MONITORING REFUELING OPERATIONS
20250042715 · 2025-02-06
Inventors
Cpc classification
International classification
Abstract
A method for detecting fuel fraud when refueling a vehicle at a filling station comprises obtaining, in conjunction with a current refueling operation in which the vehicle is refueled at the filling station, current refueling information, determining if there is a mismatch between the obtained current refueling information and historical refueling information which is based on a plurality of past refueling operations in which comparable vehicles were refueled, and raising a potential fraud warning based at least in part on a determined mismatch. The current refueling information comprises at least: first information indicating a distance the vehicle traveled since at least a previous refueling operation, second information indicating a duration and/or progress of the current refueling operation, and third information indicating an amount of fuel dispensed by a fuel pump in the current refueling operation. One or more machine-readable media, a server installation and a system are adapted to perform corresponding operations or cause corresponding operations to be performed.
Claims
1. A computer-implemented method executed by one or more servers for detecting fuel fraud when refueling a vehicle at a filling station, the method comprising: obtaining, in conjunction with a current refueling operation in which the vehicle is refueled at the filling station, current refueling information which comprises at least: first information indicating a distance the vehicle traveled since at least a previous refueling operation, second information indicating at a duration and/or progress of the current refueling operation, and third information indicating an amount of fuel dispensed by a fuel pump in the current refueling operation; determining if there is a mismatch between the obtained current refueling information and historical refueling information which is based on a plurality of past refueling operations in which comparable vehicles were refueled; and raising a potential fraud warning based at least in part on a determined mismatch.
2. The method of claim 1, wherein the first information is based on one or more mileage or odometer indications received from the vehicle.
3. The method of claim 1, wherein the second information indicates at least a duration between a start event of the current refueling operation and an end event of the current refueling operation.
4. The method of claim 1, wherein the second information indicates at least a plurality of fuel flow rates or dispensed fuel amounts at a plurality of times during the current refueling operation.
5. The method of claim 1, wherein the third information is obtained from a forecourt controller of the filling station.
6. The method of claim 1, wherein the third information is obtained without human intervention.
7. The method of claim 1, wherein said current refueling information further comprises at least one of: a fuel type used in the current refueling operation, an indication of a vehicle class of the vehicle, or a vehicle identification of the vehicle.
8. The method of claim 1, wherein said determining if there is a mismatch involves comparing the current refueling information to the historical refueling information using dynamically variable thresholds.
9. The method of claim 1, wherein said determining if there is a mismatch involves processing the current refueling information by a trained model, the model having been trained based on the historical refueling information.
10. The method of claim 1, wherein the plurality of past refueling operations on which the historical refueling information is based comprise past refueling operations performed by multiple different persons.
11. The method of claim 1, wherein the historical refueling information is classified into a plurality of clusters of historical refueling information, each of the clusters relating to a particular vehicle class.
12. The method of claim 1, wherein said raising a potential fraud warning further involves at least one of: comparing a location of the vehicle during the current refueling information with a location of the fuel pump; or comparing an amount of fuel dispensed by the fuel pump in the current refueling operation with an amount of fuel determined from a fuel level indication provided by the vehicle.
13. A machine-readable medium or multiple machine-readable media having program instructions stored thereon, wherein the program instructions are adapted to cause one or more one or more servers, when executing the program instructions, to perform operations which comprise: obtaining, in conjunction with a current refueling operation in which the vehicle is refueled at the filling station, current refueling information which comprises at least: first information indicating a distance the vehicle traveled since at least a previous refueling operation, second information indicating a duration and/or progress of the current refueling operation, and third information indicating an amount of fuel dispensed by a fuel pump in the current refueling operation; determining if there is a mismatch between the obtained current refueling information and historical refueling information which is based on a plurality of past refueling operations in which comparable vehicles were refueled; and raising a potential fraud warning based at least in part on a determined mismatch.
14. The machine-readable medium of claim 13, wherein the first information is based on one or more mileage or odometer indications received from the vehicle.
15. The machine-readable medium of claim 13, wherein the second information indicates at least one of (i) a duration between a start event of the current refueling operation and an end event of the current refueling operation, or (ii) a plurality of fuel flow rates or dispensed fuel amounts at a plurality of times during the current refueling operation.
16. The machine-readable medium of claim 13, wherein said current refueling information further comprises at least one of: a fuel type used in the current refueling operation, an indication of a vehicle class of the vehicle (30), or a vehicle identification of the vehicle.
