WO2007135661A1

WO2007135661A1 - Prevention of fuel fraud

Info

Publication number: WO2007135661A1
Application number: PCT/IL2007/000587
Authority: WO
Inventors: Shlomo Kariv
Original assignee: Unitak - Fueling & Supervision Systems Ltd.
Priority date: 2006-05-24
Filing date: 2007-05-14
Publication date: 2007-11-29
Also published as: IL175905A0

Abstract

A system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a) a processor that receives and encrypts data responsive to vehicle use; b) an output device that presents the encrypted measure to the user; and c) a controller adapted to receive the encrypted data from the user, and to authorize dispensing of fuel responsive thereto.

Description

PREVENTION OF FUEL FRAUD

This Application claims priority from Israel application No. 175905, filed on 24 May 2006, the disclosure of which is incorporated herein by reference.

FIELD OF THE INVENTION

The invention relates to methods of controlling dispensing of fuel for a vehicle.

BACKGROUND OF THE INVENTION There is a need to monitor dispensing of fuel to vehicles, when the fuel is paid for by a party other than the user of the vehicle, to prevent fuel theft by the user. For example fuel costs for a fleet of vehicles may be paid for by the fleet owner, rather than by the drivers of the vehicles.

US patent 4,085,313, to Van Ness, describes a system in which a vehicle odometer reading is manually entered into a device on a pump at a gas station, which keeps track of the number of kilometers driven per liter of fuel dispensed, to each vehicle. However, this system is not suitable for preventing fuel theft, at least in the short term, because there is nothing to prevent the customer from entering a fraudulent odometer reading. Rather, the device is intended to help customers keep track of the number of kilometers per liter obtained by their vehicles so that they can get their vehicles serviced if the number changes.

US patent 4,658,371, to Walsh et al, describes a portable memory unit, attached to a vehicle that contains odometer data, which is read by special apparatus on a pump at a gas station. The apparatus determines a reasonable quantity of fuel used based on a distance driven since a last time the vehicle's fuel tank was filled. It detects aberrant fuel consumption due for example to theft or motor inefficiency by comparing this quantity to the actual quantity of fuel purchased. US patent 6,128,551, to Davis et al, describes a similar system in which the memory unit is incorporated in a car key. All of these systems have the disadvantage that they require special hardware to be installed at the gas station. The system is therefore controlled by the fuel company, and the initiative for installing the system comes from the fuel company. A fleet owner who wants to use such a system to prevent fuel theft from his fleet of vehicles must require his drivers to purchase fuel only from that fuel company. Furthermore, the choice of fuel companies that might provide such a service is in general limited since only fuel companies that have a relatively large geographical spread would be likely to install such a system. Another disadvantage of the systems described above is that moderate quantities of fuel can be stolen without being detected, as long as the apparent number of kilometers driven per liter of fuel is within a range that will not arouse suspicion.

US patent 6,718,239, to Rayner, describes an event recorder which records data about a vehicle, validates it, and stores it in a tamper-proof manner. US patent 6,772,090, to Hutton et al, describes an odometer which encrypts data so that it cannot be tampered with.

US patent 4,114,140, to Kubina, describes a way of verifying the validity of ID cards or credit cards used for dispensing fuel to a vehicle.

US patent 4,591,704, to Sherwood et al, describes a method of scrambling data on an ID card or credit card used for dispensing fuel, so that a fake card cannot be produced even by someone familiar with the system for encoding data on the card.

The disclosures of all the patents mentioned above are incorporated herein by reference.

SUMMARY OF THE INVENTION An aspect of some embodiments of the invention relates to providing a system for controlling dispensing of fuel for use in a vehicle that is paid for by a party other than the vehicle's user, which reduces the user's opportunity for fuel theft.

In an embodiment of the invention, the system comprises a system processor optionally mounted to the vehicle that receives data, such as odometer data, responsive to vehicle use, and processes the data to provide an encrypted measure indicative of fuel use by the vehicle. Optionally, the data comprises a direct measure of fuel consumed by the vehicle motor. In addition, the system comprises an output device for presenting the encrypted data. Optionally, the output device is a digital display controllable to display the encrypted measure. Optionally, the display is comprised in a portable unit, for example a system credit card that receives the data via a wireless link.

