EP2814001A1 - Method and system for preventing tampering in e-ticketing systems - Google Patents

Abstract

To prevent tampering and, in the case of billet control, manual waking of e-tickets (10) using portable waking transmitters, a method is proposed for registering e-tickets (10) in a means of transport (30) at which time between receipt of a particular wake-up code from a set of valid possible wake-up codes and the beginning of bidiektionalen communication with a transmitting / receiving unit is transmitted from the e-ticket and is compared in the means of transport components. In case of inequality, a manipulation attempt is to be concluded. Since only the system-immanent parts of the e-ticketing system know the time of sending the respective wake-up code and the beginning of the bidirectional communication, so that an effective measure for immunizing such e-ticketing systems has been created against such manipulation attempts.

Description

The present invention relates to a method and a system against manipulation in e-ticketing systems according to the independent claims.

For example, the general functionality and requirements for an e-ticketing system in a public transport vehicle can be found in the sources given in [2] and [3]. Electronic tickets or electronic tickets are also known as e-tickets. In the following, the aforementioned two terms are briefly subsumed under e-ticket. Likewise, vehicles of the OeV - as well as course ships - are subsumed under the term (public) means of transport.

Essentially two different ticketing systems are distinguished:

• Proximity, ISO/IEC 14443,
  Reichweite bis 10cm;
• Vincinity, ISO/IEC 15693, 13.56MHz;
  Reichweite 1 - 1.5m.

CiCo check-in / check-out
A passenger deliberately holds his ticket just before entering and leaving the means of transport or the platform area in front of one of the billing system belonging readers, correctly "transceiver units". The query of the ticket - hereinafter referred to as e-ticket - is done by a near-distance radio link, such as

• Proximity, ISO / IEC 14443,
  Range up to 10cm;
• Vincinity, ISO / IEC 15693, 13.56MHz;
  Range 1 - 1.5m.

• Das Billett wird per Funk innerhalb der befahrenen Streckenabschnitte automatisch von den in den Wagen installierten Leseeinheiten erfasst und die so gewonnenen Daten einem automatischen Abrechnungssystem zugeführt.
• Eine Interaktion des Benutzers ist nicht mehr notwendig.
• Es braucht auch keinen Check-Out-Vorgang. Somit lässt sich der Fahrgastfluss erheblich beschleunigen, insbesondere beim gleichzeitigen Ein-/Aussteigen der Passagiere.

BiBo Be-in / Be Out
For more comfortable systems, it is only necessary for the passenger to carry his electronic ticket:

• The ticket is automatically recorded by radio within the traveled sections of the installed in the car reading units and the thus obtained Data fed to an automatic billing system.
• An interaction of the user is no longer necessary.
• It also does not need a check-out process. Thus, the flow of passengers can be accelerated considerably, especially when passengers are getting in / out at the same time.

• Aus Gründen der Autonomie befinden sich die Billette in einem Schlafzustand. Beim Eintritt in ein Verkehrsmittel werden die e-Tickets durch ein Nahfeld, z.B. 6.78Mhz geweckt und unidirektional mit einer ID sowie einer Timing Information «gestempelt». Die ID bezieht sich auf den im Eingangsbereich befindlichen Wecksender und die Timing Information auf Beginn und Intervall einer bidirektionalen Kommunikation zwischen e-Ticket und einer im Wagen befindlichen Sende- und Empfangseinheit. Durch das Protokoll können bei diesem System Fehlerfassungen und Manipulationen verhindert werden, so z.B.
  • Parallelfahrt auf einem Velo oder durch Parallelfahrt zweier Züge
  • Betrugsversuche durch temporäres Versorgen des e-Tickets in eine metallene Zigarettenschachtel.

