Procedure for the operation of a toll control center, the operation of a toll system with a toll control center operated in such a procedure, toll control center and toll system

Abstract

A toll control center (40) has a central processor (41) configured to register an active operating state of a toll collection device (10) and to register a passive operating state of this toll collection device (10) when, as a result of missing communication links between the toll collection device (10) and the toll control center (40), one or more time-dependent central-side errors, which are expected to result from the delayed or failed establishment of communication links, exhaust a predetermined central-side error quota.In a toll system with such a toll control center (40) and a toll collection device (10), this toll collection device switches from an active operating mode with toll collection to a passive operating mode without toll collection if, as a result of missing communication links between the toll collection device (10) and the toll control center (40), one or more time-dependent decentralized errors, which are intended for the delayed or failed establishment of expected communication links, exhaust a predetermined decentralized error quota before the passive operating mode of the toll collection device (10) is registered in the toll control center (40).

Description

[0001] The present invention relates to a method for operating a toll control center according to the preamble of claim 1 and a toll control center according to the preamble of claim 5.

[0002] For the purposes of toll collection in electronic toll systems, toll collection devices are currently used in or on vehicles, especially trucks. These devices determine and record their own positions, understood as vehicle positions, for example in the form of geographic coordinates, and transmit them either via mobile network to a toll control center. The toll control center then evaluates these geographic positions by comparing them with a digital map stored there to determine whether one or more positions indicate the presence of the toll collection device—and thus the vehicle—on a toll section of road represented by one or more geo-objects on the digital map. Alternatively, this evaluation is carried out by comparing the geographic positions with such a digital map stored in the toll collection device.and subsequently, if successful, the result of this comparison – the designation of the toll section thus determined and traveled (abbreviated: section designation) – is stored and, according to a rule, sent via mobile network to the toll control center for billing the user. The section designation is also understood as the toll collection device's own position, because the geographical positions recorded by the toll collection device indicate that it was present on the section of road.

[0003] In principle, toll collection is understood to mean the assignment of a vehicle to at least one toll-liable section of road with payment consequences for the driver or owner of the vehicle, which in practice means the transaction of a sum of money from the driver or owner to the toll control center.Even if, in the present invention, the actual toll collection takes place or is completed in the toll control center and not in a vehicle-mounted device (especially if the vehicle-mounted device only sends its own positions in the form of geographical coordinates to the toll control center), the vehicle-mounted device, which transmits its recorded own positions (whether in the form of geographical coordinates or in the form of route segment designations already determined from the geographical coordinates) to the toll control center, is referred to as a toll collection device because, in a toll system with the described toll control center, it makes a significant contribution to both vehicle-specific and route segment-specific toll collection in the toll system through its mechanical connection to the toll-liable vehicle in its capacity as a position detection and transmission device.

[0004] The toll collection carried out by the toll control center in the manner explained, using the own positions provided by the toll collection device in the form of geographical coordinates (hereinafter referred to as: geographical own position) or in the form of route section designations (hereinafter referred to as: infrastructural own positions), can only function reliably if the toll collection device reliably sends the geographical and / or infrastructural own positions recorded – that is, determined and recorded – in successive time periods to the toll control center, in particular repeatedly at time intervals of the time periods of recording.This reliability is jeopardized if the transmission of the own positions – generally: of messages to be sent repeatedly – ​​to the toll control center is delayed too much or too frequently compared to the intended transmission, for example because the conditions for a consistently periodic transmission with equal time intervals for the own position recordings are not always met.

[0005] From the European patent application with publication number EP 3 982 336 A1, it is known that a vehicle device monitors the proper functioning of a communication device and / or a positioning device included by it and sends a failure message to a toll control center if a defect is detected in one of these components.

[0006] US patent 6,340,934 B1 discloses that a vehicle-mounted device can prevent communication with a roadside device in their common communication zone until it has traveled a predetermined distance within the communication zone.

[0007] It is known from the published international application with publication number WO 2009 / 146 948 A1 that a vehicle-mounted device stores deviations from network availability information stored in location data as errors and / or manipulations, and that such frequently occurring deviations are transmitted to a central system. Furthermore, it is known from this document that in the event of a disruption in the communication link between the vehicle-mounted device and the central system, the device switches to recording the route traveled.

[0008] The object of the present invention is to enable a toll control center to exclude toll collection devices that are at least potentially unreliable or are not operated as intended from the toll collection process.

[0009] This problem is solved by a method for operating a toll control center according to claim 1 and by a toll control center according to claim 5.

[0010] Advantageous further developments are the subject of dependent claims, whereby advantageous further developments and features of embodiments of independent claims, as well as their effects and advantages, are considered transferable to other independent claims, insofar as this is possible without contradiction and is technically feasible.

[0011] According to a first aspect of the invention, a method for operating a toll control center is provided, which includes the optional registration, initiated by a central processor of the toll control center, of either an active operating mode or a passive operating mode of a toll collection device operated remotely from the toll control center, which is intended to be carried in or on a vehicle digitally assigned to the toll collection device during the vehicle's use of toll sections, in the toll control center linked to a vehicle identifier of the vehicle in a central data storage of the toll control center, wherein the use of toll sections by the vehicle assigned to the toll collection device during the time in which the active operating mode of the toll collection device is registered in the central data storage of the toll control center, linked to the vehicle identifier of the vehicle.is permissible, whereby the use of toll sections by the vehicle assigned to the toll collection device is not permitted during the time in which the passive operating mode of the toll collection device is registered in the central data storage of the toll control center, and is characterized in that the central processor first initiates the registration of the active operating mode of the toll collection device in the central data storage of the toll control center, linked to the vehicle identifier, and in a central error procedure during the time in which the active operating mode of the toll collection device is registered in the central data storage of the toll control center, repeatedly expects or itself initiates the establishment of a communication link between the toll control center and the toll collection device originating from the toll collection device.at least one time-dependent central-side error is determined, the magnitude of which increases with the duration of a period of time without the establishment of a specific or unspecified communication link between the toll collection device and the toll control center after a previously established specific or unspecified communication link between the toll collection device and the toll control center, and upon determination that a predetermined central-side error quota has been exhausted by a specific time-dependent central-side error alone or by several specific time-dependent central-side errors cumulatively, the registration of the passive operating mode of the toll collection device, linked to the vehicle identifier of the vehicle, in the central data storage of the toll control center is initiated.

[0012] In particular, the central processor determines a time-dependent central-side error, the magnitude of which grows with the duration of the elapsed time without the establishment of a specific or indefinite communication link between the toll collection device and the toll control center after the expiry of a predetermined central-side time interval, in particular after the expiry of a predetermined central-side time interval within which the establishment of a specific communication link between the toll collection device and the toll control center is expected by the central processor, to a previously established, in particular an immediately previously established, specific or indefinite communication link between the toll collection device and the toll control center.

[0013] This provision has the advantage that the toll control center's processor is relieved of the task of determining a time-dependent central-side error as long as the predetermined central-side time interval has not expired, in particular, has not expired without an expected specific communication link between the toll collection device and the toll control center having been established.Because, as a rule, that is, in the error-free operation of a toll system that includes the toll control center and at least one toll collection device, it is assumed that a specific communication link between the toll collection device and the toll control center will be established within a correspondingly defined predetermined time interval on the central side, so that the processor only has to determine a time-dependent central-side error in the event of an error, in which the specific communication link between the toll collection device and the toll control center was not established within the correspondingly defined predetermined time interval on the central side.Preferably, the predetermined central-side time interval corresponds to the time interval that lies between two immediately successive specific communication links between the toll collection device and the toll control center, which are each due to be established after the time interval has elapsed.

[0014] A specific communication link is a communication link used for the purpose of transmitting a particular message. The message content can be limited to providing identification information of the respective communication partners as part of an availability notification, or it can include the toll system's own positions recorded by the system (position message) and / or status information from the toll system (status message, e.g., about the current operating mode). This defines specific communication links by their content. For example, position messages can be sent from the toll collection device to the toll control center every minute, after a dedicated communication link has been established.Status messages can be sent from the toll collection device to the toll control center every five minutes, independently of the above, after a dedicated communication link has been established. There is a time lag between a position message and a status message. Availability messages, status messages, and position messages are therefore three types of specific communication links. If the establishment of a communication link requires that it be of a specific type, then the establishment of a specific communication link is required; if the establishment of a communication link does not require that it be of a specific type, then the establishment of an unspecified communication link is required.An indeterminate communication link is therefore any of the definite communication links or any possible definite communication link.

[0015] One can also say: A definite communication link is one with a specific message; an indefinite communication link is any communication link regardless of whether it contains a message or not.

[0016] This allows the central processor to determine time-dependent central-side errors of a certain type related to the repeated establishment of a specific communication link, or a time-dependent central-side error that relates to each of the specified communication links.

[0017] The vehicle can be linked to the toll collection device by storing a vehicle identifier (for example, a combination of characters corresponding to one displayed on the vehicle's license plate) in the toll collection device. Alternatively or cumulatively, the vehicle can be linked to the toll collection device by storing a device identifier of the toll collection device (for example, a serial number, a mobile phone number, or the IP address of the toll collection device) in conjunction with the vehicle identifier in a toll data record within a toll data repository at the toll control center.

[0018] In particular, the central processor receives the vehicle identifier as part of a communication link between the toll collection device and the toll control center.

[0019] For example, after the predetermined central-side time interval has elapsed, the central processor starts an error time measurement on a previously established specific communication link between the toll collection device and the toll control center and repeatedly checks at time intervals of, for example, one minute, whether a specific message (for example, either a position message or a status message) is received from the toll collection device that is delayed compared to the elapsed central-side time interval. This is only possible if a communication link specifically for transmitting this specific message has been established between the toll collection device and the toll control center.For each time interval in which the specified message from the toll collection device is not received at the toll control center, the central processor determines a time-dependent central-side error, which is, for example, proportional to the duration of the time interval, and compares the specified time-dependent central-side error, or previously specified time-dependent central errors accumulated with this specific error, insofar as these exist, with the predetermined central-side error quota to determine whether this quota has been exhausted by the one specific time-dependent central-side error or by previously specified time-dependent central errors accumulated with this one.For example, time-dependent central errors can have the dimension of time, with a predetermined central error quota of 70 minutes. Exhaustion of the central error quota means that the cumulative time-dependent error has become equal to or greater than the central error quota. In another example, the time-dependent central errors can be a dimensionless number, such as a percentage, and the predetermined central error quota can be 110%. This check is performed for each message entry check that returns a negative result after a time interval, until either the predetermined central error quota is exhausted or the message entry check result is positive because a message has been received.If the message receipt check result is positive, the time-dependent central-side error determined up to that point, possibly cumulative, can be stored (registered) in a data storage of the toll control center in full or to a reduced extent for possible accumulation with further time-dependent central-side errors determined in the future (this only interrupts the error accumulation), or it can be discarded (deleted) (this terminates the error accumulation), whereby any next time-dependent central-side error would be determined compared to an uncumulative central-side error level of zero.

[0020] In another form of message input verification, the central processor awaits a trigger signal indicating the arrival of the delayed message and determines the time-dependent central-side error after a predetermined central-side time interval has elapsed. This calculation is performed on the immediately preceding communication link between the toll collection device and the toll control center, quasi-continuously, for example, every second, as part of the error time measurement process, until the trigger signal is received. Until then, it also quasi-continuously compares the accumulating time-dependent central-side error with the predetermined central-side error quota to determine whether the time-dependent central error has exhausted the quota.

[0021] If the central processor expects the input of several different, independent, specific messages, for example, a position message and a status message, at fixed but different time intervals, it can, after a predetermined central-side time interval, initiate the error time measurement on any unspecified communication link for the reception of any one of these specific messages, or await the trigger signal via the input of any message (which may be a delayed message or another subsequent but not delayed regular message). Preferably, the predetermined central-side time interval corresponds to the time interval within which the central processor expects any next message.