To use the system credit card to purchase fuel, the vehicle user controls the display to present the encrypted measure and enters the encrypted measure into a standard credit card payment device at any gas station, as if it were a code used to authorize the use of the credit card. Optionally, a controller such as a central computer, used by the credit card company to authorize or deny fuel purchases by credit cards used for the fleet, is connected to the payment device by a standard credit card network. The computer receives the encrypted measure, decrypts it, and uses it to determine a reasonable amount of fuel, or cost of fuel, for refilling that vehicle. The computer communicates optionally over the credit card network with the payment device to authorize or deny the fuel purchase by the vehicle user, or authorize a maximum amount for the fuel purchase. Optionally, the vehicle use data received by the system processor includes various types of data in addition to or alternative to mileage and engine fuel consumption that may affect fuel use, for example, average driving speed, time spent at different gear ratios, a number of starts and stops, and time spent idling. Optionally, the data, including odometer data and fuel consumption, is obtained by sensors in the vehicle, for example in the engine or transmission, which data is sent to the system processor unit. In modern vehicles, some or all of the vehicle use data may already be available and stored in an engine computer, and the system processor optionally obtains the data from the engine computer, for example via a cable, or via a wireless link. In some embodiments of the invention the system processor is in the credit card.

A fuel control and dispensing system in accordance with an embodiment of the invention overcomes problems noted above for prior art systems. The system is controlled by the fleet owner, not by the gas station owner, and is installed at the initiative of the fleet owner, without the need for cooperation from the gas station owner. It uses existing credit card networks to communicate with the central computer, and can therefore generally be used at most if not substantially all gas stations. Because the data is encrypted, the vehicle user cannot enter fraudulent data unless he knows and is able to use the encryption scheme. An aspect of an embodiment of the invention relates to a system for controlling dispensing of fuel for use in a vehicle, in which the fuel flowing into the engine is measured directly. Optionally, the system is used to prevent fuel theft, by a user who is not responsible for paying for fuel used by the vehicle. Such direct monitoring of fuel use has the potential advantage that it is generally more accurate than estimating fuel use from the distance driven, and even a small amount of fuel theft could be detected. Fuel use per kilometer can vary, for a given vehicle, by as much as a factor of two, depending on the road conditions, the condition of the vehicle, and the driving habits of the driver. Optionally, the system is used in a vehicle equipped with an engine computer and sensors that measure fuel flowing into the engine while the engine is running, and the system optionally obtains data on fuel use from the engine computer.

An aspect of some embodiments of the invention relates to a system for preventing fuel theft, in which a processor in a vehicle receives data about the use of a vehicle, and transmits the data to a central computer over a secure link, for example over a cell phone network, or a wireless internet connection, or a satellite communication link. The data on vehicle use may include any of the kinds of data described above. The central computer authorizes the dispensing of an amount of fuel responsive to the data on vehicle use, for example by authorizing the use of a credit card for purchasing the fuel at a gas station. The data is transmitted over a communication channel that does not depend on the cooperation of the owners of the gas station. Optionally, the data is transmitted directly, without being entered by a user of the vehicle, and there is no need for the data to be encrypted. Alternatively, at least one link in the data communication channel requires the data to be entered by the user, and the data is encrypted.

There is thus provided, in accordance with an exemplary embodiment of the invention, a system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a) a processor that receives and encrypts data responsive to vehicle use; b) an output device that presents the encrypted measure to the user; and c) a controller adapted to receive the encrypted data from the user, and to authorize dispensing of fuel responsive thereto.

Optionally, the data comprises odometer data. Additionally or alternatively, the data comprises data on fuel going into the engine of the vehicle.

Optionally, the processor is adapted to obtain the data at least in part from an engine computer of the vehicle. Optionally, the processor is comprised at least in part on a fixed unit attached to the vehicle.

Optionally, the output device comprises a display. Optionally, the display is comprised in a portable unit. Optionally, the portable unit and the processor comprise a wireless link adapted to transmit data of the encrypted measure from the processor to the portable unit.

Optionally, the portable unit comprises: a) a credit card for charging fuel; and b) a controllable display unit comprised in the credit card.

Optionally, the controllable display unit comprises: a) the display; and b) a microprocessor adapted to obtain the encrypted measure and to cause the display to display the encrypted measure. Optionally, the system comprises a control element usable by the user to control the microprocessor.

Optionally, the credit card is authorized to be used only for said vehicle, and the credit card number identifies the vehicle to the controller.

In an embodiment of the invention, the encrypted measure identifies the vehicle to the controller.

Optionally, the encrypted measure is in a format acceptable as an authorization code for credit card purchases of fuel. Optionally, the controller is adapted to receive the encrypted measure over a standard credit card network.

Optionally, the controller is adapted to decrypt the measure, and determine a maximum authorized dispensing of fuel depending on the fuel use indicated by the decrypted measure.

There is further provided, in accordance with an embodiment of the invention, a system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a) a processor adapted to obtain data of a direct measurement of fuel going into the engine of the vehicle, to determine from the data a number indicating fuel use by the vehicle, and to communicate the number; and O

b) a controller adapted to receive the number communicated by the processor, and to authorize dispensing of fuel responsive to the fuel use indicated by the number.

Optionally, the processor is adapted to obtain the data from an engine computer of the vehicle.

