METHOD FOR PAYING A FEE FOR ALLOWING A VEHICLE TO USE A ROAD NETWORK THAT IS SUBJECT TO TOLL CHARGES, AND TOLL SYSTEM FOR PERFORMING THE METHOD

Abstract

In a toll system for paying a fee for allowing a vehicle to use a road network, a random generator generates a random character string and transmits it to an electronic payment system and to a monitoring device for an on-road check on a usage authorization of vehicles using the road network. A user registers with the payment system in order to acquire a usage authorization and inputs a registration number of the vehicle intended for use. The payment system generates a hash value and transmits it to an electronic operator system of a toll operator. The monitoring device records a registration number of the vehicle and generates the hash value from the registration number and the currently valid character string. The operator system checks whether the hash value from the monitoring device matches a hash value from the payment system.

Claims

1-11. (canceled)

12. A method for paying a fee for the use of a road network subject to a toll by a vehicle, the method comprising: generating a random character string by a random generator and transmitting the random character string to an electronic payment system to transact a fee payment and to a monitoring device for a road-side checking of a usage authorization of vehicles using the road network; in order to acquire a usage authorization, logging by user to the payment system and entering a registration number of the vehicle intended for the use of the road network; generating a hash value by the payment system from the registration number and a currently valid character string by way of a hash algorithm; transferring the hash value generated by the payment system to an electronic operator system of a toll operator, and keeping the transferred hash value available for monitoring purposes; detecting by the monitoring device, from a video recording and an evaluation of a passing vehicle, a registration number of the vehicle, generating the hash value from the detected registration number and the currently valid character string by way of the hash algorithm and transferring the hash value generated by the monitoring device to the operator system; checking by the operator system whether the hash value transferred from the monitoring device matches one of the hash values that have been transferred from the payment system and kept available for the monitoring purposes.

13. The method according to claim 12, which comprises: generating with the monitoring device an evidence dataset of a vehicle passage; and transmitting the evidence dataset to the operator system when a result of the checking step in the operator system is that the hash value transferred by the monitoring device does not match any of the hash values that are being kept available, and otherwise deleting the evidence dataset.

14. The method according to claim 13, wherein the evidence dataset has a video image and the registration number of the passing vehicle, and a monitoring time point.

15. The method according to claim 13, which comprises deleting with the monitoring device the evidence dataset once a predefinable period of time has elapsed, unless the operator system has requested an evidence dataset within the period of time.

16. The method according to claim 12, which comprises automatically transmitting an electronic invoice for the fee payment from the payment system to the user.

17. The method according to claim 12, which comprises: in order to acquire a time-dependent usage authorization, logging a user on to the payment system, with the user entering a registration number of the vehicle intended for the use and a usage period; transacting with the payment system the fee payment due for the usage period, generating the hash value if the fee payment is successful and transfers the hash value to the operator system with the desired usage period; and keeping the transferred hash value available for monitoring purposes by the operator system until the usage period has elapsed.

18. The method according to claim 12, which comprises: in order to acquire a route-dependent usage authorization, logging by a user on to the payment system via a mobile terminal that is also carried in the vehicle being used, and entering the registration number of the vehicle; transferring the generated hash value from the payment system to the operator system and to the terminal; keeping the transferred hash value available by the operator system until the user logs out of the payment system via the terminal when exiting the road network subject to the toll; determining with the terminal a geographical position on an ongoing basis and transmitting a currently determined position in each case with determination time point and hash value to the operator system at predefinable time intervals; and determining in the operator system for a hash value, a route length of a route covered by the assigned vehicle from the transmitted positions.

19. The method according to claim 18, which comprises, for a hash value, performing with the operator system a plausibility check for at least one of a location or a travel path or a speed of the vehicle assigned to the hash value on a basis of the transmitted positions and determination time points.

20. The method according to claim 18, wherein, once the user has logged out, the payment system requests from the operator system a route length covered by the vehicle between an entry and an exit and transacts the fee payment due for the route length.

21. The method according to claim 20, which comprises generating an electronic invoice featuring at least one of the travel path covered or the route length thereof, for which the fee is charged.

22. The method according to claim 20, which comprises generating an electronic invoice and, upon activation by the user, including at least one of the travel path covered or the route length thereof, for which the fee is charged.

23. A toll system for paying a fee for the use of a road network subject to a toll by a vehicle, the toll system being configured to perform the method according to claim 12.

Description

[0025] Further properties and advantages of the invention will emerge from the following description of an exemplary embodiment with the aid of the drawings, in which, in a schematic illustration,

[0026] FIG. 1 shows a toll system for a time-dependent toll; and

[0027] FIG. 2 shows a toll system for a route-dependent toll.

[0028] In accordance with FIG. 1 and FIG. 2, a toll system 10 according to the invention for paying a fee for the use of a road network subject to a toll by a vehicle 1 is embodied and provided.

[0029] The toll system 10 comprises a random generator 2, which generates a random character string S and is operated by an independent authority, for example a Technical Inspection Association, the German Federal Motor Transport Authority, a data protection organization or a voluntary monitoring authority. This authority has no further role in the toll method and therefore does not come into contact with further data. At predefinable time intervals, the character string S is generated anew, for example daily. The character string S is preferably alphanumeric and is of a sufficient length, for example between 16 and characters long.

[0030] The toll system 10 comprises an electronic payment system 3 of a payment service provider for transacting the fee payment with a user. In order to acquire a usage authorization, a user logs on in the payment system 3 and in the process enters a registration number K of the vehicle 1 intended for the use. The registration number K of the vehicle 1 is understood here to mean the officially registered motor vehicle registration number. The logging on may take place, for example, on the part of the driver or also a third party via a mobile terminal 5 of the toll system 10, for example a smartphone with corresponding application software, or online via a website of the payment service provider.

