Method for reliably assigning a vehicle to a receiving point of a filling station

Abstract

The invention relates to a method and a system for reliably assigning a vehicle (F) to a receiving point (P) of a filling station, having the steps of: transmitting (S2) first information data (Data 1), which relates to a receiving process (AV-P) detected by a receiving point (P) of a filling station, from the receiving point (P) to a backend system (BSYS) via a first data interface (INT1); transmitting (S3) second information data (Data 2), which relates to a receiving process (AV-F) detected by the vehicle (F), from the vehicle (F) to the backend system (BSYS) via a second data interface (INT2); and assigning the vehicle (F) to the receiving point (P) if an evaluation (S4), carried out by a data processing unit, of the information data (Data 1, Data 2) obtained via the data interfaces (INT1, INT2) reveals that the receiving process (AV-P) detected by the receiving point (P) and the receiving process (AV-F) detected by the vehicle (F) relate to the same receiving process.

Description

[0001] R.416449

[0002] - 1 -

[0003] title

[0004] Procedure for the safe assignment of a vehicle to a receiving point at a petrol station

[0005] The invention relates to a method and a system for safely assigning a vehicle to a refueling point at a filling station with regard to an energy carrier medium refueling process and for monitoring a compliant refueling and / or compliant consumption of an energy carrier medium, in particular an eFuel, by a vehicle.

[0006] State of the art

[0007] Fuel produced using renewable energy is indistinguishable from conventional fuel. This also applies to electricity as an energy carrier. For the end consumer, such as an electric vehicle driver whose battery is being charged at a charging station, it is not easy to ascertain to what extent the charging current originates from a renewable and therefore environmentally friendly source.

[0008] Vehicles take on fuel or other energy carriers at filling stations or charging stations. At the time of taking on the energy carrier, the vehicle is located at the filling station or charging point. Various methods for determining a vehicle's position are known, such as those described in DE 102018205430 A1.

[0009] Disclosure of the invention

[0010] According to a first aspect, the invention provides a computer-implemented method for reliably assigning a vehicle to a pickup point at a filling station, comprising the features specified in claim 1, and a corresponding system comprising the features specified in claim 19. R.416449

[0011] - 2 -

[0012] The invention therefore provides a computer-implemented method for reliably assigning a vehicle to a refueling point at a filling station with regard to an energy carrier medium refueling process, comprising the following steps:

[0013] Transfer of initial information data (Data 1) regarding a recording process (AV-P) recorded at a recording point of a filling station from the recording point via an initial data interface to a backend system;

[0014] Transfer of second information data (Data 2) regarding a recording process (AV-F) captured on the side of a vehicle from the vehicle to the backend system via a second data interface; and

[0015] Assigning the vehicle to the recording point if an evaluation of the information data (Data 1, Data 2) obtained via the data interfaces by a data processing unit shows that the recording process (AV-P) recorded on the side of the recording point and the recording process (AV-F) recorded from the side of the vehicle relate to the same recording process.

[0016] The method according to the invention ensures that an incorrect assignment of a recording process between a recording point and a vehicle cannot occur, either accidentally or intentionally. This significantly increases security against corruption.

[0017] At a filling point of a filling station, an energy carrier medium is taken in by a vehicle in a single intake process. This intake process can be recorded from both sides, i.e., from the vehicle side and from the side of the filling point.

[0018] Initial information data (Data 1) regarding the vehicle-side recording process (AV-F) is transmitted via a first data interface to a backend system. R.416449

[0019] - 3 -

[0020] Furthermore, a second data information (Data 2) regarding the recording process (AV-P) recorded at the recording point is transferred to the backend system via a second data interface.

[0021] Subsequently, a data processing unit evaluates the information data received via the two data interfaces (Data 1, Data 2) to determine whether the recording process captured at the recording point (AV-P) and the recording process captured from the vehicle (AV-F) actually pertain to the same recording process. If this is the case, the vehicle is assigned to the recording point with regard to the recording process identified as identical, particularly for billing purposes and / or to determine whether the recording process identified as identical was carried out in accordance with regulations.

[0022] The evaluation result and / or the determined assignment can be transmitted by the backend system to a control unit of the vehicle and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner.

[0023] The above steps can be carried out at least partially in parallel.

[0024] The evaluation of the information data is preferably carried out by a data processing unit in the backend system or the cloud. This significantly hinders manipulation of the evaluation results.

[0025] Another advantage is that powerful computing resources are available in the backend system, enabling real-time data processing of large data volumes.

[0026] Another advantage is that neither at the recording point nor in the vehicle do complex calculation routines need to be implemented and maintained.

[0027] Alternatively, the evaluation of the information data or the data comparison can also take place in a data processing unit of the vehicle and / or the

[0028] Gas station / loading point.R.416449

[0029] - 4 -

[0030] The method according to the invention does not require the presence of a data interface between the vehicle F and the recording point P.

[0031] This significantly reduces the technical effort. Furthermore, it lowers the technical requirements for participating vehicles and filling stations / charging points, so that a considerably larger proportion of vehicles and filling stations / charging points can be connected to the system according to the invention with minimal effort.

[0032] In one possible embodiment of the method for securely assigning a vehicle to a refueling point, the refueling point recognizes the start and end of a refueling process for taking in an energy carrier medium by a vehicle and generates corresponding refueling point timestamps (TS-P-Start, TS-P-Stop), which are transmitted from the refueling point to the backend system via the first interface as part of the first information data (Data 1).

[0033] In one possible embodiment of the method for securely assigning a vehicle to a refueling point, the vehicle recognizes the start and end of a refueling process for taking in an energy carrier medium and generates corresponding vehicle timestamps (TS-F-Start, TS-F-Stop), which are transmitted by the vehicle to the backend system via the second interface as part of the second information data (Data 2).

[0034] In one possible embodiment of the method for reliably assigning a vehicle to a recording point at a filling station, the data processing unit compares the recording point timestamps (TS-P-Start, TS-P-Stop) with the vehicle timestamps (TS-F-Start, TS-F-Stop) to determine whether they relate to the same recording process.

[0035] The generated recording point timestamps and the generated vehicle timestamps can be used to logically link or merge the recording point of a gas station and the vehicle.

[0036] In one possible embodiment of the method for reliably assigning a vehicle to a recording point at a filling station, the R.416449 recognizes

[0037] - 5 -

[0038] The intake point defines the start and end of an intake process for the intake of an energy carrier medium by a vehicle and generates corresponding intake point quantity information (ME-P-Start, ME-P-Stop), which is transmitted from the intake point to the backend system via the first interface as part of the first information data (Data 1).

[0039] In one possible embodiment of the method for safely assigning a vehicle to a refueling point, the vehicle detects the start and end of a refueling process for taking in an energy carrier medium and generates corresponding vehicle quantity data (ME-F-Start, ME-F-Stop), which are transmitted by the vehicle to the backend system via the second interface as part of the second information data (Data 2).

[0040] In one possible embodiment of the method for reliably assigning a vehicle to a refueling point at a filling station, the data processing unit compares the refueling point quantity data (ME-P-Start, ME-P-Stop) with the vehicle quantity data (ME-F-Start, ME-F-Stop) to determine whether they relate to the same refueling process.

[0041] In one possible embodiment of the method for reliably assigning a vehicle to a recording point of a filling station, the data processing unit calculates a correspondence metric based on a determined degree of correspondence between the timestamps (TS-F) of the vehicle and the timestamps (TS-P) of the recording point and / or based on a determined degree of correspondence between the quantity data (ME-F) of the vehicle and the quantity data (ME-P) of the recording point.

[0042] This agreement metric can be predefined and preferably indicates a probability of the extent to which the recording process (AV-P) captured on the side of the recording point and the recording process (AV-F) captured on the side of the vehicle relate to the same recording process.

