Method and apparatus for authenticating a vehicle

Abstract

An apparatus (130) for authenticating a first vehicle (120) for a function is described. The apparatus (130) is designed to determine a feature code word (113) related to a vehicle feature (122) of the first vehicle (120) and to compare the feature code word (113) with a plurality of different reference code words (201) for a corresponding plurality of different vehicles (120). The apparatus (130) is further designed to determine whether the first vehicle (120) is authenticated for the function based on the comparison.

Description

TECHNICAL FIELD

[0001] The present invention relates to a method and a corresponding device with which a vehicle license plate can be evaluated in a secure manner, for example in order to authenticate and / or unlock a vehicle for a specific function or service. BACKGROUND

[0002] A vehicle can be uniquely identified by its license plate. It is therefore suitable that an authentication of the vehicle for one or more functions and / or services can be achieved by means of the license plate of the vehicle. A problem here is that a storage and / or transmission of the license plate can be problematic in terms of data protection law, in particular if the vehicle user has not explicitly consented to the storage and / or transmission. SUMMARY

[0003] The present document relates to the technical task of being able to achieve an authentication and / or unlocking of a vehicle for a function and / or service in particular securely on the basis of a vehicle feature, in particular on the basis of a vehicle license plate.

[0004] The task is solved by a device for authenticating a first vehicle for a function, a system for authenticating a first vehicle for a function and a method for authenticating a first vehicle for a function according to the invention.

[0005] According to one aspect, a device for authenticating a first (motor) vehicle for a function is described. Exemplary functions are: receiving an energy carrier (e.g. fuel or electrical power) by the vehicle to drive the first vehicle; driving to an access-restricted area; and / or parking the first vehicle in a parking space or parking garage.

[0006] The device is provided to determine, in particular to receive, a feature code word related to at least one vehicle feature of the first vehicle. The vehicle feature can comprise a license plate of the first vehicle, in particular the license plate of the first vehicle. The feature code word can have been determined by means of a cryptographic hash function, for example SHA-2. Furthermore, the feature code word can have been encrypted by means of at least one predefined string, in particular by means of at least one predefined SALT. The feature code word can thus indicate the vehicle feature in an encrypted form.

[0007] Furthermore, the device can be provided to compare the feature code word with a plurality of different reference code words for a corresponding plurality of different vehicles. The plurality of different vehicles can be vehicles that are authenticated and / or unlocked for the function.

[0008] The apparatus can be configured to receive the plurality of reference code words (in a preparation phase of the examination of the feature code word) from one or more different service providers for billing of fees for provided functions and to store the plurality of reference code words in a reference database. Here, the individual reference code words can be received in association with a certificate. The certificate for the reference code word of the (paying) service provider and for the vehicle can indicate that an examination has taken place in such a way that the service provider is authorized to pay fees for provided functions as the owner of the vehicle.

[0009] In other words, the apparatus can be configured to receive a certificate for the reference code word of a determined service provider and for a determined vehicle. It can then be determined on the basis of the certificate whether the service provider is authorized to bill fees for functions provided for the determined vehicle. The apparatus can be configured to reject the reference code word if it is determined that the service provider is not authorized to bill fees for functions provided for the determined vehicle. This can further improve security.

[0010] The different reference code words can have been determined on the basis of a vehicle feature of the respective vehicle. The individual reference code words can have been determined by means of a cryptographic hash function, for example SHA-2. Furthermore, the individual reference code words can have been encrypted by means of at least one predefined string, in particular by means of at least one predefined SALT. Thus, the individual reference code words can each indicate at least one vehicle feature of the vehicle in an encrypted form.

[0011] Here, the plurality of reference code words and the feature code word have each been determined on the basis of a uniform vehicle feature (of the respective vehicle) and / or on the basis of a uniform cryptographic hash function. In other words, the same cryptographic hash function can have been used for the different code words. Furthermore, the same vehicle feature (for example the license plate of the respective vehicle) can have been used for the different code words.

[0012] The comparison of the feature code word with the different reference code words thus enables a comparison of the vehicle feature of the first vehicle with the respective vehicle feature of the plurality of different vehicles in an encrypted manner.

[0013] The apparatus is further configured to determine on the basis of the comparison whether the first vehicle is authenticated for the function. In particular, the apparatus can be configured to determine that the first vehicle is authenticated for the function if a reference code word corresponding to the feature code word is identified from the plurality of reference code words. Alternatively or additionally, the apparatus can be configured to determine that the first vehicle is not authenticated for the function if no reference code word corresponding to the feature code word is identified from the plurality of reference code words.