[0022] Instead of waiting for a message from the toll collection device to have proof that a communication link between the toll collection device and the toll control center has been established, the toll control center's processor can initiate a communication link to the toll collection device itself at the time the predetermined central-side time interval expires, for example, to retrieve a position message or a status message from the toll collection device, or simply to check whether a communication link between the toll collection device and the toll control center can be established or not.If this test fails, an error time measurement is initiated. Following a time interval after the immediately preceding attempt to establish a communication link between the toll collection device and the toll control center, a time-dependent central error related to this time interval is determined. This central error, or any previously determined time-dependent central errors accumulated with it, is then compared to the predetermined central error quota to determine whether it has been exhausted.After each subsequent time interval, the toll control center's processor initiates a new communication connection to the toll collection device to determine whether, without the successful establishment of a communication connection between the toll control center and the toll collection device, time-dependent central errors still need to be determined for accumulation, or whether, if the establishment of a communication connection between the toll control center and the toll collection device is successful, the error determination can be interrupted or aborted.

[0023] The method according to the invention also enables the operation of a toll system in which the operation of the toll collection device provides an active operating mode and a passive operating mode, wherein the toll collection device performs a toll collection function in the active operating mode, which is characterized by a position detection function and a position reporting function, wherein the toll collection device does not perform the toll collection function in the passive operating mode, wherein the position detection function includes repeatedly storing self-positions of the toll collection device determined by the toll collection device in the toll collection device, and wherein the position reporting function includesTo send the toll collection device's stored positional data in at least one positional message to the toll control center via wireless message signals within at least one communication link between the toll collection device and the toll control center, provided that at least one communication link between the toll collection device and the toll control center can be established for this purpose, wherein the toll collection device, in a decentralized fault procedure in active operating mode, repeatedly expects the establishment of a communication link between the toll control center and the toll collection device from the toll control center when the central processor initializes it, or initializes it itself when the central processor expects the establishment of a communication link from the toll collection device, and determines at least one time-dependent decentralized fault.the size of which increases with the duration of a period of time without the establishment of a specific or unspecified communication link between the toll collection device and the toll control center after a previously established specific or unspecified communication link between the toll collection device and the toll control center, and upon determination that a predetermined decentralized error quota has been exhausted by a specific time-dependent decentralized error alone or by several specific time-dependent decentralized errors cumulatively, switches from active operating mode to passive operating mode, wherein the predetermined decentralized error quota, the predetermined centralized error quota, the determination of time-dependent decentralized errors by the toll collection device and the determination of time-dependent centralized errors by the central processor are coordinated with each other in such a way as tothat the predetermined decentralized error quota of the toll collection device is exhausted before the predetermined centralized error quota of the toll control center is exhausted.

[0024] The preferred method is for the toll collection device to notify the user that its toll collection function will cease once it has determined that its decentralized error quota has been exhausted and it has switched to passive operating mode. This has the advantage of informing the user in a timely manner that their toll collection device is no longer performing its toll collection function, even before the toll control center has detected this.If the time lag between the exhaustion of the predetermined central error quota in the toll control center and the exhaustion of the predetermined decentralized error quota in the toll collection device is large enough, for example 5 to 15 minutes, the user still has time to leave the toll section or restart the toll collection function before they can be identified as a toll evader by the toll control center during an inspection, because this is only possible after the central system has registered the switch from active operating mode to passive operating mode.

[0025] In particular, the toll collection device determines a time-dependent decentralized error, the magnitude of which increases with the duration of the elapse of time without the establishment of a specific or indefinite communication link between the toll collection device and the toll control center after the expiry of a predetermined decentralized time interval, in particular after the expiry of a predetermined decentralized time interval within which the establishment of a specific communication link between the toll collection device and the toll control center is expected by the toll collection device, to a previously established, in particular an immediately previously established, specific or indefinite communication link between the toll collection device and the toll control center.

[0026] To meet the requirement of prematurely exhausting the decentralized error quota vis-à-vis the toll control center, the determination of time-dependent decentralized errors by the toll collection device and the determination of time-dependent centralized errors by the central processor are preferably identical, and the centralized error quota is larger than the decentralized error quota. If the centralized error is determined in the toll control center only after the predetermined centralized time interval has elapsed, then the decentralized error in the toll collection device is determined analogously only after the predetermined decentralized time interval has elapsed, where the predetermined centralized time interval is equal to the predetermined decentralized time interval.If the central-side error is determined from a specific communication link with respect to the same or a different specific future communication link, then the decentralized-side error is also determined from the same specific communication link with respect to the same specific future communication link. The same applies analogously to combinations of other types of communication links, whether specific or unspecified.

[0027] Furthermore, the magnitudes of the specific time-dependent central-side errors and decentral-side errors increase equally in the toll collection device and the toll control center with the duration of the time elapsed without establishing a communication link between the toll collection device and the toll control center after the predetermined decentralized or central-side time interval has expired, to the communication link established immediately before between the toll collection device and the toll control center.

[0028] The central processor preferably performs the central-side error procedure from the beginning of the time in which the active operating mode of the toll collection device is registered in the central data storage of the toll control center, while the toll collection device and the decentralized-side error procedure are performed from the beginning of the time in which the toll collection device is in the active operating mode, wherein the registration of the active operating state of the toll collection device in the central data storage of the toll control center and the change of the toll collection device into the active operating mode are mutually dependent and take place within a defined time frame and / or the registration of the active operating state of the toll collection device in the central data storage of the toll control center follows the change of the toll collection device into the active operating mode.This creates specific times for the start of the decentralized error procedure in the toll collection facility and for the start of the centralized error procedure in the toll control center, making it particularly easy to fulfill the requirement for the early exhaustion of the decentralized error quota vis-à-vis the toll control center.

[0029] This is merely a simple example of the realization of the requirement that the predetermined decentralized error quota, the predetermined centralized error quota, the determination of time-dependent decentralized errors by the toll collection device, and the determination of time-dependent centralized errors by the central processor are coordinated such that the predetermined decentralized error quota of the toll collection device is exhausted before the predetermined centralized error quota in the toll control center is exhausted. Other, more complex, and less preferred examples can easily be derived by a person skilled in the art from the disclosure of this description.

[0030] In particular, the position tracking function involves the toll collection device repeatedly determining its own positions and storing these positions within the device. Specifically, the position tracking function involves the toll collection device repeatedly determining its own positions during active operating mode and storing these positions within the device.

[0031] Preferably, the toll collection device can repeatedly determine its own position in the form of geographic coordinates (geographic position in longitude, latitude, and optionally altitude above sea level) based on signals received by the toll collection device from satellites of at least one Global Navigation Satellite System (GNSS). Theoretically, receiving signals of sufficient quality from three GNSS satellites is sufficient to determine the geographic position on the Earth's surface (2D position without altitude) with latitude and longitude; this is generally sufficient for determining a traveled road segment on the Earth's surface.

[0032] This type of self-positioning is preferred because of the widespread availability of GNSS signals when moving on toll roads - with the exception of areas where the signals are obscured due to topographical or structural reasons - and the potentially high accuracy of the self-positioning.

[0033] The position detection function preferably includes repeatedly storing the toll collection device's own positions, determined by the toll collection device, based on signals received by the toll collection device from satellites of at least one Global Navigation Satellite System (GNSS).

[0034] The position detection function can also include further developing ("refining") the vehicle's own positions, which initially only exist in the form of geographical coordinates, into route segment designations for tolling purposes. This is achieved by the toll collection device evaluating the geographical own positions by comparing them with a digital map stored in the device to determine whether one or more geographical own positions indicate the presence of the toll collection device – and thus the vehicle – on a specific toll-liable route segment represented by one or more geo-objects on the digital map. The designation of this identified route segment is then stored in the toll collection device as an infrastructural own position of the toll collection device.

[0035] The determination and storage of the infrastructural self-position by the toll collection device – whether based on geographical coordinates through self-location or through external location, by the toll collection device determining its infrastructural self-position by receiving it from a point on the roadside – also falls under the definition of the position detection function.

[0036] In this case, too, of determining route section designations from geographical own positions obtained from GNSS signals, the position acquisition function includes repeatedly storing own positions of the toll collection device in the toll collection device based on signals received by the toll collection device from satellites of at least one Global Navigation Satellite System (GNSS).

[0037] Alternatively or cumulatively, but generally less preferred due to low accuracy, the toll collection device can determine its own geographical position by signal strength triangulation of identifiable and geographically known base stations of one or more mobile networks.

[0038] Alternatively or cumulatively, but generally less preferred due to limited coverage, the toll collection device can determine its own position using geographically known WLAN-mediated communication network access nodes (for example, so-called WLAN hotspots, which are stationary).

[0039] Other known methods of position determination may also be suitable for determining one's own geographical position for toll collection purposes.

[0040] For example, the toll collection device can receive the geographical position of stationary roadside communication units (also called RSUs) via the sidelink of a 5G communication module included in the toll collection device, the PC5 interface, or via a DSRC module included in the toll collection device for DSRC communication (DSRC = dedicated short-range communication). This geographical position can be approximately the same as the toll collection device's own position at the moment of reception, or it can be a geographical position that corresponds even better to the toll collection device's own position on the road at the moment of communication with the RSU than that of an RSU that is not placed above the road, but next to it.In any case, the position received by the RSU through the toll collection device is used as the toll collection device's own position, which it determines as such by receiving the position information from the RSU.

[0041] The position provided by the RSU can alternatively or cumulatively also be an infrastructural position, for example in the form of an identifier of the RSU or in the form of a section designation of the toll section on or above which the RSU is stationary.

[0042] The position reporting function can include the regular transmission of position messages to the toll control center via wireless message signals, using at least one partially wireless communication link between the toll collection device and the toll control center. These messages contain the toll collection device's own positions, which the toll collection device has determined and stored since the last position message was sent, based on signals received by the toll collection device from satellites of at least one Global Navigation Satellite System (GNSS), in particular as geographic and / or infrastructural own positions, provided that at least one communication link between the toll collection device and the toll control center can be established for this purpose on a correspondingly regular basis.

[0043] The establishment of a communication link between the toll collection device and the toll control center, which is mandatory for sending the position message, also includes, in principle, the maintenance of this communication link between the toll collection device and the toll control center for at least the period of sending the at least one position message, because without this maintenance for sending the message, the setup for sending the position message would be ineffective.

[0044] Whenever it is said that a communication link is to be set up for a sending purpose, it is implicitly also meant that the communication link to be set up is to be maintained for this sending purpose.

[0045] Preferably, the communication link between the toll collection device and the toll control center is established from the toll collection device itself, for example, by the toll collection device calling the toll control center via a number of the toll control center in the landline telephone network, accessing an IP address of the toll control center, or addressing a URL of the toll control center. The appropriate communication address of the toll control center is stored in the toll collection device for this purpose.

[0046] This relieves the toll control center of the task of independently establishing a connection to thousands or even millions of toll collection devices operated in the toll control center's toll system, and of carrying out the necessary data processing organization.

[0047] The communication link between the toll collection device and the toll control center is preferably established from the toll collection device in the aforementioned regular repetition, provided that the communication link between the toll collection device and the toll control center can be established for this purpose, i.e.: provided that the prerequisites for establishing the communication link between the toll collection device and the toll control center are met - in particular on the part of the toll collection device, on the part of the communication network and on the part of the toll control center.

[0048] Alternatively, and less preferably, the toll control center can initiate the communication link with the toll collection device by calling a mobile phone number of the toll collection device or by accessing an IP address of the toll collection device. The corresponding communication address of the toll collection device is then stored in the toll control center.

[0049] In this process, the communication link between the toll collection device and the toll control center is preferably established from the toll control center in the aforementioned regular repetition, provided that the communication link between the toll collection device and the toll control center can be established for this purpose, i.e.: provided that the prerequisites for establishing the communication link between the toll collection device and the toll control center - in particular on the part of the toll collection device, on the part of the communication network and on the part of the toll control center - are met.

[0050] Regular repetition means repetition according to a rule that is not limited to the time-equidistant sending of position messages, particularly not when establishing a communication link between the toll collection device and the toll control center is temporarily impossible. For example, the rule may provide for the sending of position messages in a regular transmission mode at predetermined time intervals, provided that, preferably starting from the toll collection device, at least one communication link between the toll collection device and the toll control center can be established at the time of the predetermined time interval following the immediately preceding transmission of the last position message, and in the event that,preferably starting from the toll collection device at the time of the specified time interval following the immediately preceding transmission of the last position message, if at least one communication link between the toll collection device and the toll control center cannot be established, the outstanding transmission of the position message from the toll collection device can be provided in an extraordinary transmission mode with a delay compared to transmission in the ordinary transmission mode, as soon as, preferably starting from the toll collection device, at least one communication link between the toll collection device and the toll control center can be established.

