Privacy-preserving road usage charging reports

A system for privacy-preserving road usage charging (RUC) comprising:

• a vehicle comprising one or more hardware devices, programmed to execute a RUC application to perform operations including to, per periodic billing cycle:
• generate a sum report indicating an account of the vehicle to be charged and a total sum owed by the vehicle;
• generate an anonymized report indicating total amounts owed to each of a plurality of charger domains by the vehicle without indicating the account of the vehicle;
• randomize timing and/or interval of transmission of the sum reports and the aggregate report, such that the sum reports and the aggregate report are sent at different times and cover different times, and the total sums owed by the plurality of vehicles from the sum reports and the total amounts owed to each of a plurality of charger domains from the aggregate report cover different time intervals that do not line up temporally to preserve vehicle privacy;
• and
• send the sum report and the anonymized report over a wide-area network to a RUC service provider, the RUC service provider being configured to charge the vehicle using the sum reports and credit the charger domains using the anonymized report.

A method for privacy-preserving road usage charging (RUC) comprising:

• by a secure application cloud comprising one or more hardware devices executing a RUC application cloud part of a RUC application,
• generating a sum report for each vehicle of a plurality of vehicles, the respective sum report indicating an account of the vehicle to be charged and a total sum owed by the vehicle;
• generating an aggregate report, the aggregate report indicating total amounts owed to each of a plurality of charger domains across the plurality of vehicles without indicating the accounts of the vehicles;
• randomizing timing and/or interval of transmission of the sum reports and the aggregate report, such that the sum reports and the aggregate report are sent at different times and cover different times, and the total sums owed by the plurality of vehicles from the sum reports and the total amounts owed to each of a plurality of charger domains from the aggregate report cover different time intervals that do not line up temporally to preserve vehicle privacy;
• and
• sending the sum reports and the aggregate report over a wide-area network to a RUC service provider, the RUC service provider being configured to charge the vehicles using the sum reports and credit the charger domains using the aggregate report, while being unable to determine which routes were taken by the vehicles.

A method for privacy-preserving road usage charging (RUC) comprising:

• by a vehicle comprising one or more hardware devices, executing a RUC application:
• periodically generating a sum report indicating an account of the vehicle to be charged and a total sum owed by the vehicle;
• periodically generating an anonymized report indicating total amounts owed to each of a plurality of charger domains by the vehicle without indicating the account of the vehicle;
• and
• randomizing timing and/or interval of transmission of the sum report and the aggregate report, such that the sum report and the aggregate report are sent at different times and cover different times, and the total sums owed by the plurality of vehicles from the sum report and the total amounts owed to each of a plurality of charger domains from the aggregate report cover different time intervals that do not line up temporally to preserve vehicle privacy,
• periodically sending the sum report and the anonymized report over a wide-area network to a RUC service provider, the RUC service provider being configured to charge the vehicle using the sum reports and credit the charger domains using the anonymized report.