Road Toll System Using Variable Identity for Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing thin client road toll systems compromise driver privacy as they require external servers to perform map matching and trip cost computation, potentially exposing sensitive data to interception or misuse.
Innovation Solution
A road toll system that uses a satellite navigation receiver with a variable identity to process GPS data anonymously, delegating computation to external servers while maintaining data security, ensuring that no single entity can infer the vehicle's identity or route taken, by employing a split-knowledge principle and random ID generation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If map matching and trip cost computation are performed by external servers in a thin client scenario, then computation power needed by the OBU is reduced and map updates only need to be performed on the back-end server, but driver privacy is compromised as GPS data may be intercepted or misused
Solution Approach 1:
The system segments the road tolling functionality into two separate servers: a map matching server that processes GPS data anonymously using variable identities, and a trip cost computation server that calculates tolls based on route information. This segmentation ensures that no single server has access to both raw GPS data and computation capabilities, thereby protecting driver privacy while maintaining the thin client architecture benefits.
Solution Approach 2:
The patent introduces variable identities as intermediaries between the OBU and the external servers. The OBU transmits GPS data associated with changing variable identities rather than permanent identifiers, creating a layer of anonymity. The map matching server processes this anonymous data, and the results are used by the computation server without revealing the driver's true identity, thus mediating between privacy protection and external processing.
2Adaptability or versatility
If GPS data is transmitted to external servers for processing, then thin client architecture benefits are achieved, but data security is reduced due to potential interception during transmission
Solution Approach 1:
The system employs dynamic variable identities that change over time rather than static identifiers. Each GPS data transmission is associated with a different variable identity, making it difficult to track or correlate data across different time periods. This dynamic approach enhances data security while maintaining the flexibility and adaptability of the thin client architecture.
Solution Approach 2:
The patent creates anonymous copies of GPS data by associating it with variable identities rather than transmitting raw personal data. The map matching server works with these anonymized copies, processing the essential route information without accessing or storing the driver's actual identity, thus preserving data security while enabling external processing.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A road toll system comprises a vehicle-mounted unit having a satellite navigation receiver. A first data processing means determines a route taken 5 based on satellite navigation data provided from the receiver, and the satellite navigation data is associated with a variable identity. A road toll level is derived. A second data processing means receives the road toll level provided by the first data processing means, and the satellite navigation obtains the determined road toll level from the second data processing means using the 10 variable identity. This provides a thin client scenario(the receiver does not implement the map calculations), but with data security corresponding to a thick client solution. Thus, the map matching and trip cost computation steps are delegated by the on-board unit to an external unit, but this delegationis performed anonymously, so that no data sent for external processing 15 compromises the privacy of the data.