[0043] In one possible embodiment of the method for safely assigning a vehicle to a recording point at a filling station, the R.416449

[0044] - 6 -

[0045] The intake process (AP) for taking in an energy carrier medium by a vehicle at an intake point is selectively accelerated, slowed down, or temporarily interrupted to provide an individual intake process pattern. This enhances security against attacks or...

[0046] Manipulations are further increased.

[0047] In one possible embodiment of the method according to the invention, the first information data (Data 1) transmitted from the recording point with regard to the energy carrier medium recorded by the vehicle in the recording process includes a digital twin data set (DTM) of the energy carrier medium, which indicates an environmental compatibility of the energy carrier medium available at the recording point, in particular its CO2 footprint.

[0048] The digital twin dataset (DTM) can map the entire supply chain of the energy carrier medium (M), i.e., from the production of the energy carrier medium (M) through its storage in a controlled storage facility or intermediate storage facilities, its transport using transport media, to the underground tank of a filling station, which contains the point of consumption or the fuel pump. The production of the energy carrier medium can include a mixing process when filling a controlled storage tank or the feeding of electricity into the grid at the time of consumption / charging. Additionally, the digital twin dataset (DTM) can map the supply chain all the way to the vehicle's fuel tank or battery, as information on the environmental compatibility of the energy contained therein at the time of consumption is also available here.

[0049] The transmitted and stored energy medium information can include the CO2 footprint of the energy carrier M transferred at the receiving point P, the proportion of renewable energy medium components of the transferred energy carrier, and / or the origin of the proportion of renewable energy medium components of the transferred energy carrier. This enables a reliable (in the sense of "verifiable") and accurate determination of the transmitted information regarding the climate and / or environmental friendliness of the energy carrier transferred / sold to the intermediate or end consumer. R.416449

[0050] - 7 -

[0051] In one possible embodiment of the method according to the invention, the energy carrier medium comprises a fuel which is conveyed from a fuel tank of a fuel station via a fuel pump to a fuel nozzle as the receiving point (P) for the fuel and fills a fuel tank of the vehicle during a refueling process.

[0052] In another possible embodiment of the method according to the invention, the energy carrier medium has an electric current which comes from an electrical power supply network of a charging station via a power dispenser to a charging plug as the receiving point for the electric current and charges a vehicle battery of the vehicle during a charging process.

[0053] The method according to the invention can therefore be used for different energy carrier media.

[0054] In one possible embodiment of the method according to the invention, the predefined rules are stored in a database of the backend system. The rules can implement local, regional, national, or supranational regulations, in particular EU regulations.

[0055] This allows for centralized and consistent maintenance of the rules. Different rules can apply to different geographical areas or countries.

[0056] In one possible embodiment of the method according to the invention, the vehicle's control unit controls driving functions of the vehicle and / or vehicle functions of the vehicle depending on the evaluation result obtained from the backend system.

[0057] This allows the driver to be provided with various assistance functions during the refueling process, such as support in selecting a suitable fuel for their vehicle. This protects against misfuelling with an unsuitable fuel. R.416449

[0058] - 8 -

[0059] In one possible embodiment of the method according to the invention, the first information data (Data 1) transmitted from the recording point to the backend system via the first interface includes an identification of the recording point (P-ID), a time span of the recording process, a quantity of the energy carrier medium delivered from the recording point to the vehicle during the recording process, and a location of the recording point.

[0060] In one possible embodiment of the method according to the invention, the second information data (Data 2) transmitted from the vehicle to the backend system via the second data interface includes an identification of the vehicle (F-ID), a time period of the recording process, a quantity of the energy carrier medium received from the vehicle during the recording process, and a location of the vehicle during the recording process.

[0061] In one possible embodiment of the method according to the invention, the data processing unit of the backend system compares the first information data (Data 1) received from the recording point via the first interface with the second information data (Data 2) received from the vehicle via the second data interface to perform a plausibility check of an upcoming, ongoing or already completed recording process, wherein a plausibility check result forms an evaluation result that is transmitted by the backend system to a control unit of the vehicle and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner.

[0062] The plausibility check or security check can refer to a single recording process or to a series of recording processes.

[0063] In one possible embodiment of the method according to the invention, the second information data (Data 2) received from the vehicle by the data processing unit of the backend system via the second interface comprise vehicle parameters of the vehicle, in particular with regard to a type and / or quantity required by a vehicle drive of the vehicle.

[0064] - 9 -

[0065] at least one energy carrier medium. The vehicle's consumption data can be used for plausibility checks.

[0066] In one possible embodiment of the method according to the invention, the vehicle's control unit monitors the consumption of an energy carrier medium by a vehicle drive and / or the filling or charging status of an energy carrier receiving unit of the vehicle and / or driving functions of the vehicle and / or the current position of the vehicle during the vehicle's journey and reports this information as third information data (Data 3) to the backend system.

[0067] This allows for continuous monitoring of a vehicle's energy consumption. The data can be analyzed in real time and used for plausibility checks.

[0068] In one possible embodiment of the method according to the invention, the data processing unit of the backend system evaluates the third information data (Data 3) received from a vehicle and, depending on the evaluated third information data and the other available information data relating to the vehicle, generates navigation data for approaching a suitable recording point, which is transmitted to the control unit of the vehicle.

[0069] A vehicle requiring a specific fuel can thus be directed to a suitable pickup point P.

[0070] In one possible embodiment of the method according to the invention, the environmental compatibility of the energy carrier medium available at the recording point, in particular its CO2 footprint, as specified in the digital twin data set (DTM) of the energy carrier medium, changes dynamically over time. This can occur with electricity as the energy carrier medium during a long charging process. With fuels as the energy carrier medium, this can occur during pipeline refueling. R.416449

[0071] - 10 -

[0072] In one possible embodiment of the method according to the invention, the method is executed in real time.

[0073] In one possible embodiment of the method according to the invention, the available information data of a large number of vehicles are evaluated by the data processing unit of the backend system and at least part of the stored rules are dynamically adapted depending on the evaluation results.

[0074] In one possible embodiment of the method according to the invention, the evaluation results transmitted by the backend system to a control unit of the vehicle and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner during several recording processes are stored in a vehicle data set, which is transmitted to one or more stakeholders who, on the basis of the received vehicle data set, implement incentive measures and / or support measures to promote compliant recording and / or compliant consumption of an energy carrier medium by the vehicle.

[0075] In one possible embodiment of the method according to the invention, vehicles are refueled with a time delay that has a predefined duration, in particular a duration of two seconds.

[0076] In one possible embodiment of the method according to the invention, an intelligent follow-up takes place, which is triggered by a trigger event.

[0077] Brief description of the drawings

[0078] Further features and advantages of the present invention are explained below with reference to the figures.

[0079] They show:

[0080] Fig. 1 is a flowchart to illustrate an embodiment of the computer-implemented method according to the invention; R.416449

[0081] - 11 -

[0082] Fig. 2 is a diagram to illustrate an embodiment of the system according to the invention.

[0083] As shown in the flowchart according to Fig. 1, the computer-implemented method according to the invention for safely assigning a vehicle F to a pickup point P of a filling station T with regard to an energy carrier medium pickup process, i.e. a refueling process or a charging process, comprises several main step steps:

[0084] In a first step S1, an energy carrier medium M is taken up by the vehicle F at a pickup point P in a pickup process AV. This involves refueling or charging the vehicle battery of the vehicle F with electrical current.

[0085] In a second step S2, initial information data (Data 1) regarding the recording process (AV-P) recorded at a recording point P of a gas station T is transferred from recording point P via a first data interface INT1 to a backend system BSYS.