There is further provided, in accordance with an exemplary embodiment of the invention, a system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a controller for authorizing purchase of fuel from a fuel seller; a communication channel, not requiring the cooperation of the fuel seller, for transmitting data to the controller; and a transmitter that receives data responsive to vehicle use and transmits the received data to the controller over the channel; wherein the controller determines whether to authorize a fuel purchase by the user responsive to the vehicle use data it receives from the transmitter.

Optionally, the transmitter transmits the received data automatically, without intervention of the user.

Optionally, the communication channel is a secure channel, configured to inhibit the user from fraudulently altering the data. Alternatively or additionally, the transmitter is configured to transmit the data in encrypted form.

Optionally, wherein the communication channel comprises one or more of a cell phone network, a wireless internet connection, and a satellite communications link.

Optionally, operation of the communication channel does not comprise data entry of the received data by the user.

There is further provided, in accordance with an exemplary embodiment of the invention, a method of providing fuel to a user of a vehicle for use in the vehicle, the method comprising: a) receiving data responsive to vehicle use; b) encrypting the data; c) presenting the encrypted data to the user; and d) authorizing dispensing of fuel to the user responsive to the user presenting the encrypted data. Optionally, the data responsive to vehicle use comprises a measure of engine fuel consumption.

Additionally or alternatively, the data responsive to vehicle use comprises a measure of distance driven. Optionally, presenting the encrypted data to the user comprises displaying the encrypted data.

Optionally, the user presents the encrypted data over a credit card network to a computer which authorizes purchases by credit cards.

Alternatively, the user presents the encrypted data over one or more of a cell phone network and a wireless internet connection.

In an embodiment of the invention, the method also includes decrypting the encrypted data after it is presented by the user.

Optionally, the dispensing of fuel is authorized in an amount approximately equal to the fuel used since the last time the vehicle was refueled, as indicated by the decrypted data.

There if further provided, in accordance with an exemplary embodiment of the invention, a method of providing fuel for a vehicle, comprising: a) obtaining data responsive to fuel use by the vehicle from a direct measurement of fuel going into the engine of the vehicle; and b) dispensing fuel responsive to the data.

Optionally, obtaining data comprises obtaining data from an engine computer of the vehicle.

There is further provided, in accordance with an exemplary embodiment of the invention, a method for providing fuel from a fuel seller to a user of a vehicle, the method comprising: a) obtaining data responsive to vehicle use; b) transmitting the data in a manner that does not require the cooperation of the fuel seller; and c) authorizing the purchase of fuel in an amount responsive to the data. Optionally, transmitting the data is done in a secure manner, whereby the user is inhibited from fraudulently altering the data. Optionally, transmitting the data comprises communicating directly, without the user acting as a link in the communication. Optionally, communicating directly comprising using one or more of a cell phone network, a wireless internet connection, and a satellite communication link.

BRIEF DESCRIPTION OF THE DRAWINGS

Non-limiting examples of embodiments of the present invention are described below with reference to figures attached hereto and listed below. Identical structures, elements or parts that appear in more than one figure are generally labeled with a same numeral in all the figures in which they appear. Dimensions of components and features shown in the figures are chosen for convenience and clarity of presentation and are not necessarily shown to scale. Fig. 1 shows a flow diagram for a method to prevent fuel fraud, according to an exemplary embodiment of the invention;

Fig. 2 schematically shows a vehicle with a system to prevent fuel fraud, being used by a user of the vehicle, according to an embodiment of the invention; and

Fig. 3 schematically shows a detailed view of two components of the system shown in Fig. 2, in accordance with an embodiment of the invention.

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS Fig. 1 shows a flowchart 300, of a method for dispensing fuel for a vehicle that reduces opportunity for fuel fraud on the part of a person who is fueling the vehicle at a gas station, according to an embodiment of the invention. In a block 302 a measure of the vehicle use is acquired, in accordance with an embodiment of the invention. Optionally, the measure is a direct measure of fuel consumption by the vehicle's engine since a last time that the vehicle was fueled. In some embodiments of the invention, the measure of vehicle use is a measure of a parameter, such as mileage, that can be used to determine the fuel consumption since the last fueling.

The measure is generated, for example, by a processor in the vehicle, using sensors in the vehicle. Optionally, if an indirect measure of fuel use is generated, the measure is supplemented with additional data, such as driving speed and/or revolutions per minute of the motor as a function of time, which may allow a more accurate estimate of fuel use,. The additional data may also be useful for detecting or diagnosing mechanical problems in the vehicle, or to assess driving habits of the vehicle's driver. In a block 304, the measure of vehicle use is encrypted, using any method of encryption known to the art. Optionally, the additional data, if any, is encrypted together with the measure of vehicle use. Alternatively, the additional data is not encrypted itself, but is used to adjust the measure of vehicle use, which is then encrypted.

