EP2320386A1 - Device and method for creating toll data from anonymous locations - Google Patents

Device and method for creating toll data from anonymous locations Download PDF

Info

Publication number
EP2320386A1
EP2320386A1 EP09450207A EP09450207A EP2320386A1 EP 2320386 A1 EP2320386 A1 EP 2320386A1 EP 09450207 A EP09450207 A EP 09450207A EP 09450207 A EP09450207 A EP 09450207A EP 2320386 A1 EP2320386 A1 EP 2320386A1
Authority
EP
European Patent Office
Prior art keywords
identifier
toll
location
oid
rid
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP09450207A
Other languages
German (de)
French (fr)
Other versions
EP2320386B1 (en
Inventor
Jasja Tijink
Jan Kersten
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Kapsch TrafficCom AG
Original Assignee
Kapsch TrafficCom AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to EP11005131A priority Critical patent/EP2381425B1/en
Priority to ES11005131T priority patent/ES2387755T3/en
Application filed by Kapsch TrafficCom AG filed Critical Kapsch TrafficCom AG
Priority to AT09450207T priority patent/ATE548713T1/en
Priority to DK09450207.7T priority patent/DK2320386T3/en
Priority to PL11005131T priority patent/PL2381425T3/en
Priority to PT11005131T priority patent/PT2381425E/en
Priority to PL09450207T priority patent/PL2320386T3/en
Priority to AT11005131T priority patent/ATE557373T1/en
Priority to ES09450207T priority patent/ES2383852T3/en
Priority to EP09450207A priority patent/EP2320386B1/en
Priority to PT09450207T priority patent/PT2320386E/en
Priority to DK11005131.5T priority patent/DK2381425T5/en
Priority to SI200930261T priority patent/SI2320386T1/en
Publication of EP2320386A1 publication Critical patent/EP2320386A1/en
Application granted granted Critical
Publication of EP2320386B1 publication Critical patent/EP2320386B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B15/00—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points
    • G07B15/06—Arrangements for road pricing or congestion charging of vehicles or vehicle users, e.g. automatic toll systems
    • G07B15/063—Arrangements for road pricing or congestion charging of vehicles or vehicle users, e.g. automatic toll systems using wireless information transmission between the vehicle and a fixed station
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00—Registering or indicating the working of vehicles
    • G07C5/008—Registering or indicating the working of vehicles communicating information to a remotely located station

Definitions

  • the present invention relates to a method for generating location-anonymized toll data from the location records of a location-recording vehicle device with a unique identifier in a road toll system.
  • the invention further relates to a toll calculation server and a vehicle device for carrying out this method.
  • OBUs Vehicle devices for road toll systems are also referred to as "onboard units” or OBUs.
  • OBUs that can themselves determine and record their location, e.g. by means of a satellite navigation receiver, there are currently two different versions: so-called “thick client” OBUs calculate based on stored toll cards from their location records location-anonymized toll data and send them e.g. via a mobile network to a center of the road toll system, which requires a complex distribution of toll cards to the OBUs and high processing power in the OBUs.
  • so-called “thin client” OBUs do not evaluate their location records themselves, but send them “raw” to the central office, which makes the map matching to generate toll data.
  • “Thin client” OBUs are therefore much simpler and less expensive, but worthy of discussion from a data protection point of view, because the road toll system's headquarters are aware of all the OBU's "movement profile", including stays in non-tolled locations.
  • the invention is based on a completely novel, surprisingly simple concept for realizing privacy by design.
  • the OBU waits for a period of time to allow sufficient time for the toll calculation server to collect the toll data create and delete the underlying location records. Thereafter, the OBU can safely disclose their identity or identifier because there are no more location records in the system that would allow conclusions about the motion profile of the OBU.
  • An especially suitable for this first embodiment of the invention toll calculation server is characterized in that it has a buffer memory in the form of a ring memory for receiving the location records.
  • a ring memory ensures solely by its hardware construction a cyclic overwriting of the oldest location records by the most recent location records and thus deleting the location records within the turnaround time ("roll-over time") of the ring memory.
  • the toll calculation server may have means for periodically, preferably daily, deleting at least the oldest entries of the buffer memory.
  • a particularly suitable for the first embodiment of the invention vehicle device is characterized by release means, which send after a predetermined period of time said sender identification under the identifier of the vehicle unit and thus reveal its identity.
  • the OBU waits for an explicit deletion confirmation of the toll calculation server and then releases its identifier.
  • This also achieves hardware-related data protection ("privacy by design").
  • a toll calculation server which is particularly suitable for this embodiment of the invention is preferably characterized in that it deletes location records after their processing into toll data and sends an acknowledgment to a vehicle unit via them.
  • a particularly suitable for the second embodiment vehicle device has release means, which send after receiving a deletion confirmation with respect to sent location records whose sender ID under the identifier of the vehicle unit.
  • the invention thus ensures, in a simple and transparent manner for users and system operators, hardware-related confidentiality for the sensitive location recording data.
  • Location records are stored centrally only for as long as necessary for their processing; afterwards they will be deleted automatically. Any concerns regarding a central traceability or creation of a motion profile of the vehicle equipment can be eliminated.
  • the invention does not cause increased traffic in the road toll system.
  • the assignment of the location-anonymized toll data to the identifier released by the vehicle device can take place both in the toll calculation server and in the central office. Accordingly, further variants of the method according to the invention are that the said releasing takes place to the toll calculation server which assigns the location-anonymised toll data to the identifier and sends it to a center of the toll system; or that the said releasing is done to a center of the toll system, which receives the location-anonymized toll data from the toll calculation server and assigns the identifier.
  • the location records in the toll calculation server may be encrypted and sent to the public key of an external archive location prior to being deleted.
  • an archival holding in the nature of a trustee or notary, should enjoy a high degree of trust for all concerned, i. for both the users and the system operator, and can therefore be consulted by any party in disputed cases.
  • the transmission and release preferably takes place from the vehicle device via a radio network, particularly preferably a mobile radio network.
  • a radio network particularly preferably a mobile radio network.
  • OBUs can be used which are equipped with a DSRC or mobile transceiver.
  • the location records of a vehicle unit are sent in data packets, which are each provided with the same sender IDs, which simplifies the evaluation, since the vehicle unit here - after waiting for the period or receipt of deletion confirmation - its identifier only with respect to a single Must disclose sender identification.
  • the location records of a vehicle device can be sent in data packets that are provided with changing sender IDs.
  • the confidentiality can be increased on the transmission interface.
  • data packets provided with alternating sender identifiers are additionally provided with linked packet identifiers which allow their association with each other, whereby the vehicle device needs to release its identifier only for the sender identification of the last data packet.
  • the identifier by which a vehicle device identifies can be both an identifier of the vehicle device itself and an identifier associated with the user of the vehicle device, e.g. an identifier of a user account for billing tolls in the road toll system.
  • the sender identifier used to send the location records to the toll calculation server may be both random and user-selectable code, further increasing transparency for the user.
  • the method of the invention is suitable for all types of self-locating vehicle devices, in whatever way they determine their location, eg by recognizing landmarks or identifying beacons on which the vehicle device is oriented. It is particularly advantageous if the vehicle device uses its locations in a manner known per se Satellite navigation determines, for example, GPS-based "thin client" OBUs can be used.
  • an OBU 1 moves aboard a vehicle in the context of a road toll system with a control center 2.
  • the center 2 calculates toll road use of the OBU 1, eg driving on a toll road, entering an area subject to charges, staying on a paid parking, etc. corresponding user accounts from, u.zw. based on toll data T triggered by the location uses of the OBU 1 as known in the art.
  • the OBU 1 is of a self-locating "thin client" type and determines its location continuously, eg periodically, for example with the aid of a satellite navigation receiver, and records the so-determined positions (position fixes) p 1 , p 2 , p 3. (generally p i ) in an internal location record memory.
  • Each OBU 1 is provided with a unique identifier OID in the road toll system, such as a unique identifier of the OBU 1 itself and / or its user or an account of the latter. Knowing the identifier OID of an OBU 1 and its location records p i, it would be possible to deduce the movement profile of an OBU 1, which is prevented as follows.
  • the location records p i of the OBU 1 are - even if this is not mandatory - for ease of handling on individual data packets 3 divided.
  • the data packets 3 can with a packet identifier P i (see Fig. 2 ), eg a continuous one Numbering, and a header (not shown), for example, containing metadata such as the number of contained in the data packet 3 location records p i , a hash value of the same and so on.
  • the location records p i or data packets 3 are sent in a first step 4 of the OBU 1 to a toll calculation server 5, for example via a mobile network, u.zw. under a different from the identifier OID, quasi "anonymous" sender ID RID.
  • the sender identifier RID is, for example, a user-selected code or a randomly generated value by the OBU 1.
  • a temporary mobile network identification or temporary Internet address of the OBU 1 could be used as the sender identifier RID.
  • the toll calculation server 5 contains a "map matching" device 6, which assigns the received location records p i tolled places, routes or areas from a toll card database 6 'and determines associated tolls from the toll card database 6'.
  • the "map matching" device 6 calculates in this manner "location-anonymised” toll data T which does not permit any conclusion on the individual location records p i from the toll charges of the location records p i received for a sender identifier RID.
  • the toll data T are eg a single charge sum for all location records p i of all data packets 3 of a sender identifier RID.
  • the "map matching" device 6 of the toll calculation server 5 is preceded by a buffer memory 7 in the form of a ring memory, in which all the local records p i or data packets 3 sent by OBUs 1 arrive in succession in order to be processed by the device 6. Due to the average workload of the device 6, therefore, a time period can be set, within which at a certain time in the buffer memory 7 received location records p i have been converted to location-anonymized toll data T and have been automatically deleted by the arrival of new location records, the latter, for example, when the buffer memory 7 as in Fig. 1 shown executed as a ring memory, which is automatically cyclically overwritten by incoming new data continuously.
  • the toll calculation server 5 may be archived for evidence purposes in a trustworthy encrypted form, the location records p i prior to the deletion, for example by encrypting them with the public key of an archive location 9 at this transmits (step 10).
  • the private key of the archive point 8, which is necessary for decrypting the location records p i may not be known to the user or the operator of the road toll system and only the operator of the archive point 9, which thus works as a notary or trustee for both sides.
  • the toll calculation server 5 then sends the calculated toll data T to the center 2 in step 8 under the sender ID RID.
  • the OBU 1 waits for the said period of time (step 11) and then releases its "identity", ie its identifier OID or price (step 12).
  • the release takes place in Fig. 1 in that the OBU 1 sends the sender identifier RID used by it under its identifier OID to the center 2.
  • the center 2 can thus allocate the toll data T received by the billing server 5 under the sender identifier RID to the identifier OID received from the OBU 1 for this sender identifier RID (step 13) in order to generate location-anonymized toll data T assigned to the OBU 1.
  • Fig. 2 shows various variants of components of the method of Fig. 1 ,
  • the assignment of the toll data T to the identifier OID is not done here in the center 2, but directly in the toll calculation server 5 by the OBU 1 releases its identifier OID in step 12 to the toll calculation server 5 and the latter sends the result of the assignment 13 to the center 2 ( Step 14).
  • Fig. 2 shown that the OBU 1 - waiting for the arrival of an explicit confirmation 15 of the toll calculation server 5 on the successful deletion of the location records p i - instead of waiting for a time period 11.
  • the OBU 1 Upon receipt of the deletion confirmation 15, the OBU 1 reveals its identifier OID in step 12.
  • Fig. 2 also shows the variant that the individual data packets 3 can be provided with changing sender IDs RID i in order to make tracking on the interface 4 more difficult.
  • the OBU 1 can then immediately identify several of its last used sender IDs RID i with their identifier OID.
  • the OBU 1 in step 12 only the last sender ID RID i a chained data packet sequence identified with its identifier OID, because the toll calculation server 5 can open the previous sender ID RID i due to the packet chainings.
  • the toll calculation server 5 could also be linked Originators RID i continuously accruing toll data T i, for example, accumulate to a total fee and thereby only the last station ID, RID cancel always i. Also in this case, it is sufficient if the OBU 1 identifies only its last sender identifier RID i with its identifier OID in step 12.
  • the stack memory 7 is eg periodically deleted or removed its oldest entries after a predetermined period of time, they should not have been processed in time, and / or the OBU 1 is always waiting here for a deletion confirmation 16.