[0086] In a third step S3, second information data (Data 2) regarding the recording process (AV-F) recorded on the side of a vehicle F is transferred from the vehicle F to the backend system BSYS via a second data interface INT2.

[0087] The backend system BSYS thus receives information data regarding a recording process AV from two different units via two separate data interfaces INT1 and INT2: on the one hand, from the recording point P of the gas station / charging station, and on the other hand, from the vehicle F. To prevent confusion or manipulation, the backend system BSYS checks whether the received information data Datal and Data2 belong to the same recording process AV, or whether a recording process AV from a recording point P is assigned to a specific vehicle F.

[0088] The data interfaces INT1 and INT2 can be wired or wireless and can use an existing communication infrastructure for data transmission, in particular mobile networks or the Internet. A specific R.416449 is preferably used.

[0089] - 12 -

[0090] A data transmission protocol is used to transfer the information data Datal, Data 2, and the evaluation results data in a handshake process. The handshake data transmission protocol used is preferably suitable for real-time data transmission with low latency. Data transmission to / from the data processing unit (DVE) of the backend system is preferably cryptographically secured and can also employ challenge-response methods.

[0091] In the inventive method, in step S5, the vehicle F is then assigned to the recording point P if an evaluation of the information data (Data 1, Data 2) obtained via the data interfaces (INT1, INT2) by a data processing unit (DVE) in step S4 shows that the recording process (AV-P) recorded at recording point P and the recording process (AV-F) recorded at vehicle F relate to the same recording process (AV = AV-P = AV-F). If the recording processes AV-F and AV-P are successfully matched, the vehicle F is preferably logically linked or assigned to recording point P. This linking or assignment makes it possible to perform further evaluations, particularly regarding compliance with rules R. Furthermore, manipulations or attempted manipulations can be more easily detected through this assignment.

[0092] In the fourth step S4, the information data (Data 1, Data 2) obtained via the data interfaces (INT1, INT2) are optionally evaluated by a data processing unit DVE to determine whether the detected recording process AV and / or the energy carrier medium M taken up by the vehicle F comply with the specified rules R.

[0093] The rules R applied by the data processing unit DVE can, in one possible implementation, be stored in a database DB of the backend system BSYS and implement national or European environmental regulations, for example, EU Regulation 2018 / 2001, and the supplementary Directives 2023 / 1184 and 2023 / 1185. These regulations contain detailed rules for determining when electricity used to produce liquid or gaseous renewable fuels of non-biogenic origin for transport can be considered fully renewable. R.416449

[0094] - 13 -

[0095] In a further step, the evaluation result is preferably transferred by the backend system BSYS to a control unit of the vehicle F and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner.

[0096] In one possible embodiment of the method according to the invention, the method is executed in real time.

[0097] An advantage of the method according to the invention is that no data exchange is required between the recording point P and the vehicle F. Consequently, it is not necessary to provide a data interface between the vehicle F and the recording point or the fuel pump / charging station of the filling station T.

[0098] In one possible embodiment of the method according to the invention, the first information data (Data 1) transmitted from the recording point P via the first interface INT1 of the filling station T with regard to the energy carrier medium M recorded by the vehicle F in the recording process includes a digital twin data set (DTM) of the energy carrier medium M, which indicates an environmental impact during the production and transport of the energy carrier medium M available at the recording point P of the filling station T, in particular its CO2 footprint.

[0099] For example, the digital twin dataset (DTM) for hydrogen H2 as an energy carrier medium M can indicate whether it is so-called green hydrogen, which has been produced using renewable energy sources.

[0100] The digital twin dataset (DTM) of the energy carrier medium M reflects the CO2 footprint of the respective energy carrier medium M across the entire supply chain.

[0101] When a liquid or gaseous fuel is used as the energy carrier M, the fuel is transported via a transport medium from a tank in a control warehouse to underground tanks at various filling stations T. The transport medium is, for example, a tank truck or a pipeline. From the underground tank, the energy carrier M flows via pipes to the dispensing nozzles as the delivery points PR416449.

[0102] - 14 -

[0103] The fuel in the control storage tank can also be a mixture of different fuel types with their associated CO2 equivalents. For a fuel mixture, a CO2 footprint is calculated from the CO2 equivalents of the fuel types it contains and stored in the digital twin dataset (DTM) of the mixed fuel.

[0104] In one possible embodiment of the method according to the invention, the energy carrier medium M comprises a fuel which comes from a fuel tank of a fuel filling station via a fuel pump to a fuel nozzle as the receiving point P for the fuel and fills a fuel tank of the vehicle F during a refueling process as the receiving process.

[0105] A filling station T can offer various energy carrier media M, each of which is available for intake by a vehicle F via a corresponding group of filling points P at the filling station. For example, a fuel pump at filling station T comprises several fuel filling points P for different fuels or fuel mixtures.

[0106] Examples of fuels that can be used include eFuel, hydrogen (H2), compressed natural gas (CNG), liquefied natural gas (LNG), liquefied petroleum gas (LPG), kerosene, gasoline, diesel fuel, marine diesel fuel, biodiesel, machine oil, palm oil, hydrogenated / hydrotreated vegetable oils (HVO), and / or paraffinic fuel. However, the examples listed here of fuels that can be used as energy carriers (M) are not exhaustive. Electricity can also be the energy carrier. In Germany, for example, the "Second Ordinance Amending the Ordinance on the Composition and Labeling of the Qualities of Fuels" published in the Federal Law Gazette, Part I, No. 169, on May 28, 2024, applies.

[0107] The transmitted and stored energy medium information can include, for example, a CO2 footprint of the energy carrier medium M transferred at the receiving point P, such as specifically a sustainability certificate, a proportion of renewable energy medium components of the transferred energy carrier medium M and / or the origin of the proportion of renewable energy medium components of the transferred energy carrier medium MR.416449

[0108] - 15 -

[0109] The information provided to the respective intermediate or end consumer can specifically include the CO2 footprint of the energy carrier M transferred / sold, its share of renewable energy carrier components, and / or their origin. In this way, a strong incentive is created for the respective intermediate or end consumer to purchase an energy carrier M with a good CO2 footprint, a relatively high share of renewable energy carrier components, and / or their desirable origin (see also Corporate Sustainability Reporting Directive (CS RD) (EU) 2022 / 2464).

[0110] In another possible embodiment of the method according to the invention, the energy carrier medium M carries an electric current which is supplied from an electrical power supply network of an electric vehicle charging station T or charging point via a charging column to a charging plug as the receiving point P for the electric current and charges a vehicle battery of the vehicle F during a charging process. A charging column can have several charging plugs as receiving points P. The vehicle battery can be charged via a charging cable or inductively via coils.

[0111] The receiving point P serves to provide an energy carrier medium M to a vehicle F, which receives the selected energy carrier medium M in a single intake process from a receiving point P at the filling station or charging station. The receiving point P can be a charging plug, a fuel nozzle, or any other device suitable for transferring an energy carrier medium M into a designated receiving unit of the vehicle F.

[0112] The receiving point P itself, or the associated fuel dispenser or charging station, delivers data to a data processing unit at the filling station or charging point T, which has a first data interface INT1. This data interface INT1 is intended for transmitting initial information data Data 1 to the backend system BSYS. This initial information data Data contains information regarding the energy carrier medium MR416449 received by the vehicle F during the receiving process AV-P from the receiving point P of the filling station or charging point T.

[0113] - 16 -

[0114] In one possible embodiment of the method according to the invention, the first information data (Data 1) transmitted from the recording point P to the backend system BSYS via the first interface INT1 includes an identification of the recording point (P-ID), a time period of the recording process AV-P, a quantity of the energy carrier medium M delivered from the recording point P to the vehicle F during the recording process AV-P, and a location of the recording point P, for example, its geographical coordinates. Depending on the application, the first information data (Data 1) may include further relevant information regarding the recording process AV-P from the perspective of the recording point P.

