Verifying the integrity of data from equipment on board a vehicle

• US 10,491,397 B2
• Filed: 03/23/2012
• Issued: 11/26/2019
• Est. Priority Date: 03/25/2011
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Bodin, Pascal, Chambon, Jacques
• Primary Examiner(s): Abyaneh, Ali S
• Application Number:
  US14/007,614
• Publication Number:
  US 20140025955A1
• Time in Patent Office: 2,804 Days
• Field of Search: 713176
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/02 Registering or indicating driving, working, idle, or waiting time only apparatus forming part of taximeters G07B13/00
• CPC Class Codes: G07C 5/04 using counting means or digital clocks
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: G07C 5/10 using counting means or digital clocks
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method of verifying data integrity performed by on-board equipment in a vehicle, the method comprising:

• • sending data for signing to an electronic chronotachograph on board said vehicle;
  • receiving a signature of said data from said electronic chronotachograph;
  • storing said data and said signature; and
  • transmitting the stored data and signature to a verification device.

Claims

1. A data storage method performed by on-board equipment in a vehicle, the on-board equipment being external to an electronic chronotachograph in the vehicle, the method comprising:

sending data for signing to the electronic chronotachograph on board the vehicle, wherein sending data for signing to the electronic chronotachograph comprises sending a data signature request message to the electronic chronotachograph when the data is short data of a size less than or equal to 253 bytes and sending at least one data submission request message to the electronic chronotachogram when the data is long data of a size greater than 253 bytes, and wherein a value of a byte of the data signature request message or the at least one data submission request message is adapted to allow the electronic chronotachograph to receive data for signature from an electronic device;

receiving a signature of the data from the electronic chronotachograph;

storing the data and the signature in a memory of the on-board equipment external to the electronic chronotachograph; and

transmitting the stored data and signature to a verification device.

2. A storage method according to claim 1, wherein the process of sending data comprises sending to the electronic chronotachograph the at least one data submission request message together with at least some of the data for signing.

3. A storage method according to claim 2, wherein the process of sending data comprises sending to the electronic chronotachograph a message requesting a transfer of a signature for data that is sent together with the at least one data submission request message.

4. A storage method according to claim 2, wherein a format of the at least one data submission request message or data signature request message complies with the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85, a value of a “

TRTP”

byte of the at least one data submission request message or data signature request message having a value that is not defined in the standardized protocol.

5. The method of claim 4, wherein the value of the “

TRTP”

byte of the data signature request message corresponds to a request for signature.

6. The method of claim 4, wherein the value of the “

TRTP”

byte of the data submission request message corresponds to a request to submit long data having a size greater than 253 bytes.

7. The method of claim 4, wherein the value of the “

TRTP”

byte of the data signature message corresponds to a request for signature and the value of the “

TRTP”

byte of the data submission request message corresponds to a request to submit long data having a size greater than 253 bytes.

8. A non-transitory computer readable storage medium including instructions for executing the storage method according to claim 1 when the instructions are executed by a computer.

9. The method of claim 1, wherein the verification device is configured to compare the data received from the on-board equipment to the data signed by the chronotachograph in order to determine whether the data received from the on-board equipment is fraudulent.

10. The method of claim 1, wherein the on-board equipment and the chronotachograph communicate with each other via a front-face connector on the chronotachograph which is adapted to extract data generated by the chronotachograph.

11. The method of claim 10, wherein:

the on-board equipment sends the data for signing to the chronotachograph via the front-face connector on the chronotachograph; and

the on-board equipment receives the signature of the data from the chronotachograph via the front-face connector on the chronotachograph.

12. The method of claim 1, wherein receiving a signature of the data from the electronic chronotachograph comprises receiving a signature of the data from the electronic chronotachograph generated based on a key of the chronotachograph.