Abstract

The method involves transmitting location records from a thin-client onboard unit (1) to a toll calculation server (5) under a source identifier (RID) e.g. random value. Location anonymous toll data (T) is calculated from the records, and subsequently the records in the server are deleted. A waiting process is carried out for a preset time span (11) or for authorization of the server by the subsequent deletion processes. An identifier (OID) e.g. vehicle device identifier, associated to the source identifier is released from the unit for associating the data to the associated identifier. Independent claims are also included for the following: (1) a toll calculation server for performing a method for creating location anonymous toll data from location records of a vehicle device in a road toll system (2) a vehicle device for performing a method for creating location anonymous toll data from location records of a vehicle device in a road toll system.

Description

Die vorliegende Erfindung betrifft ein Verfahren zum Erzeugen von ortsanonymisierten Mautdaten aus den Ortsaufzeichnungen eines ortsaufzeichnenden Fahrzeuggeräts mit einer eindeutigen Kennung in einem Straßenmautsystem. Die Erfindung betrifft ferner einen Mautberechnungsserver und ein Fahrzeuggerät zur Durchführung dieses Verfahrens.The present invention relates to a method for generating location-anonymized toll data from the location records of a location-recording vehicle device with a unique identifier in a road toll system. The invention further relates to a toll calculation server and a vehicle device for carrying out this method.

Fahrzeuggeräte für Straßenmautsysteme werden auch als "onboard units" bzw. OBUs bezeichnet. OBUs, welche selbst ihren Ort bestimmen und aufzeichnen können, z.B. mittels eines Satellitennavigationsempfängers, gibt es derzeit in zwei verschiedenen Ausführungen: Sogenannte "thick client"-OBUs berechnen auf Grundlage von gespeicherten Mautkarten aus ihren Ortsaufzeichnungen ortsanonymisierte Mautdaten und senden diese z.B. über ein Mobilfunknetz an eine Zentrale des Straßenmautsystems, was eine aufwendige Distribution der Mautkarten an die OBUs und hohe Rechenleistung in den OBUs erfordert. Im Gegensatz dazu werten sogenannte "thin client"-OBUs ihre Ortsaufzeichnungen nicht selbst aus, sondern senden diese "roh" an die Zentrale, welche den Mautkartenabgleich ("map matching") vornimmt, um daraus Mautdaten zu erzeugen. "Thin client"-OBUs sind daher wesentlich einfacher und kostengünstiger aufgebaut, jedoch aus Sicht des Datenschutzes diskussionswürdig, weil die Zentrale des Straßenmautsystems die gesamten Ortsaufzeichnungen ("Bewegungsprofil") einer OBU erfährt, einschließlich von Aufenthalten an nicht-mautpflichtigen Orten.Vehicle devices for road toll systems are also referred to as "onboard units" or OBUs. OBUs that can themselves determine and record their location, e.g. by means of a satellite navigation receiver, there are currently two different versions: so-called "thick client" OBUs calculate based on stored toll cards from their location records location-anonymized toll data and send them e.g. via a mobile network to a center of the road toll system, which requires a complex distribution of toll cards to the OBUs and high processing power in the OBUs. In contrast, so-called "thin client" OBUs do not evaluate their location records themselves, but send them "raw" to the central office, which makes the map matching to generate toll data. "Thin client" OBUs are therefore much simpler and less expensive, but worthy of discussion from a data protection point of view, because the road toll system's headquarters are aware of all the OBU's "movement profile", including stays in non-tolled locations.

In der WO 2008/000227 wurde daher bereits vorgeschlagen, die Ortsaufzeichnungen einer "thin client"-OBU unter einer anonymisierten Absenderkennung an einen speziellen Mautberechnungsserver zu senden, welcher das "map matching" durchführt und ortsanonymisierte Mautdaten an die OBU zurücksendet, die die OBU anschließend an die Zentrale absetzt. Aufgrund der beliebigen Architektur des Mautberechnungsservers ist bei diesem System die Einhaltung von Datenschutzauflagen schwierig zu kontrollieren. Überdies erzeugt diese Lösung zusätzlichen Datenverkehr im Straßenmautsystem.In the WO 2008/000227 Therefore, it has already been proposed to send the location records of a "thin client" OBU under an anonymous sender identification to a special toll calculation server, which performs the "map matching" and returns location-anonymized toll data to the OBU, the then the OBU drops to the central office. Due to the architecture of the Toll Calculation Server, compliance with data protection requirements is difficult to control in this system. Moreover, this solution generates additional traffic in the road toll system.