[0051] Establishing a connection to the toll control center, initiated by the toll collection device, has the advantage that the toll control center can prepare for the receipt of position messages at predetermined time intervals and can monitor whether a position message is received at the expected time or not. In the case of non-receipt at the expected time, the invention determines the time-dependent central-side error, the magnitude of which increases with the duration of the passage of time without establishing a communication link between the toll collection device and the toll control center after a predetermined time interval has elapsed.

[0052] Preferably, embodiments of the method for operating a toll system provide that the central processor, in the central-side error procedure, repeatedly expects the establishment of a communication link between the toll control center and the toll collection device, originating from the toll collection device, to receive a message from the toll collection device at the toll control center, and determines at least one time-dependent central-side error based on repeated message input checks, the magnitude of which increases with the duration of a period of time without the receipt of a specific or unspecified message from the toll collection device at the toll control center after a previous receipt of a specific or unspecified message from the toll collection device at the toll control center.wherein the toll collection device, in the decentralized error procedure, repeatedly initiates the establishment of a communication link between the toll control center and the toll collection device itself for sending a specific message from the toll collection device to the toll control center, and determines at least one time-dependent decentralized error based on repeated communication link checks to see whether, starting from the toll collection device, a specific communication link between the toll collection device and the toll control center for sending a specific message or an indeterminate communication link between the toll collection device and the toll control center for sending an indeterminate message can be established, the magnitude of which increases with the duration of the elapsed time without the successful attempt,As part of a communication link test, the definite or indefinite communication link between the toll collection device and the toll control center grows after a previously successfully established definite or indefinite communication link between the toll collection device and the toll control center.

[0053] Nevertheless, the rule may – though less favorably – provide for the sending of position messages in a proper transmission mode at predetermined time intervals, provided that, starting from the toll control center, at least one communication link can be established between the toll collection device and the toll control center at the time of the predetermined time interval following the immediately preceding transmission of the last position message, and in the event that, again starting from the toll control center, at least one communication link cannot be established between the toll collection device and the toll control center at the time of the predetermined time interval following the immediately preceding transmission of the last position message,In an extraordinary transmission mode, the outstanding transmission of the position message from the toll collection device may be scheduled with a delay compared to transmission in the ordinary transmission mode, as soon as at least one communication link between the toll collection device and the toll control center can be established, again originating from the toll collection device.

[0054] In this case, the toll collection device expects the central office to establish a communication link at the specified time interval, following the immediately preceding communication link between the toll collection device and the central office. If this connection is not established at the specified time interval, the device begins an error time measurement. It then repeatedly checks at intervals of, for example, one minute, whether a message is received from the central office that is delayed compared to the previous time interval. This is only possible if a communication link has been established between the toll collection device and the central office.For each time interval in which no message from the toll control center is received by the toll collection device, a processor of the toll collection device determines a time-dependent decentralized error, which is, for example, proportional to the duration of the time interval, and compares the determined time-dependent decentralized error, or previously determined time-dependent decentralized errors accumulated with this specific error, insofar as these exist, with the predetermined decentralized error quota to determine whether this quota has been exhausted by the one specific time-dependent decentralized error or by previously determined time-dependent decentralized errors accumulated with this one.For example, the time-dependent decentralized errors can have the dimension of time, with the predetermined decentralized error quota being 60 minutes, and the exhaustion of the centralized error quota means that the cumulative time-dependent error has become equal to or greater than the centralized error quota.

[0055] If the predetermined central error quota is 70 minutes and the magnitudes of the time-dependent decentralized error and the time-dependent centralized error are determined in the same way as a function of the duration of the time elapsed without establishing a communication link between the toll collection device and the toll control center after a predetermined time interval, and then again after the communication link established immediately before the toll collection device and the toll control center, then the condition is also guaranteed that the predetermined decentralized error quota and the predetermined centralized error quota, in conjunction with the circumstances,in which the magnitudes of the time-dependent decentralized error and the time-dependent centralized error with respect to the duration of the elapsed time without establishing a communication link between the toll collection device and the toll control center increase after a certain time interval to the immediately previously established communication link between the toll collection device and the toll control center, are defined in such a way that, if the duration of the elapsed time without establishing a communication link between the toll collection device and the toll control center is recorded identically by both the toll collection device and the toll control center, the predetermined decentralized error quota of the toll collection device is exhausted after a predetermined time interval to the immediately previously established communication link between the toll collection device and the toll control center.before the predetermined central error quota in the toll control center is exhausted.

[0056] In another example, the time-dependent decentralized errors can be a dimensionless number, such as a percentage, and the predetermined decentralized error quota can be 100%.If the predetermined central error quota is 110% and the magnitudes of the time-dependent decentralized error and the time-dependent centralized error are determined in the same way depending on the duration of the time elapsed without establishing a communication link between the toll collection device and the toll control center after a predetermined equal decentralized and centralized time interval, and then on the communication link established immediately before between the toll collection device and the toll control center, then the condition is also guaranteed that the predetermined decentralized error quota of the toll collection device is exhausted before the predetermined centralized error quota of the toll control center is exhausted.

[0057] This check is performed for every message receipt check that returns a negative result after a certain time interval, until either the decentralized error quota is exhausted or the message receipt check is positive. If the message receipt check is positive, the time-dependent decentralized error determined up to that point, possibly accumulated, can be stored (registered) in a data storage device of the toll collection system in full or in a reduced proportion for potential accumulation with further time-dependent centrally determined errors in the future (this only interrupts the error accumulation), or it can be discarded (deleted) (this terminates the error accumulation), in which case any next time-dependent decentralized error starts from zero compared to an unaccumulated error count.In another type of message input check, the toll collection device's processor awaits a trigger signal upon receipt of the delayed message via a wireless communication module of the toll collection device. After a predetermined time interval, it determines the time-dependent, decentralized error on the communication link established immediately prior to the delay between the toll collection device and the toll control center. This measurement is performed quasi-continuously, for example, every second, until the trigger signal is received. Until then, it also quasi-continuously compares the accumulating time-dependent, decentralized error with the predetermined decentralized error quota to determine whether the time-dependent, decentralized error has exceeded the quota.

[0058] Alternatively, though less preferred, reaching a certain file size of data from the vehicle's own position can be the rule for sending the position message and establishing the associated communication link. In this case, this can only be done by the toll collection device, as only it knows the file size. Geographic positions can, for example, be determined and stored for transmission intermittently, every second. On the other hand, they can also be stored only after a predetermined distance, e.g., 100 meters, has been traveled from the last stored geographic position. In this case, data expansion for winding roads (more than one geographic position per 100 meters) or data reduction for straight-line driving (one geographic position per additional 100 meters) can be advantageous.To achieve this data reduction, original positions may be cached and then deleted if the toll collection device determines that they should not be included in a position message.

[0059] In particular, a processor of the toll control center can, by comparing the own positions received from the toll collection device, insofar as these are geographical own positions, with a digital map in which toll sections are represented by geo-objects, determine at least one toll section travelled by the vehicle and calculate a charge for the use of the toll section travelled.

[0060] Alternatively, a processor at the toll control center can determine a charge for the use of the infrastructure traveled by the vehicle, for example a toll section, based on the own positions received from the toll collection device, insofar as these are infrastructural own positions.

[0061] This charge can be a fee or a tax. The toll authority can invoice said charge to a user or vehicle owner whose data is linked to the toll collection device.

[0062] In particular, after the predetermined time interval has elapsed, the toll collection device can use communication link tests to check whether a communication link between the toll collection device and the toll control center can be established immediately beforehand, whereby the finding that a communication link between the toll collection device and the toll control center cannot be established means a communication link test with a negative result, and the finding that a communication link between the toll collection device and the toll control center can be established means a communication link test with a positive result.

[0063] In particular, it may be provided that, as a result of two immediately consecutive first and second communication link tests with a negative communication link test result, the toll collection device determines and registers a time-dependent decentralized error, the magnitude of which increases with the duration of the time elapsed for the toll collection device between the first and the second communication link test with a negative communication link test result and determined by the toll collection device, the registered time-dependent decentralized errors are accumulated, and the toll collection device switches from active operating mode to passive operating mode if, in active operating mode, the toll collection device determines that the predetermined decentralized error quota in active operating mode has been exhausted by the accumulation of registered time-dependent errors.

[0064] When it is stated that a second communication link test with a negative communication link test result immediately follows a first communication link test with a negative communication link test result, this means that no further communication link test takes place between the first communication link test with a negative communication link test result and the second communication link test with a negative communication link test result.

[0065] Preferably, the communication link for the position reporting function between the toll collection device and the toll control center is at least partially wireless. In particular, the communication path in the communication link from the toll collection device to a communication station of a communication network, preferably stationary and located away from the vehicle and technically coupled to the toll control center, is a radio communication path (WLAN (e.g., according to the Wi-Fi standard)), mobile communication, in particular of the 1st, 2nd, 3rd, 4th or 5th generation, especially LTE or 5G), or an optical communication path, in particular infrared communication.

[0066] The toll collection device includes a mobile phone transmitter and preferably also a WLAN transmitter.

[0067] Preferably, the communication link between the toll collection device and the toll control center is established from the toll collection device itself; that is, the toll collection device initiates the establishment of a communication link to the toll control center by calling, dialing, or accessing the toll control center via a mobile phone number, an IP address, or a URL of the toll control center. Less preferably, the communication link between the toll collection device and the toll control center is established from the toll collection device itself.

[0068] In the case of self-positioning using GNSS, the toll collection device for receiving signals from at least one Global Navigation Satellite System (GNSS), or GNSS signals for short, preferably includes a GNSS signal receiving antenna that provides the received GNSS signals to a processor of the toll collection device, for example, a GNSS processor, for processing. The toll collection device includes a corresponding transmitter and receiver for sending and receiving messages to and from the toll control center using electromagnetic or optical signals. In the case of electromagnetic signals, this can be a transmitting and receiving antenna; in the case of optical signals, a light source for transmitting optical signals and a light detector for receiving optical signals.

[0069] For the execution of the operating method according to the invention, the toll collection device has at least one decentralized processor - called main processor - and at least one data storage device, which may be structurally encompassed by an arrangement supporting the decentralized processor or may be arranged separately from an arrangement supporting the decentralized processor.

[0070] The main processor preferably fulfills the position detection function, in particular by repeatedly determining its own position based on signals received by the processor from satellites of at least one Global Navigation Satellite System (GNSS) and arranging for its storage in a data memory connected to or encompassed by the processor, or by repeatedly arranging for the storage of own positions provided by a GNSS receiver connected to the processor in a data memory connected to or encompassed by the processor.

[0071] The main processor preferably also fulfills the position reporting function, in particular by providing its own positions stored with the position detection function to a communication module coupled to or encompassed by the processor for transmission to a toll control center when it detects the existence of a communication connection between the communication module and the toll control center.

[0072] The toll collection system can be functionally monolithic or modular. In the case of a monolithic functional architecture, the single processor of the toll collection system is designed to process both the received GNSS signals regarding positions, preferably also speeds and times, and the signals from the communication link between the toll collection system and the central control unit from Layer 1 to Layer 7 according to the OSI model upon signal reception and vice versa upon signal transmission, as well as to perform all the aforementioned tasks of the main processor.

[0073] In the case of a modular functional architecture, the computationally intensive processing of the received GNSS signals into the measured variables geographic position, preferably also speeds and times, is carried out by a separate GNSS processor, which is connected to a central processor of the toll collection device via communication technology. This central processor performs all the aforementioned tasks of the main processor in order to provide the main processor with the measured variables.

[0074] Alternatively or cumulatively, in the case of modular architecture, the message processing required for the communication process with the toll control center from Layer 1 to Layer 7 according to the OSI model is carried out by a separate communication processor, which is connected to the aforementioned central processor of the toll collection device.

[0075] In the case of a modular functional architecture of the toll collection device as a building unit, the toll collection device may include a GNSS receiver component, comprising the GNSS processor, structurally arranged within a housing of the toll collection device. Alternatively or cumulatively, in the case of a modular architecture of the toll collection device as a building unit, the toll collection device may include a communications transmitter / receiver component, comprising the communications processor, structurally arranged within a housing of the toll collection device.

[0076] In the case of a modular functional architecture of the toll collection system, consisting of structurally separate components, a GNSS module comprising the GNSS processor can be structurally separated from a toll module comprising the central processor, located in or on the vehicle. Alternatively or cumulatively, in the case of a modular architecture of the toll collection system, consisting of structurally separate components, a communication module comprising the GNSS processor can be structurally separated from a toll module comprising the central processor, located in or on the vehicle.