In a block 306, the person fueling the vehicle operates a device, such as an appropriately configured "fuel credit card" for use in charging fuel, that displays the encrypted data, optionally in the form of a number comprising a plurality of digits. In a block 308, the person, or another person assisting the person in fueling the vehicle, enters the encrypted number into a standard credit card payment device at the gas station. The encrypted measure is transmitted, optionally via a standard credit card network to which the gas station is connected, to a central computer configured to process the encrypted number.

In a step 310, fuel is dispensed responsive to the encrypted number. For example the central computer decrypts the number, and authorizes the use of a credit card by the user to purchase fuel for the vehicle, in an amount equal or close to the actual fuel used, as inferred from the decrypted number. The encryption prevents the user from fraudulently transmitting a false measure of vehicle use.

In some embodiments of the invention, the measure of vehicle use is not necessarily received from the user, but is transmitted directly, for example to a central computer of a credit card company that provided the person with the fuel credit card. In this case, the measure need not be encrypted, to prevent fraud by the user.

The data is transmitted, for example, by cell phone to a server controlled by the owner of a fleet of vehicles, including the vehicle being refueled, and the server communicates a maximum authorized fuel purchase to the credit card company. Optionally, the cell phone includes a special circuit which receives the data directly from the processor in the vehicle, and transmits the data directly to the server, without any need for the user of the vehicle to enter the data, and without any need to encrypt the data. Alternatively, the data is encrypted, and the user enters the data in the cell phone as a text message, or by voice, to the server, or to a human operator who arranges for the credit card purchase of fuel to be authorized. Optionally, the data is transmitted, either with or without the help of the user, over a wireless internet connection, or by a satellite communications link, or by any other means of communication known to the art.

Fig. 2 schematically shows an overview of a system 100 for preventing fuel fraud by a user 110 of a vehicle 102, for which the fuel costs are paid by another party, for example the owner of a fleet of vehicles including vehicle 102.

A unit 104 is optionally fixed to the vehicle, optionally in the engine compartment adjacent to a fuse box 106, through which unit 104 optionally obtains electric power, and adjacent to an engine computer 108. Optionally, unit 104 is positioned within about 50 cm of fuse box 106, or at any other convenient location. Optionally, unit 104 is positioned within about 50 cm of engine computer 108, which has the potential advantage of limiting noise in any data conveyed from the engine computer to unit 104. Fixed unit 104 obtains data that it uses to determine a measure indicative of fuel use by the vehicle, for example a number or a set of numbers. Optionally, the data is obtained from engine computer 108, and/or directly from an odometer, or from sensors in the vehicle, such as fuel flowmeters, not shown in Fig. 2, that directly measure fuel provided to the motor. Alternatively or additionally, the data comprises a distance the vehicle has traveled since the last time its fuel tank was filled, the driving speed at different times, the number of starts and stops, the amount of time the engine spent idling, and/or other data that can be used to estimate fuel use by the vehicle.

User 110 has a portable unit 112, which, in some embodiments of the invention comprises a smart credit card issued to user 110 by the credit card company via the fleet owner. Portable unit 112 receives the measure indicative of fuel use from fixed unit 104, optionally by a wireless link, and displays the measure, in an encrypted form, when user 110 is ready to purchase fuel for vehicle 102. Alternatively or additionally, portable unit 112 receives the measure of fuel use from fixed unit 104 by a wired data link, for example by momentarily connecting unit 112 to a connector in the dashboard of the vehicle. User 110 uses the credit card to purchase fuel, reading the encrypted measure from the display and manually entering it, as if it were a code for authorizing credit card use, optionally in a standard credit card payment device 114 in a fuel pump 116 at a gas station.

Optionally, the encrypted measure is in a format that is used as an authorization code for credit cards, for example a number up to 9 decimal digits in length. Optionally, the encrypted measure contains fewer than 9 digits, and the user enters an actual authorization code, for example a 4 digit PIN, together with the encrypted measure, which comprise a maximum of 9 digits in total. Using such a PBSf can prevent the credit card from being used if it is stolen together with the vehicle, but reduces the amount of data in the encrypted number. Device 114 communicates the encrypted measure, the PIN if one is used, and the credit card number over a standard credit card network 118 to a central computer 120, used by the credit card company to authorize or deny use of the credit cards issued to users of vehicles in the fleet.

Optionally, the encrypted measure, plus a PIN if one is used, has more than 9 digits, and user 110 runs the credit card two or more times through device 114 each time he purchases gas, entering up to 9 digits each time. For example, the encrypted measure has between 10 and 18 digits, and user 110 runs the credit card through twice, entering some of the digits each time.