17. A system comprising one or more servers, wherein the system is adapted to perform operations which comprise: obtaining, in conjunction with a current refueling operation in which the vehicle is refueled at the filling station, current refueling information which comprises at least: first information indicating a distance the vehicle traveled since at least a previous refueling operation, second information indicating a duration and/or progress of the current refueling operation, and third information indicating an amount of fuel dispensed by a fuel pump in the current refueling operation; determining if there is a mismatch between the obtained current refueling information and historical refueling information which is based on a plurality of past refueling operations in which comparable vehicles were refueled; and raising a potential fraud warning based at least in part on a determined mismatch.
18. The system of claim 17, further comprising at least one filling station.
19. The system of claim 17, wherein the first information is based on one or more mileage or odometer indications received from the vehicle.
20. The system of claim 17, wherein the second information indicates at least one of (i) a duration between a start event of the current refueling operation and an end event of the current refueling operation, or (ii) a plurality of fuel flow rates or dispensed fuel amounts at a plurality of times during the current refueling operation.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
[0016] Further features, objects and advantages of the invention will become apparent from the following detailed description, in connection with the annexed schematic drawings, in which:
[0017]
[0018]
DETAILED DESCRIPTION OF EMBODIMENTS
[0019]
[0020] As a non-limiting example,
[0021] The on-site server 16 is further connected to a point-of-sale system 20, such as a cash register having a terminal for several kinds of card payments. Yet further, the on-site server 16 communicates, via any combination of wired and wireless networks 22, with one or more back-end servers 24, 26. The non-limiting example in
[0022] Generally speaking, the distribution of functions between the on-site server 16 and the one or more back-end servers 24, 26, and likewise the distribution of functions between multiple back-end servers 24, 26, may be chosen according to technical and/or administrative and/or legal requirements. The present invention is not limited to any particular distribution of these functions, unless specified otherwise in the claims. The totality of the servers performing the functions of the present invention, which may include the on-site server 16 and/or the one or more back-end servers 24, 26, is referred to as a server installation 28 in the present document.
[0023]
[0024] In the example shown in
[0025] In some embodiments, the wireless communication unit 44 may be adapted for wide-range wireless communication via a mobile telecommunication network, which is represented by a cellular base station 46 in
[0026] The example embodiments described so far use a dedicated device which is not part of the factory configuration of the vehicle 30 as the on-board unit 32. However, the on-board unit 32 may generally be any unit comprising hardware and/or software. The on-board unit 32 may be factory-installed or retrofitted, and it may be removable or permanently installed. To provide a further example, the on-board unit 32 may be a software component operating in a computer unit of the vehicle 30, wherein the computer unit may be part of a control system or an entertainment system or a navigation system or a user interface system of the vehicle 30. As yet another example, the on-board unit 32 may be a software program (app) executed by a mobile device (such as a mobile telephone or a smartphone or a smartwatch) of a driver of the vehicle 30 or a passenger.
[0027] In operation, the on-board unit 32 communicates and interacts with further components of or located within the vehicle 30. For example, in embodiments in which the on-board unit 32 is not equipped to perform wide-range wireless communications on its own, the on-board unit 32 may interact with a mobile device (such as a smartphone or a similar device) of a driver of the vehicle 30 or a passenger to send vehicle messages 34 to a cellular network. Conversely, in embodiments in which the on-board unit 32 is implemented on a mobile device separate from the vehicle 30, the on-board unit 32 may communicate with elements of the vehicle 30, such as a vehicle control system.
[0028] As already indicated, the vehicle message 34 contains various pieces of information regarding the vehicle 30 and its operational status. As a non-limiting example, the vehicle message 34 may contain a vehicle identification VID, a time stamp TME, location information LOC indicating the present location of the vehicle 30 in the form of geographic coordinates, and odometer information ODO indicating the mileage (expressed in kilometers or miles or any other unit) driven by the vehicle 30 since a predefined starting point. This starting point will usually be the time the vehicle 30 was manufactured, but any other starting point (including the time of the most recent previous refueling operation, if this information is available at the on-board unit 32) may be used.
[0029] In many embodiments, further information about the vehicle 30 is provided in the vehicle message 34, such as, without limitation, an indication of the approximate amount of fuel in the tank (e.g., 30 liters), or an indication of a degree to which the tank is full (e.g., 50% full), or at least an indication whether the fuel level has recently increased. It is apparent that further or different or fewer pieces of information may be present in other embodiments. The vehicle message 34 may be sent at predefined time intervals (e.g., every minute), or after travelling a predefined distance (e.g., every kilometer travelled), or whenever an interesting event is detected at the vehicle 30 (e.g., at the start of a new trip).