[0014] Thus, the apparatus can enable a reliable and secure verification of the authentication of the vehicle for the specific function or the authorization of the vehicle for the specific function, in particular with respect to data protection regulations.

[0015] The apparatus can be configured to send feedback to a (separate, locationally separated) provider unit of the provider of the function, if it is determined that the first vehicle is authenticated for the function, in order to cause a provision of the function (e.g. in order to enable a refueling process or a charging process, or in order to enable an entry). Alternatively or additionally, the apparatus can be configured to cause a billing unit to transfer a fee for the provided function from a user of the first vehicle to the provider of the function, if it is determined that the first vehicle is authenticated for the function. This way, the function can be provided and billed in a secure and reliable manner, in particular without looking at vehicle features in plain text.

[0016] Alternatively or additionally, the apparatus can be configured to send feedback to a signaling unit (e.g. to a light element, such as a light), if it is determined that the first vehicle is authenticated for the function, wherein the signaling unit is configured to signal to a user of the first vehicle (e.g. by outputting a visual signal) that it has been determined that the first vehicle is authenticated for the function. This way, the convenience for the user can be further improved.

[0017] The plurality of reference code words can comprise a plurality of subgroups of reference code words. Here, different subgroups can be associated with different providers of the function and / or different billing units (e.g. with different payment service providers). The reference code words of different subgroups can have been encrypted with a different string each. On the other hand, the reference code words of the same subgroup can have been encrypted with the same string. Different providers and / or different billing units can thus be associated with different strings (in particular different SALTs) respectively.

[0018] The apparatus can be configured to determine, based on the comparison, that a first reference code word from the plurality of reference code words corresponds to the first feature code word. Further, the apparatus can be configured to determine, based on the string used for encrypting the first reference code word, a provider unit of a provider of the function and / or a billing unit for billing a fee for the provided function. This way, the convenience and security in providing the function and / or in billing for the provided function can be further improved.

[0019] According to an aspect, a system for authenticating a first vehicle for a function is described. The system comprises a sensor unit, e.g. with a camera, which is arranged to detect a vehicle feature, in particular a license plate, of the first vehicle. The sensor unit is further arranged to determine a feature code word based on the vehicle feature. Furthermore, the system comprises an authentication device as described in this document, which is arranged to authenticate the first vehicle based on the feature code word.

[0020] The system can comprise at least one billing unit of a billing service provider. The billing unit can be arranged to bill a fee for the provided function.

[0021] The sensor unit can be arranged to receive a predefined string, in particular a predefined SALT, from the billing service provider for encrypting the vehicle feature of the vehicle and for determining the feature code word of the vehicle.

[0022] In particular, the sensor unit can receive different strings from different billing service providers, respectively. Then, the vehicle feature can be encrypted with all existing strings, respectively, so that a plurality of different feature code words is determined for a plurality of different billing service providers. The feature code word can then be compared with the respective reference code words. This way, the vehicle can be authenticated for a specific function in a reliable and secure manner. Furthermore, the billing service provider responsible for billing can be identified in an efficient and secure manner.

[0023] The predefined string of the payment service provider can be time-limited. Alternatively or additionally, the predefined string is valid only spatially, if necessary. Alternatively or additionally, the predefined string can be valid only for one or more specific functions, if necessary. This way, the security of the system can be further improved.

[0024] The system can comprise a plurality of different authentication devices for a respective plurality of different reference code words. The sensor unit can be arranged to determine, based on a property of the determined feature code word, e.g. using a predefined assignment rule, to which of the plurality of different authentication devices the feature code word should be transmitted for authentication. This way, the performance and security of the system can be further improved.

[0025] According to another aspect, a method for authenticating a first vehicle for a function is described. The method comprises determining a feature code word related to a vehicle feature of the first vehicle. The method further comprises comparing the feature code word with a plurality of different reference code words for a respective plurality of different vehicles. Furthermore, the method comprises determining whether the first vehicle is authenticated for the function based on the comparison.

[0026] According to another aspect, a software (SW) program is described. The software program can be arranged for execution on a processor and for implementing the method described in this document thereby.

[0027] According to another aspect, a storage medium is described. The storage medium can comprise a SW program arranged for execution on a processor and for implementing the method described in this document thereby.