Die Erfindung setzt sich zum Ziel, die Nachteile des Standes der Technik zu überwinden und insbesondere ein Verfahren zum Erzeugen von Mautdaten für "thin client"-OBUs zu schaffen, welches verbesserten Datenschutz z bzw. höhere Vertraulichkeit für den Benutzer bietet. Dieses Ziel wird mit einem Verfahren der eingangs genannten Art erreicht, das die folgenden Schritte umfaßt:

  • Senden der Ortsaufzeichnungen unter zumindest einer von der Kennung verschiedenen Absenderkennung vom Fahrzeuggerät an einen Mautberechnungsserver,
  • Berechnen von ortsanonymisierten Mautdaten aus den Ortsaufzeichnungen und anschließendes Löschen der Ortsaufzeichnungen im Mautberechnungsserver,
  • Abwarten einer vorgegebenen Zeitspanne oder einer Bestätigung des Mautberechnungsservers über das erfolgte Löschen, und
  • Freigeben der zur Absenderkennung zugehörigen Kennung vom Fahrzeuggerät aus, um die ortsanonymisierten Mautdaten dieser Absenderkennung der zugehörigen Kennung zuzuordnen.
The aim of the invention is to overcome the disadvantages of the prior art and, in particular, to provide a method for generating toll data for "thin client" OBUs, which offers improved data protection z or higher confidentiality for the user. This object is achieved by a method of the type mentioned above, which comprises the following steps:
  • Sending the location records under at least one of the identifier different sender identification from the vehicle unit to a toll calculation server,
  • Calculating location-anonymised toll data from the location records and then deleting the location records in the toll calculation server,
  • Waiting for a predetermined period of time or confirmation of the toll calculation server about the deletion, and
  • Releasing the identification associated with the sender identification from the vehicle device in order to assign the location-anonymised toll data to this sender identifier of the associated identifier.

Die Erfindung beruht auf einem völlig neuartigen, überraschend einfachen Konzept zur Realisierung von Datenschutz auf hardwarenahem Niveau ("privacy by design"): In der ersten Ausführungsform der Erfindung wartet die OBU eine Zeitspanne ab, um dem Mautberechnungsserver ausreichend Zeit zu geben, die Mautdaten zu erstellen und die zugrundeliegenden Ortsaufzeichnungen zu löschen. Danach kann die OBU gefahrlos ihre Identität bzw. Kennung preisgeben, weil keine Ortsaufzeichnungen mehr im System vorliegen, die Rückschlüsse auf das Bewegungsprofil der OBU erlauben würden.The invention is based on a completely novel, surprisingly simple concept for realizing privacy by design. In the first embodiment of the invention, the OBU waits for a period of time to allow sufficient time for the toll calculation server to collect the toll data create and delete the underlying location records. Thereafter, the OBU can safely disclose their identity or identifier because there are no more location records in the system that would allow conclusions about the motion profile of the OBU.

Ein für diese erste Ausführungsform der Erfindung besonders geeigneter Mautberechnungsserver zeichnet sich dadurch aus, daß er einen Pufferspeicher in Form eines Ringspeichers zur Aufnahme der Ortsaufzeichnungen hat. Ein Ringspeicher gewährleistet alleine durch seinen Hardwareaufbau ein zyklisches Überschreiben der ältesten Ortsaufzeichnungen durch die jeweils neuesten Ortsaufzeichnungen und damit ein Löschen der Ortsaufzeichnungen innerhalb der Umschlagszeit ("roll-over time") des Ringspeichers.An especially suitable for this first embodiment of the invention toll calculation server is characterized in that it has a buffer memory in the form of a ring memory for receiving the location records. A ring memory ensures solely by its hardware construction a cyclic overwriting of the oldest location records by the most recent location records and thus deleting the location records within the turnaround time ("roll-over time") of the ring memory.

Alternativ kann der Mautberechnungsserver, um die Löschung der Ortsaufzeichnungen zu garantieren, Mittel zum periodischen, bevorzugt täglichen, Löschen zumindest der ältesten Einträge des Pufferspeichers aufweisen.Alternatively, in order to guarantee the deletion of the location records, the toll calculation server may have means for periodically, preferably daily, deleting at least the oldest entries of the buffer memory.

Ein für die erste Ausführungsform der Erfindung besonders geeignetes Fahrzeuggerät zeichnet sich durch Freigabemittel aus, welche nach Verstreichen einer vorgegebenen Zeitspanne die genannte Absenderkennung unter der Kennung des Fahrzeuggeräts versenden und damit dessen Identität preisgeben.A particularly suitable for the first embodiment of the invention vehicle device is characterized by release means, which send after a predetermined period of time said sender identification under the identifier of the vehicle unit and thus reveal its identity.

In der zweiten Ausführungsform der Erfindung wartet die OBU eine explizite Löschbestätigung des Mautberechnungsservers ab und gibt dann ihre Kennung frei. Auch dadurch wird hardwarebedingter Datenschutz ("privacy by design") erreicht. Ein für diese Ausführungsform der Erfindung besonders geeigneter Mautberechnungsserver zeichnet sich bevorzugt dadurch aus, daß er Ortsaufzeichnungen nach ihrer Verarbeitung zu Mautdaten löscht und darüber eine Bestätigung an ein Fahrzeuggerät versendet.In the second embodiment of the invention, the OBU waits for an explicit deletion confirmation of the toll calculation server and then releases its identifier. This also achieves hardware-related data protection ("privacy by design"). A toll calculation server which is particularly suitable for this embodiment of the invention is preferably characterized in that it deletes location records after their processing into toll data and sends an acknowledgment to a vehicle unit via them.

Ein für die zweite Ausführungsform besonders geeignetes Fahrzeuggerät weist Freigabemittel auf, welche nach Empfang einer Löschbestätigung hinsichtlich abgesandter Ortsaufzeichnungen deren Absenderkennung unter der Kennung des Fahrzeuggeräts versenden.A particularly suitable for the second embodiment vehicle device has release means, which send after receiving a deletion confirmation with respect to sent location records whose sender ID under the identifier of the vehicle unit.

In ihren beiden Varianten gewährleistet die Erfindung somit auf einfache und für Benutzer und Systembetreiber transparente Art und Weise hardwarebedingte Vertraulichkeit für die sensiblen Ortsaufzeichnungsdaten. Ortsaufzeichnungen werden zentral nur so lange aufbewahrt, wie es wie für ihre Verarbeitung notwendig ist; anschließend werden sie automatisch gelöscht. Jegliche Bedenken hinsichtlich einer zentralen Nachverfolgbarkeit bzw. Erstellung eines Bewegungsprofils der Fahrzeuggeräte können dadurch ausgeräumt werden. Darüber hinaus verursacht die Erfindung keinen erhöhten Datenverkehr im Straßenmautsystem.In its two variants, the invention thus ensures, in a simple and transparent manner for users and system operators, hardware-related confidentiality for the sensitive location recording data. Location records are stored centrally only for as long as necessary for their processing; afterwards they will be deleted automatically. Any concerns regarding a central traceability or creation of a motion profile of the vehicle equipment can be eliminated. In addition, the invention does not cause increased traffic in the road toll system.

Das Zuordnen der ortsanonymisierten Mautdaten zu der vom Fahrzeuggerät freigegebenen Kennung kann sowohl im Mautberechnungsserver als auch in der Zentrale erfolgen. Demgemäß bestehen weitere Varianten des erfindungsgemäßen Verfahrens darin, daß das genannte Freigeben an den Mautberechnungsserver erfolgt, welcher die ortsanonymisierten Mautdaten der Kennung zuordnet und an eine Zentrale des Mautsystems sendet; oder daß das genannte Freigeben an eine Zentrale des Mautsystems erfolgt, welche die ortsanonymisierten Mautdaten vom Mautberechnungsserver erhält und der Kennung zuordnet.The assignment of the location-anonymized toll data to the identifier released by the vehicle device can take place both in the toll calculation server and in the central office. Accordingly, further variants of the method according to the invention are that the said releasing takes place to the toll calculation server which assigns the location-anonymised toll data to the identifier and sends it to a center of the toll system; or that the said releasing is done to a center of the toll system, which receives the location-anonymized toll data from the toll calculation server and assigns the identifier.

Falls gewünscht, können in jeder Ausführungsform die Ortsaufzeichnungen im Mautberechnungsserver vor dem Löschen mit dem öffentlichen Schlüssel einer externen Archivstelle verschlüsselt und an diese gesandt werden. Eine derartige Archivstelle sollte in der Art eines Treuhänders bzw. Notars für alle Beteiligten hohes Vertrauen genießen, d.h. sowohl für die Benutzer als auch den Systembetreiber, und kann damit in strittigen Fällen von jeder Seite konsultiert werden.If desired, in each embodiment, the location records in the toll calculation server may be encrypted and sent to the public key of an external archive location prior to being deleted. Such an archival holding, in the nature of a trustee or notary, should enjoy a high degree of trust for all concerned, i. for both the users and the system operator, and can therefore be consulted by any party in disputed cases.