From the Scriptures EP 1 201 693 B1 [1] a BiBo method and a system for detecting electronic tickets (e-ticket) is known. The system disclosed in document [1] is based on the following functionality:

• For reasons of autonomy, the tickets are in a sleep state. When entering a means of transport, the e-tickets are awakened by a near field, eg 6.78Mhz and "stamped" unidirectionally with an ID and a timing information. The ID refers to the wake-up transmitter located in the entrance area and the timing information to the beginning and the interval of bidirectional communication between the e-ticket and an in-car transmitter and receiver unit. The protocol can be used with this system to prevent errors and manipulation, such as
  • Parallel travel on a bicycle or by parallel travel of two trains
  • Fraud attempts by temporarily supplying the e-ticket in a metal cigarette box.

An e-ticket as described above can only be detected if the necessary radio links between the e-ticket and installed in the transport transmitter / receiver units actually come about, and only then can the one trip made properly settled on a background system become.

Unlawful users could try to manipulate the capture of an e-ticket so that a regular billing does not occur or can not be done. On the one hand, therefore, at least rudimentary carrying and user instructions for the passengers must be issued for an e-ticket system prevent the e-ticket from being worn more or less completely shielded. On the other hand, there must be appropriate system engineering measures to prevent manipulation.

One way to manipulate is described below:

If an unlawful user prevents the waking up of his electronic ticket when entering the means of transport, no billing of the journey would take place. Preventing the awakening could e.g. B. be accomplished by the introduction of the ticket in a shielding container. The wake-up signal in the entrance area of the car is conveniently sent only while the car is in the station and the doors are open. In the case of a ticket inspection, which is carried out only while driving, the unlawful user would have to manually cause his previously not properly recorded electronic ticket to log in to the radio base stations in the car. The manual awakening of the e-ticket could z. B. be made without further intervention itself by a small device that mimics the code transmitted by the wake-up transmitters. Depending on the design of the e-ticketing system, the small device could either use fixed wake-up codes or cache the waking code transmitted by the wake-up transmitters upon entering the means of transport and play it back in the event of a manual wake-up. For example, in the case of a ticket inspection, the regular fare would be charged to the unlawful user, but any trip without a ticket check would be left unaccounted for.
A particular danger arises from the possibility that the required for waking small devices are manufactured in larger quantities and sold. With such devices in mass use a large group of people can avoid the regular detection in a means of transport and thus prevent a calculation of the fare. A (manual) intervention in the e-ticket is not necessary to circumvent the regular billing of the fare.

• Die Erfassung bzw. der Kommunikationsaufbau mit den e-Tickets nach dem Aufwecken des elektronischen Fahrscheins erfolgt sehr zeitnah nach dem Schließen der Türen und der Abfahrt des Verkehrsmittels. Kurze Zeit danach ist keine Erfassung von e-Tickets an den Sende-/Empfangseinheiten mehr möglich. Diese Lösung ist aber nur in gewissen Grenzen umsetzbar, denn es muss auch dann eine korrekte Erfassung der e-Tickets gewährleistet sein, wenn an einer Haltestelle viele Personen in kurzer Zeit in den Wagen steigen. Beim Durchlaufen des Eingangsbereichs werden sämtliche elektronischen Fahrscheine sofort aufgeweckt. Für den Kommunikationsaufbau zwischen den einzelnen Fahrscheinen und den Sende-/Empfangseinheiten im Zug und für die Kommunikation zur eigentlichen Erfassung der Fahrt nach Fahrtantritt wird aber aufgrund begrenzter Übertragungskapazitäten im Funkkanal eine gewisse Zeitspanne benötigt. Auch kann es vorkommen, daß aufgrund ungünstiger Umstände vorübergehend kein Kommunikationsaufbau zwischen einzelnen e-Tickets und den Sende-/Empfangseinheiten stattfinden kann; Beispiel: Sehr viele Personen stehen dicht in einem Wagen → «Gedränge». So sollte es durchaus möglich sein, dass der Kommunikationsablauf zur Erfassung auch zu einem späteren Zeitpunkt während der Fahrt (aber noch innerhalb des betreffenden Streckenabschnitts) stattfinden kann. Zur Umgehung bestimmter Manipulationen und zur Vermeidung falscher Abrechnungen (z. B. bei Passagieren mit e-Tickets am Bahnsteig) liefern die Aufwecksender nur ein Aufwecksignal, solange die Türen geöffnet sind. Schließen sich die Türen und wird die Fahrt begonnen, so werden die Aufwecksender abgeschaltet, so dass von da an für den Rest des betreffenden Streckenabschnittes keine Fahrscheine mehr auf reguläre Art aufgeweckt werden können.