[0077] The toll collection device can be designed as a portable communication device in a single unit, for example, a smartphone that the driver carries in the vehicle. The smartphone can be detachably attached to the vehicle or be freely positioned within it.

[0078] The method according to the invention can include the use of a smartphone which, by executing a toll collection program that operates the smartphone in active and passive modes, functions as a toll collection device. In particular, the method according to the invention can include the use of a smartphone as a toll collection device, wherein the execution of a toll collection program on a processor of the smartphone operates the smartphone in active and passive modes, thus enabling it to function as a toll collection device.

[0079] The toll collection device can alternatively be designed as an on-board unit solely for toll collection, in a single assembly that is permanently installed or detachably attached in or, less preferably, to (that is, in particular, on the outside of) the vehicle.

[0080] Furthermore, the toll collection device can be designed as a system of service modules distributed throughout the vehicle, which are structurally separate from each other, and an application module, which are linked to each other via communication technology.For example, the toll collection device can consist of structurally separate, vehicle-integrated units of an on-board computer as an application module, which is operated in the active and passive operating mode according to the invention and controlled by a toll collection program, a GNSS module as a first service module, which includes a GNSS processor for repeatedly determining own positions - preferably also speeds and times - on the basis of signals received by the GNSS processor from satellites of at least one Global Navigation Satellite System (GNSS), and a communication module as a second service module, which includes a communication processor for message processing from Layer 1 to Layer 7 according to the OSI model when receiving signals and vice versa when sending signals, as well as a vehicle bus system via which the on-board computer is connected to the GNSS module and the communication module.

[0081] For determining and accumulating time-dependent decentralized and centralized errors, as well as for establishing that the predetermined decentralized and centralized error quota has been exhausted, there are various methods of implementation, for example subtractive and additive methods.

[0082] The magnitudes of the errors, including the respective error quota, in the toll collection device and the toll control center are of the same dimension and preferably scalar; they are particularly preferably dimensionless (unitless).

[0083] In an example of a subtractive method, starting from a predetermined error quota greater than zero – for example, 100 or a percentage, for example, 100% – the error quota can be gradually reduced with each registered error until it finally reaches a predetermined minimum permissible error quota that is smaller than the predetermined error quota – for example, 0 or 0% – at which point the error quota is considered exhausted.

[0084] For this purpose, the toll collection device in active operating mode and the toll control center can manage an error quota during the time in which the active operating mode of the toll collection device is registered in the central data storage of the toll control center. This quota, starting from an initial error quota predetermined at the beginning of the (registered) active operating mode (e.g., 100%), which is greater than a predetermined permissible minimum error quota (e.g., 0%), can be progressively and cumulatively updated during operation in active operating mode in the toll collection device and during the registration of the active operating mode in the toll control center by each specific time-dependent error, whereby the predetermined error quota is exhausted in each instance.when the error quota has decreased to or below the predetermined minimum permissible error quota due to the accumulation of specific time-dependent errors.

[0085] Alternatively, in an example of an additive method, starting from an initial predetermined error level value – for example, zero or a percentage, for example, 0% – the error level value can be increased step by step with each registered error, cumulatively, until it finally reaches a predetermined maximum permissible error level value that is greater than the initial predetermined error level value – for example, 100, or 100% – at which point the error quota is considered exhausted.

[0086] In active operating mode, the toll collection device can manage an error level value, which, starting from an initial error level value (e.g., 0%) specified at the beginning of active operating mode, which is less than a specified maximum permissible error level value (e.g., 100%), can be updated stepwise and cumulatively during operation by the toll collection device through the summation of each registered distance-dependent or time-dependent error, whereby the specified error quota is exhausted when the error level value has increased to or above the predetermined maximum permissible error level value through the summation of registered distance-dependent and / or time-dependent errors.

[0087] The advantage of using a dimensionless (unitless) error quota is that, during error accumulation, a mixture of distance-dependent and time-dependent errors is possible, independent of distance units and time units, while treating distance-dependent and time-dependent errors equally.

[0088] Alternatively, time units can of course be converted into distance units and vice versa to allow for equal treatment of the different errors.

[0089] When it is stated that the magnitude of the time-dependent error increases with the duration of the elapsed and measured time, this means that the magnitude of the time-dependent error is greater the longer the duration of the elapsed and measured time. The magnitude of the time-dependent error can scale proportionally with the duration of the elapsed and measured time, or it can increase more or less proportionally with the duration of the elapsed and measured time.

[0090] A disproportionate increase in the error rate allows for greater weight to be given to a recurrence of communication problems. A disproportionately small increase in the error rate allows for less weight to be given to a recurrence of communication problems.

[0091] Furthermore, one can weight long, uninterrupted periods of communication problems more heavily than short periods of communication problems interrupted by periods of communication capability by applying the disproportionate increase of the time-dependent error only to uninterrupted periods of communication problems and reapplying the same error weighting for communication problems that reoccur after communication capability is restored. For example: In each period of uninterrupted communication problems, let the error increase quadratically with the duration of the uninterrupted communication problems. Let the error be (duration / min). 2 Then, 10 minutes of continuous communication problems would result in an error of 100. Two separate periods of 5 minutes of communication problems would result in an error of 50, and five periods of two minutes each would result in an error of 20.

[0092] In principle, errors in repeated communication problems can also be successively scaled with smaller proportionality factors to the duration of the elapsed and determined time in order to reduce the severity of the error in repeated communication problems.

[0093] If, on the other hand, one wants to increase the severity of the error in repetitions of communication problems, one can successively scale errors in repetitions of communication problems with larger proportionality factors with the duration of the elapsed and determined time.

[0094] The predetermined decentralized and centralized error quotas can change over time. Initially, the quota can decrease in the toll collection device due to certain errors detected there, which are not initially known to the toll control center. The toll collection device then informs the toll control center via a status message that the initial predetermined decentralized error quota has decreased to a low value. The toll control center then adopts this reduced predetermined decentralized error quota as a correspondingly reduced centralized error quota, possibly up to the difference between the initial predetermined centralized error quota and the initial predetermined decentralized error quota.

[0095] In passive operating mode, the toll collection function is disabled. This means that in passive operating mode, the toll collection device will no longer determine any further locations that are stored for transmission to the toll control center. If, however, the toll collection device continues to determine and store locations in passive operating mode—for example, because another function of the toll collection device requires the determination and storage of locations for purposes other than transmission to the toll control center—then these locations determined and stored by the toll collection device in passive operating mode will not be transmitted to the toll control center.However, this does not preclude the possibility that the toll collection device, while still in active operating mode, may send its own positions, determined and stored by it, to the toll control center in passive operating mode (provided that a communication link between the toll collection device and the toll control center can be established in passive operating mode), because the own positions originate from a time when the operating mode was still the active one in which the toll collection function should be carried out if possible.

[0096] Preferred embodiments of the invention further provide that a single, specific time-dependent decentralized / centralized error or several cumulatively specific time-dependent errors resulting from a communication link test with a positive communication link test result by the toll collection device and likewise by the central processor of the toll control center as a result of a detected input of a specific or unspecified message from the toll collection device to the toll control center is or are canceled or reduced.

[0097] In the case of additive error accumulation compared to an initial error value (of, for example, 0), a cumulative error value can be reset to the initial error value ("error cancellation") as a result of a communication connection test with a positive communication connection test result or as a result of a detected receipt of a specific or unspecified message from the toll collection device in the toll center, or it can be reduced by a "credit amount" to approximate the initial error value again ("error reduction").

[0098] In the case of subtractive error accumulation compared to an initial error quota (of, for example, 100%), a current error quota reduced by error accumulation can be reset back to the initial quota ("error cancellation") or increased by a "credit amount" to approximate the initial error quota again ("error reduction").

[0099] This means that an interruption or termination of a prolonged period of communication problems can lead to at least a partial recovery of errors that were identified, recorded, and accumulated in one or more preceding phases of communication problems. Excessive error accumulation can thus be prevented by periods without communication problems. With complete error cancellation upon termination of a communication problem phase, error accumulation restarts at the initial error value (e.g., 0) or the initial error quota (e.g., 100%).This would mean that a switch to passive operating mode in the toll collection device and a registration of the passive operating state of the toll collection device in the toll control center would only take place if, during a single uninterrupted phase of always immediately successive communication connection tests with negative communication connection test results, the predetermined decentralized error quota is exhausted by the accumulation of time-dependent decentralized errors in the toll collection device, and if, during always immediately successive message receipt tests with negative message receipt test results, the predetermined centralized error quota is exhausted by the accumulation of time-dependent centralized errors.This can also be an advantageous method for dealing with communication problems, whereby a decentralized switch to passive operating mode and centralized registration of passive operating mode only take place if a single communication problem is large enough, and not if too many small communication problems occur in active operating mode.

[0100] Embodiments of the invention provide that the toll collection device signals to the user, in active operating mode, that the toll collection function is functioning and / or, in passive operating mode, that the toll collection function is not functioning. This signaling can be visual (for example, by an LED of the toll collection device illuminating and / or by displaying a text message indicating passive mode on a display device of the toll collection device), acoustic (for example, by one or more tones from a loudspeaker of the toll collection device), and / or haptic (for example, by vibration of the toll collection device).

[0101] Furthermore, embodiments of the invention provide that, in passive operating mode, the toll collection device transmits its own positions, last determined in active operating mode by the position detection function and not yet sent to the central control unit by the position reporting function, to the central control unit via wireless message signals within at least one communication link between the toll collection device and the central control unit, provided that at least one communication link can be established for this purpose. This allows the toll control unit to then also collect tolls using the last own positions that were recorded in active operating mode.

[0102] Preferably, it is provided that, within the framework of one or more communication links established between the toll collection device and the toll control center, the toll collection device, in an initialization mode, sends a request to the toll control center, along with the vehicle identifier, to authorize a change in the operating mode of the toll collection device to the active operating mode via wireless signals; the toll control center receives the request from the toll collection device to authorize a change in the operating mode of the toll collection device to the active operating mode, along with the vehicle identifier; the toll control center sends the authorization to switch to the active operating mode to the toll collection device in response to the request; and the toll collection device receives the authorization to switch to the active operating mode from the toll control center via wireless signals.wherein, as a result of receiving the release to switch to active operating mode from the toll control center, the toll collection device switches from initialization mode to active operating mode, and the central processor, as a result of receiving the request from the toll collection device to release a switch of the toll collection device's operating mode to active operating mode, initiates the registration of the active operating mode of the toll collection device, linked to the vehicle identifier of the vehicle, in the central data storage of the toll control center.

[0103] Preferably, the toll collection device sends confirmation of the switch to active operating mode to the toll control center after the device has switched to active operating mode. Upon receiving this confirmation from the toll collection device, the central processor registers the device's active operating mode, linked to the vehicle's identifier, in the toll control center's central data storage. Specifically, the toll collection device initiates the decentralized error procedure upon switching to active operating mode, and the central processor initiates the centralized error procedure by registering the device's active operating mode, linked to the vehicle's identifier, in the toll control center's central data storage.

[0104] This makes a particularly simple contribution to fulfilling the requirement to exhaust the decentralized error quota before the centralized error quota.

[0105] Preferably, the vehicle identifier is a vehicle identifier which is attached to the vehicle carrying the toll collection device in the form of an optically detectable license plate from the outside, in particular from the road side, wherein the toll control center stores the transmitted vehicle identifier together with a data element which, when the toll collection device is switched to active operating mode, represents the status of the active operating mode of the toll collection device (e.g. a binary value of 1 in the sense of "Tolling in progress" or "Tolling ON"), that is: registered an active operating mode of the toll collection device associated with the vehicle identifier, wherein the toll collection device does not necessarily have to be known to the toll control center, e.g. in the form of a device identifier.This allows the toll control center to check whether an active operating mode of the toll collection device is registered in the toll control center for a vehicle identifier transmitted by a control unit that includes the toll control center's toll system. This identifier is determined by the control unit from optical license plate recognition of a passing vehicle using text recognition. If so, the check is successfully completed. If not, the check yields the negative result that no toll is collected for the vehicle, and therefore a toll violation has occurred.

[0106] In such a case, the driver and / or owner of the vehicle will be prosecuted based on the vehicle identifier transmitted by the control direction.