[0030] The server installation 28 is aware of the identity of the vehicle 30 and/or its driver and/or a passenger. In the example described above, the vehicle identification VID contained in the vehicle message 34 may identify one or more of the on-board unit 32 (e.g., a serial number of the on-board unit 32), the vehicle 30 (e.g., a vehicle identification number VIN of the vehicle 30), or a person associated with the vehicle 30 (e.g., a person who has registered to use the application 50).
[0031] Upon completion of a refilling operation, the fuel pump 12 generates the fuel pump message 18 and sends it to the forecourt controller 14. The forecourt controller 14 and/or the on-site server 16 forward the fuel pump message 18, or at least some of the information contained therein, to a suitable back-end server 24, 26 for further processing. It is an added security feature in many embodiments that this forwarding operation does not involve any human interaction. In particular, embodiments are preferred in which no human operator at the point-of-sale system 20 manually enters any transaction information relevant to fraud detection. This measure avoids potential fraud through a possible manipulation of transactions closed at the point-of-sale system 20 by a cashier.
[0032]
[0033] In step 60, the server installation 28 identifies corresponding data records from the vehicle 30 and the fuel pump 12 about a particular refueling operation. In the presently described example, this may include identifying a fuel pump message 18 and a vehicle message 34 which pertain to one and the same refueling operation. For example, this may be done by comparing the start and stop times STA, STP in the fuel pump message 18 with the time stamp TME in the vehicle message 34. Alternatively or additionally, it may be determined if the location information LOC in the vehicle message 34 matches a known location of the fuel pump 12, which may be determined from an entry in a database 62 based on the identification FPID of the fuel pump 12 in the fuel pump message 18. The database 62 may contain all kinds of information facilitating the process shown in
[0034] In step 64, the server installation 28 combines and processes the information about a single refueling operation to generate a data structure comprising current refueling information 66.
[0035] As a non-limiting example, the data structure contains an indication 68 of the category or class of the currently refueled vehicle and multiple further pieces of information 70.1, 70.2, 70.3, . . . , which pertain to characteristics of the current refueling operation that may be pertinent for detecting fuel fraud. These pieces of information 70.1, 70.2, 70.3, . . . , which will also be designated by the summarizing reference sign 70.x in the present document.
[0036] The vehicle class indication 68 indicates a category or class or type of the vehicle 30. In many embodiments, this is not a specific indication of the vehicle make, model and year, but rather an indication which distinguishes different vehicles having different refueling properties while clustering vehicles having similar refueling properties. For example, the vehicle class indication 68 distinguishes vehicles based on their expected fuel consumption, so that more economical vehicles will generally be placed in a different class than less economical vehicles. The vehicle class indication 68 may be determined from the vehicle identification VID in the vehicle message 34, using information from the database 62 which maps vehicle identifications VID to corresponding vehicle class indications 68. An automated clustering method may be used to initially determine a suitable set of possible vehicle class indications and the assignment of each particular vehicle make, model and year to one of these class indications.
[0037] In the presently described embodiment, the further pieces of information 70.x comprise first information 70.1 which indicates a distance the vehicle 30 was driven since at least a previous refueling operation, second information 70.2 which indicates a duration and/or progress of the current refueling operation, and third information 70.3 which indicates an amount of fuel dispensed by the fuel pump 12 in the current refueling operation. Again, it is apparent that additional pieces of information 70.x can be used in further embodiments, and it is in fact believed to be advantageous to make use of as many pieces of information 70.x as possible, based on the information provided in the fuel pump message 18 and the vehicle message 34. As a non-limiting example, information about the filling status of the vehicle 30, as determined by the in-board unit 32 and communicated in the vehicle message 34, may be used as an additional piece of information. As another example, information about the fuel type used in the current refueling operation (e.g., the general kind of fuel and/or specific grade of fuel), as communicated in the fuel pump message 18, may also be used as an additional piece of information.
[0038] The distance indicated in the first information 70.1 may be, as a non-limiting example, the number of kilometers or miles since the most recent refueling operation. In the presently described embodiment, this distance is calculated based on the odometer information ODO contained in at least two vehicle messages 34, namely a current vehicle message 34 and at least one historical vehicle message 34 sent at the time of the most recent refueling operation. The odometer readings accessed by the on-board unit 32 are usually quite accurate in a modern vehicle 30.