The above-described possibility of manipulation could be solved as follows:

• The detection or communication with the e-tickets after waking up the electronic ticket is very timely after closing the doors and the departure of the means of transport. Shortly thereafter, it is no longer possible to collect e-tickets at the transceiver units. However, this solution can only be implemented within certain limits, because it must also be ensured that the e-tickets are correctly recorded if many people get into the car in a short time at a stop. When passing through the entrance area, all electronic tickets are woken up immediately. However, due to the limited transmission capacities in the radio channel, a certain period of time is required for establishing the communication between the individual tickets and the transmitting / receiving units in the train and for communication with the actual recording of the journey after departure. It may also happen that due to unfavorable circumstances temporarily no communication between each e-tickets and the transmitting / receiving units can take place; Example: A lot of people are standing tightly in a car → «crowds». So it should be quite possible that the communication process for recording can take place at a later time while driving (but still within the relevant section of the route). To avoid certain tampering and avoid billing (for example, passengers on e-tickets on the platform), the wake-up transmitters provide only a wake-up signal while the doors are open. If the doors close and the journey is started, the wake-up transmitters are switched off so that from then on tickets can no longer be woken up in the regular way for the remainder of the relevant section of the route.

• Identität des Aufwecksenders,
• Zeiteinheit, Zeitbezug,
• spezifischer Befehl an das e-Ticket.
  Durch den Empfang dieser Informationen (in der Schrift [4] wird dies auch als elektronische Stempelung bezeichnet) wird das e-Ticket veranlasst, gemäss der Zeiteinheit und dem Zeitbezug ein zweites Sende-/Empfangsmodul intermittierend ein- und auszuschalten, um während dem eingeschalteten Zustand eine bidirektionale Kommunikation mit der im Fahrzeug angeordneten Sende-/Empfangseinheit zu etablieren und damit die Anwesenheit des e-Tickets zu registrieren. Dies wurde wegen der Autonomieanforderung von rund 3a der e-Tickets damals so gelöst. Die Übermittlung der Identität ist deshalb von Bedeutung, weil in einem grossen Bahnhof beim vorbei marschieren an offenen Türen jedes Ticket "geweckt" wird und dann nach erfolgtem Einsteigen und Abfahrt in einem Wagen die letzte Stempelung für einen Plausibilitätscheck verwendet wird.

The document EP 1 362 330 B1 [4] discloses a method in which upon entry of an e-ticket into a vehicle while waking up, the following information is transmitted:

• Identity of the awakening transmitter,
• Time unit, time reference,
• specific command to the e-ticket.
  By receiving this information (in Scripture [4] this is also referred to as electronic stamping), the e-ticket is caused to intermittently turn on and off a second transceiver module according to the time unit and the time reference, in order to be in the on state to establish a bi-directional communication with the arranged in the vehicle transmitting / receiving unit and thus to register the presence of the e-ticket. This was solved because of the autonomy requirement of about 3a of the e-tickets at that time. The transmission of the identity is important because in a large station marching past at open doors each ticket is "awakened" and then after the boarding and departure in a car the last stamp is used for a plausibility check.

Based on this closest prior art according to the document [4], the present invention therefore has for its object to provide a method and system for detecting an e-ticket, which method and system are immune to brought waking and thus immune to mock alarms ,

This object is achieved by the measures specified in the independent patent claims. Advantageous embodiments of the invention are specified in further claims.

• die Zeitpunkte des Aussendens eines Aufweckcodes;
• die Ausgestaltung des Aufweckcodes,
• Länge des Aufweckcodes.