[0115] The first data interface INT1 shown in Fig. 2 is further intended for receiving evaluation results from the backend system BSYS by the filling station or charging point T. These evaluation results received from the backend system BSYS indicate whether the charging process and / or the energy carrier medium M taken up by the vehicle F comply with predefined rules R regarding environmental compatibility, in particular with regard to the production, storage and / or transport of the energy carrier medium M. In one possible embodiment of the method according to the invention, the predefined rules R are stored in a database DB of the backend system BSYS, as schematically shown in Fig. 2.

[0116] In another possible embodiment, the operator of the filling station T or charging point and / or the owner of vehicle F can enter further criteria via a user interface. These criteria, in addition to the legally mandated rules stored in the database DB, must also be observed during the registration process AV. For example, a vehicle owner or driver of vehicle F can specify in an input routine that in the future they only wish to refuel with fuel whose CO2 footprint is below a certain threshold value entered by the vehicle owner via the user interface. Such additional restrictions can be transmitted to the data processing unit DVE of the backend system BSYS along with the information data Data 2 via the data transmission protocol. A vehicle owner can also be the owner of an entire fleet of vehicles F.

[0117] - 17 -

[0118] In one possible embodiment of the method according to the invention, the second information data (Data 2) transmitted from the vehicle F to the backend system BSYS via the second data interface INT2 regarding the vehicle-side recording process AV-F includes a vehicle identification (F-ID), a time period of the recording process AV-F, a quantity or volume of the energy carrier medium M received from the vehicle F during the recording process AV-F, and a location of the vehicle F during the recording process AV-F. Depending on the application, the second information data (Data 2) may include further relevant information regarding the recording process from the perspective of the vehicle F.

[0119] In one possible embodiment, the unique identification F-ID of the vehicle F can be read from an integrity-protected memory of the vehicle F and transmitted in a protected manner as part of the second information data Data 2 via the second interface iNT2 to the data processing unit DVE of the backend system.

[0120] Vehicle F can also be automatically identified at the filling station T or charging point in other ways. Possible vehicle identification methods include capturing the license plate using a camera or scanning a QR code. Furthermore, GPS data, GNSS data, or mobile network data (e.g., 5G Location Management Function LMF) can be evaluated to detect the current position of vehicle F. In one possible embodiment of the method according to the invention, the identification of vehicle F and / or the driver can also incorporate an underlying electronic payment process. The localization of vehicle F can be used for pairing vehicle F with a recording point P and its fuel type.

[0121] Various position determination methods can be used to determine the relative position of vehicle F to the charging or refueling pump of service station T. These methods include, for example, GNSS (Global Navigation Satellite Service), Simultaneous Localization and Mapping (SLAM) based on RADAR (Radio Detection and Ranging) imaging, LiDAR (Light Detection and Ranging), and Wi-Fi (Channel State Information (CSI) based location).

[0122] - 18 -

[0123] (CR / RSI / NA)), IMT (Internet Mobile Technology based location service, e.g. 5G Location Management Function LMF), ToF / PMD (Time of Flight and Photonic Mixer Devices), UWB (Ultrawideband) tracking, RFID (active or passive Radio Frequency Identification Detection), IMU (Inertial Measurement Unit) and USS (Ultrasonic Sensors).

[0124] The vehicle F can have one or more drive systems. In one possible embodiment, the vehicle F can have an internal combustion engine for burning a fuel as the energy carrier M, which is drawn from a fuel tank serving as the vehicle F's fuel storage unit. Alternatively, the vehicle F can also have an electric motor as a drive system, which is supplied by a vehicle battery serving as the electrical energy storage unit. The fuel tank level or the vehicle battery's state of charge is monitored by sensors. In another possible embodiment, the vehicle F can also have an internal combustion engine as the primary drive system and an electric motor as the secondary drive system.

[0125] In one possible configuration, vehicle F includes a vehicle communication unit (VCU) and an engine control unit (ECU) for controlling at least one of the vehicle's drive systems. The VCU incorporates the second data interface, iNT2, shown in Fig. 2. In addition to the drive control unit, the ECU of vehicle F includes a level sensor for measuring the fill level of a fuel tank (M) or a sensor for measuring the state of charge of a vehicle battery. Besides using a level sensor, existing sensor-based and legally mandated functions such as on-board fuel consumption monitoring (OBFCM) can also be employed.

[0126] During a vehicle-side recording process AV-F, the fuel level or the charge level of the vehicle battery of vehicle F can be monitored in real time. For example, if the fuel nozzle, acting as recording point P, dispenses a specific quantity of a specific fuel to the identified vehicle F within a specific time period and reports this quantity and time period as initial information data (Data 1) to the backend R.416449.

[0127] - 19 -

[0128] If the system BSYS and at the same time the vehicle F does not report any refueling of its vehicle tank in the second information data Data 2 to the backend system BSYS, the relevant intake process or refueling process AV is conspicuous and can trigger a more detailed analysis of the possible causes of the detected discrepancy.

[0129] In a potential implementation, the AV intake process could be evaluated according to various criteria using a traffic light system and displayed to a user or other stakeholder on a display unit. For example, a planned or completed AV intake process could be evaluated and displayed as permissible (green light), impermissible (red light), or conspicuous (yellow light). Conspicuous or impermissible AV intake processes could, for example, indicate the filling of fuel into portable canisters that do not provide any secondary information (Data 2).

[0130] The second data interface INT2 shown in Fig. 2 is further intended for receiving evaluation results from the backend system BSYS by the vehicle F. These evaluation results received from the backend system BSYS indicate whether the vehicle-side recording process AV-F and / or the energy carrier medium M taken in by the vehicle F comply with predefined rules R regarding environmental compatibility. In a possible embodiment of the method according to the invention, a control unit of the vehicle F controls various driving functions of the vehicle F and / or vehicle functions of the vehicle F depending on the evaluation result received from the backend system BSYS via the second interface INT2.

[0131] In one possible embodiment, the control unit contained in the vehicle communication unit (VCU) can, for example, block the opening of fuel filler caps if the driver selects an energy carrier medium M unsuitable for powering the vehicle F. The selection of a specific energy carrier medium M or pickup point P from a group of energy carrier media or pickup points available at the fuel pump is detected, for example, by which fuel nozzle the driver lifts from its mounting on the pump. If the driver picks up a fuel nozzle for an unsuitable fuel, the vehicle communication unit (VCU) of the vehicle F can automatically prevent the fuel filler cap from opening.

[0132] - 20 -

[0133] block the fuel filler cap and inform the driver via a display unit of the vehicle F or via a portable terminal of the driver, for example his mobile phone, about the reason for the blockage of the fuel filler cap of his vehicle F.

[0134] In one possible implementation, the refueling process (AV) occurs without manual intervention from the driver. In another possible embodiment, the fuel nozzle and / or the charging plug are automatically inserted into the vehicle (F), for example, using robotic arms or similar devices.

[0135] Another possible use case is that the drive control unit or the engine control unit ECU of vehicle F prevents the engine or drive from starting if it has been detected that, during the vehicle-side recorded intake process AV-F, fuel unsuitable for the drive of vehicle F has accidentally entered the intake tank of vehicle F.

