WO2014180685A1

WO2014180685A1 - Method and device for providing data for toll charging and toll system

Info

Publication number: WO2014180685A1
Application number: PCT/EP2014/058512
Authority: WO
Inventors: Jochen HECHLER; Hans Gregor MOLTER; Gernot KNAUSENBERGER; Roland Lange; Günter Seidel
Original assignee: Continental Automotive Gmbh
Priority date: 2013-05-08
Filing date: 2014-04-25
Publication date: 2014-11-13
Also published as: EP2994890B1; EP2994890A1; DE102013208470A1

Abstract

The invention relates to a method and device for providing data for toll charging and to a toll system. To provide the data for toll charging, a collision-free checksum is determined for each vehicle depending on a predefined set of acquired position data values. Each set of acquired position data values is then stored together with the associated checksum in a predefined manner. When the vehicle passes a predefined toll marker (40), a first data set, which comprises at least one of the stored checksums, is sent to the respective toll marker (40). In response to a predefined read-out signal and/or at predefined time intervals, at least some of the stored position data values are provided together with the associated checksums in a predefined manner at a predefined communication interface.

Description

description

Method and device for providing toll collection and toll collection data

The invention relates to a method and a device for providing data for toll collection and a toll collection system.

In Germany, a special toll collection system for the use of motorways and selected federal roads by trucks has been introduced. The toll collection takes place automatically via a vehicle-mounted toll collection device, also called on-board unit (OBU). The toll collection device uses satellite positioning to determine the movement of the truck and independently calculates the toll fee due. The mature toll charge is transmitted from the toll collection device to a central Mauter ^¬ replaced for recording and billing of fees. In Germany, a toll collection device provided free of charge by an operating company is installed in the truck. The toll collection devices include a global navigation satellite system (GNSS) position receiver that determines the position of the vehicle. In addition, the toll collection devices are equipped with a computing unit and a memory, in which vehicle-specific information and the position data of the toll roads are included. Using this data, calculates the Mauterfas ^¬ sungsgerät over the previously mentioned satellite navigation the payable toll. The effort for the toll collection devices is very high, in particular due to data security and data protection requirements.

The object on which the invention is based is to provide a method and an apparatus for providing data for toll collection, in particular for passenger vehicles, as well as a toll system, which allow a reliable and kos ^¬-effective provision of data to electronic toll is. The object is solved by the features of the independent claims. Advantageous developments of the invention are characterized in the subclaims.

According to a first and second aspect, the invention is characterized by a method and a corresponding device for providing data for toll collection. In this case, depending on a predetermined amount of detected position data values for a vehicle, a collision-free one is obtained

Checksum determined. In each case, the set of the detected position data values is stored together with the associated checksum. When the vehicle passes each of a given before ^¬ toll-bake, a first data set comprising at least one of the stored checksum, sent to the respective toll beacon. In response to a predetermined readout signal and / or at predetermined time intervals, at least a portion of the stored position data values are provided with the associated checksums at a predetermined communication interface.

This has the advantage that the position data values, for example GPS data (Global Positioning System), which are usually used for recording of routes of the vehicle, can not be easily falsified. An additional device for secure storage and processing of the position data values, which is also referred to as hardware security, is not required. This allows a very kos ^¬-effective provision of data for toll collection. Advantageously, it is thus possible to ensure the route of the vehicle by means of the position data values and random checks of the respective toll beacons so far that a subsequent manipulation of the routes can be detected. A so-called "collision" occurs with checksums when two different input data are assigned the same checksum is virtually impossible to generate two different input data with the same checksum.

In an advantageous embodiment of the first and second aspect, the respective amount of the position ^¬ captured data values includes a predetermined number of the most recently captured Po ^¬ sitionsdatenwerte. This has the advantage that the checksum can be determined very simply and quickly and the data can be easily stored.

In a further advantageous embodiment of the first and second aspects, when the vehicle passes in each case the predetermined toll-bake, the last-determined checksum is transmitted to the respective toll-bake. This allows easy verification of the data.

In a further advantageous embodiment of the first and second aspects, a check sum determination time is detected together with the checksum and stored in a predetermined manner together with the associated checksum. This has the advantage that the checksums can have the same format as position data values and can be evaluated in an analogous manner as the position data values. In a further advantageous embodiment of the first and second aspects, the first data record comprises the checksum determination time for the respective checksum and / or identification information of the vehicle and / or identification information of a device which can be arranged in the vehicle. This allows easy verification of the data.