[0028] It should be noted that the methods, apparatuses and systems described herein can be used alone or in combination with the other methods, apparatuses and systems described in this document. Furthermore, any aspect of the methods, apparatuses and systems described in this document can be combined in a variety of ways. In particular, features can be combined in a variety of ways. BRIEF DESCRIPTION OF DRAWINGS

[0029] Furthermore, the application is described in more detail by means of exemplary embodiments. In the drawings:

[0030] Figure 1 An exemplary system for evaluating a vehicle feature is shown;

[0031] Figure 2 An exemplary code word-database is shown; and

[0032] Figure 3 A flow chart of an exemplary method for evaluating a vehicle feature is shown. DETAILED DESCRIPTION

[0033] As mentioned in the introduction, this document relates to a secure, in particular data protection regulation-compliant, authentication and / or unlocking of a (motor) vehicle, such as a car, a truck, a bus and / or a motorcycle, to a service and / or to a function. In this regard, Figure 1 An exemplary system 100 is shown, which comprises a provider unit 110 run by a provider of a function and / or a service. Exemplary functions and / or services are, for example, refueling of an energy storage device of a vehicle 120, entering a cinema, entering a certain road, etc. The provider unit 110 can be arranged to detect sensor data, in particular image data, related to a vehicle feature 122 of the vehicle 120, in particular related to a license plate of the vehicle, by means of a sensor or by means of a sensor unit 112, in particular by means of a camera. Furthermore, the provider unit 110 and / or the sensor unit 112 can be arranged to encrypt the vehicle feature 122 in order to determine a feature code word 113. For this purpose, a cryptographic hash function, such as SHA-2, can be used. In this regard, the vehicle feature 122 can be encrypted together with one or more SALTs in order to further improve data security.

[0034] The feature codeword 113 can be sent to a separate inspection unit 130 (e.g., to a so-called agent). The inspection unit 130 is also collectively referred to as the apparatus in this document. The inspection unit 130 can be configured to compare the feature codeword 113 with data from a reference database 200 (see reference 200). Figure 2 The reference codeword 201 is compared. The reference database 200 may include multiple reference data records 205, which are used for corresponding multiple different vehicles 120.

[0035] The reference data record 205 for identifying the vehicle 120 may include a reference codeword 201 for the identified vehicle 120. Here, the reference codeword 201 is determined, and in particular, encrypted, in the same manner as the feature codeword 113 for identifying the vehicle 120, i.e., based on the same vehicle feature 112, based on the same cryptographic hash function, and / or based on one or more SALTs.

[0036] Furthermore, the reference data record 205 used to identify the vehicle 120 may include functional information 202. An example of functional information 202 is:

[0037] • Information related to the one or more functions and / or services, wherein the determined vehicle 120 is authorized for the one or more functions and / or services; and / or

[0038] • Information related to billing methods, such as information related to billing service providers used for billing the fees required for the services.

[0039] The checking unit 130 may be configured to compare the feature codeword 113 provided by the provider unit 110 with one or more reference codewords 201 from the reference database 200. Specifically, the checking unit 130 may be configured to check whether the feature codeword 113 matches one of the reference codewords 201 from the reference database 200. The checking unit 130 can then provide feedback 133 to the provider unit 110 based on the check. Specifically, if the consistency between the feature codeword 113 and the reference codeword 201 has been confirmed, release for the function and / or service can be granted as feedback 133. Furthermore, if necessary, function information 202 can be fed back from the reference data record 205 used to identify the reference codeword 201. On the other hand, if consistency cannot be confirmed between the feature codeword 113 and any of the reference codewords 201 from the reference database 200, a rejection can be provided as feedback 133.

[0040] The checking unit 130 can also be set up to send charging data 134 to a charging unit 140. The charging data 134 can for example indicate the amount that the vehicle 120 or the user of the vehicle 120 has to pay for the functions and / or services provided by the provider. The charging unit 140 can for example be run by a bank or by a payment service provider. The charging can thus be initiated directly by the checking unit 130. The charging unit 140 can then send a confirmation 141 to the provider unit 110 that the charging for the provided functions and / or services has taken place. This communication can take place without the vehicle features 122 having to communicate this in plain text for this purpose.

[0041] The system 100 is thus able to authenticate and / or unlock the vehicle 120 for functions and / or services without having to store and / or evaluate the vehicle features 122, in particular the license plate, explicitly for this purpose.