Computer 120 decrypts the encrypted measure, determines a maximum fuel purchase based on an indicated fuel use since the last time the vehicle was refueled, and authorizes the use of the credit card up to that maximum. Computer 120 communicates this authorization back to payment device 114 over network 118, and payment device 114 then enables fuel pump 116 to dispense fuel to user 110, up to the maximum, and charges the purchase price to the credit card. It should be noted that if, as described previously, the encrypted measure (or an unencrypted measure of vehicle use) is transmitted by a cell phone, a wireless internet connection, or another means of communication, rather than over credit card network 118, then the information transmitted need not be limited to 9 digits.

Fig. 3 shows a close-up view of fixed unit 104 and portable unit 112, according to an exemplary embodiment of the invention. Unit 104 is, for example, in the form of a box, with dimensions 4 cm by 4 cm by 1.5 cm, made of plastic, which has the advantage that it is inexpensive to mass produce. A face 202 of unit 104, optionally made of metal to shield out electrical noise, optionally has a power connector 206 for connecting unit 104 to an electric power source, and a data connector 208 for connecting unit 104 to the engine computer. Optionally, unit 104 has other data connectors in addition to or instead of data connector 208, connecting it to other locations in the vehicle, for example to sensors, and/or to a computer associated with the transmission of the vehicle, which is particularly advantageous if the data that these other locations provide is not available from the engine computer. Optionally, unit 104 is positioned not too far from the transmission computer, for example within about 50 cm, which may limit noise in any data conveyed from the transmission computer to unit 104. Optionally, unit 104 is powered by a 12 volt automotive battery, or by any standard vehicle battery, for example a 9 volt or a 36 volt battery, and power connector 206 receives power from the battery through the fuse box. Alternatively, unit 104 uses another power supply, such as its own internal battery.

Fixed unit 104 has a microprocessor 210, with a memory, optionally 1 megabyte, which stores data, as well as software to control the acquisition, processing, and transmitting of data, optionally including the encrypted measure indicative of fuel use. The memory optionally has room for updates to the software. Optionally, the memory is not erased even if the fixed unit loses electric power. Fixed unit 104 also has an antenna 212 for transmitting the encrypted measure, to portable unit 112, with radio waves 214. Alternatively, part or all of the encryption and other data processing is done by the portable unit after data is transmitted to it. However, using the fixed unit to do the data processing has the potential advantage that the fixed unit generally has much more energy available to it than does the portable unit.

Optionally, fixed unit 104 repeatedly and continuously transmits the encrypted measure, at least at times when the user^' might be ready to purchase fuel for the vehicle. For example, the fixed unit transmits the encrypted measure whenever the engine is on and the car is not moving, and for a period of time, for example for three minutes, after the engine is turned off. Alternatively, fixed unit 104 only transmits the encrypted measure when requested to do so by the user, for example by pushing a button connected to the fixed unit, or by transmitting a wireless signal from the portable unit, or from a separate control unit used by the user. Having the fixed unit transmit the encrypted measure continuously has the potential advantage of avoiding the need for extra elements to provide the user access to the fixed unit, and avoiding the need for the portable unit, or another control unit, to use limited energy resources to transmit a signal to the fixed unit.

Portable unit 112 optionally comprises a credit card with a controllable display unit 216 (sometimes called a "smart tag") inlaid in it. Although the controllable display unit is optionally a separate unit from the credit card, combining them is potentially more convenient for the user. Controllable display unit 216 is optionally the size of a miniature credit card, 66 mm by 40 mm, and the credit card optionally has the dimensions of a standard full-size credit card. This size for the controllable display unit allows room on the surface of the credit card for features that are generally found on credit cards, such as the credit card number, the name of the authorized user, a logo, and an anti-counterfeiting device such as a hologram. The controllable display unit is optionally no more than 0.84 mm thick, so that it can be inlaid into a credit card of standard thickness.

Controllable display unit 216 comprises an antenna, not shown in Fig. 2, suitable for receiving the number transmitted by antenna 212 in the fixed unit. Optionally, controllable display unit 216 can receive the number up to a maximum transmitting distance from fixed unit 104, for example up to 15 cm away, or up to 30 cm away. The user optionally holds portable unit 112 next to the instrument panel on the dashboard of the vehicle, less than the maximum transmitting distance from the location of the fixed unit in the engine compartment, when display unit 216 is receiving the data.