In a further advantageous embodiment of the first and second aspects, the position data detected values are each represents ^¬ along with an associated time of data bereitge and replaced with their He times the amount of position data values and the associated checksum ^¬ and their TestSummenermittlungszeitpunkt given stored. This has the advantage that the checksums, together with their checksum determination times, can have the same format as the position data values with their associated acquisition times and can thus be stored together in a simple list.

In a further advantageous embodiment of the first and second aspects, in response to the predetermined readout signal and / or at the predetermined time intervals for the at least a portion of the stored position data values additionally the respectively associated detection times and / or the PrüfSummenermittlungs time points of the associated checksums at the predetermined Communication interface provided provided. The detection times ermögli ^¬ chen that the route can be easily verified and the checksums with the checksum determination times can be easily and reliably compared with the data sets of the toll beacons.

In a further advantageous embodiment of the first and second aspects, the position data values for the vehicle are detected at predetermined time intervals. This enables a simple and reliable evaluation of the data.

In a further advantageous embodiment of the first and second aspects, the checksum is determined as a function of a previously determined checksum. This can advantageously contribute to increasing the security against manipulation of the position data values.

In a further advantageous embodiment of the first and second aspects, the collision-free checksum is a hash value. For a calculation of the checksum is a hash function, also called hash function, used, preferably a kryp ^¬ tologischer hash function, in particular a SHA-2 (Secure Hash Algorithm). By using the hash function, both the last captured position data values as well as the last determined hash value uses to determine a new one

Hash value, a linked list of tamper-proof routes can be created without having to save them securely. For example, to manipulate the data unnoticed, a hacker would need to be able to compute the hash function used. However, this is not possible with the resources available today within a reasonable time.

According to a third aspect, the invention is characterized by a toll system. The toll system includes a toll discovery ^¬ device, at least one device of the second aspect, which is arranged in a vehicle, and at least one toll-bake. The at least one toll-bake is formed, the sent from the vehicle to the toll-Bake first record that includes at least in each case a checksum, indirectly or un ^¬ indirectly forwarded to the toll detecting means, wherein the toll detecting means is formed directly from the device or indirectly provided

To verify position data and checksums depending on the received from the at least one toll-bake record.

Advantageous embodiments of the first and second aspects also apply to the third aspect. Preferably, not all received first data records are forwarded to the toll collection device by the toll-bake. Preferably, a forwarding of the first data records to the toll ^¬ detecting means according to a random principle. This has the advantage that a manipulation of the journeys is much more difficult, since it is not known which toll-bake did ^¬ neuter the respective first data set has passed the toll detection means. In an advantageous embodiment of the third aspect, the toll-bake is designed to capture at least one image of a license plate of the respective vehicle, which is the toll-bake happens, and / or a vehicle registration number of the respective vehicle that passes the toll-bake to determine and forward the image or the determined vehicle license plate together with a position information of the toll-bake and a time information to the toll collection device. Advantageously, this so-called "silent ene reinforcements" to perform. This means there are inspections carried out without a vehicle device detects whether such control is performed particularly takes place for example the transfer of data to the toll Determined ^¬ lung device at random., the data comprising the image or the vehicle registration number, the position ^¬ information the toll-bake and the time information. This has the advantage that, for example, a potential hacker of the toll system has no knowledge of the frequency and timing of such checks, making subsequent manipulation the position data is much more difficult.

Embodiments of the invention are explained below with reference to the schematic drawing.

It shows:

Figure 1 is a block diagram of a toll system.

1 shows a block diagram of a toll collection system 10. The toll collection system 10 comprises a toll collection device 20, at least one device 30 for providing data for toll collection and at least one toll-bake 40.

The toll determination device 20 comprises, for example, a computing unit, for example a server. The toll Determined ^¬ averaging means 20 is, for example stationary arranged at a back end of a toll operator.

The device 30 is preferably arranged in a motor vehicle, in particular in a passenger vehicle. In front- Preferably, a plurality of motor vehicles are equipped with such a device 30.

Preferably, the toll system 10 includes a plurality of toll beacons 40. The respective toll-beacon 40 may be formed both as a stationary system and as a mobile system. The respective toll-bake 40 is designed, for example, as a control bridge over a toll road. The device 30 is designed in each case to determine a collision-free check sum as a function of a predefined set of detected position data values for the vehicle. The posi tion ^¬ data values are provided for example by a arranged in the vehicle position detection means. Alternatively, the device 30 may comprise the position detection ^¬ device. The device 30 is also designed to store the set of detected position data values together with the associated checksum. The position data of detected values are, for example, in each case together with an associated detection time point represents bereitge ^¬. The respective quantity of the acquired position data values comprises, for example, a predefined number of the last-acquired position data values.