[0042] A method is thus described in which for example the vehicle license plate 122 (and / or other vehicle features) is read in and encrypted if necessary with one or more SALT. The one or more Salt can be stored directly in a memory (for example a read-only memory) on the scanning system 112 (for example a camera). This can for example be done by the operator of the checking unit 130 and / or by the operator of the provider unit 110 and / or by the operator of the charging unit 140.

[0043] In addition, the encrypted version of the license plate + Salt can be stored as a reference codeword 201 in a reference database 200. This can be done for all users of the system 100, in particular for all vehicles 120 that use the system 100. The reference database 200 can be stored on a separate agent system, namely on the checking unit 130, which can implement the comparison of the hash values, i.e. the codewords 113, 201, and thus bring together the providers of functions and / or services and the scanning system 112.

[0044] The method can have the following steps: the scanner 112 scans the license plate 122 and encrypts it with all one or more stored SALT and sends the one or more hash values 113 to the separate agent 130. The agent 130 compares the one or more hash values 113 with all reference hash values 201 that have been stored by the respective provider of functions and / or services. If a match is found, the agent 130 grants authorization and, if necessary, connects further systems for subsequent communication. If no match is found, it can be confirmed that the license plate 122 is not registered at the provider. However, in this case the license plate 122 is not sent and / or compared in plain text.

[0045] In one example, the vehicle 120 drives, for example, to a refueling column. The license plate 122 is scanned and the hash value 113 is transmitted to the agent 130. The agent 130 reports after a positive check that the hash value 113 has a refueling authorization. The refueling column is then unlocked. In addition, the agent 130 can connect the payment service provider 140 with the refueling station for automatic billing. The method can be used in a similar way for access authorization and / or for parking services.

[0046] In a preparation phase of the operation of the described system 100, respectively different operator-specific strings, in particular SALTs, can be provided in the agent 130 and / or in the scanner 112 by different operators or service providers of different billing units 140, for example different service providers billing for a specific function. In addition, the respective operator or service provider can provide the agent 130 with license plates 122 of customers of the respective operator, encrypted with the respective operator-specific string, as reference code words 201.

[0047] The scanner 112 can then encrypt the detected license plate 122 with each of the plurality of strings in order to determine a respective plurality of feature code words 113. The plurality of feature code words 113 can then be transmitted to the agent 130, and the agent 130 can determine by comparison with the reference code words 201 whether the detected license plate 122 is registered at an operator or service provider and at which operator or service provider the detected license plate 122 is registered.

[0048] The (payment) service providers, for example refueling billing machines, can thus transmit their SALTs to the respective scanners 112 (cameras) via the agent 130, which encrypt the license plates 122 with the SALTs and transmit to the agent 130. There is at least one own SALT for each payment service provider. At the same time, the payment service providers store their customer data in the form of hash values (customer license plate + SALT), i.e. as reference code words 201, at the agent. The scanner 112 itself does not make the comparison, but transmits the N hash values 113 (for N payment service providers) to the agent 130, which then compares these hash values with the reference code words 201. If there is a match, the payment service provider is determined by means of the SALT of the payment service provider. Data relating to the operator of the function, for example the refueling station, and / or relating to the amount to be paid, can then be passed on to the payment service provider. The payment can be made on the basis of known online payment methods.

[0049] The SALT (and thus the hash value determined thereby) can be time-limited in order to further increase security. Thus, the payment service provider can provide the agent 130 with one or more new SALT and reference codewords 201 encrypted with the one or more new SALT after a predefined time period has elapsed. The expired SALT and / or reference codeword 201 can then be deleted.

[0050] Alternatively or additionally, the SALT and / or the reference codeword 201 can have a spatial validity (and be valid only for a certain region, respectively). This can increase the performance of the scanner 112 and / or the agent 130.

[0051] Alternatively or additionally, individual SALT can have semantic restrictions related to individual functions or function groups. For example, a SALT can be valid only for a refueling function or only for a parking function, if necessary. Thus, the number of hash values 113 that the scanner 112 has to calculate can be reduced. Thus, the efficiency of the system 100 can be increased.

[0052] For load distribution and / or further increasing security, the hash values 201 of the (payment) provider or service provider x can be distributed to a number y > 1 of agents 130, in particular in such a way that only a part of the known hash values 201 is stored on each of these agents 130. The algorithm of the distribution can here be based on the resulting hash values 201 and be known to the service provider and / or the scanner 112. In particular, a standardized method can be used for distributing the hash values 201. For example, all even hash values 201 can be stored on agent A, while all odd hash values 201 are stored on agent B. If necessary, further mirroring can be made for performance reasons, in order to guarantee a fast response time, for example. For example, agents A and B (even hash 201) and agents C and D (odd hash 201) can have identical data records 205, respectively. All even hash values 201 can then be sent from the scanner 112 to the agents A and B of the service provider. All odd hash values 201 can be sent to agents C and D, so that a fast response can still be expected through the respective other agent, if one agent is overloaded. This applies analogously to any other distribution algorithm.