[0136] In a possible preferred embodiment of the method according to the invention, the data processing unit DVE of the backend system BSYS compares the first information data (Data 1) received from a recording point P via the first interface INT1 with the second information data (Data 2) received from the vehicle F via the second data interface INT2 to perform a plausibility check. The first information data (Data 1) originating from the recording point P is compared with the second information data (Data 2) originating from the vehicle F to determine whether the data match, i.e., whether they reflect a recording process AV for recording the energy carrier medium M in the same way. For example, the time span for the recording process AV can be determined from both the recording point P and the vehicle F using the timestamp TS (TimeSpan).The two time periods can be checked to see if they coincide, i.e., whether the exception process recorded by the vehicle (AV-F) and the exception process recorded at the recording point P (AV-P), both of which are reported to the data processing system, are synchronized. The quantity of energy carrier M dispensed by recording point P can be compared with the quantity of energy carrier M received by the vehicle's recording unit F. (See R.416449.)

[0137] - 21 -

[0138] The two sets of data correspond to each other in a correct or uncorrupted recording process. The first set of data, Data 1, and the second set of data, Data 2, can be correlated or...

[0139] Agreement is assessed with regard to the time, location, and quantity of the AV recording process. A corresponding agreement metric can be calculated in a possible implementation.

[0140] In one possible embodiment of the method according to the invention, the recording point P detects the start and end of a recording process AV for the recording of an energy carrier medium M by a vehicle F and generates corresponding recording point timestamps (TS-P) for the respective recording process AV. These timestamps are transmitted from the recording point P to the backend system BSYS via the first interface INT1 as part of the first information data (Data 1). For each recording process carried out at a recording point P, a recording point start timestamp (TS-P-Start), which reflects the start of the recording process AV from the perspective of the recording point P, and a recording point stop timestamp (TS-P-Stop), which reflects the end of the recording process AV from the perspective of the recording point P, can be generated on the recording point P side.The recording point start timestamp (TS-P-Start) and the recording point stop timestamp (TS-P-Stop) are transmitted as part of the first information data (Datal) from the gas station T to the backend system BSYS via the first interface INT1.

[0141] In one possible embodiment of the method according to the invention, the vehicle F detects the start and end of a recording process AV for recording an energy carrier medium M by the vehicle F and generates corresponding vehicle timestamps (TS-F) for the respective recording process AV, which are transmitted by the vehicle F to the backend system BSYS via the second interface INT2 as part of the second information data (Data 2). For each recording process AV carried out by a vehicle F at a recording point P, a vehicle start timestamp (TS-F-Start), which reflects the start of the recording process AV from the perspective of the vehicle F, and a vehicle stop timestamp (TS-F-Stop), which reflects the end of the recording process AV from the perspective of the vehicle F, can be generated on the vehicle F side. The vehicle start timestamp (TS-F-Start) and the vehicle stop timestamp (TS-F-Stop) are part of R.416449

[0142] - 22 -

[0143] The second information data (Data2) from the vehicle F is transferred to the backend system BSYS via the second interface INT2.

[0144] In the backend system BSYS, the timestamps (TS) are compared. The recording point start timestamp (TS-P-Start) is compared with the vehicle start timestamp (TS-F-Start), and / or the recording point stop timestamp (TS-P-Stop) is compared with the vehicle stop timestamp (TS-F-Stop). If the TS timestamps are identical (TS-F-Start = TS-P-Start and TS-F-Stop = TS-P-Stop), the two time periods match in duration and are also synchronized. This strongly suggests that the transmitted information data, Datal and Data2, pertain to the same recording process, AV. By checking the timestamps TS with regard to the start of a recording process (TS-F-Start = TS-P-Start) and / or with regard to the end of a recording process (TS-F-Stop = TS-P-Stop), the robustness of the system according to the invention against conscious or unconscious corruption is significantly increased.

[0145] A similar approach can be used to measure the quantities of energy carrier medium transferred from the receiving point P to the vehicle F. At receiving point P, the quantity ME of energy carrier medium available at the beginning of the receiving process AV (ME-P-Start) and the quantity ME of energy carrier medium still available at the end of the receiving process AV (ME-P-Stop) can be recorded. Furthermore, at the tank or vehicle battery of vehicle F, the quantity ME of energy carrier medium already contained in the tank or vehicle battery at the beginning of the receiving process AV (ME-F-Start) and the quantity ME of energy carrier medium contained therein at the end of the receiving process AV (ME-F-Stop) can be recorded.If the quantity ME of the energy carrier medium in question transferred in the intake process AV (Delta ME) is the same both on the side of an intake point P at a filling station and on the side of a vehicle F, i.e., Delta ME = ME-P-Start minus ME-P-Stop = ME-F-Stop minus ME-F-Start, this is a clear indication that the intake process recorded on the side of intake point P (AV-P) and the intake process recorded on the side of vehicle F (AV-F) concern the same intake process (AV-P = AV-F). R.416449.

[0146] - 23 -

[0147] Preferably, in the method and system according to the invention, additional precautions are taken to prevent deliberate or unintentional confusion regarding the assignment of a recording process (AV-F) detected on the vehicle side to a recording process (AV-P) detected on the side of a recording point P.

[0148] In one possible embodiment, the data processing unit DVE calculates a correspondence metric ÜM based on the determined extent of correspondence between the timestamps TS-F of vehicle F and the timestamps TS-P of recording point P and / or based on the determined extent of correspondence between the quantity data ME-F of vehicle F and the quantity data ME-P of recording point P, which indicates the probability that the recording process (AV-P) recorded on the side of recording point P and the recording process (AV-F) recorded on the side of vehicle F relate to the same recording process (AV-P = AV-F).

[0149] If the calculated probability value is above a threshold TH, the vehicle F can be assigned to the recording point P.

[0150] The conformity metric (CM) can be predefined depending on the application, particularly based on the available data. In addition to timestamps (TS) and quantity data (ME), the CM can also incorporate other available data. The threshold (TH) can be adjustable and account for measurement tolerances.

[0151] In one possible scenario, for example, several vehicles / drivers refuel at a gas station T randomly (example: refueling for 40 EUR) or intentionally synchronously with the same amount ME of fuel within a period of time, thereby consciously or unconsciously corrupting the system for monitoring a compliant intake and / or consumption of an energy carrier medium.

[0152] The timestamp TS of a filling or intake process AV can be identified by Monte Carlo simulations as an important parameter that, for example, ensures a robust mapping between the fuel nozzle as intake point P of a filling station T and the fuel tank of a vehicle F. Therefore, it is important to consider R.416449

[0153] - 24 -

[0154] To reliably detect the time of the start and / or end of a recording process AV on the side of the vehicle F.

[0155] On the side of the gas station T, the start time of the fuel pump is available and can be used as the timestamp TS-P-Start for the start of the refueling process at the pump nozzle, as recording point P. For detection in the vehicle F, the ECU after-run is crucial, which ensures that the fuel level sensor (FLS) is supplied with power and delivers the signal to the ECU. The after-run in the system is preferably triggered intelligently, e.g., by anticipating refueling, particularly to conserve energy from the vehicle battery of vehicle F. The after-run can be controlled by the engine control unit (ECU) (master ECU) (even if the FLS is connected to a slave device, e.g., via the on-board computer).

[0156] The timestamps TS of a filling process represent important parameters that ensure a robust assignment between a fuel nozzle as the recording point P of a filling station T and the vehicle tank of a vehicle F.

[0157] The robustness of the system can be further increased by providing an intelligent after-run.

[0158] In one possible embodiment, the system according to the invention comprises the following functions:

[0159] • Detect triggers or triggering events

[0160] • Wake up all control units if they are no longer in after-run mode.

[0161] • Keep awakened control units awake or active (the time period may exceed the entire refueling process)

[0162] The following options or embodiments exist for defining a trigger or a trigger signal when a refueling event or refueling process is expected:

[0163] In one possible embodiment, the filling or refueling process is not specifically triggered. The system simply takes what is available, with the after-run being controlled by other vehicle systems (R.416449).