[0107] The toll control center can also recognize the toll collection device using this vehicle identifier if the position message of the position report function includes it.

[0108] In particular, the vehicle identifier is the textual form of a license plate that is visually detectable from the outside, especially from the road side, and is affixed to the vehicle.

[0109] Preferably, the passive operating mode of the toll collection device provides the initialization function of the initialization mode. This allows the user to re-execute the toll collection function by switching to the active operating mode without having to restart the toll collection device or a toll application on their smartphone (which can be used as a toll collection device) that performs the method according to the invention. Particularly preferably, the passive operating mode provides the initialization function of the initialization mode only after the toll collection device, in active operating mode, has transmitted its own positions to the toll control center in passive operating mode. These positions were determined and stored by the toll collection device using its position detection function and were not transmitted to the toll control center in active operating mode.

[0110] Furthermore, embodiments of the invention provide that the toll collection device, in passive operating mode, sends a status message to the toll control center by means of wireless message signals within the framework of at least one communication link between the toll collection device and the control center, informing the toll control center that the toll collection device is in passive operating mode, provided that at least one communication link between the toll collection device and the control center can be established for this purpose.

[0111] Optionally, it can send this status message along with the most recently saved own positions in active operating mode with the position tracking function that have not yet been sent to the toll control center.

[0112] According to a second aspect of the invention, a toll control center is provided with at least one central processor and at least one central data storage device, wherein the at least one central processor is configured to selectively register either an active operating mode or a passive operating mode of a toll collection device operated remotely from the toll control center, which is intended to be carried in or on a vehicle digitally assigned to the toll collection device during the vehicle's use of toll sections, in the toll control center, linked to a vehicle identifier of the vehicle in the at least one central data storage device of the toll control center, whereby the use of toll sections by the vehicle assigned to the toll collection device during the time,in which the active operating mode of the toll collection device is registered in the at least one central data storage device of the toll control center, wherein the use of toll-liable road sections by the vehicle assigned to the toll collection device is not permitted during the time in which the passive operating mode of the toll collection device is registered in the at least one central data storage device of the toll control center, and is characterized in that the at least one central processor is configured to first initiate the registration of the active operating mode of the toll collection device linked with the vehicle identifier of the vehicle in the at least one central data storage device of the toll control center, and in a central-side error procedure during the time in which the active operating mode of the toll collection device is registered in the at least one central data storage device of the toll control center,repeatedly expecting or initiating the establishment of a communication link between the toll control center and the toll collection device from the toll collection device itself, determining a time-dependent central error whose magnitude increases with the duration of a period of time without the establishment of a specific or unspecified communication link between the toll collection device and the toll control center after a previously established specific or unspecified communication link between the toll collection device and the toll control center, checking whether a predetermined central error quota has been exhausted by a specific time-dependent central error alone or by several specific time-dependent central errors cumulatively, and upon determination,that the predetermined central error quota is exhausted by a specific time-dependent central error alone or by several specific time-dependent central errors cumulatively, to initiate the registration of the passive operating mode of the toll collection device linked with the vehicle identifier of the vehicle in at least one central data storage device of the toll control center.

[0113] This provides a toll control center that can identify and respond to insufficient conditions for a toll collection facility to fulfill its toll collection function, in order to limit toll collection failure.

[0114] For the first aspect of the invention with regard to the method for operating a toll control center, the embodiments and further developments described above are considered transferable to the second aspect of the invention insofar as the toll control center can be configured to carry out the process steps described with the embodiments and further developments.

[0115] For example, the central processor is configured in a training system to determine a time-dependent central error, the size of which grows with the duration of a period of time without establishing a communication link between the toll collection device and the toll control center after a predetermined central time interval has elapsed, to the communication link established immediately before between the toll collection device and the toll control center.

[0116] For example, the central processor in a training course is configured to cancel or reduce a single specific time-dependent central-side error or several cumulatively specific time-dependent central-side errors resulting from a message input check with a positive message input check result.

[0117] Furthermore, the toll control center according to the invention also provides a toll system comprising at least one toll collection device configured to operate in an active or passive operating mode, wherein the toll collection device is configured to perform a toll collection function in active operating mode, characterized by a position detection function and a position reporting function, wherein the toll collection device is configured not to perform the toll collection function in passive operating mode, wherein the position detection function includes repeatedly storing self-positions of the toll collection device determined by the toll collection device in the toll collection device, and wherein the position reporting function includesto send the own positions stored by the position detection function from the toll collection device to the toll control center in at least one position message by means of wireless message signals within the framework of at least one communication link between the toll collection device and the toll control center, insofar as at least one communication link between the toll collection device and the toll control center can be established for this purpose, wherein the toll collection device is configured to repeatedly expect the establishment of a communication link between the toll control center and the toll collection device from the toll control center in a decentralized fault procedure in active operating mode, if the at least one central processor is set up to initialize it, or to initialize it itself if the at least one central processor is set up.to expect the establishment of a communication link originating from the toll collection device, to determine a time-dependent decentralized error whose magnitude increases with the duration of time elapsed without the establishment of a communication link between the toll collection device and the toll control center after a previously established communication link between the toll collection device and the toll control center, to check whether a predetermined decentralized error quota has been exhausted by a specific time-dependent decentralized error alone or by several specific time-dependent decentralized errors cumulatively, and upon determination that the predetermined decentralized error quota has been exhausted by a specific time-dependent decentralized error alone or by several specific time-dependent decentralized errors cumulatively, to switch from active operating mode to passive operating mode,wherein the predetermined decentralized error quota, the predetermined centralized error quota, the determination of time-dependent decentralized errors by the toll collection device and the determination of time-dependent centralized errors by the at least one central processor are coordinated such that the predetermined decentralized error quota of the toll collection device is exhausted before the predetermined centralized error quota of the toll control center is exhausted.

[0118] For the first aspect of the invention relating to the method for operating a toll system, the embodiments and further developments described above are considered transferable to the toll system of the second aspect of the invention insofar as the toll system and the toll collection device can be designed to carry out the process steps described with the embodiments and further developments.

[0119] Preferably, the toll system is configured such that the toll collection device is set up to send a request to the toll control center, along with the vehicle identifier, to enable a change in the operating mode of the toll collection device to the active operating mode via a wireless communication device in an initialization mode; the toll control center is set up to receive the request from the toll collection device to enable a change in the operating mode of the toll collection device to the active operating mode, along with the vehicle identifier.to send the release to the toll collection device in response to the request to switch to active operating mode, and as a result of receiving the request to release the toll collection device's operating mode to active operating mode, to register the active operating mode of the toll collection device linked to the vehicle identifier of the vehicle in the toll control center, and if the toll collection device is configured to receive the release to switch to active operating mode from the toll control center via the wireless communication device, and as a result of receiving the release to switch to active operating mode from the toll control center, to switch from initialization mode to active operating mode.

[0120] Preferably, the toll system comprises at least one control device, wherein the vehicle identifier registered in the at least one central data storage device of the toll control center in conjunction with the active or passive operating mode of the toll collection device is attached to the vehicle carrying the toll collection device in the form of an optically detectable license plate from the outside, in particular from the road side, wherein the control device is configured to optically capture the vehicle's license plate with an image while the vehicle is on a toll road section, to determine the vehicle identifier from the image and to send the determined vehicle identifier to the toll control center, or to send the image to the toll control center, in which case a processor of the toll control center is configured to determine the vehicle identifier itself from the image.wherein a processor of the toll control center is configured to determine, based on the received or self-determined vehicle identifier, which operating mode of the toll collection device linked to the vehicle identifier is registered in the at least one central data storage device of the toll control center, and if the operating mode linked to the vehicle identifier is the passive operating mode, to cause the unauthorized use of the toll section of the road, where the control device is positioned, by the vehicle to be registered in the at least one central data storage device of the toll control center.

[0121] This allows for penalties to be imposed for the user's failure to comply with the obligation to keep the toll collection device in a state ready for collection when used on toll sections of road.

[0122] The toll control center's processor, which may determine the vehicle identifier from the image, can be the toll control center's central processor. However, due to the specific task, it is preferably a different processor, for example an OCR processor (OCR = optical character recognition).

[0123] The toll control center's processor, which is configured to determine, based on the received or self-determined vehicle identifier, which operating mode of the toll collection device associated with the vehicle identifier is registered in the toll control center's at least one data storage device, and, if the operating mode associated with the vehicle identifier is the passive operating mode, to register the unauthorized use of the toll section of the road where the control device is located by the vehicle in at least one data storage device of the toll control center, can be the toll control center's central processor. Preferably, however, due to the specific task, it is a different processor, for example, an offense processor.

[0124] The invention is described in more detail below with reference to a preferred embodiment. For this embodiment, we will show... Fig. 1 schematically a toll collection device, Fig. 2a a flowchart for an operating procedure according to the invention of a toll control center, Fig. 2b a flowchart for an operating procedure of a toll collection device in an operating procedure of a toll system according to the invention, Fig. 3a schematically represents a state of a toll system with a toll collection device in active operating mode, which is also registered as such for the toll collection device in the toll control center, and Fig. 3a schematically represents a state of a toll system with a toll collection device in passive operating mode, which is also registered as such for the toll collection device in the toll control center.

[0125] Identical or similarly functioning components of different figures are provided with the same reference symbols. EXAMPLE OF EXECUTION

[0126] For the description of the exemplary embodiment, occasional reference is made to the Fig. 3a and Fig. 3b initially on Fig. Figure 1 is referenced, which schematically shows the structure of a toll collection device 10 according to the invention, the essential components of which are housed within a casing 10a, which has an opening or area for a display device 11 and – alternatively or cumulatively – for a light-emitting diode 11a – in both cases for signaling an operating mode of the toll collection device 10. If the toll collection device 10 is designed as a smartphone, the entire front of the toll collection device 10 can be designed as a display device and, in particular, also as a touch-sensitive input device.The toll collection device 10 comprises a main processor 18 for executing executable program code (commands) of a computer program for carrying out the method according to the invention, which for this purpose is stored in the data read / write memory 18a coupled to the main processor 18, for example after the user has downloaded this computer program for toll collection - hereinafter also called "Toll App" - optionally by transmitting their user data from a remote server via the mobile radio transmitter 16 or the WLAN transmitter 17 over a communication network (for example, the one that is in . Fig. 3a and Fig. 3b (marked with reference 30) has been downloaded. For execution, at least part of the Toll App is loaded into the working memory 18b; commands of the program code are executed in the main processor 18. Data connections, via which signals are transmitted from components of the toll collection device 10 to the main processor 18 and / or vice versa from the main processor 18 to the components, are in Fig. Figure 1 is represented by continuous connecting lines between the main processor 18 and the respective component. For geographic self-positioning, the toll collection device 10 has a GNSS positioning device 12 (also called a GNSS receiver 12), which can receive signals from satellites of a Global Navigation Satellite System (GNSS) or multiple GNSS satellites for processing by a GNSS processor (12b) via a GNSS signal receiving antenna 12a, provided that the reception of these signals is not disturbed, whether by natural shadowing of the environment or interference signals. An inertial measurement unit (IMU) 13 of the toll collection device 10 comprises a 3D accelerometer 13a, a 3D magnetic field sensor 13b, and a 3D gyroscope 13c, as well as an IMU processor 13d for processing the sensor signals into measured values.Using the signals or measured values ​​from these sensors, the geographical position of the toll collection device 10 can be determined from a previously established geographic position over a period of time or distance limited by the accuracy requirements for the position determination, even without receiving GNSS signals (e.g., in a tunnel). Furthermore, it is possible – again within certain accuracy limits – to estimate the movement of the toll collection device 10 even without knowing its geographic position.The IMU 13 can either transmit its output signal directly to the main processor 18 of the toll collection device 10, as shown, and / or to the GNSS receiver 12, which processes it to determine geographic self-positions in conjunction with geographic self-positions determined from GNSS signals during a process called dead reckoning. Alternatively, it can process the signal without dead reckoning, starting from a previously determined geographic self-position (e.g., one determined by dead reckoning), to determine a geographic self-position without GNSS signals during a process called "dead reckoning" of pure inertial navigation. In principle, however, this task can also be performed by the main processor 18 if it has access to the geographic GNSS self-position signals from the GNSS receiver 12 and the inertial navigation signals from the IMU 13.