[0031] Furthermore, the toll system 10 comprises one or more monitoring devices 4 for detecting a registration number K of a vehicle 1. Monitoring devices 4 may be arranged in a stationary manner at a fixed monitoring point in the road network or used in a mobile manner for alternating, random monitoring points. A monitoring device 4 comprises a digital video camera for image recording of a vehicle 1 passing the monitoring point as well as an image evaluation unit for identifying the registration number K of the recorded vehicle 1 by means of optical character recognition.

[0032] The character string S generated by the random generator 2 is transmitted to the payment system 3 as well as to the monitoring device 4.

[0033] The payment system 3 generates a hash value H from the registration number K and the currently valid character string S by means of a hash algorithm. This involves what is known as a salted hash value, wherein the salt is formed by the randomly generated character string S. The hash value H is then used as an anonymized reference to the registration number K of the vehicle 1. Other than forming the hash value, the payment service provider only processes standard tasks for electronic payment transactions. For example, the intended payment service provider for the local transport operators is considered. Ad hoc payment methods are possible for the payment of fees, for example by means of a PayPal account or a prepaid card.

[0034] The toll system 10 additionally comprises an electronic operator system 5 of a toll operator, to which the payment system 3 transfers the generated hash value H and which keeps the transferred hash value H available for monitoring purposes. The operator system 5 therefore keeps a pool of hash values H available, which are assigned to vehicles 1 or the registration numbers K thereof, for which a usage authorization is currently present.

[0035] A monitoring device 4 also generates the hash value H from the detected registration number K and the currently valid character string S by means of the hash algorithm and transfers the generated hash value H to the operator system 5. The operator system 5 then checks whether the hash value H transferred from the monitoring device 4 matches one of the hash values H transferred from the payment system 3 and are still kept available. Due to the payment system 3 and monitoring device 4 using the same hash algorithm, if there is a matching registration number K, the same salted hash value H is generated which is used in the operator system 5 to anonymously check a usage authorization.

[0036] The monitoring device 4 generates an evidence dataset D of a vehicle passage and transmits it to the operator system 5 when the result of the check there is that the hash value H transferred by the monitoring device 4 does not match any of the hash values H that are still being kept available. Otherwise, the monitoring device 4 deletes the evidence dataset D. If there is no match, then there is an initial suspicion of an improper use of the road network subject to a toll, meaning that the output of the evidence dataset D is justification for a closer check of the situation. The evidence dataset D may have a video image and the registration number K of the passing vehicle 1 as well as the monitoring time point t. The monitoring device 4 deletes the evidence dataset D once a predefinable period of time has elapsed, if the operator system 5 does not request an evidence dataset within the period of time. The period of time may be set in accordance with the national data protection requirements.

[0037] The payment system 3 can automatically transmit an electronic invoice R for the fee payment to the user. In addition to the fee amount, this may contain the data entered, such as registration number K or also usage duration T or route length L used, in clear text. The user uses this as evidence in the event of a possible complaint.

[0038] According to FIG. 1, the toll system 10 supports a method for acquiring a time-dependent usage authorization, for example for daily, weekly or annual use of a road network subject to a toll.

[0039] The user logs on to the payment system 3 and in the process enters a registration number K of the vehicle 1 intended for the use as well as a usage period T. The payment system 3 then transacts the fee payment due for the usage period T. If the fee payment is successful, the hash value H is generated in the payment system 3 and is transferred with the desired usage period T to the operator system 5. The operator system 5 then keeps the transferred hash value H available for monitoring purposes until the usage period T has elapsed, after which it is automatically deleted.

[0040] According to FIG. 2, the toll system 10 also supports a method for acquiring a route-dependent usage authorization, for example between an entry into the route network chosen by the user and a later exit.

[0041] Here, a user also has to carry in their vehicle 1 the mobile terminal 6, which determines its geographical position Pn on an ongoing basis, for example via a GPS receiver. When entering the road network subject to a toll, the user logs on to the payment system 3 via the terminal 6 and in the process enters the registration number K of the vehicle 1; the entry position P1 and the entry time point T1 are transferred at the same time. The payment system 3 transfers the generated hash value H to the operator system 5 and to the terminal 6. The operator system 5 keeps the transferred hash value H available until the user logs out of the payment system 3 again via the terminal 6 when exiting the road network subject to a toll, wherein the hash value H is transferred with the exit position P2 and the exit time point T2. During travel, the terminal 6 transmits its currently determined position Pn in each case with determination time point Tn and hash value H to the operator system 5 at predefinable time intervals, for example every minute. For a hash value H, a route length L of a route covered by the assigned vehicle 1 is determined from the transmitted positions Pn in the operator system 5. In this context, it is not possible to generate a movement profile of a vehicle 1 while knowing the registration number K or the person constituting the user.

[0042] For a hash value H, however, the operator system 5 can perform a plausibility check for the location and/or travel path and/or speed of the vehicle 1 assigned to the hash value H on the basis of the transmitted positions Pn and determination time points Tn and mark anomalies from a data perspective, meaning that, for this hash value H, during a monitoring, the evidence dataset D can be transmitted to the operator system 5.

[0043] Once the user has logged out, the payment system 3 requests the route length L covered by the vehicle 1 assigned by a hash value H between entry and exit and transacts the fee payment due for the route length L from the operator system 5. The operator system 5 deletes the corresponding hash value H after such a request, as the user no longer has their usage authorization after exiting. The electronic invoice R may always, or following activation by the user, feature the travel path covered and/or the route length L thereof, for which the fee is charged.