[0164] - 25 -

[0165] (e.g., 2-12 minutes until the system request). Power Latch-on, Power Latch-off, and follow-up can react via a digital handshake, depending on when the event occurs.

[0166] In one possible embodiment, after-run functions are enforced. The vehicle's engine control unit (ECU) can enforce after-run by executing the function in a specific mode for a constant, predefined duration at every vehicle stop, particularly when high energy consumption is anticipated.

[0167] If a fuel filler flap sensor is present in the vehicle F, in one possible embodiment the sensor signal of the fuel filler flap sensor can be used to extend the after-run by a predetermined duration, as refueling is expected.

[0168] If a local over-the-air connection to the filling station T exists, in one possible embodiment the follow-up time can be extended by a trigger unit when the vehicle F connects to the system upon arrival.

[0169] In another possible embodiment, a small radio beacon (e.g., BLE, UWB, etc.) can be installed at the gas station T, which triggers the after-run. When the vehicle F is near the gas station T, the after-run is automatically initiated.

[0170] In another possible embodiment, vehicle F sends a GPS signal to a cloud at every stop. The cloud then checks whether the received GPS signal belongs to a registered gas station location (GPS whitelist). The vehicle's movements are predictable (geofence). A prerequisite for this is that the GPS whitelist is regularly updated.

[0171] In another possible embodiment, the tank level sensor is retained as the trigger for the trigger signal. This results in either a wake-up (if the tank level sensor is still powered) or an extension of the tank monitoring overrun (e.g., via CAN). A prerequisite for this is R.416449.

[0172] - 26 -

[0173] that there is control over the power supply of the tank level sensor.

[0174] In another possible embodiment, predictive refueling is achieved through data pattern recognition. In this embodiment, the cloud suggests extending the refueling run based on historical user behavior, taking into account two key factors: the initial fuel level before refueling and the time elapsed between the vehicle stopping and the start of refueling.

[0175] To determine the original fuel level before refueling, historical data on the fuel level shortly before refueling can be used. This fuel level serves as a threshold above which extending the post-fueling time is considered.

[0176] The time between the vehicle stopping and the start of refueling can be determined by analyzing the historical time interval between when vehicle F stopped and refueling began. The duration of the extended refueling run is preferably set based on this time interval to optimize timing and energy efficiency. Furthermore, refueling prompts can be displayed on the vehicle F's dashboard screen to increase the likelihood of complete refueling.

[0177] In another possible embodiment, a tank pressure sensor triggers the after-run. The tank pressure equalizes with atmospheric pressure when the tank cap is removed. Once the tank cap has been removed, the after-run time is extended.

[0178] In another possible embodiment, a button or other actuating element is provided for the driver, which the driver must press or operate before filling (the fuel filler flap can then be released).

[0179] In other possible embodiments, other units are used as triggers for the follow-up, for example a vehicle key, a door contact sensor or an external radar of the vehicle FR416449

[0180] - 27 -

[0181] Furthermore, in one possible embodiment, a driving behavior pattern at the filling station T can be evaluated (e.g. by recording a steering angle, a speed, the position angle of the accelerator pedal or the brake pedal).

[0182] The aforementioned embodiments can be combined. Machine learning algorithms can increase the accuracy and error rate in the detection of triggering events. Machine learning algorithms can also prevent triggering events, especially when the driver does not intend to refuel vehicle F at gas station T (e.g., when parking vehicle F near gas station T).

[0183] In one possible embodiment, the fuel station system can be configured to delay the start of all fuel pumps (fueling bays) at station T. For example, each fuel pump at station T is started with a delay of, say, 2-3 seconds, depending on the time required for the vehicle F to reliably detect the start of a filling or refueling process AV. This ensures that, within the system tolerances, each filling or refueling process AV is reliably detected and adjacent refueling or refueling processes AV can be separated from one another.

[0184] In one possible embodiment, the filling process or

[0185] The intake process AV itself is influenced by accelerating, decelerating, or randomly interrupting it. In one possible embodiment, a fuel pump at a fuel dispenser, acting as the intake point P at a gas station T, can be controlled accordingly. In a preferred embodiment, both the fuel dispenser (as intake point P, through which the filling / intake process AV takes place) and the vehicle F (which receives the fuel as the energy carrier M) are aware of the pattern by which the filling / intake process AV is influenced, thus ensuring pairing. Optionally, the end of the filling / intake process AV can also be detected and stored, provided the energy management system allows it. R.416449

[0186] - 28 -

[0187] The evaluation can also be performed onboard in a processing unit of the vehicle communication unit (VCU) of vehicle F. For this purpose, the backend system BSYS transmits the initial information data (Datal) received from the recording point P via the first data interface INT1 to the vehicle communication unit (VCU) of vehicle F via the second data interface INT2.

[0188] In another embodiment, a data interface can also exist between the recording point P and the vehicle communication unit (VCU) of the vehicle F. The first information data, Data 1, is transmitted via this interface from the recording point P to the VCU, which then performs the data comparison. Alternatively, the second information data, Data 2, can also be transmitted via this data interface from the vehicle communication unit (VCU) to a data processing unit at the filling station or charging point T. This unit compares the first information data, Data 1, with the transmitted second information data, Data 2, regarding their plausibility in relation to the associated recording process AV of the energy carrier medium M and provides a result of the plausibility check.

[0189] The evaluation performed by the data processing unit DVE of the backend system BSYS, or by the vehicle communication unit VCU of the vehicle F, or by any other data processing unit, based on the received information data, can relate to an upcoming, ongoing, or already completed recording, refueling, or charging process. The evaluation or plausibility check delivers a plausibility check result, which is transmitted by the backend system GSYS to a control unit of the vehicle F in question and / or to a terminal device of the vehicle driver and / or to a terminal device of the vehicle owner.

[0190] In one possible embodiment of the method according to the invention, the second information data (Data 2) received by the data processing unit DVE of the backend system BSYS from the vehicle F via the second interface INT2 comprise vehicle parameters of the vehicle F, in particular with regard to a type and / or quantity of at least one energy carrier medium required by a vehicle drive of the vehicle F MR416449

[0191] - 29 -

[0192] This data is preferably stored in the vehicle F and can be read out by a monitoring organization (e.g. TÜV).

[0193] In one possible embodiment of the method according to the invention, the consumption of an energy carrier medium M by a vehicle drive or engine of the vehicle F and / or a filling or charging state of an energy carrier receiving unit of the vehicle F and / or driving functions of the vehicle F and / or a current position of the vehicle F during the ongoing journey of the vehicle F are monitored by the control unit of the vehicle F using sensors and reported as third information data (Data 3) via a wireless interface to the backend system BSYS (Onboard Fuel Consumption Monitor OBFCM).

[0194] In one possible embodiment of the method according to the invention, the data processing unit DVE of the backend system BSYS evaluates the third information data (Data 3) received from a vehicle F, and, depending on the evaluated third information data and the other available information data relating to the vehicle F, generates navigation data for approaching a suitable recording point P for the vehicle F, which are transmitted to the control unit of the vehicle F via the wireless interface.

[0195] In one possible embodiment of the method according to the invention, the environmental compatibility of the energy carrier medium (M) available at the recording point P, in particular its CO2 footprint, as specified in the digital twin data set (DTM) of the energy carrier medium (M), changes dynamically over time. For example, if fuel is the energy carrier medium M, the CO2 footprint can change hourly or daily. This occurs, for instance, when the underground tank is refilled and also through subsequent recertification of the Proof of Sustainability. This is due to logistical and procedural reasons in the fuel supply chain. If electricity is the energy carrier medium, the CO2 footprint can change even every second.