For example, while the motor vehicle is in the

Road traffic moves, Global Positioning System data

(GPS data) written by the device 30 with a serial number and the associated detection time in a predetermined stack. Once n such GPS data sets have been written to the bar memory, a hash value is determined as a function of the n GPS data sets and a hash value determining last. This new hash value is called

(n + 1) -term GPS data z written to the stack with the next number and check sum determination time. The following list shows an example of the content of the stack memory ^¬: 756 hash value time_l

757 GPS time_2

758 GPS time_2

766 GPS time_2

767 (hash (756 to 766) time_l

768 GPS time_2

Here Zeit_l represents the Prüfsumermermittel ^¬ time and Zeit_2 the respective detection time. Preferably, the checksum determination time and the detection time have a same time format. The checksum determination time and the detection time may also include date information.

The device 30 is further configured, when the vehicle passes each one of the toll bake 40, to send a first data set comprising at least one of the stored checksums to the respective toll-bake 40. The first data record preferably further comprises the checksum determination time for the respective checksum and / or identification information of the vehicle and / or identification information of the device 30. Furthermore, the first data record comprises, for example, the sequential number. According to the above list, for example, the device 30 sends to the toll-bake 40 that the vehicle is passing the first record numbered 767 in the format: [767, hash value (756 to 766), time_l].

The device 30 is preferably initialized prior to shipment from the factory and / or upon delivery to a user. For this purpose, for example, a random number is written in a first memory location of the stack. This random number is considered the first checksum within the stack ^¬ memory. This random number is also stored by the toll determination device 20 assigned to the device 30. This has the advantage that the devices 30 for providing the data for toll collection are not confused become. In particular, in an initial phase of the use of such a device 30 may otherwise, if the vehicles cover the same distances, may occur confusion. The device 30 is further configured, in response to a predetermined read-out signal and / or at predetermined Zeitab ^¬ stands at least a portion of the stored position data values with the corresponding checksum in a predetermined communication interface to provide predetermined. For example, the device 30 may be assigned a mobile radio interface or the device 30 may have the mobile radio interface, so that the device 30 sends all new contents of the stack to the toll collection device 20 in response to a data release by a vehicle user. In this context, new contents are to be understood as contents that have not yet been sent to the toll collection device 20 at an earlier point in time and / or have been read out of the stack for indirect transfer. Additionally or alternatively, the data can be determined by means of a

Memory readers are read and forwarded, for example via an Internet application to the toll collection device 20. The respective toll-bake 40 is designed to forward the first data record respectively sent by the vehicle to the toll-bake 40 directly or indirectly to the toll-determining device 20. Preferably, the toll-bake 40 does not forward all received first data records to the toll-determining device 20. Preferably takes place Next ^¬ line of the first data records to the toll determination device 20 according to a random principle.

The toll determination device 20 is embodied, which is provided directly or indirectly by the device 30

Position data and checksums depending on which of the at least Verify a toll-bake 40 received respective first record.

For the verification, the toll determination device 20 determines each checksum on the basis of the transmitted position data values and compares the respectively calculated value with the associated checksums transmitted by the device 30. If an associated first data record forwarded by one of the toll beacons 40 is present, then the checksum of this first data record is compared with the checksum sent by the device 30 and determined by the toll collection device 20. Insofar as the checksums do not match, a manipulation of the device 30 can be assumed. In relation to the above mentioned exemplary list, for example 20 calculates the toll determination means the hash value 767 and compares the information provided by the device 30 to the toll Determined ^¬ lung device 20 hash value and the information provided by the toll-Bake 40 hash value. In the case of a manipulation of the data transmitted by the device 30 to the toll collection device 20, for example, the hash value with the number 767 would change. However, this results in an error in comparison with the associated hash value transmitted by the toll-bake 40.

Preferably, a protocol with predefined fields is used for transmitting the respective data. For example, the log may include the fields number, position data value / hash value, and time. The numbers are preferably continuous and without jumps. The position ^data values, in particular the GPS values, preferably have no additional characters and / or values which do not match the position data values. The time indication preferably comprises only numbers. A maximum length of the respective fields is given, for example. Further, a plausibility check of the position of data values, for example, from the toll detecting means 20 Runaway ^¬ performing, if doubts as to the correctness of the received Po ^¬ sitionsdatenwerte exist. In this case, for example, it is checked whether the route is on a road and / or a speed of the motor vehicle is plausible, and so on.