[0127] The main processor 18 and the other components requiring power for their operation can be supplied with electrical current via a power supply connection 19. A battery 19a (typical for smartphones) or a supercapacitor 19a (typical for vehicles 20) can also be connected via the power supply connection 19. Fig. 3a, Fig. 3b) built-in devices, so-called On-Board Units (OBUs), which are connected to the vehicle's battery as a power source, are charged, which supply the main processor 18 and the other components with electrical current when power cannot be supplied via the power supply connection 19.

[0128] Not shown is a separate input device for the user to enter confirmations or values, which is particularly relevant when the vehicle is permanently installed (20). Fig. 3a, Fig. 3b) built-in and / or toll collection devices 10 created solely for the purpose of toll collection, so-called On-Board Units (OBUs), is common because for this embodiment the toll collection device 10 is designed as a smartphone 10 for carrying in the vehicle 20 with optional detachable attachment in the vehicle 20, whereby the input function is provided by the touch-sensitive display device 11 as part of the housing 10a.

[0129] For receiving and sending data via wireless message signals within the framework of at least one communication link between the toll collection device and the toll control center 40, the toll collection device 10 comprises a mobile radio transceiver 16 with an attached mobile radio antenna 16a and a WLAN transceiver 17 with an attached WLAN antenna 17a. For this embodiment, it is assumed that the connection setup for establishing a communication link between the toll collection device 10 and the toll control center 40 is initiated by the toll collection device 10, by the main processor 18 instructing the mobile radio transceiver 16 and / or the WLAN receiver to establish the connection to the toll control center 40, for example by calling a URL to a server of the toll control center 40.Alternatively, if a WLAN network access point is available, the connection to the toll control center can instead be initiated via the WLAN transceiver 17 at the instruction of the main processor 18. The communication link between the smartphone 10, or more precisely: the wireless transceiver (mobile transceiver 16 or WLAN receiver 17) and the toll control center comprises, according to... Fig. 3a and Fig. 3b a wireless communication link 31 between the wireless transmitter / receiver 16 / 17 and a communication network 30 via an access node to the communication network 30, and a wired and / or fiber optic communication link between the communication network 30 and the toll control center 40, again via an access node of the communication network 30.

[0130] To collect tolls, the user starts the Toll App on their toll collection device 10, which is configured as a smartphone 10 and initially puts the smartphone 10 into an initialization mode. When using a toll collection device 10 configured as an on-board unit 10, the toll collection program would start automatically when the vehicle is switched on and receives power.

[0131] In initialization mode, the Toll App prompts the user to enter the vehicle identification number 26 of their vehicle registration plate, which is represented in an optically detectable form by the vehicle registration plate 25 of their vehicle 20, into the smartphone 10 as the vehicle identifier 26. This identifier is then stored in the data storage 18a and / or 18b as a result of the user input. After a communication connection is established between the mobile transmitter 16 (or alternatively the WLAN transmitter 17) and the central processor 41 of the toll control center 40, which is initialized by the main processor 18, the mobile transmitter 16 sends the vehicle identifier 26 to the toll control center 40 along with a request to enable the smartphone 10 to switch to active operating mode. The central processor 41 then receives the vehicle identifier 26 along with the request to enable the smartphone 10 to switch to active operating mode.As a result of a successful plausibility check of the request for the vehicle identifier 26 and the absence of any obstacles that would prevent toll collection on the smartphone 10 for the vehicle registered under the vehicle identifier 26, the central processor 41 initiates a transmission of the release to switch to the active operating mode in which regular toll collection can take place to the smartphone 10, more precisely: to the mobile radio transmitter 16 of the smartphone 10.

[0132] Upon receiving the authorization on smartphone 10, the Toll App switches smartphone 10 from initialization mode to active operating mode. Smartphone 10 confirms this switch to active operating mode in a message to the toll control center 40, which in turn initiates the registration of smartphone 10's active operating mode, in conjunction with the vehicle identifier 26, in a toll data record 43 in a central data storage 42 of toll data records (toll data storage 42) for vehicle 20.

[0133] During the journey of the vehicle 20, in particular during the journey on toll sections 45, the driver, as (possibly only potential) user of toll sections 45 and the Toll App, carries the smartphone 10 in the vehicle 20, whereby the Toll App performs the toll collection function in active operating mode, insofar as this is possible.

[0134] In active operating mode, the Smartphone 10, in execution of the toll collection function and as part thereof in the position tracking function, not only repeatedly determines its own geographical positions every second by evaluating received signals from satellites of a GNSS system (this task can also be performed independently of the toll collection function by the Smartphone 10 if, for example, the location determination function is activated), but also stores the repeatedly determined own geographical positions, controlled by the Toll App, in at least one of the data storage devices 18a and 18b for provision for the position reporting function.In the simplest case, the main processor 18 takes over the geographic positions, which are constantly determined by the GNSS receiver 12 and may be improved by dead reckoning with measurements from the inertial measurement unit 13, in the manner provided by the operating system or a position provision function of the smartphone 10 independent of the Toll App, and arranges for their storage in the data storage 18a and / or 18b for use in the position reporting function. As part of the position reporting function of the toll collection function, the smartphone 10 initiates the establishment of a communication connection between the smartphone 10 and the toll control center 40 via the mobile phone transmitter 16, or, if a communication connection via the WLAN transmitter 17 would be preferable, via that transmitter.

[0135] If a communication link can be established between the smartphone 10 and the toll control center 40, the smartphone 10 transmits at least some, and possibly all, of its stored geographic positions that have been determined and stored since switching to active operating mode or since the last transmission of stored geographic positions, using its mobile radio transmitter 16 or its WLAN transmitter 17, in a position message via wireless message signals together with the stored vehicle identifier 26 to the central processor 41 of the toll control center 40. After the central processor 41 acknowledges receipt of the position message, the smartphone 10 terminates the communication link with the central processor 41.

[0136] In addition, and subsequently, the smartphone 10 determines further geographic positions as part of its position tracking function and stores them in data storage 18a and / or 18b for use in the next transmission of a position message, as provided for in the position reporting function. This message will contain the geographic positions determined and stored since the last transmission, but not yet sent to the toll control center 40. The Toll App provides for the regular transmission of position messages from the smartphone 10 to the toll control center in a standardized transmission mode at predetermined intervals of one minute. For this purpose, the smartphone regularly initiates the establishment of a communication connection to the toll control center. Other, shorter or longer intervals are also possible, for example, 30 seconds or 5 minutes.The establishment of the communication link to toll control center 40, initiated for each or every transmission of a position message, can already be considered a communication link test.

[0137] If, in normal transmission mode, no communication connection can be established between the smartphone 10 and the toll control center 40 at the specified normal time interval following the immediately preceding transmission of the last position message, the Toll App already interprets this as a communication connection test with a negative result, and the smartphone 10 then attempts, in an extraordinary transmission mode, to establish a communication connection to the toll control center 40 at different, shorter time intervals than the normal ones, for the transmission of the required position message, which may also contain geographical positions that have been determined and stored by the smartphone 10 since the unsuccessful attempt at the specified normal time interval following the immediately preceding transmission of the last position message.

[0138] Along with the position message, a status message can also be sent from smartphone 10 to toll control center 40, indicating the operating mode of the Toll App on smartphone 10 and the current error quota. An error quota greater than the minimum error quota (representing an exhausted error quota) is interpreted as an active operating mode, while an error quota equal to or less than the minimum error quota (representing an exhausted error quota) is interpreted as a passive operating mode. Alternatively, such a status message can also be sent independently of the position message from smartphone 10 to toll control center 40 at predefined intervals, for example, every 5 minutes, with a 20-second gap between it and the previous position message.The attempt by smartphone 10 to establish a communication connection to the toll control center 40, required for sending the status message without a position message, can in turn be interpreted by smartphone 10 as a communication connection test. Furthermore, the Toll App is designed to instruct the communication modules cellular transceiver 16 and / or WLA transceiver 17 to send test connection messages at short intervals of 10 seconds if the regular transmission of position and status messages has been unsuccessful. This configuration of messages to be sent will be assumed in the following sections.

[0139] The toll control center 40 processes the received geographic positions using digital geo-objects representing toll sections and identifying their section names. This data is then converted into infrastructural position data in the form of section names on a digital map, provided the matching criteria for comparing the geographic positions with the respective geo-object are met. For the toll sections thus determined, the toll control center 40 then calculates a toll fee assigned to vehicle 20 with vehicle identifier 26, which is payable by the owner of vehicle 20 associated with vehicle identifier 26. The central processor 41 or another processor (not shown) of the toll control center can be used for these tasks.

[0140] With reference to Fig. 3a describes the control procedure in the toll system in which the inventive method or the inventive toll collection device 10 is used while the toll collection device 10 is in active operating mode (represented in the display of the Toll App on the smartphone 10 as an active radio button “Tolling on”) and while the toll control center has registered the active operating mode of the toll collection device 10 assigned to the vehicle identifier 26 of the vehicle 20 (represented in the toll data record 43 as the flag “Tolling ON”): The vehicle 20 passes a control device 44 positioned above or on the side of the road on a toll section 45. The control device captures an optical image of the vehicle 20, including its license plate 25, which reproduces the vehicle identifier 26 in optically readable text form, in particular in a letter-number combination. A character recognition routine of the control device 44 determines the vehicle identifier 26 from the image of the license plate 25 and transmits it, together with an identifier that is representative of the monitored road section 45 where the control device 44 is positioned, via mobile communication using a wireless communication link 32, the communication network 30, and a wired / fiber optic communication link to an offense processor (not shown) of the toll control center 40.Based on the vehicle identifier 26 received from the control device 44, this determines the operating mode registered in the toll data record 43 of the central data storage 42, which is linked to this vehicle identifier 26. After determining that the operating mode is registered as active ("Tolling ON"), the offense processor initiates the storage or retention of the offense status for the vehicle identifier 26 in the toll data record 43 as offense-free (flag "Violation NO").

[0141] With reference to Fig. Section 2a now describes the operation of the toll control center to determine the intended operation of the smartphone 10 in active operating mode. Upon registration of the active operating mode in the toll data record 43, a predetermined central error quota of 70 minutes is initially stored in the toll data record 43 as the current error quota. While the active operating mode of the smartphone 10 is stored in the toll data record 43 in the central data storage 42, linked to the vehicle identifier as a result of the initialization procedure, the central processor 41 repeatedly checks whether the position and status messages expected from the smartphone 10 are being received.The processor is not configured to wait for the receipt of a specific message, i.e., either a position message or a status message, and thus for the establishment of a specific communication connection. Instead, it is configured to wait for the receipt of any message—in this sense, any unspecified message—be it a position message, a status message, or another message (for example, a connection test message), and thus for the establishment of any unspecified communication connection. To this end, the central processor 41 performs a message entry check (NEP) after a central time interval of one minute from the time interval in which the most frequent messages—in this case, the position messages—are expected to arrive. iWith i=1, the system checks whether an unspecified message has been received from smartphone 10. This should be the case if the Toll App on smartphone 10 is capable of regularly sending a position message or a status message to the toll control center as intended. This message receipt check NEP1 can also take place a few seconds up to a 30-second grace period, for example, 5 or 10 seconds, after the minute has elapsed until the expected receipt. This ensures that, in the event of a delayed connection setup or message transmission via the communication network 30, the smartphone 10 does not miss the transmission of the position message, which is prepared in a timely manner according to the rule of initializing the communication connection to the toll control center 40 for sending position messages every minute.Allowing and determining this grace period is a matter of interpreting which message should be considered late and from what point onward. If the message receipt check NEP1 is positive in this regard, the next message receipt check NEP2 is executed one minute later. The counter i of the message receipt checks NEP. i will therefore be increased by one, which in Fig. 2a is illustrated by the instruction “inc(i,1)”. This counter i does not necessarily have to be implemented in the method according to the invention, but is used in the description of this embodiment to represent the “external” message input checks NEP performed in different method sections. j Visible in operation without fault time measurement Fig. 2a of the “internal” incoming message checks NEP i+1 to be able to differentiate during operation using fault time measurement.

[0142] Is the external message incoming check NEP i If the negative message check (NEP) is negative in the sense that no further message has been received after one minute has elapsed since the last message, the central processor 41 starts a central error time measurement, either by starting a timer or by timestamping the negative message check (NEP). i stores data, with the central processor 41 performing internal message input checks (NEP) at 10-second intervals. i+1 These time intervals correspond to the rhythm of the previously mentioned connection test messages of the smartphone. Other time intervals, for example one minute, are also possible if such connection test messages are omitted from the toll system.