[0196] In one possible embodiment of the method according to the invention, the available information data (Data1, Data2, Data3) of a plurality of vehicles F are processed by the data processing unit DVE of the backend R.416449

[0197] - 30 -

[0198] The BSYS system evaluates at least some of the rules (R) or user-defined criteria stored in the BSYS backend system's database (DB) and can be dynamically adjusted based on the evaluation results. This can occur, for example, due to changes in legislation or by the vehicle owner or fleet operator. For instance, a fleet operator might set a company target of 7% CO2 reduction per year. Automatic adjustment or optimization of rules based on a statistical analysis of the available information is also possible.

[0199] In one possible embodiment of the method according to the invention, the evaluation results transmitted by the backend system BSYS to a control unit of the vehicle F and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner during several recording processes AV are stored in a vehicle data record assigned to the vehicle F, which is transmitted to one or more stakeholders at certain intervals. Based on the received vehicle data record of a vehicle F, the stakeholder implements incentive measures and / or support measures to promote compliant recording and / or compliant consumption of an energy carrier medium M by the vehicle F.

[0200] The vehicle data record reflects the refueling and / or consumption behavior of vehicle F over a certain period, for example, over one year. In one possible embodiment, an average annual total footprint of vehicle F is calculated from the reported fill quantities / load quantities and the associated CO2 equivalents of the absorbed energy carrier media M and reported to the data processing unit DVE of the backend system BSYS.

[0201] The backend system BSYS can have interfaces to servers of public authorities, insurance companies, or other stakeholders. Based on the available information, various stakeholders can create incentives for the compliant uptake and / or consumption of energy carrier media M.R.416449

[0202] - 31 -

[0203] The incentive measures can include, for example, a reduction in fees charged, in particular road tolls, leasing fees, insurance premiums, or the like. The incentive measure can also consist of opening roads or traffic times to vehicles F that compliantly take on (refuel or charge) suitable energy carrier media M and consume them sparingly while driving.

[0204] In one possible embodiment, the consumption of an energy carrier medium M can be determined from the difference in the fill levels transmitted to the backend system via the second interface INT2 at two filling stations / charging points T visited consecutively by the vehicle F.

[0205] Determine charge levels. Using the position data or coordinates of two consecutively visited gas stations T, the data processing unit (DVE) can calculate the fuel consumption of vehicle F per kilometer / mile. Based on the vehicle data of vehicle F (type / drive / weight), it can then be determined whether the vehicle was driven economically or in an environmentally friendly manner. For example, a logistics company can use such data to monitor the fuel consumption and the overall CO2 footprint of its truck fleet and can provide fuel-efficient truck drivers with appropriate compensation as an incentive. In one possible implementation, the company can set incentives for the driver in real time, i.e., while vehicle F is still driving. This is done, for example, via a dedicated communication channel between the company headquarters and the vehicle (e.g., via radio or telephone).The communication channel can also be used to inform the driver whether he is behaving correctly with regard to the company's guidelines and / or legal regulations.

[0206] In a preferred embodiment, the backend system BSYS according to the invention has a portal that allows stakeholders to log in to the backend system BSYS via a portal user interface and to enter their vehicles F into the database DB of the backend system BSYS for monitoring the vehicles F. For example, a car rental company or a logistics company can register its vehicles F with the platform and then use the platform to monitor the compliant intake and consumption of various energy carrier media M by its R.416449

[0207] - 32 -

[0208] Monitor vehicles F and easily prove this to authorities.

[0209] The system according to the invention can therefore be used in a variety of applications. User and vehicle end devices can be connected to the BSYS backend system via APIs (Application Programming Interfaces).

[0210] The method and system according to the invention is suitable for any vehicles F, i.e., in addition to road vehicles (cars, trucks) also for aircraft, watercraft or rail vehicles.

[0211] Vehicle F has a vehicle communication unit (VCU) with a control unit designed to control driving functions and / or vehicle functions (e.g.,

[0212] The vehicle F is equipped with a display device designed to show the evaluation results received from the BSYS backend system to a vehicle user or driver. Furthermore, the vehicle F has a display device intended to show the evaluation results received from the BSYS backend system to a vehicle user or driver.

[0213] The method and system according to the invention increase security against manipulation. In a preferred embodiment, the data transmitted via the interfaces INT1JNT 2 are transmitted using cryptographic protection to further increase security against manipulation. Detected inconsistencies or deviations regarding the timestamps TS and / or transmitted quantities of fuel or electricity are preferably reported to a higher-level control system. Furthermore, detected deviations can automatically trigger an error message or warning message. In a possible embodiment of the method and system according to the invention, detected deviations or manipulation attempts also automatically trigger actions or interventions at an affected vehicle F and / or at an affected filling station T.

Claims

R.416449 - 33 - Claims 1. Computer-implemented method for reliably assigning a vehicle (F) to a pickup point (P) of a filling station (T) with respect to an energy carrier medium pickup process (AV) comprising the following steps: Transfer (S2) of initial information data (Data 1) regarding a recording process (AV-P) recorded on the side of a recording point (P) of a filling station (T) from the recording point (P) via an initial data interface (INT1) to a backend system (BSYS); Transfer (S3) of second information data (Data 2) regarding a recording process (AV-F) recorded on the side of a vehicle (F) from the vehicle (F) via a second data interface (INT2) to the backend system (BSYS); Assigning (S5) the vehicle (F) to the recording point (P) if an evaluation (S4) of the information data (Data 1, Data 2) obtained via the data interfaces (INT1, INT2) by a data processing unit (DVE) shows that the recording process (AV-P) recorded on the side of the recording point (P) and the recording process (AV-F) recorded from the side of the vehicle (F) relate to the same recording process.

2. A computer-implemented method for securely assigning a vehicle (F) to a refueling point (P) of a filling station according to claim 1, wherein the refueling point (P) detects the start and end of a refueling process (AV) for receiving an energy carrier medium (M) by a vehicle (F) and generates corresponding refueling point timestamps (TS-P-Start, TS-P-Stop) which are transmitted from the refueling point (P) to the backend system (BSYS) via the first interface (INT1) as part of the first information data (Data 1), and wherein the vehicle (F) detects the start and end of a refueling process (AV) for receiving an energy carrier medium (M) by the vehicle (F) and generates corresponding vehicle timestamps (TS-F-Start, TS-F-Stop) which are transmitted from the vehicle (F) to the backend system (BSYS) via the second interface (INT2) as part of the second information data (Data 2), R.416449 - 34 - the data processing unit compares the recording point timestamps (TS-P-Start, TS-P-Stop) with the vehicle timestamps (TS-F-Start, TS-F-Stop) to determine if they relate to the same recording operation (AV).

3. A computer-implemented method for reliably assigning a vehicle (F) to a refueling point (P) of a filling station according to claim 1 or 2, wherein the refueling point (P) detects the start and end of a refueling process (AV) for receiving an energy carrier medium (M) by a vehicle (F) and generates corresponding refueling point quantity data (ME-P-Start, ME-P-Stop) which are transmitted from the refueling point (P) to the backend system (BSYS) via the first interface (INT1) as part of the first information data (Data 1), and wherein the vehicle (F) detects the start and end of a refueling process (AV) for receiving an energy carrier medium (M) by the vehicle (F) and generates corresponding vehicle quantity data (ME-F-Start, ME-F-Stop) which are transmitted from the vehicle (F) to the backend system (BSYS) via the second interface (INT2) as part of the second information data (Data 2).wherein the data processing unit (DVE) compares the recording point quantity data (ME-P-Start, ME-P-Stop) with the vehicle quantity data (ME-F-Start, ME-F-Stop) to determine whether they relate to the same recording operation (AV).