Da nun nur die systemimmanenten Teile eines e-Ticketing-Systems den Zeitpunkt des Aussendens eines Aufweckcodes und des Beginns der bidirektionalen Kommunikation kennen, ist damit eine wirksame Massnahme zur Immunisierung solcher e-Ticketing-Systeme gegen Manipulationsversuche geschaffen worden.Since neither a jammer nor a person using this jammer can know at what exact time which wakeup codes will be sent out, one has Transmission of even a valid wake-up code has no effect, since a time value thus generated does not match in the comparison in the transceiver unit. By a correspondingly fine time grid 10ms .. 100ms, the probability of a randomly correct time value can be further reduced. By agreeing on variable wake-up codes, it may also be possible to ensure that such jammers can not even wake up the e-tickets. The variability can relate to

• the times of sending a wake-up code;
• the design of the wake-up code,
• Length of the wakeup code.

Since only the system-immanent parts of an e-ticketing system know the time of sending a wake-up code and the beginning of the bidirectional communication, thus an effective measure for the immunization of such e-ticketing systems against tampering attempts has been created.

The invention will be explained in more detail with reference to the drawing, for example. Showing:

FIG. 1 Longitudinal view of the arrangement of two transceiver units in a railway carriage for the collection of e-tickets;

FIG. 2 Block diagram of a transmitting / receiving unit in an e-ticket;

FIG. 3a exemplary sections of a data telegrams in the direction e-ticket to transmitting / receiving unit;

FIG. 3b exemplary sections of a data telegrams with an index in the direction e-ticket to transmitting / receiving unit.

FIG. 1 shows a cross section through a railway carriage 30 as an example of a means of transport 30. At the Ceiling of the railway car 30, two transceiver units 20 ₁ and 20 _{2 are} installed. These transmitting / receiving units 20 ₁ and 20 ₂ are each provided with an antenna. For the transmitting / receiving unit 20 ₁ , the associated detection area 21 _{1 is} shown. Within this coverage area 21 e-tickets 10 can record a preferably bidirectional communication with the transmitting / receiving unit 20 ₁ by means of data telegrams, which are used as a result of registration of the e-tickets 10 for the settlement of a related mileage. In the FIG. 1 For example, the e-tickets 10 are shown as being mappable to a seated passenger, standing passengers, and a dog (under a seat).

FIG. 2 shows a block diagram of an e-ticket 10 are received from the e-ticket 10 via the corresponding antenna information units, they arrive in demodulated and converted to logic level form to the microcontroller. The information units have the effect of a wake-up signal and are in the FIG. 2 labeled "RF signal to wake up". HF stands in this context, for example, for frequencies in the range of 6.78 MHz, so in terms of reception conditions in the so-called near field. The microcontroller runs in the sleep state of the e-ticket 10 in a low power mode. This low power mode makes it possible to compare the received wake-up signal sequence - referred to here as the wake-up code - with a list of valid wake-up codes despite a low power consumption or energy consumption. The amount of wake-up codes stored must be such that there is already a first effective hurdle to avoid the imitation of a wake-up signal by a jammer. In addition to the power, that is, the number of stored wake-up codes, the length of the wake-up code is an essential security feature. If a match is found between the received and stored wake-up codes, the e-ticket 10 is woken up from the sleep state and the e-ticket 10 launches communication attempts with the at least one in the Car 30 installed transceiver unit 20. It is irrelevant whether there are one or more transceiver units 20 ₁ , 20 ₂ in a means of transport 30 are available. With the beginning of the communication attempts, the microcontroller places the (valid) received wake-up signal sequence in an internal buffer and starts an internal time-measuring device. This is usually present in the microcontroller as a timer function block. The clock signal for the microcontroller is generated by means of the quartz crystal also shown in the block diagram. In the example given, this clock signal is also used to derive the step clock for the device for time measurement, which is why the time measurement has a comparatively high accuracy.