Bevorzugt erfolgt das Senden und Freigeben vom Fahrzeuggerät aus über ein Funknetz, besonders bevorzugt ein Mobilfunknetz. Dadurch können z.B. herkömmliche "thin client"-OBUs eingesetzt werden, welche mit einem DSRC- oder Mobilfunk-Sendeempfänger ausgerüstet sind.The transmission and release preferably takes place from the vehicle device via a radio network, particularly preferably a mobile radio network. As a result, eg conventional "thin client" OBUs can be used which are equipped with a DSRC or mobile transceiver.

Gemäß einer weiteren bevorzugten Ausführungsform der Erfindung werden die Ortsaufzeichnungen eines Fahrzeuggeräts in Datenpaketen versandt, die jeweils mit gleichen Absenderkennungen versehen sind, was die Auswertung vereinfacht, da das Fahrzeuggerät hier - nach Abwarten der Zeitspanne bzw. Erhalt der Löschbestätigung - seine Kennung lediglich hinsichtlich einer einzigen Absenderkennung preisgeben muß.According to a further preferred embodiment of the invention, the location records of a vehicle unit are sent in data packets, which are each provided with the same sender IDs, which simplifies the evaluation, since the vehicle unit here - after waiting for the period or receipt of deletion confirmation - its identifier only with respect to a single Must disclose sender identification.

Alternativ können die Ortsaufzeichnungen eines Fahrzeuggeräts in Datenpaketen versandt werden, die mit wechselnden Absenderkennungen versehen sind. Dadurch kann auf der Übertragungsschnittstelle die Vertraulichkeit erhöht werden.Alternatively, the location records of a vehicle device can be sent in data packets that are provided with changing sender IDs. As a result, the confidentiality can be increased on the transmission interface.

Bevorzugt sind mit wechselnden Absenderkennungen versehene Datenpakete zusätzlich mit verketteten Paketkennungen versehen, welche ihre Zuordnung zueinander gestatten, wodurch das Fahrzeuggerät seine Kennung nur zur Absenderkennung des letzten Datenpakets freizugeben braucht.Preferably, data packets provided with alternating sender identifiers are additionally provided with linked packet identifiers which allow their association with each other, whereby the vehicle device needs to release its identifier only for the sender identification of the last data packet.

Die Kennung, durch welche sich ein Fahrzeuggerät identifiziert, kann sowohl eine Kennung des Fahrzeuggeräts selbst als auch eine dem Benutzer des Fahrzeuggeräts zugeordnete Kennung sein, z.B. eine Kennung eines Benutzerkontos zur Abrechnung von Mautgebühren im Straßenmautsystem.The identifier by which a vehicle device identifies can be both an identifier of the vehicle device itself and an identifier associated with the user of the vehicle device, e.g. an identifier of a user account for billing tolls in the road toll system.

Die zum Senden der Ortsaufzeichnungen an den Mautberechnungsserver verwendete Absenderkennung kann sowohl ein Zufallswert als auch ein frei vom Benutzer wählbarer Code sein, was die Transparenz für den Benutzer noch weiter erhöht.The sender identifier used to send the location records to the toll calculation server may be both random and user-selectable code, further increasing transparency for the user.

Das Verfahren der Erfindung eignet sich für alle Arten von selbstlokalisierenden Fahrzeuggeräten, auf welche Weise auch immer diese ihren Ort bestimmen, z.B. durch Erkennung von Landmarken oder Identifikation von Baken, an denen sich das Fahrzeuggerät orientiert. Besonders vorteilhaft ist es, wenn das Fahrzeuggerät in an sich bekannter Weise seine Orte mittels Satellitennavigation bestimmt, wofür z.B. GPS-gestützte "thin client"-OBUs herangezogen werden können.The method of the invention is suitable for all types of self-locating vehicle devices, in whatever way they determine their location, eg by recognizing landmarks or identifying beacons on which the vehicle device is oriented. It is particularly advantageous if the vehicle device uses its locations in a manner known per se Satellite navigation determines, for example, GPS-based "thin client" OBUs can be used.

Die Erfindung wird nachstehend anhand von in den beigeschlossenen Zeichnungen dargestellten Ausführungsbeispielen näher erläutert, deren Fig. 1 und 2 zwei verschiedene Ausführungsformen eines nach dem Verfahren der Erfindung arbeitenden und erfindungsgemäße Komponenten enthaltenden Straßenmautsystems in Blockschaltbildform zeigen.The invention will be explained in more detail with reference to embodiments illustrated in the accompanying drawings, whose Fig. 1 and 2 show two different embodiments of an operating according to the method of the invention and components according to the invention road toll system in block diagram form.

Gemäß Fig. 1 bewegt sich eine OBU 1 an Bord eines Fahrzeugs im Rahmen eines Straßenmautsystem mit einer Zentrale 2. Die Zentrale 2 rechnet mautpflichtige Ortsnutzungen der OBU 1, z.B. das Befahren einer Mautstraße, das Eintreten in einen eintrittspflichtigen Bereich, das Verweilen auf einem gebührenpflichtigen Parkplatz usw. über entsprechende Benutzerkonten ab, u.zw. auf Grundlage von Mautdaten T, die durch die Ortsnutzungen der OBU 1 ausgelöst werden, wie in der Technik bekannt.According to Fig. 1 an OBU 1 moves aboard a vehicle in the context of a road toll system with a control center 2. The center 2 calculates toll road use of the OBU 1, eg driving on a toll road, entering an area subject to charges, staying on a paid parking, etc. corresponding user accounts from, u.zw. based on toll data T triggered by the location uses of the OBU 1 as known in the art.

Die OBU 1 ist von selbstlokalisierendem "thin client"-Typ und ermittelt fortlaufend, z.B. periodisch, ihren Ort, beispielsweise mit Hilfe eines Satellitennavigationsempfängers, und zeichnet die so ermittelten Orte ("position fixes") p1, p2, p3... (allgemein pi) in einem internen Ortsaufzeichnungsspeicher auf.The OBU 1 is of a self-locating "thin client" type and determines its location continuously, eg periodically, for example with the aid of a satellite navigation receiver, and records the so-determined positions (position fixes) p 1 , p 2 , p 3. (generally p i ) in an internal location record memory.

Jede OBU 1 ist mit einer eindeutigen Kennung OID im Straßenmaut system versehen, beispielsweise einer eindeutigen Kennung der OBU 1 selbst und/oder ihres Benutzers bzw. eines Kontos des letzteren. In Kenntnis der Kennung OID einer OBU 1 und ihrer Ortsaufzeichnungen pi könnte auf das Bewegungsprofil einer OBU 1 geschlossen werden, was wie folgt verhindert wird.Each OBU 1 is provided with a unique identifier OID in the road toll system, such as a unique identifier of the OBU 1 itself and / or its user or an account of the latter. Knowing the identifier OID of an OBU 1 and its location records p i, it would be possible to deduce the movement profile of an OBU 1, which is prevented as follows.

Die Ortsaufzeichnungen pi der OBU 1 werden - auch wenn dies nicht zwingend ist - zur leichteren Handhabbarkeit auf einzelne Datenpakete 3 aufgeteilt. Die Datenpakete 3 können mit einer Paketkennung Pi (siehe Fig. 2), z.B. einer fortlaufenden Numerierung, und einem Header (nicht gezeigt) versehen werden, welcher beispielsweise Metadaten wie die Anzahl der im Datenpaket 3 enthaltenden Ortsaufzeichnungen pi, einen Hashwert derselben usw. enthält.The location records p i of the OBU 1 are - even if this is not mandatory - for ease of handling on individual data packets 3 divided. The data packets 3 can with a packet identifier P i (see Fig. 2 ), eg a continuous one Numbering, and a header (not shown), for example, containing metadata such as the number of contained in the data packet 3 location records p i , a hash value of the same and so on.