13. The method of claim 1, wherein receiving a signature of the data from the electronic chronotachograph comprises receiving a signature of the data from the electronic chronotachograph generated based on a key of the chronotachograph, and wherein sending data for signing to the electronic chronotachograph does not include sending a key specific to the on-board equipment.

14. The method of claim 1, wherein sending data for signing to the electronic chronotachograph on board the vehicle comprises:

fragmenting the data into a plurality of data portions of size less than or equal to 253 bytes, and

sending a plurality of messages to the chronotachograph, each of the plurality of messages including;

a byte “

TRTP”

presenting a value that is not defined in the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85, and

one of the plurality of data portions.

15. A computer comprising a hardware processor and a memory, the computer having stored thereon a program including instructions for executing a storage method when the program is executed by the computer, the storage method being performed by an on-board equipment in a vehicle, the on-board equipment being external to an electronic chronotachograph in the vehicle, wherein the storage method comprises:

sending data for signing to the electronic chronotachograph on board said vehicle wherein sending data for signing to the electronic chronotachograph comprises sending a data signature request message to the electronic chronotachograph when the data is short data of a size less than or equal to 253 bytes and sending at least one data submission request message to the electronic chronotachogram when the data is long data of a size greater than 253 bytes, and wherein a value of a byte of the data signature request message or the at least one data submission request message is adapted to allow the electronic chronotachograph to receive data for signature from an electronic device;

receiving a signature of the data from the electronic chronotachograph;

storing the data and the signature in a memory of the on-board equipment external to the electronic chronotachograph; and

transmitting the stored data and signature to a verification device.

16. Equipment for use on board a vehicle, the equipment being external to an electronic chronotachograph in the vehicle, wherein the equipment comprises:

a microprocessor and a memory and wherein;

the equipment is configured to send data for signing to the electronic chronotachograph on board the vehicle, wherein sending data for signing to the electronic chronotachograph comprises sending a data signature request message to the electronic chronotachograph when the data is short data of a size less than or equal to 253 bytes and sending at least one data submission request message to the electronic chronotachogram when the data is long data of a size greater than 253 bytes, and wherein a value of a byte of the data signature request message or the at least one data submission request message is adapted to allow the electronic chronotachograph to receive data for signature from an electronic device;

the equipment is configured to receive a signature of the data from the electronic chronotachograph;

the memory of the equipment external to the electronic chronotachograph is configured to store the data and the signature; and

the equipment is configured to transmit the stored data and signature to a verification device.

17. The equipment of claim 16, wherein the equipment is integrated into the vehicle.

18. The equipment of claim 17 wherein the equipment is connected to the electronic chronotachograph.

19. The equipment of claim 16, wherein the equipment is configured to transmit the stored data and signature to a verification device which is configured to compare the data received from the equipment to the data signed by the chronotachograph in order to determine whether the data received from the equipment is fraudulent.

20. The equipment of claim 16, wherein the equipment is configured to communicate with the chronotachograph via a front-face connector on the chronotachograph which is adapted to extract data generated by the chronotachograph.

21. The equipment of claim 16, wherein the data signature request message or the at least one data submission request message has a format in compliance with the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85, and wherein the value of the byte of the data signature request message or the at least one data submission request message adapted to allow the electronic chronotachograph to receive data for signature from an electronic device comprises a value of a “

TRTP”

byte of the data signature request message or the at least one data submission request message in accordance with a modified version of the standardized protocol.

22. The equipment of claim 21, wherein the value of the “

TRTP”

byte of the data signature request message corresponds to a request for signature.

23. The equipment of claim 21, wherein the value of the “

TRTP”

byte of the at least one data submission request message corresponds to a request to submit long data having a size greater than 253 bytes.