[0143] Is the result of the first internal message incoming check (NEP) i+1If the result is positive, the central error time measurement will be terminated without result.

[0144] For each internal message receipt check (NEP) i+1If the message receipt check is negative, a time-dependent central-side error of 10 seconds is determined and, if necessary, accumulated with previously determined time-dependent central-side errors. During accumulation, the central-side errors can be added to a total error (error count), or the central-side error quota can be reduced by the most recently determined time-dependent central-side error, starting from the initial central-side error quota. Finally, it is checked whether the central-side error quota has been exhausted.This would be the case if the total error of the additively accumulated individual specific central-side errors had reached or exceeded the central-side initial error quota, or if the central-side error quota, starting from the central-side initial error quota, had been reduced to zero or below by the repeatedly subtractive specific time-dependent central-side errors acting on the central-side error quota.

[0145] If the predetermined central error quota has not yet been exhausted, another internal message incoming check (NEP) takes place after 10 seconds. i+1Instead, if this is positive in the sense that it detected a message receipt within the last ten seconds, the central-side error time measurement is terminated. One or more cumulative time-dependent central-side errors determined up to that point can, initiated by the central processor 41, be registered in the toll data record 43 in full or in part as a central-side error level or as a central-side error quota reduced by the central-side error level, for further accumulation with further time-dependent central-side errors determined as a result of a restart of the central-side error time measurement. Alternatively, the central-side errors determined up to that point and, if applicable, accumulated up to that point can also be discarded (deleted), thereby restoring the initial central-side error quota.Then, one minute after the last message received, which originates from the error loop of the internal message entry checks (NEP), a check is performed. i+1 has led to an external message entry check (NEP) with a counter i increased by one twice accordingly. i instead of.

[0146] Finally, the error loop occurs as a result of a failed internal message input check (NEP). i+1 If the central error quota of originally 70 minutes is exhausted, the central processor 41 initiates a registration of the passive operating mode of the smartphone 10 instead of the active operating mode as the status of the smartphone 10 in the toll data record 43 linked with the vehicle identifier 26.

[0147] Based on Fig. Section 2b now describes the behavior of the smartphone 10, which is complementary to the toll control center 40. During the at least attempted execution of the toll collection function in active operating mode, the smartphone 10 checks in active operating mode whether the prerequisites for the continued execution of the toll collection function are sufficiently met.

[0148] Upon entering active operating mode, a predetermined decentralized error quota of 60 minutes is initially stored in the smartphone 10 as the current error quota. This is 10 minutes less than the centralized initial error quota of 70 minutes. Therefore, assuming the determination of time-dependent centralized and time-dependent decentralized errors is the same, the condition is met that the predetermined decentralized error quota of the smartphone 10 is exhausted before the predetermined centralized error quota of the toll control center 40 is exhausted.After entering active operating mode, which is only possible if a communication connection between the smartphone 10 and the toll control center 40 has previously existed for central-side approval of the switch to active operating mode, an initial communication connection check KVP1 is carried out after one minute - and all subsequent communication checks KVP. iFurthermore, the smartphone 10 checks whether a communication connection test between the smartphone 10 and the toll control center 40 can be established, either via the mobile phone transmitter 16 or via the WLAN transmitter. This initial communication connection test KVP1 takes place during a planned connection initiation within the framework of the position reporting function to transmit at least one position message to the toll control center 40, or during a planned connection initiation to transmit a status message, for example, about the current (active or passive) operating mode of the smartphone 10 when the Toll App is running, to the toll control center 40.A repetition of the communication connection test takes place regularly according to a repetition rule for the planned connection initializations for sending position messages and status messages, as well as for connection tests. Should the planned connection initializations fail, the repetition takes place regularly according to a repetition rule at predetermined constant time intervals, namely one minute for the position messages, 5 minutes for the status messages and 10 seconds for connection tests, as the central processor 41 toll center 40 expects from the smartphone 10.

[0149] If the initial communication connection test is successful, meaning that smartphone 10 determines that a communication connection can be established between smartphone 10 and toll control center 40, then the next communication connection test, KVP2, is executed according to the repetition rule. The counter i of the communication connection test KVPi will therefore be increased by one, which in Fig. 2 is illustrated by the instruction “inc(i,1)”. This counter i does not necessarily have to be implemented in the method according to the invention, but is used in the description of this embodiment to represent the “external” communication connection tests (CIP) carried out in different process sections. i Visible in operation without fault time measurement Fig. 2b of the “internal” communication link test CIP i+1 to be able to differentiate during operation using fault time measurement.

[0150] Communication link tests CIP iDuring the attempted connection setup for sending position and status messages, these steps are repeated as long as the communication connection test result is positive. If the communication connection test result is negative, meaning that smartphone 10 determines that a communication connection between smartphone 10 and toll control center 40 cannot be established, smartphone 10 initiates a decentralized error timer, either by starting a timer or by recording a timestamp of the negative external communication connection test (CIP). i This is then stored. According to the repetition rule for connection test messages, this is followed by another, now first, internal communication connection test (CIP). i+1 after 10 seconds. Is this the result of this further communication connection test (CIP)? i+1 If the result is positive, the decentralized error time measurement will be terminated without result.

[0151] However, for each internal communication link test, CIP (Continuous Improvement Process) is used. i+1If a communication link test result is negative, a time-dependent, decentralized error of 10 seconds is determined and, if necessary, accumulated with previously determined time-dependent, decentralized errors. During accumulation, the decentralized errors can be added to a total error (error count), or the decentralized error quota can be reduced by the most recently determined time-dependent, centralized error, starting from the initial decentralized error quota. Finally, it is checked whether the decentralized error quota has been exhausted.This would be the case if the total error of the additively accumulated individual specific decentralized errors had reached or exceeded the initial decentralized error quota, or if the decentralized error quota, starting from the initial decentralized error quota, had been reduced to zero or below by the repeatedly subtractive specific time-dependent decentralized errors acting on the decentralized error quota.

[0152] If the predetermined decentralized error quota has not yet been exhausted, another internal communication link check (CIP) takes place after 10 seconds. i+1 instead. Is the result of this communication link test (CIP) i+1If the establishment of a communication connection with the toll control center 40 by the main processor 18 or the Toll App is positive, the decentralized error time measurement is terminated. One or more cumulative, time-dependent, decentralized errors determined up to that point can, initiated by the main processor 18, be stored in the data write / read memory 18a and / or the working memory 18b in full or in part as a decentralized error count or as a decentralized error quota reduced by the decentralized error count, for further accumulation with further time-dependent, decentralized errors determined as a result of a restart of the decentralized error time measurement.Alternatively, the centrally determined and potentially accumulated errors can be discarded (deleted), thereby restoring the initial decentralized error quota. Subsequently, one minute after the last received message from the error loop of the internal communication link checks (CIP), a new check is performed. i+1 has led to an external communication link test (CIP) with a counter i increased by one twice accordingly. i instead of.

[0153] Is ultimately in the error loop as a result of an internal communication link check (CIP) i+1Once the decentralized error quota of 60 minutes has been exhausted, the smartphone 10 switches to passive operating mode from a hardware perspective; from a software perspective, the Toll App initiates the execution of computer program components that no longer serve to execute commands of the active operating mode, but rather commands of the passive operating mode. This means that the toll collection function of the Toll App, or rather the smartphone 10, is no longer executed. In passive operating mode, no further geographical positions are determined and stored on the smartphone 10 for transmission to the toll control center 40. If geographical positions are subsequently determined and stored in passive operating mode (for example, by another program running on the smartphone), these are not transmitted to the toll control center 40.When switching to passive operating mode, the user is notified of this fact by a corresponding message on the display device 11 (here, in the case of the smartphone 10, this is a touch-sensitive display device 11 that extends over the largest part of one of the two largest side surfaces of the smartphone 10; in the case of an on-board unit, the display device may be smaller in proportion to the side surface it covers or may be omitted entirely and instead signaled by a red LED 11a, which is not present in the smartphone 10) by means of a corresponding message ("Display of end of toll collection" in . Fig. 2; Display of the "Tolling off" radio button in Fig. 3b).

[0154] At this time, however, the active operating mode of the smartphone 10 is still registered in the toll control center 40 according to the invention, due to the same way of determining the time-dependent central-side errors and decentral-side errors in conjunction with the fact that the central-side initial error quota is 10 minutes greater than the decentral-side initial error quota.

[0155] There are now two ways in which the toll control center 40 registers the operating mode of the smartphone 10 as passive, if the operating mode of the smartphone 10 is already the passive operating mode: One possibility is that the smartphone 10 succeeds in establishing a communication connection to the toll control center 40 within the next 10 minutes in an attempt following the switch to passive operating mode (not in Fig. 2b) shown), to establish a communication connection to the toll control center 40. Within the framework of such a communication connection, the smartphone 10 will then send the last position data, which was determined and stored by the smartphone 10 in active operating mode but has not yet been sent to the toll control center 40 due to the lack of a communication connection, as a position message together with the vehicle identifier 26 and a status message about the current operating mode of the toll app and thus of the smartphone 10, which is passive, to the toll control center. Based on the received data, the central processor 41 can register the storage of the operating mode as "passive" for the vehicle 20 with the vehicle identifier 26 in the toll data record of the vehicle 20 with the vehicle identifier 26, which is stored in the data storage for toll data records 41, in Fig. 3b is represented as the flag “Tolling OFF”.

[0156] If the toll control center 40 does not receive a message about the passive operating mode of the smartphone 10 from the smartphone 10 within the next 10 minutes, the central error quota will also be exhausted after 10 minutes following the switch of the smartphone 10 to passive operating mode due to the lack of message receipt from the smartphone, which - as already described - causes the central processor 41 to instruct the registration of the passive operating state in the toll data record 43 of the vehicle 20 with the vehicle identifier 26.

[0157] With reference to Fig.3b describes the control procedure in the toll system in which the inventive method or the inventive toll control center 40 is used, while the smartphone 10 is in passive operating mode (represented in the display of the Toll App on the smartphone 10 as an active radio button “Tolling off”) and while the toll control center has registered the passive operating mode of the smartphone 10 assigned to the vehicle identifier 26 of the vehicle 20 (represented in the toll data record 43 as the flag “Tolling OFF”): The vehicle 20 passes a control device 44 positioned above or on the side of the road on a toll section 45. The control device captures an optical image of the vehicle 20, including its license plate 25, which reproduces the vehicle identifier 26 in optically readable text form, in particular as a letter-number combination. A character recognition routine of the control device 44 determines the vehicle identifier 26 from the image of the license plate 25 and transmits it, together with an identifier that is representative of the monitored road section 45 where the control device 44 is positioned, via mobile communication using a wireless communication link 32, the communication network 30, and a wired / fiber optic communication link to the toll control center's (not shown) offense processor 40.This compares the vehicle identifier 26 received by the control device 44 with the registered operating mode stored under this vehicle identifier 26 in the toll data record 43 of the central data storage 42. After determining that the operating mode is registered as passive ("Tolling OFF"), the offense processor initiates the registration of the offense status for the vehicle identifier 26 as an offense (flag "Violation YES") in the toll data record 43, also storing the route segment identifier of the route segment 45, which it knows from the transmitted identifier of the control device 44. Reference symbol list 10 Toll collection device (smartphone) 11 Display device 12 GNSS positioning device 12a GNSS signal receiving antenna 12b GNSS processor 13 Inertial Measurement Unit (IMU) 13a 3D accelerometer 13b 3D magnetic field sensor 13c 3D gyroscope 13d IMU processor 16 mobile radio transceivers 16a Mobile phone antenna 17 WLAN transceivers 17a WLAN antenna 18 Main processor 18a Data write / read memory 18b RAM 19 Power supply connection 19a battery, supercapacitor 20 vehicles 25 Vehicle registration plate 26 Vehicle Identifier 30 Communication network 31 Wireless communication connection 32 Wireless communication connection 33 Wired / Fiber Optic Communication Connection 40 Toll Center 41 central processor, toll processor 42 central data storage, toll data storage 43 Toll data record 44 Control device 45 toll section