Controllable display unit 216 also comprises, internally, and not shown in Fig. 2, a microprocessor, with memory, at least enough memory to store the encrypted number, and a source of electric power, for example a battery. Optionally, the battery stores enough energy to power the controllable display unit at least until the credit card expires, for example for one year or for three years, or for a particular number of uses, for example 1000 uses. Optionally, the battery, or another energy storage element, is rechargeable, for example by connecting it to a recharger in the vehicle, or by radio waves received, for example, from unit 104 when the encrypted measure is transmitted. On its surface, controllable display unit 216 optionally comprises a control element, such as a pressure sensitive "radio button" 218, and a display 220. Display 220 is optionally of a kind, for example a liquid crystal display or a non-liquid crystal display, which consumes relatively little power. A suitable non-liquid crystal display, which consumes sufficiently little power and fits within the dimensions of controllable display unit 216, is Smart Display^®, a brand name for a display sold by Micro D, Ltd. This display, or another suitable one with a similar design, is described in PCT published application WO 2004/018424 Al, the disclosure of which is incorporated herein by reference. Optionally, instead of or in addition to comprising a visual display such as display 220, portable unit 112 comprises an output element which communicates the encrypted measure to the user in a different way, for example by sound or touch.

The following description is an example of how the user controls controllable display unit 216, using the control element, in this case button 218, to receive and display the encrypted number. Other possible control elements, and other possible procedures for accomplishing this goal, will be apparent to one skilled in the art.

When the user is ready to purchase fuel, he holds portable unit 112 within the maximum transmitting distance from fixed unit 104, and pushes button 218. Controllable display unit 216 then receives the encrypted measure being transmitted from fixed unit 104, and stores the data in its memory. Optionally, the data only stays in the memory of the controllable display unit for a limited time sufficient for the user to enter the encrypted measure in the credit card payment device of the gas station.

Optionally, display 220 does not display all of the encrypted measure at once, but, for example, displays only three digits at a time. Once the encrypted measure is stored in the memory of controllable display unit 216, the user optionally pushes button 218 again, in order to display the first three digits. After entering the first three digits into the credit card payment device, he optionally pushes button 218 again, to display the next three digits, enters them in the credit card payment device, and pushes button 218 a final time to display the last three digits, which he enters. Optionally, each set of digits is only displayed for a limited time, for example for 5 seconds, which has the advantage that relatively little energy is used from the battery of the smart tag. Optionally, pressing the button another time erases the memory of the smart tag. Not displaying or storing the encrypted number for a long time in controllable display unit 216 has the potential advantage that controllable display unit 216 probably could not be used by someone else to purchase gas if it were lost or stolen after the encrypted measure was entered.

The encryption is optionally done using any suitable method of encryption known to the art usable to convert a number or set of numbers indicating an amount of fuel used to an encrypted number of a desired number of digits. For example, the desired number of digits is a number of digits that can be transmitted for authorizing credit card transactions, currently a maximum of 9 decimal digits for some credit card payment devices. Although an encrypted number with more than 9 digits can be transmitted by running the credit card more than once through such a payment device, it may be more convenient for the user to run the credit through the payment device only once.

In an exemplary embodiment of the invention, the measure indicative of fuel use comprises one or more numbers, which together comprise as many decimal digits as the encrypted number, for example 9 decimal digits, or fewer decimal digits than the encrypted number. For example, the measure comprises a 6 digit number representing a cumulative mileage driven by the vehicle, in whole miles or kilometers, and a 3 digit number representing a cumulative average gas mileage, in miles per gallon or kilometers per liter, including tenths. Alternatively, these numbers have different numbers of digits. Central computer 120 optionally stores the cumulative mileage and the cumulative average gas mileage the previous time the vehicle was refueled. After decrypting the numbers, computer 120 optionally subtracts the previous mileage from the present mileage to find the distance driven since the last refueling, and takes a weighted difference between the average gas mileage and the previous average gas mileage to find the average gas mileage since the last refueling. Computer 120 then divides that distance by the average gas mileage since the last refueling, to find the fuel used since the last refueling. For example, if the cumulative mileage driven is 4200 km at the previous refueling, and 4500 km at the present refueling, and if the cumulative average gas mileage was 12.1 km/liter at the last refueling, and 12.2 km/liter at the present refueling, then the distance driven since the last refueling is 4500 km — 4200 km = 300 km. The average gas mileage x since the last refueling can be found by solving the equation

4500 4500 to find x = 13.6 km/liter.

Optionally, the distance driven since the last refueling, and/or the average gas mileage since the last refueling, are used for the measure indicative of fuel use, rather than central computer 120 calculating the distance driven from the difference in cumulative mileage, and calculating the average gas mileage since the last refueling. Optionally, the fuel used since the last refueling is used for the measure indicative of fuel use, rather than central computer 120 calculating the fuel used from the distance driven and the average gas mileage. Io

A potential advantage of using the cumulative distance driven and cumulative average gas mileage, as the measure indicative of fuel use, is that these numbers may already be stored in the engine computer, and unit 104 can take them directly from the engine computer, and does not have to store data on distance driven and average gas mileage, or total gas used, since the last refueling. Using the cumulative distance also has the potential advantage that the measure indicative of fuel use will then never repeat, and the user cannot guess a valid encrypted number by using a previously used encrypted number. Additionally or alternatively, that can possibility may be prevented by using an encryption algorithm which changes each time gas is purchased. There is also a potential advantage of using distance driven since the last refueling, and/or average gas mileage since the last refueling, and/or fuel consumed since the last refueling, as the measure indicative of fuel use, rather than cumulative quantities. The measure indicative of fuel use may have fewer digits, and the encrypted number may have fewer digits, than if cumulative quantities are used. If cumulative average gas mileage is used, then more significant figures may have to be kept to obtain the same precision in fuel consumed since the last refueling, particularly if the cumulative distance is much greater than the distance since the last refueling.