24. A signing method performed by an electronic chronotachograph on board a vehicle, the method comprising:

receiving data for signing from an equipment on board the vehicle, the equipment being external to the electronic chronotachograph and having a memory;

determining a signature for the data based on a key corresponding to the chronotachograph; and

sending the signature to the equipment for storage in the memory, wherein receiving data for signing from the equipment comprises receiving a data signature request message from the equipment when the data is short data of a size less than or equal to 253 bytes and receiving at least one data submission request message from the equipment when the data is long data of a size greater than 253 bytes, and wherein a value of a byte of the data signature request message or the at least one data submission request message is adapted to allow the electronic chronotachograph to receive data for signature from an external device.

25. A signing method according to claim 24, wherein receiving data comprises receiving at least one message of a format in compliance with the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85, a byte “

TRTP”

of the message presenting a value that is not defined in the standardized protocol.

26. The method according to claim 24, wherein the method is executed by a processor in the chronotachograph.

27. A non-transitory computer readable data medium including instructions for executing the method according to claim 24 when the instructions are executed by a processor in the chronotachograph.

28. The method of claim 24, wherein the equipment and the chronotachograph communicate with each other via a front-face connector on the chronotachograph which is adapted to extract data generated by the chronotachograph.

29. The method of claim 24, wherein a format of the at least one data submission request message or the data signature request message complies with the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85.

30. The method of claim 24, wherein the value of a “

TRTP”

byte of the data signature request message corresponds to a request for signature.

31. The method of claim 24, wherein the value of a “

TRTP”

byte of the at least one data submission request message corresponds to a request to submit short data having a size of 253 bytes.

32. An electronic chronotachograph for use on board a vehicle, the chronotachograph comprising:

a microprocessor and a memory wherein

the chronotachograph is configured to;

receive data for signing from an equipment on board the vehicle, the data being generated by the equipment, the equipment being external to the chronotachograph and having a memory;

determine a signature for the data based on a key corresponding to the chronotachograph; and

send the signature to the equipment wherein the signature is stored in the memory of the equipment,

the chronotachograph further configured to receive a data signature request message from the equipment when the data is short data and receive at least one data submission request message from the equipment when the data is long data, wherein the data signature request message and the data submission request message each has a format in compliance with the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85, and wherein a value of a “

TRTP”

byte of the data signature request message and the data submission request message is in accordance with a modified version of the standardized protocol adapted to allow the electronic chronotachograph to receive data for signature from an external device.

33. The electronic chronotachograph of claim 32, wherein the value of the “

TRTP”

byte of the data signature request message corresponds to a request for signature.

34. The electronic chronotachograph of claim 32, wherein the value of the “

TRTP”

byte of the data request message corresponds to a request to submit data having a size greater than 253 bytes.

35. An electronic chronotachograph for use on board a vehicle, the chronotachograph comprising:

a microprocessor and a memory wherein the chronotachograph is configured to;

receive data for signing from an equipment on board the vehicle, the data being generated by the equipment, the equipment being external to the chronotachograph and having a memory,

wherein receiving data for signing from the equipment comprises receiving a data signature request message from the equipment when the data is short data of a size less than or equal to 253 bytes and receiving at least one data submission request message from the equipment when the data is long data of a size greater than 253 bytes, and wherein a value of a byte of the data signature request message or the at least one data submission request message is adapted to allow the electronic chronotachograph to receive data for signature from an external device;

determine a signature for the data based on a key corresponding to the chronotachograph; and

send the signature to the equipment for storage in the memory of the equipment.

36. The electronic chronotachograph of claim 35, wherein the electronic chronotachograph is configured to communicate with the equipment via a front-face connector on the chronotachograph which is adapted to extract data generated by the chronotachograph.

37. The electronic chronotachograph of claim 35, wherein a format of the at least one data submission request message or the data signature request message complies with the standardized protocol described in Annex 1B of Regulation (EEC) No. 3821/85, and wherein the value of the byte of the data signature request message or the at least one data submission request message adapted to allow the electronic chronotachograph to receive data for signature from an electronic device comprises a value of a “

TRTP”

byte of the data signature request message and the at least one data submission request message is in accordance with a modified version of the standardized protocol.