Claims

Method for operating a toll control center (40), comprising the optional registration, by a central processor (41) of the toll control center (40), of either an active operating mode or a passive operating mode of a toll collection device (10) operated remotely from the toll control center (40), which is intended to be carried in or on a vehicle (20) digitally assigned to the toll collection device (10) during the use of toll sections (45) by the vehicle (20), linked in the toll control center (40) to a vehicle identifier (26) of the vehicle (20) in a central data storage device (42) of the toll control center (40), wherein the use of toll sections (45) by the vehicle (20) assigned to the toll collection device (10) during the time,in which the active operating mode of the toll collection device (10) linked to the vehicle identifier (26) of the vehicle (20) is registered in the central data storage (42) of the toll control center (40), is permitted, wherein the use of toll sections (45) by the vehicle (20) assigned to the toll collection device (10) is not permitted during the time in which the passive operating mode of the toll collection device (10) linked to the vehicle identifier (26) of the vehicle (20) is registered in the central data storage (42) of the toll control center (40), characterized in that the central processor (41) first initiates the registration of the active operating mode of the toll collection device (10) linked to the vehicle identifier (26) of the vehicle (20) in the central data storage (42) of the toll control center (40), and in a central error procedure during the time,in which the active operating mode of the toll collection device (10) is registered in the central data storage (42) of the toll control center (40), repeatedly expects or initiates the establishment of a communication link between the toll control center (40) and the toll collection device (10) originating from the toll collection device (10), determines at least one time-dependent central-side error, the magnitude of which increases with the duration of the elapsed time without the establishment of a specific or indefinite communication link between the toll collection device (10) and the toll control center (40) after a previously established specific or indefinite communication link between the toll collection device (10) and the toll control center (40), and upon detection,that a predetermined central-side error quota is exhausted by a specific time-dependent central-side error alone or by several specific time-dependent central-side errors cumulatively, the registration of the passive operating mode of the toll collection device (10) linked with the vehicle identifier (26) of the vehicle (20) in the central data storage (42) of the toll control center (40) is initiated. A method for operating a toll system comprising a method according to claim 1, characterized in that the operation of the toll collection device (10) provides an active operating mode and a passive operating mode, wherein the toll collection device (10) performs a toll collection function in the active operating mode, characterized by a position detection function and a position reporting function, wherein the toll collection device (10) does not perform the toll collection function in the passive operating mode, wherein the position detection function includes repeatedly storing self-positions of the toll collection device (10) determined by the toll collection device (10) in the toll collection device (10), and wherein the position reporting function includesto send the own positions stored by the toll collection device (10) in at least one position message to the toll control center (40) via wireless message signals within the framework of at least one communication link between the toll collection device (10) and the toll control center (40), provided that at least one communication link between the toll collection device (10) and the toll control center (40) can be established for this purpose, wherein the toll collection device (10) repeatedly expects the establishment of a communication link between the toll control center (40) and the toll collection device (10) in a decentralized fault procedure in active operating mode, either from the toll control center (40) when the central processor (41) initializes it, or initializes it itself when the central processor (41) expects the establishment of a communication link from the toll collection device (10).at least one time-dependent decentralized error is determined, the magnitude of which increases with the duration of a period of time without the establishment of a specific or indefinite communication link between the toll collection device (10) and the toll control center (40) after a previously established specific or indefinite communication link between the toll collection device (10) and the toll control center (40), and upon determination that a predetermined decentralized error quota has been exhausted by a specific time-dependent decentralized error alone or by several specific time-dependent decentralized errors cumulatively, switches from active operating mode to passive operating mode, wherein the predetermined decentralized error quota, the predetermined centralized error quota,The determination of time-dependent decentralized errors by the toll collection device (10) and the determination of time-dependent centralized errors by the central processor (41) are coordinated in such a way that the predetermined decentralized error quota of the toll collection device (10) is exhausted before the predetermined centralized error quota of the toll control center (40) is exhausted. The method according to claim 2, characterized in that the central processor in the central-side error procedure repeatedly expects the establishment of a communication link between the toll control center (40) and the toll collection device (10) originating from the toll collection device (10) for the receipt of a message from the toll collection device (10) in the toll control center (40) and determines at least one time-dependent central-side error based on repeated message input checks, the magnitude of which increases with the duration of the elapsed time without the receipt of a specific or unspecified message from the toll collection device (10) in the toll control center (40) after a previous receipt of a specific or unspecified message from the toll collection device (10) in the toll control center (40).wherein the toll collection device in the decentralized error procedure repeatedly initiates the establishment of a communication link between the toll control center (40) and the toll collection device (10) itself for sending a specific message from the toll collection device (10) to the toll control center (40) and determines at least one time-dependent decentralized error based on repeated communication link checks to see whether, starting from the toll collection device, a specific communication link between the toll collection device (10) and the toll control center (40) for sending a specific message or an indefinite communication link between the toll collection device (10) and the toll control center for sending an indefinite message can be established, the magnitude of which increases with the duration of the elapsed time without the successful attempt,As part of a communication link test, the definite or indefinite communication link between the toll collection device (10) and the toll control center (40) grows after a previously successfully established definite or indefinite communication link between the toll collection device (10) and the toll control center (40). Method according to claim 2 or 3, characterized in that, within the framework of one or more communication links established between the toll collection device (10) and the toll control center (40), the toll collection device, in an initialization mode, sends a request to the toll control center (40) by means of wireless signals to release a change in the operating mode of the toll collection device to the active operating mode together with the vehicle identifier of the vehicle, and the toll control center (40) receives from the toll collection device (10) the request to release a change in the operating mode of the toll collection device to the active operating mode together with the vehicle identifier of the vehicle.The toll control center (40) sends the release to the toll collection device (10) in response to the request to switch to active operating mode, and the toll collection device (10) receives the release to switch to active operating mode from the toll control center (40) by means of wireless signals, whereby the toll collection device (10) switches from initialization mode to active operating mode as a result of receiving the release to switch to active operating mode from the toll control center (40), and the central processor (41) initiates the registration of the active operating mode of the toll collection device (10) linked to the vehicle identifier (26) of the vehicle (20) in the central data storage (42) of the toll control center (40) as a result of receiving the request from the toll collection device (10) to release a switch of the operating mode of the toll collection device (10) to active operating mode in the toll control center (40). Toll control center (40) with at least one central processor (41) and at least one central data storage device (42), wherein the at least one central processor (41) is configured to optionally register either an active operating mode or a passive operating mode of a toll collection device (10) operated remotely from the toll control center (40), which is intended to be carried in or on a vehicle digitally assigned to the toll collection device (10) during the vehicle's use of toll sections, in the toll control center (40) linked to a vehicle identifier (26) of the vehicle (20) in the at least one central data storage device (42) of the toll control center (40), thereby enabling the vehicle (20) assigned to the toll collection device (10) to use toll sections during the time,in which the active operating mode of the toll collection device (10) is registered in the at least one central data storage device of the toll control center (40), wherein the use of toll sections by the vehicle assigned to the toll collection device (10) is not permitted during the time in which the passive operating mode of the toll collection device (10) is registered in the at least one central data storage device (42) of the toll control center (40), characterized in that the at least one central processor (41) is configured to first initiate the registration of the active operating mode of the toll collection device (10) linked with the vehicle identifier (26) of the vehicle (20) in the at least one central data storage device (42) of the toll control center (40), and in a central error procedure during the time,in which the active operating mode of the toll collection device (10) is registered in at least one central data storage device of the toll control center (40), repeatedly expect or initiate the establishment of a communication link between the toll control center (40) and the toll collection device (10) originating from the toll collection device (10), determine a time-dependent central error, the magnitude of which increases with the duration of the elapsed time without the establishment of a specific or indefinite communication link between the toll collection device (10) and the toll control center (40) after a previously established specific or indefinite communication link between the toll collection device (10) and the toll control center (40), and check whether a predetermined central error quota is exhausted by a specific time-dependent central error alone or by several specific time-dependent central errors cumulatively.and upon determination that the predetermined central error quota has been exhausted by a specific time-dependent central error alone or by several specific time-dependent central errors cumulatively, to initiate the registration of the passive operating mode of the toll collection device (10) linked with the vehicle identifier (26) of the vehicle (20) in the at least one central data storage device (42) of the toll control center (40). Toll system with a toll control center (40) according to claim 5 and at least one toll collection device (10) characterized in that, wherein the toll collection device (10) is configured to operate in an active operating mode or in a passive operating mode, wherein the toll collection device (10) is configured to perform a toll collection function in the active operating mode, which is characterized by a position detection function and a position reporting function, wherein the toll collection device (10) is configured not to perform the toll collection function in the passive operating mode, wherein the position detection function includes repeatedly storing self-positions of the toll collection device (10) determined by the toll collection device (10) in the toll collection device (10), and wherein the position reporting function includes,to send the own positions stored by the position detection function from the toll collection device (10) to the toll control center (40) in at least one position message by means of wireless message signals within the framework of at least one communication link between the toll collection device (10) and a toll control center (40), insofar as at least one communication link between the toll collection device (10) and the toll control center (40) can be established for this purpose, wherein the toll collection device (10) is configured to repeatedly expect the establishment of a communication link between the toll control center and the toll collection device (10) originating from the toll control center in a decentralized fault procedure in active operating mode, if the at least one central processor (41) is configured to initialize it, or to initialize it itself if the at least one central processor (41) is configured.to expect the establishment of a communication link originating from the toll collection device (10), to determine a time-dependent decentralized error, the magnitude of which increases with the duration of a period of time without the establishment of a communication link between the toll collection device (10) and the toll control center (40) after a previously established communication link between the toll collection device (10) and the toll control center (40), to check whether a predetermined decentralized error quota is exhausted by a specific time-dependent decentralized error alone or by several specific time-dependent decentralized errors cumulatively, and upon determination that the predetermined decentralized error quota is exhausted by a specific time-dependent decentralized error alone or by several specific time-dependent decentralized errors cumulatively,to switch from active operating mode to passive operating mode, wherein the predetermined decentralized error quota, the predetermined centralized error quota, the determination of time-dependent decentralized errors by the toll collection device (10) and the determination of time-dependent centralized errors by the at least one central processor (41) are coordinated such that the predetermined decentralized error quota of the toll collection device (10) is exhausted before the predetermined centralized error quota of the toll control center (40) is exhausted. Toll system according to claim 6, characterized in that the toll collection device (10) is configured to send a request to the toll control center (40) in an initialization mode by means of a wireless communication device (16, 17) to release a change in the operating mode of the toll collection device to the active operating mode together with the vehicle identifier (26) of the vehicle (20), and the toll control center (40) is configured to receive from the toll collection device (10) the request to release a change in the operating mode of the toll collection device (10) to the active operating mode together with the vehicle identifier (26) of the vehicle (20).to send the release to the toll collection device (10) in response to the request to switch to active operating mode, and as a result of receiving the request to release the operating mode of the toll collection device (10) to active operating mode, the toll collection device (10) shall register the active operating mode of the toll collection device (10) linked to the vehicle identifier (26) of the vehicle (20) in the toll control center (40), and the toll collection device (10) is configured to receive the release to switch to active operating mode from the toll control center (40) by means of the wireless communication device (16, 17), and as a result of receiving the release to switch to active operating mode from the toll control center (40), switch from initialization mode to active operating mode. Toll system according to claim 6 or 7, wherein the toll system comprises at least one control device (44), characterized in that the vehicle identifier (26) registered in the at least one central data storage device (42) of the toll control center (40) in conjunction with the active or passive operating mode of the toll collection device (10) is attached to the vehicle (20) carrying the toll collection device (10) in the form of an optically detectable license plate (25) from the outside, in particular from the road side, wherein the control device (44) is configured to optically detect the license plate (25) of the vehicle (20) with an image capture while the vehicle (20) is on a toll road section (45), to determine the vehicle identifier (26) from the image capture and to send the determined vehicle identifier (26) to the toll control center (40) or to send the image capture to the toll control center (40).wherein in this case a processor of the toll control center (40) is configured to determine the vehicle identifier (26) itself from the image recording, wherein a processor of the toll control center (40) is configured to determine, on the basis of the received or self-determined vehicle identifier (26), which operating mode of the toll collection device (10) associated with the vehicle identifier (26) is registered in the at least one central data storage device (42) of the toll control center (40), and if the operating mode associated with the vehicle identifier (26) is the passive operating mode, to cause the unauthorized use of the toll section (45) on which the control device (44) is positioned by the vehicle (20) in the at least one central data storage device (42) of the toll control center (40).

Images