Optionally, the measure indicative of fuel use comprises only a single number, for example a direct measurement of fuel use by the engine. Optionally, the measure indicative of fuel use comprises only a measure of distance driven, and the fuel use is estimated using a typical expected gas mileage.

Methods known to the art of encryption are optionally used to make it difficult for user 110 to guess an encrypted number that, when unencrypted, would correspond to a valid measure indicative of fuel use. For example, the encryption method optionally does not allow user 110 to use previously used encrypted numbers to guess valid encrypted numbers for later refuelings. Using more decimal digits for the encrypted number than for the measure indicative of fuel use may also make it less unlikely that user 110 can guess a valid encrypted number. Similarly, having some redundancy in the measure indicative of fuel use, for example having the measure comprise both a mileage and a measure of fuel use, may make it less likely that user 110 can guess an encrypted number corresponding to a consistent set of numbers indicating fuel use. If user 110 could guess a valid encrypted number, he might be able to purchase more fuel than the vehicle actually used. Optionally, security measures known to the art are used to prevent the user from learning the contents of the memory of the fixed unit.

Optionally, fixed unit 104 records, and stores in the memory microprocessor 210, additional information about vehicle use, which can be useful in diagnosing mechanical problems or poor driving habits. This information can also be used to verify that the actual fuel use by the engine is being measured reasonably accurately. Even if this additional information is not encoded in the encrypted measure, the fleet owner can optionally download it from fixed unit 104, for example when the vehicle is brought into a central garage used by the fleet for regular maintenance, or, continuously or occasionally, via a wireless internet connection. For example, optionally microprocessor 210 includes a calendar/clock module, and stores in its memory the time, date, and odometer reading at frequent intervals when the vehicle is moving, for example every time the odometer advances by 100 meters. Optionally, microprocessor 210 also stores in memory the time and date every time the engine is turned on or off, and every time the transmission is put in park or neutral, or every time the transmission changes gears at all. Optionally, the number of revolutions per minute of the engine is also recorded at these times. Optionally emissions, and/or other diagnostics of engine functioning, are recorded at these times. This data can be used to estimate what the fuel use should be if the engine is working properly. Together with data on the actual monitored fuel use this data can be used to help diagnose problems when the engine is not working properly, and to learn about driving habits of the driver of the vehicle. The data can also serve as a tamper-proof record for examination by government authorities, for example for enforcing laws on emissions or on gas mileage. Optionally, the data is stored in the memory of microprocessor 210 for a fixed amount of time, for example for 60 days, and/or the data is overwritten, on a "first in, first out" basis, when a particular amount of the data has accumulated.

In some embodiments of the invention, system 100 is used to prevent fraud in the purchase of motor oil, engine coolant, or other automotive consumables, for vehicle 102 by user 110, using any of the methods and apparatus described above for preventing fuel fraud.

The invention has been described in the context of the best mode for carrying it out. It should be understood that not all features shown in the drawing or described in the associated text may be present in an actual device, in accordance with some embodiments of the invention. Furthermore, variations on the method and apparatus shown are included within the scope of the invention, which is limited only by the claims. Also, features of one embodiment may be provided in conjunction with features of a different embodiment of the invention. As used herein, the terms "have", "include" and "comprise" or their conjugates mean "including but not limited to." As used herein, the term "credit card" also includes debit cards.

Claims

1. A system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a) a processor that receives and encrypts data responsive to vehicle use; b) an output device that presents the encrypted measure to the user; and c) a controller adapted to receive the encrypted data from the user, and to authorize dispensing of fuel responsive thereto.

2. A system according to claim 1, wherein the data comprises odometer data.

3. A system according to claim 1 or claim 2, wherein the data comprises data on fuel going into the engine of the vehicle.

4. A system according to any of the preceding claims, wherein the processor is adapted to obtain the data at least in part from an engine computer of the vehicle.

5. A system according to any of the preceding claims, wherein the processor is comprised at least in part on a fixed unit attached to the vehicle.