If bidirectional communication now takes place between e-ticket 10 and a transmitting / receiving unit 20 in cart 30, the e-ticket 10 sends the received wake-up signal sequence during the further course of this communication, i. the wake-up code and a value for the time elapsed between the reception of the wake-up code with the effect of a wake-up signal and the time of successful communication establishment, in a data message to the transmitting / receiving unit 20. In the transmitting / receiving unit 20 is then compared whether the transmitted wake-up signal sequence or wake-up code also matches the transmitted time value. An initially described attempt at manipulation thus has no success because the transmitted wake-up code and the time span do not match. If the two time values do not match, a tampering attempt should be concluded. For this purpose, it is necessary that the waking transmitter 22 and transmitting / receiving unit 20 are connected to each other, be it wired or by radio. Especially for smaller means of transport, it may also be advantageous to accommodate wake-up transmitter 22 and transceiver unit 20 in one unit.

So that there is no opportunity to wake up again and again the e-ticket 10 with the disturbing device described at the beginning by various valid wake-up signal sequences, For example, to empirically obtain a suitable combination of wake-up codes and matching time value, an unsuccessful attempt could be temporarily stored in the transceiver 20 together with an ID number of the e-ticket 10. The relevant e-ticket 10 is then blocked for the current stretch.

• Lautsprecherdurchsage an die Passagiere;
• Signal an den Führer des Verkehrsmittels (30);
• Versenden einer Nachricht an eine übergeordnete Leitstelle;
• per Funk versendete Mitteilung an mobile Kontrollgeräte.

The aforementioned comparison and the determination of a manipulation can be evaluated alternatively or cumulatively by the transmitting / receiving unit as follows:

• Loudspeaker announcement to the passengers;
• Signal to the guide of the means of transport (30);
• Sending a message to a superordinate control center;
• wireless communication to mobile control equipment.

The aforementioned sending a message, which is a so-called alarm message, to a higher-level control center of a transport company due to a detected manipulation attempt, for example, via a corresponding notification of installed in the vehicle components such. As a transceiver 20 ₁ or 20 ₂ , to the background system and a corresponding transmission to a control center so radio monitoring officers with radio monitoring equipment and police forces can be seriously sent to the relevant means of transport 30. The sending of a corresponding message can take place up to the background system in a similar way as the transmission of billing data.

The above-mentioned, radio-sent message to mobile control devices due to a detected manipulation attempt, for example, directly from installed in the vehicle components such. B. a transceiver 20 ₁ or 20 ₂ go out. In this case, these components would send a corresponding radio telegram including a suitably selected addressing to in-vehicle mobile control devices, the checkers for review carry valid e-tickets with you. In this case, corresponding protocol elements of the already implemented radio communication between e-tickets and the transmitting / receiving unit are used. If necessary, the inspectors are made aware of the manipulation attempt by the control device and can then search specifically for the corresponding passenger. The data telegrams for reporting a detected manipulation attempt can also be transmitted indirectly by other components of the accounting system installed in the vehicle to the mobile control devices, eg. Eg via "Wireless Gateways". These components receive radio telegrams transmitted by transceivers 20 ₁ or 20 ₂ , for example, and forward them to other communication partners, such as radio transmitters. B. just the mobile control devices, on.

About in the FIG. 2 bottom left shown antenna data messages are transmitted to the transmitting / receiving unit 20 bidirectional, there is to find the name "RF signal communication with the transceiver units". HF has another meaning here, preferably frequencies near the GSM band are used here.

The FIG. 3a shows an exemplary section of a possible data telegram that is sent from the e-ticket 10 to the transmitting / receiving unit 20. The first part of the excerpt shows a 16-bit long awakening code. The second part of in FIG. 3a The part shown shows the time since receipt of the wake-up code in a granularity of, for example, 100 ms. The aforementioned two parts need not be consecutive, but may be arranged quite differently in the data message on a layer 6 in the sense of the ISO communication model. It is important to hereby transmit the time span between reception of the wake-up signal by the e-ticket 10 and the successful establishment of the communication between the e-ticket 10 and the transmitting / receiving unit 20.