[0053] The system 100 can display an interface for signaling a successful match and / or an unsuccessful match. For example, the system 100 can be set up to identify whether a vehicle 120 is authorized to park in a specific parking space (e.g. because the owner of the vehicle and the owner of the parking space have a corresponding agreement). The agent 130 identifies the match and the service provider signals this. If the service provider agrees, another display device, e.g. a light on the corresponding parking space, can be informed, which lights up green if the match was successful (otherwise not). This enables immediate feedback on whether the system 100 has correctly identified the vehicle.

[0054] The functions of the agent 130 can be integrated in the scanner 112 if necessary. The scanner 112 must then have the corresponding computing performance. Furthermore, the security with regard to data protection is at least partially impaired thereby.

[0055] The system 100 can be designed in such a way that the service provider is ensured or must provide proof that he has a contractual agreement with the owner of the vehicle 120 via a verification system. For example, a verified identity manager can confirm that Mr. Mustermann (e.g. represented by the username m. mustermann in the system 100) is the current legal owner of the vehicle 120 with the license plate 122X-YZ 1234. Based on this confirmation, the service provider can then request an electronic certificate at a national or independent authority (e.g. the license plate issuing office), which certifies that the license plate X-YZ 1234 and the identity of the owner Mr. Mustermann of the vehicle coincide. The certificate thus indicates that the service provider for the license plate X-YZ 1234 has a valid contractual relationship with the owner. Based on this, a further independent entity can calculate a hash value (i.e. reference code word 201) using the SALT of the service provider and the license plate of the vehicle 120. A certificate of the overall legality of the data comparison can be integrated here. The hash value 201 and the certificate are used by the agent 130. The agent 130 can accept the request only if the certificate is valid if necessary. This can further improve the security of the data.

[0056] Figure 3 A flow chart of an exemplary (if necessary computer-implemented) method 300 for authenticating a first vehicle 120 for a function (e.g. for a refueling or charging process) is shown. The method 300 comprises determining 301 a feature code word 113 related to a vehicle feature 122 of the first vehicle 120. The feature code word 113 can comprise a hash value or be a hash value determined based on the vehicle feature 122 using a cryptographic hash function. The feature code word 113 can be determined by a sensor unit 112 and / or by a provider unit 110 of a provider of the function and can be transmitted to e.g. a checking unit or agent 130.

[0057] The method 300 further comprises comparing 302 the feature code word 113 with a plurality of different reference code words 201 for a corresponding plurality of different vehicles 120. The reference code words 201 can be determined in a preparation phase and stored on a storage unit (of the checking unit 130).

[0058] The method 300 further comprises determining 303 whether the first vehicle 120 is authenticated for the function based on said comparison. This enables authenticating a vehicle in a reliable and secure manner, in particular with respect to data protection.

[0059] The application is not limited to the embodiments shown. In particular, it should be noted that the description and drawings merely illustrate the principles of the proposed method, device and system.

Claims

1. An apparatus (130) for authenticating a first vehicle (120) with respect to a function; wherein, The apparatus (130) is arranged to - determine a feature code word (113) related to a vehicle feature (122) of a first vehicle (120); - compare the feature code word (113) with a plurality of different reference code words (201) for a corresponding plurality of different vehicles (120); the plurality of reference code words (201) comprises a plurality of subgroups of reference code words (201); the reference code words (201) of different subgroups have been encrypted with a different string each; the reference code words (201) of the same subgroup have been encrypted with the same string; - determine, based on the comparison, whether the first vehicle (120) is authenticated for the function; - determine, based on the comparison, that a first reference code word (201) from the plurality of reference code words (201) corresponds to the feature code word (113); and - determine, based on the string used to encrypt the first reference code word (201), a provider unit (110) of a provider of the function and / or a billing unit (140) for billing a fee for the provided function.