[0039] In embodiments in which the vehicle messages 34 contain a different kind of distance measures, such as the distance driven since the last engine start, then it may be necessary for the server installation 28 to sum up distance measures from several vehicle messages 34 to obtain the first information 70.1. Any required historical information is stored in the database 62 for use by the server installation 28. In yet further embodiments, the server installation 28 determines the distance indicated in the first information 70.1 not or not exclusively from odometer readings of the vehicle 30, but using location information, such as the location information LOC in the vehicle messages 34, or any other kind of suitable information such as GNSS trip data.
[0040] The second information 70.2 may, in some embodiments, be based on the start and stop times STA, STP in the fuel pump message 18. In the absence of fraud, the total duration of the filling operation is well correlated with the amount of fuel dispensed in a refueling operation. If the refueling operation takes longer than expected, then this may point to an interruption of the refueling operation, for example because the customer has interrupted the refueling operation by moving the fuel pump nozzle from a filler neck of the vehicle 30 to a separate canister. In some embodiments, the fuel pump message 18 comprises more detailed information about the refueling operation than just its start and stop times. For example, the fuel pump message 18 may contain a plurality of readings at different times during the refueling operation. Each reading may indicate one or more of a current fuel flow rate, an amount of fuel dispensed since the start of the refueling operation, and/or an amount of fuel disposed since a previous reading. This information describes the progress of the refueling operation in more detail and can be used, for example, to distinguish between a non-fraudulent instance of topping up towards the end of the refueling operation and a fraudulent instance of skimming in the middle of the refueling operation.
[0041] The third information 70.3, namely the amount of fuel dispensed by the fuel pump 12 in the current refueling operation, may be expressed in any suitable units, such as liters or gallons. This information is obtained by a calibrated device of the fuel pump 12, as communicated in the fuel pump message 18.
[0042] In step 72, the server installation 28 determines if there is a mismatch between the current refueling information 66 and historical refueling information 74. Historical refueling information 74 serves as a baseline and is assumed to correspond to non-fraudulent refueling operations. This assumption is viable because the majority of users are honest, so that the historical refueling information 74, which is derived from past refueling operations of many different users, on average corresponds to non-fraudulent operations.
[0043] The historical refueling information 74 is classified into a plurality of clusters 76.1, 76.2, . . . , which will also be designated as clusters 76.x in the present document. Each of the clusters 76.x corresponds to a particular vehicle class, using the same classification as used for the vehicle class information 68. As discussed above, the clustering distinguishes between vehicles that are associated with, on average, markedly different refueling operations, while keeping vehicles which can be expected to have similar refueling operations in a single cluster 76.x.
[0044] The clusters 76.x comprise information which is gathered from past refueling operations and which comprises similar kinds of data as described above for the current refueling operation 66. However, the information in the clusters 76.x is normalized to the extent possible, for example expressed relative to a certain distance driven and/or relative to a certain amount of fuel consumed. For example, in the presently described embodiment the first cluster 76.1 comprises information 78.1 which pertains to a first vehicle class and expresses at least (i) an expected amount of fuel for each kilometer driven since the last refueling operation, and (ii) an expected duration of a refueling operation for each expected liter of fuel. Similarly, the second cluster 76.2 comprises information 78.2 which pertains to a second vehicle class and expresses at least the same pieces of information (i) and (ii) for the second vehicle class. In the present document, the reference sign 78.x will be used to summarily refer to all pieces of information 78.1, 78.2, . . . , in the respective clusters 76.1, 76.2, . . . of the historical refueling information 74.
[0045] In different embodiments, the determination in step 72 may be performed in different ways. A first example embodiment first determines the pertinent cluster 76.x of the historical refueling information 74 for the class of the vehicle 30 involved in the current refueling operation. Then, expected values for the data expressed in at least some of the pieces of information 70.x are calculated from the normalized information in the pertinent cluster 76.x. In the presently described example, given a certain distance traveled by the vehicle 30, as indicated in the first information 70.1 of the current refueling information 66, an expected amount of fuel and an expected duration of the refueling operation are determined from the information in the pertinent cluster 76.x. The expected amount of fuel is then compared to the actual amount of fuel dispensed according to the third information 70.3, and the expected duration is compared to the actual duration of the refueling operation according to the second information 70.2. The server installation 28 generates and outputs a warning message 80 of potential fuel fraud if the actual amount of fuel exceeds the expected amount of fuel by a first threshold, and/or if the actual duration of the refueling operation exceeds the expected duration by a second threshold.
