METHOD AND SYSTEM FOR THE USER-SPECIFIC INITIALIZATION OF IDENTIFICATION DEVICES IN THE FIELD

• US 20090055936A1
• Filed: 09/21/2005
• Published: 02/26/2009
• Est. Priority Date: 11/09/2004
• Status: Active Grant

• Current Assignee: Kapsch TrafficCom AG (Datax Handelsgmbh)
• Original Assignee: Kapsch TrafficCom AG (Datax Handelsgmbh)
• Inventors: Eberstaller, Bernd
• Granted Patent: US 9,098,950 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3555 Personalisation of two or more cards
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The invention relates to a method and system for the user-specific initialization of identification devices in the field, particularly on-board units in road toll systems, based on a central facility, whereby each identification device, when delivered, has a unique device identification to which, in the central facility, a unique user identification is assigned, and in the central facility, an initialization PIN is generated from the device identification and from the user identification and is transmitted to the identification device from which the identification device, based on its device identification, computes the user identification for the user-specific initialization.

Claims

1. A method for initialization of identification devices, from a central facility, each identification device having a unique device identifier in the shipped state, to which is assigned a unique user identifier in the central facility, the method comprising:

on the basis of the device identifier and the user identifier, generating an initialization PIN in the central facility and transferring the initialization PIN to the identification device, and

calculating from the initialization PIN, in the identification device with reference to the device identifier thereof, the user identifier for user-specific initialization.

2. The method according to claim 1, further comprising the identification device displaying the calculated user identifier and/or transmitting the calculated user identifier on request.

3. The method according to claim 1, wherein the device identifier of the identification device comprises a public part and a private part.

4. The method according to claim 3, wherein the private part of the device identifier is formed of a random number or by an algorithm.

5. The method according to claim 1, further comprising generating, in the central facility, a deinitialization PIN for resetting the initialization of the identification device.

6. The method according to claim 1, further comprising, for valid initialization of the identification device, comparing the device identifier transferred with the initialization PIN with the device identifier of the identification device.

7. The method according to claim 1, wherein the initialization PIN also comprises functional class-of-service data and information of the identification device.

8. The method according to claim 1, further comprising:

an encryption method to generate the initialization PIN and any possible deinitialization PIN; and

decrypting the initialization PIN and the deinitialization PIN in the identification device.

9. The method according to claim 1, wherein the method further comprises, after initialization, deinitializing the identification device before renewed initialization.

10. The method according to claim 1, further comprising manually inputting, or transmitting via a radio interface, the initialization PIN or any possible deinitialization PIN into/to the identification device.

11. The method according to claim 1, wherein the identification device is a vehicle device of a traffic telemetry system.

12. The method according to claim 11, wherein the vehicle device is an onboard unit and the traffic telemetry system is a road toll system.

13. The method according to claim 1, wherein the radio link between the identification device and central facility is at least in part a microwave radio link.

14. The method according to claim 1, wherein the radio link between the identification device and central facility is at least in part a DSRC radio link.

15. The method according to claim 1, wherein the radio link between the identification device and central facility is at least in part a mobile radio system, a GSM or a UMTS system.

16. The method according to claim 1, wherein the radio link between the identification device and central facility is at least in part a wireless data link, a WLAN or a WiMAX data link.

17. The method according to claim 1, further comprising the central facility generating, on request, an activation or deactivation PIN for the initialized identification device.

18. The method according to claim 1, further comprising the central facility generating, on request, a class-of-service PIN for the initialised identification device, for changing the class-of-service data and information of the identification device.

19. The method according to claim 1, further comprising returning a confirmation PIN for the data transmitted from the identification device to the central facility.

20. A system for user-specific initialization of identification devices, comprising:

at least one identification device with a unique device identifier in the shipped state, a memory for accommodating a user identifier in the initialized state, and a display and/or transmitter for the latter, and

a central facility with a facility for generating initialization PINs from in each case a pair comprising a device identifier and an assigned user identifier and for transferring the generated initialization PIN to an identification device,

wherein the identification device calculates and stores the user identifier from the transferred initialization PIN with reference to its device identifier and, on request, displays and/or transmits it.

21. The system according to claim 20, wherein the identification device comprises an input device for inputting the initialization PIN and further deinitialization PINs, activation PINs deactivation PINs, class-of-service PINs and/or confirmation PINs.

22. The system according to claim 20, wherein the central facility comprises an encryption facility for encrypting the initialization PIN and further deinitialization PINs, activation PINs, deactivation PINs, class-of-service PINs and/or confirmation PINs and the identification device comprises a decryption facility for the corresponding decryption.

23. The system according to claim 20, wherein the identification device is a vehicle device of a traffic telemetry system.

24. The system according to claim 23, wherein the traffic telemetry system is a road toll system.

25. The system according to claim 20, wherein the radio link between the identification device and central facility is at least in part a microwave radio link.

26. The system according to claim 20, wherein the radio link between the identification device and central facility is at least in part a DSRC radio link.

27. The system according to claim 20, wherein the radio link between the identification device and central facility is at least in part a mobile radio system, a GSM or a UMTS system.

28. The system according to claim 20, wherein the radio link between the identification device and central facility is at least in part a wireless data link, a WLAN, or a WiMAX data link.