2. The apparatus (130) according to claim 1, wherein When it is determined that the first vehicle (120) is authenticated for the function, the apparatus (130) is arranged to - send a feedback (133) to a provider unit (110) of a provider of the function in order to cause a provision of the function; and / or - send a feedback (133) to a signaling unit, wherein the signaling unit is arranged to signal to a user of the first vehicle (120) that it has been determined that the first vehicle (120) is authenticated for the function; and / or - cause a billing unit (140) to transfer a fee for the provided function from the user of the first vehicle (120) to the provider of the function.

3. The apparatus (130) according to claim 1 or 2, wherein The plurality of reference code words (201) and the feature code word are each - based on a uniform vehicle feature (122); and / or - based on a uniform encryption hash function determined.

4. The apparatus (130) according to claim 1 or 2, wherein The plurality of reference code words (201) and the feature code word have been encrypted by means of at least one predefined string.

5. The apparatus (130) according to the preceding claim 4, wherein The plurality of reference code words (201) and the feature code word have been encrypted by means of at least one predefined SALT.

6. The apparatus (130) according to claim 1 or 2, wherein The apparatus (130) is arranged to - determine that the first vehicle (120) is authenticated for the function if a reference code word (201) corresponding to the feature code word (113) is identified from the plurality of reference code words (201); and / or - determine that the first vehicle (120) is not authenticated for the function if no reference code word (201) corresponding to the feature code word (113) is identified from the plurality of reference code words (201).

7. The apparatus (130) according to claim 1 or 2, wherein The apparatus (130) is arranged to receive the plurality of reference code words (201) from one or more different service providers for billing a fee for a provided function and to store the plurality of reference code words in a reference database (200).

8. The apparatus (130) of claim 7, wherein The apparatus (130) is arranged to - receive a certificate for a determined service provider's reference code word and for a determined vehicle (120); - checking, based on the certificate, whether the service provider is authorized to charge for the determined function provided by the determined vehicle (120); and - rejecting the reference code word if it is determined that the service provider is not authorized to charge for the determined function provided by the determined vehicle.

9. The apparatus (130) according to claim 1 or 2, wherein The vehicle feature (122) comprises a license plate of the first vehicle (120).

10. The apparatus (130) according to claim 1 or 2, wherein The function comprises - receiving an energy carrier for driving the first vehicle (120); - driving to an access-restricted area; and / or - parking the first vehicle (120) in a parking space or parking garage.

11. A system (100) for authenticating a first vehicle (120) against functionality; wherein, The system (100) comprises - a sensor unit (112) configured to - detect a vehicle feature (122) of the first vehicle (120); and - determine a feature code word (113) based on the vehicle feature (122); and - an authentication device (130) according to any one of claims 1 to 10, configured to authenticate the first vehicle (120) based on the feature code word (113).

12. The system (100) according to claim 11, wherein - the system (100) comprises at least one billing unit (140) of a billing service provider; and - the sensor unit (112) is configured to receive a predefined string from the billing service provider for encrypting the vehicle feature (122) of the vehicle (120) and for determining the feature code word (113) of the vehicle (120).

13. The system (100) of claim 12, wherein, The predefined string is a predefined SALT.

14. The system (100) according to claim 12, wherein - the predefined string is time-limited; and / or - the predefined string is only valid spatially limited; and / or - the predefined string is only valid for one or more determined functions.

15. The system (100) according to any one of claims 11 to 14, wherein - the system (100) comprises a plurality of different authentication devices (130) for a corresponding plurality of respectively different reference code words (201); and - the sensor unit (112) is configured to determine, based on a property of the determined feature code word (113), to which of the plurality of different authentication devices (130) the feature code word (113) should be transmitted for authentication.

16. A method (300) for authenticating a first vehicle (120) with respect to a function; wherein The method (300) comprises - determining (301) a feature code word (113) related to a vehicle feature (122) of a first vehicle (120); - comparing (302) the feature code word (113) with a plurality of different reference code words (201) for a corresponding plurality of different vehicles (120); the plurality of reference code words (201) comprises a plurality of subgroups of reference code words (201); the reference code words (201) of different subgroups have been encrypted with a different string each; the reference code words (201) of the same subgroup have been encrypted with the same string; - determining (303), based on the comparison, whether the first vehicle (120) is authenticated for the function; - transmitting (304) the feature code word (113) to the authentication device (130) for authentication of the first vehicle (120) for the function. - determining, based on said comparison, that a first reference codeword (201) from said plurality of reference codewords (201) corresponds to said feature codeword (113); and - determining, based on a string used to encrypt said first reference codeword (201), a provider unit (110) of a provider of said function and / or a billing unit (140) for billing a fee for said provided function.

Images