[0046] It may be feasible in the presently described embodiment to use predetermined first and/or second thresholds, which may be expressed either as absolute differences or as percentage differences. For example, the warning message 80 may indicate a difference of more than 10% between the expected and the actual duration. However, in some embodiments dynamically variable thresholds are used, which have the advantage that they are not based on fixed assumptions about possible fraud scenarios and are automatically adapted to changed techniques of fraud. For example, one, some or all of the thresholds may be automatically adjusted so that, on average, about 5% (or any other percentage) of refueling operations are flagged as potentially fraudulent.
[0047] A further example embodiment implements step 72 not by performing an item-for-item comparison, but rather by using a trained machine learning model to make the determination in step 72. The machine learning model is trained using the historical refueling information 74 and may be re-trained at appropriate times, as the historical refueling information 74 evolves. Any kind of artificial intelligence and machine learning techniques can be used to implement the machine learning model, including, but not limited to, neural networks, genetic algorithms, support vector machines, k-means, kernel regression and discriminant analysis.
[0048] In embodiments in which the fuel type is included in the current refueling information 66 and/or the historical refueling information 74, the fuel type may be taken into account when determining the expected amount of fuel used, as a factor for scaling the fuel amount information 70.3, or as an additional piece of information to be evaluated in step 72.
[0049] As an optional step 82, the server installation 28 performs one or more additional checks and verifications to cover further possible scenarios of fuel fraud. For example, in embodiments in which the vehicle message 34 is sent on a regular basis and comprises an indication of the current fuel level and ignition information, it can be verified that the fuel level does not drop between the time the ignition is switched off and the time the ignition is next switched on.
[0050] Any such drop might point to a possible siphoning off of fuel, which will be reported as a potential fraud instance in step 82. Further optional checks which may be performed by the server installation 28 in optional step 82 include one or more of the following: [0051] Determine if the amount of fuel AMT as indicated by the fuel pump 12 in the fuel pump message 18 matches an increase in fuel level as indicated by a fuel level sensor of the vehicle 30. [0052] Determine if the location LOC of the vehicle 30 at a certain time as indicated in the vehicle message 34 matches the time of the refueling operation and the location of the fuel pump 12. [0053] Determine if the identification VID of the vehicle 30 as indicated in the vehicle message 34 corresponds to a vehicle registered for use of the fuel card service.
[0054] Finally, in step 84, the server installation 28 updates the historical refueling information 74 based on the current refueling operation and the current refueling information 66. Step 84 does not necessarily need to be performed for each individual refueling operation. Instead, it may be more efficient to collect the required information about a number of refueling operations and then update the historical refueling information 74 by the server installation 28 in one combined batch process, for example at a time of low system load. Any required information in the database 62, such as the odometer reading of the vehicle 30 at the time of refueling, is also updated.
[0055] The particulars contained in the above description of sample embodiments should not be construed as limitations of the scope of the invention, but rather as exemplifications of some embodiments thereof. Many variations are possible and are immediately apparent to persons skilled in the arts. In particular, this concerns variations that comprise a combination of features disclosed in the present specification. Accordingly, the scope of the invention should be determined not by the embodiments illustrated, but by the appended claims and their legal equivalents.
LIST OF REFERENCE SIGNS
[0056] 10 filling station [0057] 12 fuel pump [0058] 14 forecourt controller [0059] 16 on-site server [0060] 18 fuel pump message [0061] 20 point-of-sale system [0062] 22 network [0063] 24 first back-end server [0064] 26 second back-end server [0065] 28 server installation [0066] 30 vehicle [0067] 32 on-board unit [0068] 34 vehicle message [0069] 36 port [0070] 38 control unit [0071] 40 interface unit [0072] 42 location determining unit [0073] 44 wireless communication unit [0074] 46 cellular base station [0075] 48 mobile device [0076] 50 application [0077] 52 network [0078] 60 identifying step [0079] 62 database [0080] 64 combining step [0081] 66 current refueling information [0082] 68 vehicle model indication [0083] 70.x pieces of information [0084] 72 match determination step [0085] 74 historical refueling information [0086] 76.x cluster [0087] 78.x pieces of information [0088] 80 warning message [0089] 82 optional checking step(s) [0090] 84 update step [0091] FPID identification of fuel pump [0092] STA, STP start and stop times of filling operation [0093] AMT amount of fuel dispensed by fuel pump [0094] VID vehicle identification [0095] TME time stamp [0096] LOC location information [0097] ODO odometer information