The FIG. 3b shows a possible different structure of the data telegram. The basis of this transfer is that there are a certain amount of wake-up codes that are identifiable by index / numbering. Therefore, the index of the actual wake-up code is transmitted in the first part of the data telegram. In this example, 8 bits are provided for this, so that for this example a width of 2 ⁸ = 256 different wake-up codes is available. The wakeup codes themselves can be of any length. In this way, the data message can be made more compact, which leads to shorter transmission times and a lower energy consumption in the e-ticket 10. The wake-up code itself may be considerably longer to provide the above-described first additional hurdle for a successful tampering attempt.

In the following, further advantageous specific embodiments for data telegrams and for the wake-up code are explained:

• Verschiedene Längen des Aufweckcodes je nach Zeitpunkt der Aussendung;
• Aufweckcode wird mittels eines Zufallsgenerators bestimmt, wichtig ist dabei, dass nur solche Aufweckcodes ausgesandt werden, die vorgängig in den e-Tickets gespeichert sind.

i) The wake-up transmitter 22 in the car 30 transmits time-varying wake-up codes. The e-tickets 10 are provided with a separate means for timing and a buffer for received wake-up codes. The term «variable» or variable includes:

• Different lengths of wake-up code depending on the time of transmission;
• Wake up code is determined by means of a random number generator, it is important that only those wake-up codes are sent out, which are stored in advance in the e-tickets.

• iia) feste Codefolge, die ein e-Ticket 10 zum Aufwecken veranlasst;
• iib) Datenteil, der mit zeitabhängigen Inhalten belegt ist wie beispielsweise in [1] beschrieben:
  • Verfahrensschritt A, Tabelle 1 auf den Seiten 4 und 5 von [1].

ii) The wakeup code contains two parts:

• iia) fixed code sequence that causes an e-ticket 10 to wake up;
• iib) Data part, which is occupied with time-dependent content, as described, for example, in [1]:
  • Process step A, Table 1 on pages 4 and 5 of [1].

iii) The device for time measurement is not using a timer function block in the microcontroller - see the FIG. 2 A possibility for the realization here would be a quartz oscillator, which, divided down directly or in frequency, clocks a counter module, which in turn is read out by the controlling microcontroller after completion of the time measurement. Another possibility for implementation would be a larger capacitor, which is continuously charged from the wake-up time and in which the state of charge is read out at the end of the time period via an A / D converter. Here, the achieved charging voltage on the capacitor is a measure of the past time.

The aforementioned advantageous embodiments can be freely combined with the algorithms implemented in the transceiver unit 20.

List of reference numbers, glossary

10

e-ticket

20, 20 ₁ , 20 ₂

Transmit / receive unit

21, 21 ₁ , 21 ₂

Detection range of a transmitting / receiving unit

22

Awake-up, waking unit, preferably in the entrance or transit area of a means of transport

30

transport; Railway carriage, ship, bus

31

entrance area

33

Seat, seat

34

Partition entrance / passenger compartment with seats

BOS

Authorities and organizations with security responsibilities

GSM

Global System for Mobile Communication

HF

high frequency

id

Identity, N °

OeV, public transport

Public transport

RF

radiofrequency

RX

receiver, independent receiver modules, which i.a. Provide information about the receive level

TX

transceiver, send module

UWB

Ultra Wide Band

List of cited documents

• [1] EP 1 201 693 B1 «Method and system for registering tickets» [2] «E-ticketing»
  Siemens Switzerland Ltd, Industry Sector, Mobility Division, Rail Automation
  www.litra.ch/download.php?file=dcs/users/2/3 20110316 MF dt.pdf
  and
  http://www.litra.ch/dcs/users/2/3 20110316 MF dt.pdf
  Internal file number: 2012Q25342.
• [3] «Content and structure of the specifications / customer interface and certification in the VDV core application» Presentation by Dipl.-Ing. Elke Fischer
  VDV KERN APPLICATIONS GmbH & Co. KG
  http://www.eticket-deutschland.de/
  Internal file number: 2012Q25342. [4] EP 1 362 330 B1
  «Method for registering tickets»

Claims (15)