6. A system according to any of the preceding claims, wherein the output device comprises a display.

7. A system according to claim 6, wherein the display is comprised in a portable unit.

8. A system according to claim 7, wherein the portable unit and the processor comprise a wireless link adapted to transmit data of the encrypted measure from the processor to the portable unit.

9. A system according to claim 7 or claim 8, wherein the portable unit comprises: a) a credit card for charging fuel; and b) a controllable display unit comprised in the credit card.

10. A system according to claim 9, wherein the controllable display unit comprises: a) the display; and b) a microprocessor adapted to obtain the encrypted measure and to cause the display to display the encrypted measure.

11. A system according to claim 10, comprising a control element usable by the user to control the microprocessor.

12. A system according to any of claims 9-11, wherein the credit card is authorized to be used only for said vehicle, and the credit card number identifies the vehicle to the controller.

13. A system according to any of the preceding claims, wherein the encrypted measure identifies the vehicle to the controller.

14. A system according to any of the preceding claims, wherein the encrypted measure is in a format acceptable as an authorization code for credit card purchases of fuel.

15. A system according to claim 14, wherein the controller is adapted to receive the encrypted measure over a standard credit card network.

16. A system according to any of the preceding claims, wherein the controller is adapted to decrypt the measure, and determine a maximum authorized dispensing of fuel depending on the fuel use indicated by the decrypted measure.

17. A system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a) a processor adapted to obtain data of a direct measurement of fuel going into the engine of the vehicle, to determine from the data a number indicating fuel use by the vehicle, and to communicate the number; and b) a controller adapted to receive the number communicated by the processor, and to authorize dispensing of fuel responsive to the fuel use indicated by the number.

18. A system according to claim 17, wherein the processor is adapted to obtain the data from an engine computer of the vehicle.

19. A system for providing fuel to a user of a vehicle for use in the vehicle, the system comprising: a controller for authorizing purchase of fuel from a fuel seller; a communication channel, not requiring the cooperation of the fuel seller, for transmitting data to the controller; and a transmitter that receives data responsive to vehicle use and transmits the received data to the controller over the channel; wherein the controller determines whether to authorize a fuel purchase by the user responsive to the vehicle use data it receives from the transmitter.

20. A system according to claim 19, wherein the transmitter transmits the received data automatically, without intervention of the user.

21. A system according to claim 19 or claim 20, wherein the communication channel is a secure channel, configured to inhibit the user from fraudulently altering the data.

22. A system according to claim 19, wherein the transmitter is configured to transmit the data in encrypted form.

23. A system according to any of claims 19-22, wherein the communication channel comprises one or more of a cell phone network, a wireless internet connection, and a satellite communications link.

24. A system according to any of claims 19-23, wherein operation of the communication channel does not comprise data entry of the received data by the user.

25. A method of providing fuel to a user of a vehicle for use in the vehicle, the method comprising: a) receiving data responsive to vehicle use; b) encrypting the data; c) presenting the encrypted data to the user; and d) authorizing dispensing of fuel to the user responsive to the user presenting the encrypted data.

26. A method according to claim 25, wherein the data responsive to vehicle use comprises a measure of engine fuel consumption.

27. A method according to claim 25 or claim 26, wherein the data responsive to vehicle use comprises a measure of distance driven.

28. A method according to any of claims 25-27, wherein presenting the encrypted data to the user comprises displaying the encrypted data.

29. A method according to any of claims 25-28, wherein the user presents the encrypted data over a credit card network to a computer which authorizes purchases by credit cards.

30. A method according to any of claims 25-28, wherein the user presents the encrypted data over one or more of a cell phone network and a wireless internet connection.

31. A method according to any of claims 25-30, also including decrypting the encrypted data after it is presented by the user.

32. A method according to claim 31, wherein the dispensing of fuel is authorized in an amount approximately equal to the fuel used since the last time the vehicle was refueled, as indicated by the decrypted data.

33. A method of providing fuel for a vehicle, comprising: a) obtaining data responsive to fuel use by the vehicle from a direct measurement of fuel going into the engine of the vehicle; and b) dispensing fuel responsive to the data.

34. A method according to claim 33, wherein obtaining data comprises obtaining data from an engine computer of the vehicle.

35. A method for providing fuel from a fuel seller to a user of a vehicle, the method comprising: a) obtaining data responsive to vehicle use; b) transmitting the data in a manner that does not require the cooperation of the fuel seller; and c) authorizing the purchase of fuel in an amount responsive to the data.

36. A method according to claim 35, wherein transmitting the data is done in a secure manner, whereby the user is inhibited from fraudulently altering the data.

37. A method according to claim 35 or claim 36, wherein transmitting the data comprises communicating directly, without the user acting as a link in the communication.

38. A method according to claim 37, wherein communicating directly comprising using one or more of a cell phone network, a wireless internet connection, and a satellite communication link.