Die Ortsaufzeichnungen pi bzw. Datenpakete 3 werden in einem ersten Schritt 4 von der OBU 1 an einen Mautberechnungsserver 5 gesandt, beispielsweise über ein Mobilfunknetz, u.zw. unter einer von der Kennung OID verschiedenen, gleichsam "anonymen" Absenderkennung RID. Die Absenderkennung RID ist beispielsweise ein vom Benutzer frei gewählter Code oder ein von der OBU 1 zufällig generierter Wert. Alternativ könnte - wenn auch mit entsprechend verringerter Anonymität - eine temporäre Mobilfunknetz-Identifikation oder temporäre Internetadresse der OBU 1 als Absenderkennung RID verwendet werden.The location records p i or data packets 3 are sent in a first step 4 of the OBU 1 to a toll calculation server 5, for example via a mobile network, u.zw. under a different from the identifier OID, quasi "anonymous" sender ID RID. The sender identifier RID is, for example, a user-selected code or a randomly generated value by the OBU 1. Alternatively - albeit with a correspondingly reduced anonymity - a temporary mobile network identification or temporary Internet address of the OBU 1 could be used as the sender identifier RID.

Der Mautberechnungsserver 5 enthält eine "map matching"-Einrichtung 6, welche die empfangenen Ortsaufzeichnungen pi mautpflichtigen Orten, Strecken oder Gebieten aus einer Mautkartendatenbank 6' zuordnet und zugehörige Mautgebühren aus der Mautkartendatenbank 6' ermittelt. Aus den Mautgebühren der zu einer Absenderkennung RID empfangenen Ortsaufzeichnungen pi berechnet die "map matching"-Einrichtung 6 auf diese Weise "ortsanonymisierte" Mautdaten T, welche keinen Rückschluß mehr auf die einzelnen Ortsaufzeichnungen pi erlauben. Die Mautdaten T sind z.B. eine einzige Gebührensumme für alle Ortsaufzeichnungen pi aller Datenpakete 3 einer Absenderkennung RID.The toll calculation server 5 contains a "map matching" device 6, which assigns the received location records p i tolled places, routes or areas from a toll card database 6 'and determines associated tolls from the toll card database 6'. The "map matching" device 6 calculates in this manner "location-anonymised" toll data T which does not permit any conclusion on the individual location records p i from the toll charges of the location records p i received for a sender identifier RID. The toll data T are eg a single charge sum for all location records p i of all data packets 3 of a sender identifier RID.

Der "map matching"-Einrichtung 6 des Mautberechnungsservers 5 ist ein Pufferspeicher 7 in Form eines Ringspeichers vorgeschaltet, in dem alle von OBUs 1 abgesandten Ortsaufzeichnungen pi bzw. Datenpakete 3 aufeinanderfolgend einlangen, um von der Einrichtung 6 abgearbeitet zu werden. Aufgrund der durchschnittlichen Arbeitsbelastung der Einrichtung 6 kann daher eine Zeitspanne festgelegt werden, innerhalb derer zu einem bestimmten Zeitpunkt im Pufferspeicher 7 eingelangte Ortsaufzeichnungen pi zu ortsanonymisierten Mautdaten T umgewandelt und durch das Einlangen von neuen Ortsaufzeichnungen automatisch gelöscht worden sind, letzteres z.B. wenn der Pufferspeicher 7 wie in Fig. 1 gezeigt als Ringspeicher ausgeführt ist, der durch einlangende neue Daten automatisch fortlaufend zyklisch überschrieben wird. Sollte diese Zeitspanne bei einer außergewöhnlich niedrigen Auslastung des Pufferspeichers 7 ausnahmsweise überschritten werden, kann durch eine zusätzliche periodische, z.B. tägliche, Löschung von Einträgen im Pufferspeicher 7, die älter als die genannte Zeitspanne sind, gewährleistet werden, daß nach der genannten vorgegebenen Zeitspanne jedenfalls keine Ortsaufzeichnungen pi mehr im Mautberechnungsserver 5 vorhanden sind.The "map matching" device 6 of the toll calculation server 5 is preceded by a buffer memory 7 in the form of a ring memory, in which all the local records p i or data packets 3 sent by OBUs 1 arrive in succession in order to be processed by the device 6. Due to the average workload of the device 6, therefore, a time period can be set, within which at a certain time in the buffer memory 7 received location records p i have been converted to location-anonymized toll data T and have been automatically deleted by the arrival of new location records, the latter, for example, when the buffer memory 7 as in Fig. 1 shown executed as a ring memory, which is automatically cyclically overwritten by incoming new data continuously. Should this period be exceptionally exceeded at an exceptionally low utilization of the buffer memory 7, can be ensured by an additional periodic, eg daily, deletion of entries in the buffer memory 7, which are older than the said period, that after that predetermined period of time anyway Location records p i more in the toll calculation server 5 are available.

Falls einmal bei einer außergewöhnlich hohen Belastung des Ringspeichers 7 bzw. der "map-matching"-Einrichtung 6 Ortsaufzeichnungen pi unverarbeitet gelöscht werden sollten, kann die OBU 1 solche Ortsaufzeichnungen pi entweder automatisch oder auf Anfrage des Mautberechnungsservers 5 oder auf Anfrage der Zentrale 2 erneut übermitteln.If at an exceptionally high load on the ring memory 7 or the "map-matching" device 6 local records p i should be deleted unprocessed, the OBU 1 such site records p i either automatically or on request of the toll calculation server 5 or on request of the center 2 retransmit.

Falls gewünscht, kann der Mautberechnungsserver 5 die Ortsaufzeichnungen pi vor dem Löschen in einer vertrauenswürdig verschlüsselten Form zu Beweiszwecken archivieren, z.B. indem er sie mit dem öffentlichen Schlüssel einer Archivstelle 9 verschlüsselt und an diese sendet (Schritt 10). Der private Schlüssel der Archivstelle 8, welcher zum Entschlüsseln der Ortsaufzeichnungen pi notwendig ist, darf weder dem Benutzer noch dem Betreiber des Straßenmautsystems und nur dem Betreiber der Archivstelle 9 bekannt sein, welcher somit gleichsam als Notar bzw. Treuhänder für beide Seiten arbeitet.If desired, the toll calculation server 5 may be archived for evidence purposes in a trustworthy encrypted form, the location records p i prior to the deletion, for example by encrypting them with the public key of an archive location 9 at this transmits (step 10). The private key of the archive point 8, which is necessary for decrypting the location records p i , may not be known to the user or the operator of the road toll system and only the operator of the archive point 9, which thus works as a notary or trustee for both sides.

Der Mautberechnungsserver 5 sendet die berechneten Mautdaten T anschließend im Schritt 8 unter der Absenderkennung RID an die Zentrale 2.The toll calculation server 5 then sends the calculated toll data T to the center 2 in step 8 under the sender ID RID.

Auf der anderen Seite wartet die OBU 1 die genannte Zeitspanne ab (Schritt 11) und gibt anschließend ihre "Identität", d.h. ihre Kennung OID frei bzw. preis (Schritt 12). Die Freigabe erfolgt in Fig. 1, indem die OBU 1 die von ihr verwendete Absenderkennung RID unter ihrer Kennung OID an die Zentrale 2 sendet. Die Zentrale 2 kann somit die vom Abrechnungsserver 5 unter der Absenderkennung RID empfangenen Mautdaten T der von der OBU 1 zu dieser Absenderkennung RID erhaltenen Kennung OID zuordnen (Schritt 13), um ortsanonymisierte, der OBU 1 zugeordnete Mautdaten T zu erzeugen.On the other hand, the OBU 1 waits for the said period of time (step 11) and then releases its "identity", ie its identifier OID or price (step 12). The release takes place in Fig. 1 in that the OBU 1 sends the sender identifier RID used by it under its identifier OID to the center 2. The center 2 can thus allocate the toll data T received by the billing server 5 under the sender identifier RID to the identifier OID received from the OBU 1 for this sender identifier RID (step 13) in order to generate location-anonymized toll data T assigned to the OBU 1.

Fig. 2 zeigt verschiedene Varianten von Komponenten des Verfahrens von Fig. 1. Die Zuordnung der Mautdaten T zur Kennung OID erfolgt hier nicht in der Zentrale 2, sondern direkt im Mautberechnungsserver 5, indem die OBU 1 ihre Kennung OID im Schritt 12 an den Mautberechnungsserver 5 freigibt und letzterer das Ergebnis der Zuordnung 13 an die Zentrale 2 sendet (Schritt 14). Fig. 2 shows various variants of components of the method of Fig. 1 , The assignment of the toll data T to the identifier OID is not done here in the center 2, but directly in the toll calculation server 5 by the OBU 1 releases its identifier OID in step 12 to the toll calculation server 5 and the latter sends the result of the assignment 13 to the center 2 ( Step 14).