To further increase the security of the toll system 10, for example, "silent enforcement" may be performed, meaning that controls are performed without any on-board facility detecting whether such a check is being performed. For example, the toll-beacon 40 has an image sensor ^¬ Sung on and is designed to capture at least one image of a license plate of a vehicle that passes the toll-bake 40. Furthermore, the toll-bake 40 is ^¬ forms, a time associated with the passage of the toll-bake 40 information to detect ^¬ grasp, for example, the time it at which the vehicle passes through the toll-Bake 40th Furthermore, the toll-Bake 40 is formed, the image of the license plate and / or determined from this data, for example, the vehicle registration number, with the time information and the GPS data of the toll-bake 40 to link to a record and forward that record to the backend.

During the verification by the toll determination device 20, it is then additionally checked whether the position and the time of the "silent enforcement" are plausible in the determined route.

The toll determination device 20 is further configured, for example, to calculate a toll fee depending on the data provided by the device 30, in particular the position data values of the motor vehicle, and depending on position data for tolled motorways and / or other toll roads. For this purpose, the toll collection device 20, for example, a memory in which the position data of the toll roads and the other toll roads are stored.

Claims

claims

1. Procedure for providing toll collection data, in which:

- each dependent on a predetermined amount of

detected position data values for a vehicle a collision-free checksum is determined,

in each case the quantity of the acquired position data values is stored in a predetermined manner together with the associated checksum,

if the vehicle each passes a predetermined toll-beacon (40), a first record comprising at least one of the stored checksums is sent to the respective toll-beacon (40),

in response to a predetermined read-out signal and / or at predetermined time intervals, at least a part of the stored position data values with the associated checksums are provided in a predetermined manner at a predetermined communication interface.

2. The method according to claim 1,

wherein the respective amount of the detected Positionsda ^¬ tenwerte comprises a predetermined number of recently acquired position data values.

3. The method according to claim 1 or 2,

in which, when the vehicle passes in each case the predetermined toll-bake (40), the last-determined checksum is transmitted to the respective toll-bake (40).

4. The method according to any one of the preceding claims,

in which, together with the checksum, a checksum determination time is recorded and stored together with the associated checksum.

5. The method according to any one of the preceding claims, in which the first data record comprises the checksum determination time for the respective checksum and / or identification information of the vehicle and / or identification information of a device which can be arranged in the vehicle.

Method according to claim 4 or 5,

in which the position data detected values are each provided together with an associated time of data and the amount of position data values with their detection times and the associated checksum and their PrüfSummenermittlungszeitpunkt predetermined vomit ^¬ be chert.

Method according to one of claims 4 to 6,

a portion of the stored position data values are provided in addition given the respectively associated acquisition times and / or the PrüfSummenermittlungszeitpunkte the supplied ^¬ impaired checksums at the predetermined communication interface, wherein in response to the predetermined read-out signal and / or in the predetermined time intervals for at least.

Method according to one of the preceding claims,

in which the position data values for the vehicle are detected at predetermined time intervals.

Method according to one of the preceding claims,

where the checksum depends on a previously determined

Checksum is determined.

Method according to one of the preceding claims,

where the collision-free checksum is a hash value.

Device (30) for providing data for toll collection, which is designed to carry out a method according to one of claims 1 to 10. Tolling system (10)

a toll collection device (20)

at least one device (30) according to claim 11, which is arranged in a vehicle,

at least one toll-bake (40), which is adapted to forward the first data set sent by the vehicle to the toll-bake (40), which in each case comprises at least one checksum, directly or indirectly to the toll-determining device (20), wherein the toll-determining device (20) is adapted to verify the position data and checksums provided directly or indirectly by the device (30) as a function of the data set received by the at least one toll-bake (40).

Tolling system (10) according to claim 12,

in which the toll-bake (40) is designed to capture at least one image of a license plate of the respective vehicle passing the toll-bake (40) and / or a vehicle registration number of the respective vehicle which holds the toll-bake (40 ) happens to be determined and be ^¬ relationship as to forward the image, the vehicle registration number together with a detected position information of the toll beacon (40) and time information to the toll detecting means (20).