Method for registering a defined presence of e-tickets (10) in a means of transport (30), wherein - The e-tickets (10) are awakened when entering the means of transport (30) from a wake-up transmitter (22) from a sleep state by transmitting an information unit, and - Subsequently, a bidirectional radio communication between e-ticket (10) and one in the transport (30) arranged transmitting / receiving unit (20) for registering the presence of the e-ticket (10) is established by means of data telegrams
characterized by the method steps that
A the information unit contains a wake-up code;
B is the wake-up code and the elapsed since awakening
Time is transmitted as the time value from the e-ticket (10) in a data telegram to the transmitting / receiving unit (20);
C in the transmitting / receiving unit (20) a comparison
is carried out with respect to
the time value transmitted by the e-ticket (10) with the time value determined on the transport medium side between the transmission of the relevant wake-up code and the reception of the data telegram by the transmitting / receiving unit (20),
(D) is closed on detection of an inequality on a manipulation of the registration of a defined presence of e-tickets (10) in a means of transport (30). Method according to claim 1,
characterized in that
A lot of wake-up codes are stored in the e-ticket and the e-ticket is only woken up if the received wake-up code matches one of the stored wake-up codes. Method according to claim 1 or 2,
characterized in that
In method step B, in addition, an e-ticket (10) assigned ID number is transmitted. Method according to one of claims 1 to 3,
characterized in that
in method step B, an index identifying the wake-up code is transmitted, and
In method step C, the transmitted index is compared with the index corresponding to the wake-up code in the transmitting / receiving unit (20). Method according to claim 3,
characterized in that
the waking codes emitted by the wake-up transmitter (22) are variable with respect to the time of transmission. Method according to claim 5,
characterized in that
the variable embodiment includes a variable length of the wake-up code. Method according to one of claims 1 to 6,
characterized in that
in method step D, upon detection of an inequality from the transmitting / receiving unit (20) a message is issued. Method according to claim 7,
characterized in that
the message is alternatively or cumulatively designed as - loudspeaker announcement to the passengers in the means of transport (30), - signal to the driver of the means of transport (30), - an alarm message to a higher-level control center of a transport company, - Notification sent by radio communication to a mobile control device carried by control personnel to check valid tickets. Method according to claim 8,
characterized in that
the message sent by radio communication is sent to the control device of the transceiver unit (20) arranged in the means of transport (30). System for registering a defined presence of e-tickets (10) in a means of transport (30), wherein - The e-tickets (10) are awakened when entering the means of transport (30) from a wake-up transmitter (22) from a sleep state by transmitting an information unit, and - Subsequently, a bidirectional radio communication between e-ticket (10) and one in the transport (30) arranged transmitting / receiving unit (20) for registering the presence of the e-ticket (10) is established by means of data telegrams
characterized in that
A the information unit contains a wake-up code;
B is the wake-up code and the elapsed since awakening
Time is transmitted as the time value from the e-ticket (10) in a data telegram to the transmitting / receiving unit (20);
C in the transmitting / receiving unit (20) a comparison
is carried out with respect to
the time value transmitted by the e-ticket (10) with the time value determined on the transport medium side between the transmission of the relevant wake-up code and the reception of the data telegram by the transmitting / receiving unit (20),
D is concluded upon detection of an inequality on a manipulation of the registration of a defined presence of e-tickets (10) in a means of transport (30). System according to claim 10,
characterized in that
the e-ticket (10) has a microcontroller containing a timer function block, with which the time value is determined. System according to claim 11,
characterized in that
the e-ticket (10) has a microcontroller and an additional circuit with a quartz oscillator, with which the time value is determined. A system according to any one of claims 10 to 12, characterized in that
when reporting inequality, a report is canceled. System according to claim 13,
characterized in that
the message is alternatively or cumulatively designed as - loudspeaker announcement to the passengers in the means of transport (30), - signal to the driver of the means of transport (30), - to a higher-level control center of a transport company, - Notification sent by radio communication to a mobile control device, which is carried by the inspection staff to check valid tickets. A system according to any one of claims 10 to 12, characterized in that
the message is sent to the control device from the transmitting / receiving unit (20).

Images