Ferner ist in Fig. 2 gezeigt, daß die OBU 1 - anstelle des Abwartens einer Zeitspanne 11 - hier auf das Einlangen einer expliziten Bestätigung 15 des Mautberechnungsserver 5 über das erfolgte Löschen der Ortsaufzeichnungen pi wartet. Nach Einlangen der Löschbestätigung 15 gibt die OBU 1 ihre Kennung OID im Schritt 12 preis.Furthermore, in Fig. 2 shown that the OBU 1 - waiting for the arrival of an explicit confirmation 15 of the toll calculation server 5 on the successful deletion of the location records p i - instead of waiting for a time period 11. Upon receipt of the deletion confirmation 15, the OBU 1 reveals its identifier OID in step 12.

Fig. 2 zeigt auch die Variante, daß die einzelnen Datenpakete 3 mit wechselnden Absenderkennungen RIDi versehen werden können, um eine Mitverfolgung auf der Schnittstelle 4 zu erschweren. Im Schritt 12 kann die OBU 1 dann gleich mehrere von ihr zuletzt verwendete Absenderkennungen RIDi mit ihrer Kennung OID identifizieren. Fig. 2 also shows the variant that the individual data packets 3 can be provided with changing sender IDs RID i in order to make tracking on the interface 4 more difficult. In step 12, the OBU 1 can then immediately identify several of its last used sender IDs RID i with their identifier OID.

Wenn die einzelnen Datenpakete 3 untereinander verkettet sind, z.B. durch entsprechende gegenseitige Verweise in ihren Paketkennungen pi, dann genügt es, wenn die OBU 1 im Schritt 12 nur die letzte Absenderkennung RIDi einer verketteten Datenpaketfolge mit ihrer Kennung OID identifiziert, weil der Mautberechnungsserver 5 aufgrund der Paketverkettungen die vorhergehenden Absenderkennung RIDi erschließen kann.If the individual data packets 3 are concatenated with each other, for example by corresponding mutual references in their packet identifiers p i , then it is sufficient if the OBU 1 in step 12 only the last sender ID RID i a chained data packet sequence identified with its identifier OID, because the toll calculation server 5 can open the previous sender ID RID i due to the packet chainings.

Alternativ könnte der Mautberechnungsserver 5 auch die zu verketteten Absenderkennungen RIDi fortlaufend auflaufenden Mautdaten Ti z.B. zu einer Gebührensumme akkumulieren und dabei stets nur die letzte Absenderkennung RIDi aufheben. Auch in diesem Fall genügt es, wenn die OBU 1 im Schritt 12 nur ihre letzte Absenderkennung RIDi mit ihrer Kennung OID identifiziert.Alternatively, the toll calculation server 5 could also be linked Originators RID i continuously accruing toll data T i, for example, accumulate to a total fee and thereby only the last station ID, RID cancel always i. Also in this case, it is sufficient if the OBU 1 identifies only its last sender identifier RID i with its identifier OID in step 12.

Schließlich zeigt Fig. 2 auch die Verwendung eines Stapelspeichers als Pufferspeicher 7. Der Stapelspeicher 7 wird z.B. periodisch gelöscht bzw. seine ältesten Einträge nach einer vorgegebenen Zeitspanne entfernt, sollten sie nicht rechtzeitig verarbeitet worden sein, und/oder die OBU 1 wartet hier stets auf eine Löschbestätigung 16.Finally shows Fig. 2 The stack memory 7 is eg periodically deleted or removed its oldest entries after a predetermined period of time, they should not have been processed in time, and / or the OBU 1 is always waiting here for a deletion confirmation 16.

Die Erfindung ist nicht auf die dargestellten Ausführungsformen beschränkt, sondern umfaßt alle Varianten und Modifikationen, die in den Rahmen der angeschlossenen Ansprüche fallen.The invention is not limited to the illustrated embodiments, but includes all variants and modifications that fall within the scope of the appended claims.

Claims (15)

