read in said local storage location (212) with a predetermined datum corresponding to a usage declared by an operator, stored preferably in the central site.

A method (300) according to any one of the preceding claims, characterized in that the analyzing step (306) comprises a comparison of said data read in said local storage location (212) with predetermined data relating to the normal operation of a body of the vehicle, stored preferably in the central site.

8. Method (300) according to any one of the preceding claims, characterized in that at least one notification data is able to trigger an audible and / or visual alert at the vehicle.

9. Method according to any one of the preceding claims, characterized in that at least one notification data is able to trigger a stop of a vehicle functionality.

10. Method according to any one of the preceding claims, characterized in that at least one notification data triggers the sending of a message to a third party, such as an operator or a security agent.

The method according to any one of the preceding claims, wherein at least one piece of data stored in the local location is transmitted to the central site, the flight detection operation being implemented by the central site.

12. System (200) for detecting fraudulent use of a proposed rental vehicle, and for which:

at least one identifier relating to the user, and / or at least one piece of data, called state data, is stored in a storage location (118), said local, at said vehicle, and / or

at least one identifier relating to the user, and / or at least one piece of data, called state data, is stored in a storage location (212), said remote, at a remote site (102), said central, in association with at least one identifier of said vehicle;

characterized in that it comprises:

at least one means (126,220) for reading at least one datum stored in said local (212) and / or remote (118) storage location,

at least one means for analyzing (126,220) said data read as a function of at least one predetermined criterion, to detect an anomaly, and

- At least one means (124,210) for transmitting a data, called notification, when an anomaly is detected.

13. System (200) according to claim 12, characterized in that it further comprises at least one means (204,206,208) detecting activation of the vehicle.

14. System according to any one of claims 12 or 13, characterized in that it further comprises alarm means (216,218).