4. Computer-implemented method for reliably assigning a vehicle (F) to a recording point (P) of a filling station according to claim 2 or 3, wherein the data processing unit calculates a correspondence metric based on a determined degree of correspondence between the timestamps (TS-F) of the vehicle (F) and the timestamps (TS-P) of the recording point (P) and / or based on a determined degree of correspondence between the quantity data (ME-F) of the vehicle (F) and the quantity data (ME-P) of the recording point (P), which indicates a probability that the recording operation (AV-P) recorded on the side of the recording point (P) and the recording operation (AV-F) recorded on the side of the vehicle (F) relate to the same recording operation.

5. Computer-implemented method for reliably assigning a vehicle (F) to a recording point (P) of a filling station according to one of the R.416449 - 35 - Claims 1 to 4, wherein the intake process (AV) for taking up an energy carrier medium (M) by a vehicle (F) at an intake point (P) is selectively accelerated, slowed down or temporarily interrupted to provide an individual intake process pattern.

6. Computer-implemented method for securely assigning a vehicle (F) to a recording point (P) of a filling station according to one of claims 1 to 5, wherein the first information data (Data 1) transmitted from the recording point (P) with regard to the energy carrier medium (M) recorded by the vehicle (F) in the recording process (AV) comprises a digital twin data set (DTM) of the energy carrier medium (M), which indicates an environmental compatibility of the energy carrier medium (M) available at the recording point (P), in particular its CO2 footprint.

7. Computer-implemented method for safely assigning a vehicle (F) to a pickup point (P) of a filling station according to one of claims 1 to 6, wherein the energy carrier medium (M) comprises a fuel which is conveyed from a fuel tank of a fuel filling station via a fuel pump to a fuel nozzle as the pickup point (P) for the fuel and fills a fuel tank of the vehicle (F) during a refueling process as the pickup process (AV).

8. Computer-implemented method for safely assigning a vehicle (F) to a charging point (P) of a filling station according to one of claims 1 to 6, wherein the energy carrier medium (M) has an electric current which comes from an electrical power supply network of a charging station via a charging pump to a charging plug or charging coil as a charging point (P) for the electric current and charges a vehicle battery of the vehicle (F) during a charging process as a charging process (AV).

9. Computer-implemented method for reliably assigning a vehicle (F) to a recording point (P) of a filling station according to any one of claims 1 to 8, wherein the information data (Data 1, Data 2) obtained via the data interfaces (INT1, INT2) are evaluated by the data processing unit (DVE) to determine whether the recording process (AV) and / or the data transmitted by the vehicle (F) during the process is correct. - 36 - The energy carrier medium (M) absorbed must comply with predefined stored rules (R), wherein the evaluation result is transmitted to a control unit of the vehicle (F) and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner (S5), and wherein the predefined rules (R) are stored in a database (DB) of the backend system (BSYS).

10. Computer-implemented method for safely assigning a vehicle (F) to a pickup point (P) of a filling station according to one of claims 1 to 5, wherein the control unit of the vehicle (F) controls driving functions of the vehicle (F) and / or vehicle functions of the vehicle (F) depending on the evaluation result obtained from the backend system (BSYS).

11. Computer-implemented method for securely assigning a vehicle (F) to a pickup point (P) of a filling station according to any one of claims 1 to 10, wherein the first information data (Data 1) transmitted from the pickup point (P) to the backend system (BSYS) via the first interface (INT1) comprises an identification of the pickup point (P-ID), a time span of the pickup process (AV), a quantity (ME) of the energy carrier medium (M) dispensed from the pickup point (P) to the vehicle (F) during the pickup process (AV), and a location of the pickup point (P).

12. Computer-implemented method for securely assigning a vehicle (F) to a pickup point (P) of a filling station according to any one of claims 1 to 11, wherein the second information data (Data 2) transmitted by the vehicle (F) to the backend system (BSYS) via the second data interface (INT2) includes information relating to the pickup process (AV), an identification of the vehicle (F-ID), a time period of the pickup process (AV), a quantity (ME) of the energy carrier medium (M) received from the vehicle (F) during the pickup process (AV), and a location of the vehicle (F) during the pickup process (AV).

13. Computer-implemented method for securely assigning a vehicle (F) to a pickup point (P) of a filling station according to one of claims 1 to 12, wherein the data processing unit (DVE) of the backend system (BSYS) receives the data from the pickup point (P) via the first interface. R.416449 - 37 - (I NT1 ) compares the first information data (Data 1) received by the first data interface (INT2) with the second information data (Data 2) received by the vehicle (F) via the second data interface (INT2) to perform a plausibility check of an upcoming, ongoing or completed recording process (AV), wherein a plausibility check result forms an evaluation result that is transmitted by the backend system (BSYS) to a control unit of the vehicle (F) and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner.

14. Computer-implemented method for securely assigning a vehicle (F) to a pickup point (P) of a filling station according to one of claims 1 to 13, wherein the second information data (Data 2) received by the data processing unit (DVE) of the backend system (BSYS) from the vehicle (F) via the second interface (INT2) comprise vehicle parameters of the vehicle (F), in particular with regard to a type and / or quantity of at least one energy carrier medium (M) required by a vehicle drive of the vehicle (F).

15. Computer-implemented method for securely assigning a vehicle (F) to a pickup point (P) of a filling station according to any one of claims 1 to 14, wherein the consumption of an energy carrier medium (M) by a vehicle drive of the vehicle (F) and / or a filling or charging state of an energy carrier pickup unit of the vehicle (F) and / or driving functions of the vehicle (F) and / or a current position of the vehicle (F) during the ongoing journey of the vehicle (F) are monitored by the control unit of the vehicle (F) and are reported as third information data (Data 3) to the backend system (BSYS).

16. Computer-implemented method for reliably assigning a vehicle (F) to a pickup point (P) of a filling station according to claim 15, wherein the data processing unit (DVE) of the backend system (BSYS) evaluates the third-party information data (Data 3) received from a vehicle (F) and, depending on the evaluated third-party information data and the other available information data regarding the vehicle (F), generates navigation data for approaching a suitable pickup point (P), which are transmitted to the control unit of the vehicle (F). R.416449 - 38 - 17. Computer-implemented method for securely assigning a vehicle (F) to a pickup point (P) of a filling station according to any one of claims 1 to 16, wherein the environmental compatibility of the energy carrier medium (M) available at the pickup point (P), in particular its CO2 footprint, as specified in the digital twin data set (DTM) of the energy carrier medium (M), changes dynamically over time.

18. Computer-implemented method for securely assigning a vehicle (F) to a refueling point (P) of a filling station according to any one of claims 1 to 17, wherein the evaluation results transmitted by the backend system (BSYS) to a control unit of the vehicle (F) and / or to an end device of the vehicle driver and / or to an end device of the vehicle owner in the course of several refueling processes (AV) are stored in a vehicle data record, which is transmitted to a stakeholder, who, on the basis of the received vehicle data record, implements incentive measures and / or support measures to promote compliant refueling and / or compliant consumption of an energy carrier medium (M) by the vehicle (F).

19. Computer-implemented method for safely assigning a vehicle (F) to a pickup point (P) of a filling station according to one of claims 1 to 18, wherein vehicles are refueled with a time delay which has a predefined duration, in particular a duration of two seconds.

20. Computer-implemented method for reliably assigning a vehicle (F) to a pickup point (P) of a filling station according to any one of claims 1 to 19, wherein an intelligent follow-up is provided which is triggered by a trigger event.

21. System for reliably assigning a vehicle (F) to a pickup point (P) of a filling station, wherein the system is designed to execute the computer-implemented method according to any one of claims 1 to 20.

Images