Verfahren zum Erzeugen von ortsanonymisierten Mautdaten (T) aus den Ortsaufzeichnungen (pi) eines ortsaufzeichnenden Fahrzeuggeräts (1) mit einer eindeutigen Kennung (OID) in einem Straßenmautsystem, mit den Schritten: Senden (4) der Ortsaufzeichnungen (pi) unter zumindest einer von der Kennung (OID) verschiedenen Absenderkennung (RID) vom Fahrzeuggerät (1) an einen Mautberechnungsserver (5), Berechnen (6) von ortsanonymisierten Mautdaten (T) aus den Ortsaufzeichnungen (pi) und anschließendes Löschen der Ortsaufzeichnungen (pi) im Mautberechnungsserver (5), Abwarten einer vorgegebenen Zeitspanne (11) oder einer Bestätigung (15) des Mautberechnungsservers (5) über das erfolgte Löschen, und Freigeben (12) der zur Absenderkennung (RID) zugehörigen Kennung (OID) vom Fahrzeuggerät (1) aus, um die ortsanonymisierten Mautdaten (T) dieser Absenderkennung (RID) der zugehörigen Kennung (OID) zuzuordnen. Method for generating location-anonymised toll data (T) from the location records (p i ) of a location-recording vehicle device (1) with a unique identifier (OID) in a road toll system, comprising the steps of: Sending (4) the location records (p i ) from at least one of the identifier (OID) different sender identification (RID) from the vehicle unit (1) to a toll calculation server (5), Calculating (6) location-anonymised toll data (T) from the location records (p i ) and then deleting the location records (p i ) in the toll calculation server (5), Waiting for a predetermined period (11) or a confirmation (15) of the toll calculation server (5) on the deletion, and Releasing (12) the identifier (OID) associated with the sender identification (RID) from the vehicle unit (1) in order to allocate the location-anonymised toll data (T) to the sender identifier (RID) of the associated identifier (OID). Verfahren nach Anspruch 1, dadurch gekennzeichnet, daß das genannte Freigeben (12) an den Mautberechnungsserver (5) erfolgt, welcher die ortsanonymisierten Mautdaten (T) der Kennung (OID) zuordnet (13) und an eine Zentrale (2) des Mautsystems sendet.Method according to Claim 1, characterized in that the said enabling (12) takes place at the toll calculation server (5), which assigns the location-anonymised toll data (T) to the identifier (OID) (13) and sends it to a toll center (2). Verfahren nach Anspruch 1, dadurch gekennzeichnet, daß das genannte Freigeben (12) an eine Zentrale (2) des Mautsystems erfolgt, welche die ortsanonymisierten Mautdaten (T) vom Mautberechnungsserver (5) erhält und der Kennung (OID) zuordnet.Method according to Claim 1, characterized in that the said enabling (12) takes place at a toll center (2) which receives the location-anonymised toll data (T) from the toll calculation server (5) and assigns it to the identifier (OID). Verfahren nach einem der Ansprüche 1 bis 3, dadurch gekennzeichnet, daß die Ortsaufzeichnungen (pi) im Mautberechnungsserver (5) vor dem Löschen mit dem öffentlichen Schlüssel einer externen Archivstelle (9) verschlüsselt und an diese gesandt werden.Method according to one of claims 1 to 3, characterized in that the location records (p i ) in the toll calculation server (5) prior to deletion with the public key an external archive site (9) are encrypted and sent to them. Verfahren nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, daß das Senden (4) und Freigeben (12) vom Fahrzeuggerät (1) aus über ein Funknetz, bevorzugt ein Mobilfunknetz, erfolgt.Method according to one of Claims 1 to 4, characterized in that the transmission (4) and release (12) from the vehicle device (1) takes place via a radio network, preferably a mobile radio network. Verfahren nach einem der Ansprüche 1 bis 5, dadurch gekennzeichnet, daß die Ortsaufzeichnungen (pi) eines Fahrzeuggeräts (1) in Datenpaketen (3) versandt werden, die jeweils mit gleichen Absenderkennungen (RID) versehen sind.Method according to one of Claims 1 to 5, characterized in that the location records (p i ) of a vehicle device (1) are sent in data packets (3) which are each provided with identical sender identifications (RID). Verfahren nach einem der Ansprüche 1 bis 5, dadurch gekennzeichnet, daß die Ortsaufzeichnungen (pi) eines Fahrzeuggeräts in Datenpaketen (3) versandt werden, die mit wechselnden Absenderkennungen (RIDi) versehen sind.Method according to one of Claims 1 to 5, characterized in that the location records (p i ) of a vehicle device are sent in data packets (3) which are provided with changing sender identifications (RID i ). Verfahren nach Anspruch 7, dadurch gekennzeichnet, daß die Datenpakete (3) mit verketteten Paketkennungen (pi) versehen sind, welche ihre Zuordnung zueinander gestatten, wobei das Freigeben (12) der Kennung (OID) nur zur Absenderkennung (RIDi) des letzten Datenpakets (3) erfolgt.Method according to Claim 7, characterized in that the data packets (3) are provided with concatenated packet identifiers (p i ) which allow their association with one another, wherein the release (12) of the identifier (OID) only relates to the sender identifier (RID i ) of the last one Data packets (3) takes place. Verfahren nach einem der Ansprüche 1 bis 8, dadurch gekennzeichnet, daß die genannte Kennung (OID) eine Fahrzeuggerät- oder Benutzerkontokennung ist.Method according to one of claims 1 to 8, characterized in that said identifier (OID) is a vehicle device or user account identifier. Verfahren nach einem der Ansprüche 1 bis 9, dadurch gekennzeichnet, daß die Absenderkennung (RID) ein Zufallswert oder ein benutzerwählbarer Code ist.Method according to one of Claims 1 to 9, characterized in that the sender identification (RID) is a random value or a user-selectable code. Mautberechnungsserver (5) zur Durchführung des Verfahrens nach einem der Ansprüche 1 bis 10, ausgebildet zum Empfangen von Ortsaufzeichnungen (pi) und Berechnen von ortsanonymisierten Mautdaten (T) daraus, gekennzeichnet durch einen Pufferspeicher (7) in Form eines Ringspeichers zur Aufnahme der Ortsaufzeichnungen (pi).Toll calculation server (5) for carrying out the method according to one of claims 1 to 10, configured for receiving location records (p i ) and calculating location-anonymized toll data (T) therefrom, characterized by a buffer memory (7) in the form of a ring memory for recording the location records (p i ). Mautberechnungsserver (5) zur Durchführung des Verfahrens nach einem der Ansprüche 1 bis 10, ausgebildet zum Empfangen von Ortsaufzeichnungen (pi) und Berechnen von ortsanonymisierten Mautdaten (T) daraus, gekennzeichnet durch einen Pufferspeicher (7) zur Aufnahme der Ortsaufzeichnungen (pi) und Mittel zum periodischen, bevorzugt täglichen, Löschen zumindest der ältesten Einträge des Pufferspeichers (7).Toll calculation server (5) for carrying out the method according to one of claims 1 to 10, designed for Receiving location records (p i ) and calculating location-anonymized toll data (T) therefrom, characterized by a buffer memory (7) for recording the location records (p i ) and means for periodically, preferably daily, clearing at least the oldest entries of the buffer memory (7) , Mautberechnungsserver (5) zur Durchführung des Verfahrens nach einem der Ansprüche 1 bis 10, ausgebildet zum Empfangen von Ortsaufzeichnungen (pi) und Berechnen von ortsanonymisierten Mautdaten (T) daraus, dadurch gekennzeichnet, daß er Ortsaufzeichnungen (pi) nach ihrer Verarbeitung zu Mautdaten (T) löscht und darüber eine Bestätigung (15) an ein Fahrzeuggerät (1) versendet.A toll calculation server (5) for carrying out the method according to one of claims 1 to 10, configured to receive location records (p i ) and to calculate location-anonymized toll data (T) therefrom, characterized in that it stores location records (p i ) after processing them into toll data (T) clears and sends over it a confirmation (15) to a vehicle unit (1). Ortsaufzeichnendes Fahrzeuggerät (1) mit einer Kennung (OID) zur Durchführung des Verfahrens nach einem der Ansprüche 1 bis 10, ausgebildet zum Senden (4) seiner Ortsaufzeichnungen (pi) unter zumindest einer von der Kennung (OID) verschiedenen Absenderkennung (RID), gekennzeichnet durch Freigabemittel, welche nach Verstreichen einer vorgegebenen Zeitspanne (11) die genannte Absenderkennung (RID) unter seiner Kennung (OID) versenden.A location-recording vehicle device (1) with an identifier (OID) for carrying out the method according to one of claims 1 to 10, designed to transmit (4) its location records (p i ) under at least one sender identifier (RID) different from the identifier (OID), characterized by release means which, after the lapse of a predetermined period of time (11), send said sender identifier (RID) under its identifier (OID). Ortsaufzeichnendes Fahrzeuggerät (1) mit einer Kennung (OID) zur Durchführung des Verfahrens nach einem der Ansprüche 1 bis 10, ausgebildet zum Senden (4) seiner Ortsaufzeichnungen (pi) unter zumindest einer von der Kennung (OID) verschiedenen Absenderkennung (RID), gekennzeichnet durch Freigabemittel, welche nach Empfang einer Löschbestätigung (15) hinsichtlich abgesandter Ortsaufzeichnungen (pi) deren Absenderkennung (RID) unter seiner Kennung (OID) versenden.A location-recording vehicle device (1) with an identifier (OID) for carrying out the method according to one of claims 1 to 10, designed to transmit (4) its location records (p i ) under at least one sender identifier (RID) different from the identifier (OID), characterized by release means, which after receiving a deletion confirmation (15) with respect to sent location records (p i ) send their sender identification (RID) under its identifier (OID).
EP09450207A 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations Active EP2320386B1 (en)

Priority Applications (13)

Application Number Priority Date Filing Date Title
AT11005131T ATE557373T1 (en) 2009-10-30 2009-10-30 METHOD AND DEVICE FOR GENERATING LOCATION-ANEONYMIZED TOLL DATA
AT09450207T ATE548713T1 (en) 2009-10-30 2009-10-30 METHOD AND DEVICE FOR GENERATING LOCATION-ANEONYMIZED TOLL DATA
DK09450207.7T DK2320386T3 (en) 2009-10-30 2009-10-30 Method and apparatus for producing site anonymized tax data
PL11005131T PL2381425T3 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
PT11005131T PT2381425E (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
PL09450207T PL2320386T3 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
EP11005131A EP2381425B1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
ES09450207T ES2383852T3 (en) 2009-10-30 2009-10-30 Procedure and devices for generating anonymous toll data regarding location
PT09450207T PT2320386E (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
EP09450207A EP2320386B1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
DK11005131.5T DK2381425T5 (en) 2009-10-30 2009-10-30 Method and apparatus for producing site anonymized tax data
ES11005131T ES2387755T3 (en) 2009-10-30 2009-10-30 Procedure and device for generating anonymous toll data regarding location
SI200930261T SI2320386T1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP09450207A EP2320386B1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations

Related Child Applications (1)

Application Number Title Priority Date Filing Date
EP11005131.5 Division-Into 2011-06-24

Publications (2)

Publication Number Publication Date
EP2320386A1 true EP2320386A1 (en) 2011-05-11
EP2320386B1 EP2320386B1 (en) 2012-03-07

Family

ID=41600358

Family Applications (2)

Application Number Title Priority Date Filing Date
EP09450207A Active EP2320386B1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations
EP11005131A Active EP2381425B1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations

Family Applications After (1)

Application Number Title Priority Date Filing Date
EP11005131A Active EP2381425B1 (en) 2009-10-30 2009-10-30 Device and method for creating toll data from anonymous locations

Country Status (7)

Country Link
EP (2) EP2320386B1 (en)
AT (2) ATE557373T1 (en)
DK (2) DK2381425T5 (en)
ES (2) ES2383852T3 (en)
PL (2) PL2320386T3 (en)
PT (2) PT2381425E (en)
SI (1) SI2320386T1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110282717A1 (en) * 2010-05-12 2011-11-17 Kapsch Trafficcom Ag Method for collecting tolls for location usages
EP3035296A1 (en) 2014-12-18 2016-06-22 Toll Collect GmbH Method for allocating a data processing outcome created by a central data processing system to a decentralized data processing device, central data processing system and decentralised data processing device
EP3144867A1 (en) 2015-09-21 2017-03-22 Toll Collect GmbH Position data transmitting system, on-vehicle device and position data transmitting method

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DK2660793T3 (en) 2012-05-03 2014-12-01 Kapsch Trafficcom Ag PROCEDURE AND DEVICES FOR IDENTIFYING A VEHICLE USING A LOCATION
DE202015102311U1 (en) 2015-05-06 2015-06-09 Omp Telematics Gmbh Device for billing tolls

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5819234A (en) * 1996-07-29 1998-10-06 The Chase Manhattan Bank Toll collection system
EP1457928A1 (en) * 2003-03-11 2004-09-15 Atos Origin IT Services UK Ltd. Road Charging System
EP1475752A2 (en) * 2003-05-05 2004-11-10 Vodafone Holding GmbH Electronic toll collection system and method
WO2007107001A1 (en) * 2006-03-21 2007-09-27 Skymeter Corporation Private, auditable vehicle positioning system and on-board unit for same
DE102006029383A1 (en) * 2006-06-27 2008-01-03 Deutsche Telekom Ag Method and device for ensuring data protection during offboard toll collection
WO2009001303A1 (en) * 2007-06-26 2008-12-31 Nxp B.V. Road toll system

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5819234A (en) * 1996-07-29 1998-10-06 The Chase Manhattan Bank Toll collection system
EP1457928A1 (en) * 2003-03-11 2004-09-15 Atos Origin IT Services UK Ltd. Road Charging System
EP1475752A2 (en) * 2003-05-05 2004-11-10 Vodafone Holding GmbH Electronic toll collection system and method
WO2007107001A1 (en) * 2006-03-21 2007-09-27 Skymeter Corporation Private, auditable vehicle positioning system and on-board unit for same
DE102006029383A1 (en) * 2006-06-27 2008-01-03 Deutsche Telekom Ag Method and device for ensuring data protection during offboard toll collection
WO2008000227A1 (en) 2006-06-27 2008-01-03 Deutsche Telekom Ag Method and apparatus for ensuring data protection during off-board toll metering
WO2009001303A1 (en) * 2007-06-26 2008-12-31 Nxp B.V. Road toll system

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110282717A1 (en) * 2010-05-12 2011-11-17 Kapsch Trafficcom Ag Method for collecting tolls for location usages
US8321265B2 (en) * 2010-05-12 2012-11-27 Kapsch Trafficcom Ag Method for collecting tolls for location usages
EP3035296A1 (en) 2014-12-18 2016-06-22 Toll Collect GmbH Method for allocating a data processing outcome created by a central data processing system to a decentralized data processing device, central data processing system and decentralised data processing device
EP3144867A1 (en) 2015-09-21 2017-03-22 Toll Collect GmbH Position data transmitting system, on-vehicle device and position data transmitting method

Also Published As

Publication number Publication date
DK2320386T3 (en) 2012-07-02
DK2381425T3 (en) 2012-08-20
EP2320386B1 (en) 2012-03-07
PL2381425T3 (en) 2012-10-31
DK2381425T5 (en) 2012-09-10
ES2383852T3 (en) 2012-06-26
EP2381425A1 (en) 2011-10-26
PL2320386T3 (en) 2012-08-31
PT2381425E (en) 2012-08-06
ATE548713T1 (en) 2012-03-15
EP2381425B1 (en) 2012-05-09
PT2320386E (en) 2012-06-15
ES2387755T3 (en) 2012-10-01
SI2320386T1 (en) 2012-07-31
ATE557373T1 (en) 2012-05-15

Similar Documents

Publication Publication Date Title
EP2860703B1 (en) Method for checking toll transactions and components therefor
EP2320386B1 (en) Device and method for creating toll data from anonymous locations
DE60006553T2 (en) METHOD FOR MANAGING PARKING OF VEHICLES
EP2541502B1 (en) Method for acquiring toll fees in a road toll system
EP2912856B1 (en) System and method for data-protection-compliant capture and forwarding of telemetry data
EP2511868B1 (en) Method for invoicing the use of locations
EP2378489B1 (en) Method for DSRC communication
DE102019104309A1 (en) TRAFFIC MANAGEMENT SYSTEM, COMPONENTS OF A DISTRIBUTED TRAFFIC MANAGEMENT SYSTEM, PRIORITY / LOAD DISTRIBUTION SYSTEM AND METHOD THEREFOR
WO2017144056A1 (en) Method for improving information security for vehicle-to-x communication, and associated system
EP3427237A1 (en) Method for monitoring access to electronically controllable devices
EP2994890B1 (en) Method and device for providing data for toll charging and toll system
WO2000031691A1 (en) Method and device for detecting, charging for and blocking services
DE4402612A1 (en) System for monitoring authorized use of traffic routes and / or traffic areas
EP2148305A1 (en) Method for calculating charges for using a mobile station
DE19821584A1 (en) Procedure for the acceptance of call charges in individual connections as well as telephone network and terminal
EP2325806B1 (en) Method for generating toll transactions
EP2503518A1 (en) Method for validating a toll transaction
DE102018203797A1 (en) Method and device for a C2X communication of motor vehicles of a motor vehicle network
DE202015102311U1 (en) Device for billing tolls
EP2757513B1 (en) Method for invoicing the use of locations
EP3211605B1 (en) Vehicle device, system, roadside device and method for performing at least one transaction
EP3188133B1 (en) Position data processing device and toll system and method for operating a position data processing device and a road toll system
DE60205354T2 (en) SYSTEM AND METHOD FOR REGISTERING A ROUTE OF A VEHICLE WITH A MOBILE PHONE
EP3358533B1 (en) Method for automatically detecting the usage of vehicles
AT504139B1 (en) METHOD AND APPARATUS FOR TELGETS LOCALIZATION OF TARGETS

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20110111

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

AX Request for extension of the european patent

Extension state: AL BA RS

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

DAC Divisional application: reference to earlier application (deleted)
RIC1 Information provided on ipc code assigned before grant

Ipc: G07B 15/00 20110101AFI20110718BHEP

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 548713

Country of ref document: AT

Kind code of ref document: T

Effective date: 20120315

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502009002958

Country of ref document: DE

Effective date: 20120503

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: BUECHEL, VON REVY & PARTNER

REG Reference to a national code

Ref country code: PT

Ref legal event code: SC4A

Free format text: AVAILABILITY OF NATIONAL TRANSLATION

Effective date: 20120605

REG Reference to a national code

Ref country code: NL

Ref legal event code: T3

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2383852

Country of ref document: ES

Kind code of ref document: T3

Effective date: 20120626

REG Reference to a national code

Ref country code: DK

Ref legal event code: T3

REG Reference to a national code

Ref country code: SK

Ref legal event code: T3

Ref document number: E 11659

Country of ref document: SK

REG Reference to a national code

Ref country code: NO

Ref legal event code: T2

Effective date: 20120307

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

LTIE Lt: invalidation of european patent or patent extension

Effective date: 20120307

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120608

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

REG Reference to a national code

Ref country code: PL

Ref legal event code: T3

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120707

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

REG Reference to a national code

Ref country code: HU

Ref legal event code: AG4A

Ref document number: E014269

Country of ref document: HU

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20121210

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502009002958

Country of ref document: DE

Effective date: 20121210

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: PATWIL AG, CH

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20121031

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120607

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20121030

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20121030

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120307

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 7

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 8

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: CZ

Payment date: 20161027

Year of fee payment: 8

Ref country code: DK

Payment date: 20161019

Year of fee payment: 8

Ref country code: NO

Payment date: 20161024

Year of fee payment: 8

Ref country code: NL

Payment date: 20161019

Year of fee payment: 8

Ref country code: SK

Payment date: 20161027

Year of fee payment: 8

Ref country code: GB

Payment date: 20161020

Year of fee payment: 8

Ref country code: CH

Payment date: 20161020

Year of fee payment: 8

Ref country code: HU

Payment date: 20161019

Year of fee payment: 8

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: PT

Payment date: 20161028

Year of fee payment: 8

Ref country code: IT

Payment date: 20161024

Year of fee payment: 8

Ref country code: BE

Payment date: 20161019

Year of fee payment: 8

Ref country code: PL

Payment date: 20161027

Year of fee payment: 8

Ref country code: SI

Payment date: 20160923

Year of fee payment: 8

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 9

REG Reference to a national code

Ref country code: DK

Ref legal event code: EBP

Effective date: 20171031

REG Reference to a national code

Ref country code: NO

Ref legal event code: MMEP

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: NL

Ref legal event code: MM

Effective date: 20171101

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20171030

REG Reference to a national code

Ref country code: SK

Ref legal event code: MM4A

Ref document number: E 11659

Country of ref document: SK

Effective date: 20171030

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

Ref country code: CZ

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171030

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171030

Ref country code: SK

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171030

Ref country code: NO

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

Ref country code: NL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171101

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

Ref country code: PT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180430

REG Reference to a national code

Ref country code: SI

Ref legal event code: KO00

Effective date: 20180605

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20171031

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

Ref country code: SI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 10

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171030

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171031

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20171030

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230513

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: ES

Payment date: 20231222

Year of fee payment: 15

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: SE

Payment date: 20231019

Year of fee payment: 15

Ref country code: FR

Payment date: 20231024

Year of fee payment: 15

Ref country code: DE

Payment date: 20231020

Year of fee payment: 15

Ref country code: AT

Payment date: 20231020

Year of fee payment: 15